This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft File: beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json) Hash identifier: V0Cxq8X8Betv8NYvf76qlz/SyvCnGpS7Wq8sVAHzbLk= Subject key identifier: 73:8C:0C:1D:3C:12:9D:C3:B6:74:5F:1B:A6:EC:E4:94:3B:9C:C3:1A Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A Certificate issuer: /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a Certificate serial: 019BF7D276D76836F3B1AEB1B42ABC6B65DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 01:02:03 +0000 Manifest this update: Mon 26 Jan 2026 01:02:03 +0000 Manifest next update: Tue 27 Jan 2026 01:02:03 +0000 Files and hashes: 1: 7GQw0x5KqIsgeFzJvLB4KZmgC4w.roa (hash: SeWjQt30/zP5wJWgCETZ2WU8SMyQZP06xEXIUI0AM3E=) 2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: L7FCqKv9D8tcY5/OQe4Zq/PejJBzIOU7CFF4o4c70LQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:76:d7:68:36:f3:b1:ae:b1:b4:2a:bc:6b:65:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a Validity Not Before: Jan 26 01:02:03 2026 GMT Not After : Jan 27 01:02:03 2026 GMT Subject: CN=738c0c1d3c129dc3b6745f1ba6ece4943b9cc31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:63:df:8e:17:99:bd:08:43:5e:75:9b:fe: 2e:2e:3e:db:ec:3f:c9:e3:33:ba:ec:32:31:2b:dc: 70:00:c3:e1:a5:1b:41:dc:dc:e5:fc:f1:93:26:c9: 42:45:ad:a5:e0:7a:c1:ae:93:fe:90:b8:ce:4b:55: d3:8e:22:8f:60:3c:f1:e0:98:d0:e5:5b:97:d9:e5: 3f:79:97:b7:29:82:9b:1b:28:83:87:e7:95:ba:a8: 9f:56:bd:8a:6e:a1:4f:9c:b9:ef:6d:fa:3b:d4:2e: 87:d9:b7:84:ec:a3:c4:37:59:5a:3e:a1:89:2d:03: 36:5a:33:a9:a8:d1:41:ce:f0:92:82:2f:40:75:ca: af:4c:26:b2:d5:7b:38:9b:88:9e:5a:f7:86:48:47: a1:4b:84:49:8d:c6:e0:b5:3f:78:d2:2d:06:2a:39: 39:5f:84:28:97:9c:c0:ef:48:fa:17:fc:6e:9f:b9: 4d:69:75:29:40:22:dc:3a:26:53:51:f1:0c:91:45: 13:35:72:22:22:63:3a:9d:63:8d:b0:0f:79:28:cc: 04:7a:a7:aa:aa:ed:68:54:07:36:68:61:55:3f:7f: b7:ac:43:1a:b4:c4:59:3b:ff:86:5d:e0:ae:05:a8: dd:c5:17:0c:bf:76:36:05:25:5c:1b:81:c7:1c:fe: 49:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8C:0C:1D:3C:12:9D:C3:B6:74:5F:1B:A6:EC:E4:94:3B:9C:C3:1A X509v3 Authority Key Identifier: keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ee:dc:1e:58:95:38:4c:4e:41:a2:8f:5a:3a:47:24:cd:5e: 8b:b1:e5:92:1a:87:b7:e3:bc:e2:66:40:c7:72:c9:5e:96:71: fe:5d:f0:85:93:bb:da:cd:6c:79:1e:04:53:6d:ff:6d:fc:5e: 13:f6:1f:1c:71:fd:46:6c:14:b3:7c:76:f9:86:20:b2:e9:ce: b0:a3:b1:a3:b1:cf:f4:26:c5:e8:21:57:ec:bc:ed:3b:d8:82: 94:4d:ce:55:db:21:71:ac:93:ae:a5:5a:7c:14:4f:69:69:3b: 34:21:04:f2:d0:16:4c:be:1b:d3:70:16:87:c3:ec:77:ec:8e: 8b:5f:68:17:34:21:06:78:8e:8b:52:fc:b7:c4:5d:b8:4a:5a: 9c:8e:35:eb:b9:36:5e:60:2c:9a:18:b6:cf:2c:9a:f8:53:9f: d6:77:19:31:74:0b:b2:32:be:3d:ac:1b:e4:37:92:4c:c8:e7: f1:ab:c5:cc:aa:d8:61:ef:b7:3f:44:2a:2d:43:f1:49:1f:ae: f3:88:eb:85:df:f6:c1:b1:1a:8f:63:92:47:7b:3f:ab:4d:d8: b9:f9:7b:55:5a:f9:00:49:e5:bc:70:c6:dc:c8:b4:65:b8:fb: 54:23:f3:92:8a:8f:98:29:ec:02:62:dd:8c:11:70:9a:d7:e5: a7:dc:35:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30nbXaDbzsa6xtCq8a2XdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZWE5ZjBmZjc2OTZlMDk3MzY3NDY1ZGUzNGI0ZWJkMDFi NWQ3MmEwHhcNMjYwMTI2MDEwMjAzWhcNMjYwMTI3MDEwMjAzWjAzMTEwLwYDVQQD Eyg3MzhjMGMxZDNjMTI5ZGMzYjY3NDVmMWJhNmVjZTQ5NDNiOWNjMzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra9j344Xmb0IQ151m/4uLj7b7D/J 4zO67DIxK9xwAMPhpRtB3Nzl/PGTJslCRa2l4HrBrpP+kLjOS1XTjiKPYDzx4JjQ 5VuX2eU/eZe3KYKbGyiDh+eVuqifVr2KbqFPnLnvbfo71C6H2beE7KPEN1laPqGJ LQM2WjOpqNFBzvCSgi9AdcqvTCay1Xs4m4ieWveGSEehS4RJjcbgtT940i0GKjk5 X4Qol5zA70j6F/xun7lNaXUpQCLcOiZTUfEMkUUTNXIiImM6nWONsA95KMwEeqeq qu1oVAc2aGFVP3+3rEMatMRZO/+GXeCuBajdxRcMv3Y2BSVcG4HHHP5J8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOMDB08Ep3DtnRfG6bs5JQ7nMMaMB8GA1UdIwQY MBaAFG3qnw/3aW4Jc2dGXeNLTr0BtdcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZmUxZWItM2ExYi00NGVlLWI4ZTIt MWE5YWJhYjI0ZGM5LzEvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZmUxZWItM2ExYi00NGVlLWI4ZTItMWE5YWJhYjI0ZGM5 LzEvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtO7cHliV OExOQaKPWjpHJM1ei7HlkhqHt+O84mZAx3LJXpZx/l3whZO72s1seR4EU23/bfxe E/YfHHH9RmwUs3x2+YYgsunOsKOxo7HP9CbF6CFX7LztO9iClE3OVdshcayTrqVa fBRPaWk7NCEE8tAWTL4b03AWh8Psd+yOi19oFzQhBniOi1L8t8RduEpanI4167k2 XmAsmhi2zyya+FOf1ncZMXQLsjK+Pawb5DeSTMjn8avFzKrYYe+3P0QqLUPxSR+u 84jrhd/2wbEaj2OSR3s/q03Yufl7VVr5AEnlvHDG3Mi0Zbj7VCPzkoqPmCnsAmLd jBFwmtflp9w1qA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:47 2026 by rpki-client