This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft File: BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json) Hash identifier: WmjkGxI8VgVSsZQtFsVdFgJRKNRkYZl17YM2opcVsjg= Subject key identifier: 1D:58:6A:54:E6:28:8A:9D:50:50:CE:DC:FE:1A:E8:47:99:B6:E1:3C Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6 Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6 Certificate serial: 019BAC49FE4C38D96BCEABB46CBC7AF486D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft Manifest number: 0752 Signing time: Sun 11 Jan 2026 09:01:28 +0000 Manifest this update: Sun 11 Jan 2026 09:01:28 +0000 Manifest next update: Mon 12 Jan 2026 09:01:28 +0000 Files and hashes: 1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: 2nVvAJVmpIgCsBnUY4+99kP0ydnL8VXW+3Q9R0OeOwM=) 2: QMJnhj9eUtot273579TURTBZh0I.roa (hash: +DvyZkkKcp4VyvLUj2MDatf/EjxdGh2Y9geHq22gBBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:49:fe:4c:38:d9:6b:ce:ab:b4:6c:bc:7a:f4:86:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6 Validity Not Before: Jan 11 09:01:28 2026 GMT Not After : Jan 12 09:01:28 2026 GMT Subject: CN=1d586a54e6288a9d5050cedcfe1ae84799b6e13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:76:6b:b1:b7:84:80:aa:66:1e:18:ef:45:39: 08:3c:a9:55:35:44:6f:4f:82:2d:b4:62:1e:8c:cc: de:4d:fe:4f:0d:cd:f1:a0:7b:43:f6:97:af:e1:1a: 46:d4:42:89:9f:02:e6:48:25:77:7a:2b:36:b2:95: e7:61:84:c5:60:42:87:c0:05:bc:0a:20:13:cb:05: 78:38:ba:70:8c:8e:4e:5f:da:24:c9:7a:70:46:31: 1f:cc:ff:fc:e7:ac:cb:82:ca:3c:d3:35:8e:b5:f8: 93:ae:80:cf:ab:8c:06:bf:78:9f:c7:08:a9:68:4e: 2f:c2:6e:7c:0b:e4:4d:78:6e:76:78:9b:1c:5b:5b: 92:b6:27:b5:6e:cf:6d:35:7d:53:a1:61:dc:47:7c: 3c:20:d0:8b:18:cc:69:e9:8a:62:3f:90:84:a6:ee: 8c:42:5f:98:3d:bd:4c:01:4d:c7:8b:3d:02:9b:16: 38:68:d0:a5:9e:7c:fa:5e:6e:f9:66:49:e8:f2:5d: 86:7a:ea:6f:bc:e2:8d:5d:b3:a4:4a:c2:5d:19:9a: 3c:39:21:da:6f:ff:8a:28:5c:2d:11:49:b6:69:c5: bc:29:cb:53:67:d1:28:f7:3c:f1:8f:4c:06:4c:a0: 4a:32:91:f5:57:a6:f8:5a:39:27:fc:db:8f:1c:b4: 17:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:58:6A:54:E6:28:8A:9D:50:50:CE:DC:FE:1A:E8:47:99:B6:E1:3C X509v3 Authority Key Identifier: keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4c:11:b3:ab:7f:f1:4a:b6:6a:f1:28:3a:60:5a:32:50:53: 94:bd:d8:70:81:bf:cd:6d:d0:15:8f:47:1b:fb:46:df:a2:4e: f5:ff:82:3a:d0:78:6e:58:0a:4e:57:fd:d1:0a:50:75:bd:57: db:8e:41:ec:7a:91:51:62:54:77:59:bc:af:51:1f:f9:cb:03: bf:38:1c:9f:2c:f0:2e:4e:1f:3d:cf:ab:fc:04:15:a5:42:14: b2:cb:1d:1c:7e:1c:36:b2:3a:9a:f9:8f:2f:61:86:aa:cb:c1: 63:5c:de:20:cf:07:13:3d:2e:a2:44:b9:de:46:46:83:94:88: 38:ec:74:df:af:63:0e:a7:b0:63:ee:07:be:d4:c1:40:b6:90: e7:ed:e6:71:0e:e2:cc:5e:3f:ed:e0:d7:30:c4:f4:19:b5:d4: f3:30:05:d8:cf:76:73:d0:e6:5d:b1:8b:5b:a1:e1:a7:1d:c5: 2b:72:8d:0d:c0:ed:0b:7c:5c:f2:5b:4a:9d:e5:5c:e1:79:3f: ce:53:b2:79:5a:c4:6d:01:35:55:f7:1b:8c:25:ad:d6:1a:5b: b3:ee:62:26:6c:d1:d1:7f:92:be:2a:95:42:c1:58:8b:0a:d7: c5:7f:42:ad:57:c0:9e:99:9c:ec:1c:90:2c:57:50:f4:d5:73: cd:5a:5d:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZusSf5MONlrzqu0bLx69IbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NDg4OTZhMWM0YWM5ZDgwMWJmMWQ2YjIwYmRlZjU5NzRk NWI0ZjYwHhcNMjYwMTExMDkwMTI4WhcNMjYwMTEyMDkwMTI4WjAzMTEwLwYDVQQD EygxZDU4NmE1NGU2Mjg4YTlkNTA1MGNlZGNmZTFhZTg0Nzk5YjZlMTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3ZrsbeEgKpmHhjvRTkIPKlVNURv T4IttGIejMzeTf5PDc3xoHtD9pev4RpG1EKJnwLmSCV3eis2spXnYYTFYEKHwAW8 CiATywV4OLpwjI5OX9okyXpwRjEfzP/856zLgso80zWOtfiTroDPq4wGv3ifxwip aE4vwm58C+RNeG52eJscW1uStie1bs9tNX1ToWHcR3w8INCLGMxp6YpiP5CEpu6M Ql+YPb1MAU3Hiz0CmxY4aNClnnz6Xm75Zkno8l2GeupvvOKNXbOkSsJdGZo8OSHa b/+KKFwtEUm2acW8KctTZ9Eo9zzxj0wGTKBKMpH1V6b4Wjkn/NuPHLQXnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1YalTmKIqdUFDO3P4a6EeZtuE8MB8GA1UdIwQY MBaAFARIiWocSsnYAb8dayC971l01bT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYt YmNkZDEzNDk1MjkxLzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYtYmNkZDEzNDk1Mjkx LzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUwRs6t/ 8Uq2avEoOmBaMlBTlL3YcIG/zW3QFY9HG/tG36JO9f+COtB4blgKTlf90QpQdb1X 245B7HqRUWJUd1m8r1Ef+csDvzgcnyzwLk4fPc+r/AQVpUIUsssdHH4cNrI6mvmP L2GGqsvBY1zeIM8HEz0uokS53kZGg5SIOOx0369jDqewY+4HvtTBQLaQ5+3mcQ7i zF4/7eDXMMT0GbXU8zAF2M92c9DmXbGLW6Hhpx3FK3KNDcDtC3xc8ltKneVc4Xk/ zlOyeVrEbQE1VfcbjCWt1hpbs+5iJmzR0X+SviqVQsFYiwrXxX9CrVfAnpmc7ByQ LFdQ9NVzzVpdUQ== -----END CERTIFICATE-----Generated at Sun Jan 11 14:40:23 2026 by rpki-client