This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json) Hash identifier: Dp/840fn25UsX9IXMIBzT2WgxfYunD2FfVvEGiekRhA= Subject key identifier: 19:6C:65:A8:44:B6:B2:5A:6B:29:75:96:10:BC:C6:5A:BB:11:51:2C Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c Certificate serial: 019BF8E4367A178D95690A94DBDA2076FC7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft Manifest number: 17F2 Signing time: Mon 26 Jan 2026 06:01:04 +0000 Manifest this update: Mon 26 Jan 2026 06:01:04 +0000 Manifest next update: Tue 27 Jan 2026 06:01:04 +0000 Files and hashes: 1: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (hash: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4=) 2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: jB20I4aqM1k96pLU0eg+3Mz+Nh++9ETzzo6dziFm5KE=) 3: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (hash: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg=) 4: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (hash: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:36:7a:17:8d:95:69:0a:94:db:da:20:76:fc:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c Validity Not Before: Jan 26 06:01:04 2026 GMT Not After : Jan 27 06:01:04 2026 GMT Subject: CN=196c65a844b6b25a6b29759610bcc65abb11512c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:91:7b:cc:19:3a:44:41:a9:05:ce:80:0f:b4: c8:5e:82:a8:55:be:0d:c7:78:f8:7d:53:1c:ae:8a: 68:d4:a9:5a:49:97:af:92:5b:0f:20:91:7f:3e:07: 71:a5:ca:50:d3:4c:ba:2d:da:5d:ca:4c:1e:e9:34: 4f:aa:1f:ae:48:db:96:d4:d7:45:17:13:10:56:79: 71:c7:2c:cf:bb:95:c2:30:0c:6a:bd:11:2e:da:5e: 93:50:ec:c1:83:f6:1a:48:6d:f0:4b:1b:b7:81:95: 99:cf:f1:80:7e:96:6d:48:95:fd:cf:4e:5c:01:0e: 4e:09:e2:b3:0c:d9:cb:02:8e:99:33:4c:8b:f7:a0: c2:f7:c0:39:97:1c:d8:e0:c3:f5:eb:ff:7d:57:88: 9e:f3:e9:7e:ef:1f:56:fe:45:09:8e:2f:a0:30:8f: 13:a8:3e:d8:10:13:53:47:93:71:2b:eb:a3:71:85: 84:2a:29:21:4d:f2:2d:dc:b3:fe:68:6a:e0:c6:3a: 06:09:7c:16:a9:8d:f9:50:14:60:f7:82:a1:69:19: fa:b0:66:67:7b:af:b7:02:1e:c8:cc:d9:e3:3a:f0: a4:1f:97:be:90:fb:c0:21:b5:bb:78:a3:6e:41:4b: 58:e5:26:9a:71:2b:af:4a:9b:3e:f0:1a:16:f0:b2: 6b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6C:65:A8:44:B6:B2:5A:6B:29:75:96:10:BC:C6:5A:BB:11:51:2C X509v3 Authority Key Identifier: keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d9:56:88:bd:b5:64:83:75:a6:ad:c0:64:00:ae:56:72:4f: a3:dd:65:54:f3:8b:fd:07:97:09:e6:0d:b9:ee:a3:67:9b:2d: d5:ff:d9:8c:e1:0f:1d:ed:d5:2b:ab:f5:dd:f2:67:28:33:ba: 48:cf:f9:2d:ef:b3:72:be:d1:ba:77:72:0b:07:22:8e:3a:15: 99:99:79:93:de:b6:72:dc:73:d1:37:30:67:7c:8e:8d:a0:0d: bc:b0:1b:14:93:33:4e:c9:62:f6:0c:ec:cc:25:86:02:b6:43: 2e:74:95:52:25:6e:a3:91:34:9e:2f:10:38:c6:18:6b:4e:05: 75:4b:70:8b:66:3b:2f:07:33:e2:3f:b2:59:db:f5:50:b7:bf: f3:ff:2b:51:28:3c:68:0b:ac:37:30:83:ce:0c:49:ff:df:35: a8:76:50:b3:be:7e:53:b1:ea:d2:d9:07:74:04:70:ee:06:9d: 6e:a8:01:7d:f7:0c:90:9b:df:1e:5b:36:fb:d7:5a:67:26:a6: b6:86:1f:e9:d4:03:a3:80:91:71:31:5a:d0:41:6a:b4:23:ff: ae:50:a1:af:ef:51:b1:10:c1:45:78:77:db:2b:1b:b8:ef:7d: 02:fa:73:af:80:55:49:bb:15:f7:6a:ea:4f:6e:b5:41:c3:fc: 7e:0a:25:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45DZ6F42VaQqU29ogdvx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk ZGRlOGMwHhcNMjYwMTI2MDYwMTA0WhcNMjYwMTI3MDYwMTA0WjAzMTEwLwYDVQQD EygxOTZjNjVhODQ0YjZiMjVhNmIyOTc1OTYxMGJjYzY1YWJiMTE1MTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJF7zBk6REGpBc6AD7TIXoKoVb4N x3j4fVMcropo1KlaSZevklsPIJF/PgdxpcpQ00y6Ldpdykwe6TRPqh+uSNuW1NdF FxMQVnlxxyzPu5XCMAxqvREu2l6TUOzBg/YaSG3wSxu3gZWZz/GAfpZtSJX9z05c AQ5OCeKzDNnLAo6ZM0yL96DC98A5lxzY4MP16/99V4ie8+l+7x9W/kUJji+gMI8T qD7YEBNTR5NxK+ujcYWEKikhTfIt3LP+aGrgxjoGCXwWqY35UBRg94KhaRn6sGZn e6+3Ah7IzNnjOvCkH5e+kPvAIbW7eKNuQUtY5SaacSuvSps+8BoW8LJrbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlsZahEtrJaayl1lhC8xlq7EVEsMB8GA1UdIwQY MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt M2JiOTI2ODc2MDJjLzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNlWiL21 ZIN1pq3AZACuVnJPo91lVPOL/QeXCeYNue6jZ5st1f/ZjOEPHe3VK6v13fJnKDO6 SM/5Le+zcr7RundyCwcijjoVmZl5k962ctxz0TcwZ3yOjaANvLAbFJMzTsli9gzs zCWGArZDLnSVUiVuo5E0ni8QOMYYa04FdUtwi2Y7Lwcz4j+yWdv1ULe/8/8rUSg8 aAusNzCDzgxJ/981qHZQs75+U7Hq0tkHdARw7gadbqgBffcMkJvfHls2+9daZyam toYf6dQDo4CRcTFa0EFqtCP/rlChr+9RsRDBRXh32ysbuO99Avpzr4BVSbsV92rq T261QcP8fgolug== -----END CERTIFICATE-----Generated at Mon Jan 26 08:02:48 2026 by rpki-client