This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft File: bevRnamMJ_q6t7LylLz57Gr0SQU.mft (raw, json) Hash identifier: Uc7WyePCdKnBADnrqRQfjx2QK/S/l1mutEECFRJoasw= Subject key identifier: 9B:0B:05:C6:C2:33:21:6E:D7:D6:96:F2:3E:07:8E:8B:4C:E3:38:D5 Authority key identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05 Certificate issuer: /CN=6debd19da98c27fabab7b2f294bcf9ec6af44905 Certificate serial: 019BF50740438F386CC3DC9DB13BCED58D54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 12:00:51 +0000 Manifest this update: Sun 25 Jan 2026 12:00:51 +0000 Manifest next update: Mon 26 Jan 2026 12:00:51 +0000 Files and hashes: 1: Q0DDocvIKXHiQubA2ngrZtN9sss.roa (hash: 0a8d7PBCfHewby32uiXu3Z8pOtDp0RIdoWEgJJZMaoA=) 2: bevRnamMJ_q6t7LylLz57Gr0SQU.crl (hash: tllUv+82ZnhquOatwPkijKfKAvQZvqXF5vbCtPeHsQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:40:43:8f:38:6c:c3:dc:9d:b1:3b:ce:d5:8d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6debd19da98c27fabab7b2f294bcf9ec6af44905 Validity Not Before: Jan 25 12:00:51 2026 GMT Not After : Jan 26 12:00:51 2026 GMT Subject: CN=9b0b05c6c233216ed7d696f23e078e8b4ce338d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:40:6c:3e:62:a0:32:f3:07:31:d3:bc:28: b6:39:37:45:23:09:da:9c:83:88:58:64:76:1b:c6: b6:a8:e7:ed:11:e6:55:21:1f:16:33:84:9f:bd:12: 13:8d:72:52:40:e5:8b:2b:4e:13:1f:db:73:1a:b7: 1b:b6:c6:94:7f:1d:b6:8b:5b:77:a1:89:b9:39:65: 2e:5b:31:73:a2:33:13:d5:ce:33:c8:0f:0c:71:a7: e7:2c:2f:2a:9f:37:8c:7a:4c:46:ae:e5:8f:ea:a0: 3b:b0:72:3e:f3:46:fe:e8:77:c9:98:35:eb:d0:d5: 02:02:80:85:ab:f3:dd:b4:f7:f7:cc:e1:41:85:97: 95:e5:49:c2:5d:0a:23:ff:76:e0:2f:8f:42:c3:eb: 78:af:4c:9a:c6:f6:93:65:ee:67:d3:9b:f1:59:cc: d2:49:29:06:07:3f:c1:bf:5f:7a:85:8b:07:ea:58: 42:66:4e:19:53:44:55:f8:ac:98:13:7b:5e:05:7b: 3e:e2:b6:13:7b:18:e6:f4:fd:49:b7:69:73:5e:48: e5:39:49:35:ad:d7:53:5a:d7:90:74:78:ce:df:6f: ee:72:81:41:a7:20:d2:e9:76:50:e7:2f:85:e5:a7: 53:ee:f8:b4:7c:23:d6:85:9d:5a:87:35:7c:05:78: 87:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0B:05:C6:C2:33:21:6E:D7:D6:96:F2:3E:07:8E:8B:4C:E3:38:D5 X509v3 Authority Key Identifier: keyid:6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:1b:58:0d:2e:17:9e:aa:2a:95:b2:cb:5d:aa:aa:1c:bc:a2: 76:20:bf:54:9d:93:e0:e5:5a:2f:36:bf:c6:e9:a0:39:11:c8: 61:71:2e:fd:cd:1b:ed:53:6a:8e:9a:1f:5f:55:4a:4d:44:df: 9d:ba:54:3d:08:10:9c:b4:c2:da:cf:f1:2e:70:f9:08:bd:f6: 0e:43:41:d7:7d:da:d2:2b:8f:82:71:5b:a2:36:6b:cc:7f:04: f3:25:c4:ed:38:6c:ff:39:09:14:1a:2a:fa:75:61:d7:6e:75: f8:4d:30:f2:d2:22:8b:a8:3a:e6:1f:20:c9:ee:9d:3c:8f:69: ed:44:3c:26:2b:50:96:41:a3:59:ad:6c:18:27:4f:04:99:cc: 90:e0:c9:f7:6a:c4:a3:7e:d4:ec:c8:60:4c:7f:47:95:06:45: 06:24:8f:d1:0e:18:ad:5b:be:85:07:81:d4:f4:10:19:ba:05: 47:eb:55:5c:03:10:35:7f:99:f9:13:4c:9f:e6:2b:23:1d:bf: 32:ff:24:88:4d:0b:ac:01:5f:ab:5d:8e:01:ca:b9:ec:1d:44: 66:c3:6f:60:b8:01:53:42:0a:b5:3b:a5:ab:2d:2a:89:f0:52: 8e:93:6f:c8:2c:5c:11:79:8b:5e:e4:64:f8:4a:5b:e2:9d:c6: af:11:c9:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B0BDjzhsw9ydsTvO1Y1UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZWJkMTlkYTk4YzI3ZmFiYWI3YjJmMjk0YmNmOWVjNmFm NDQ5MDUwHhcNMjYwMTI1MTIwMDUxWhcNMjYwMTI2MTIwMDUxWjAzMTEwLwYDVQQD Eyg5YjBiMDVjNmMyMzMyMTZlZDdkNjk2ZjIzZTA3OGU4YjRjZTMzOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEBAbD5ioDLzBzHTvCi2OTdFIwna nIOIWGR2G8a2qOftEeZVIR8WM4SfvRITjXJSQOWLK04TH9tzGrcbtsaUfx22i1t3 oYm5OWUuWzFzojMT1c4zyA8McafnLC8qnzeMekxGruWP6qA7sHI+80b+6HfJmDXr 0NUCAoCFq/PdtPf3zOFBhZeV5UnCXQoj/3bgL49Cw+t4r0yaxvaTZe5n05vxWczS SSkGBz/Bv196hYsH6lhCZk4ZU0RV+KyYE3teBXs+4rYTexjm9P1Jt2lzXkjlOUk1 rddTWteQdHjO32/ucoFBpyDS6XZQ5y+F5adT7vi0fCPWhZ1ahzV8BXiH/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsLBcbCMyFu19aW8j4HjotM4zjVMB8GA1UdIwQY MBaAFG3r0Z2pjCf6urey8pS8+exq9EkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmV2Um5hbU1KX3E2dDdMeWxMejU3R3IwU1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xYWQzNDktZWRmZS00MTUwLTlkMzct MjY0YWI5MzM3ZmEwLzEvYmV2Um5hbU1KX3E2dDdMeWxMejU3R3IwU1FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xYWQzNDktZWRmZS00MTUwLTlkMzctMjY0YWI5MzM3ZmEw LzEvYmV2Um5hbU1KX3E2dDdMeWxMejU3R3IwU1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhtYDS4X nqoqlbLLXaqqHLyidiC/VJ2T4OVaLza/xumgORHIYXEu/c0b7VNqjpofX1VKTUTf nbpUPQgQnLTC2s/xLnD5CL32DkNB133a0iuPgnFbojZrzH8E8yXE7Ths/zkJFBoq +nVh1251+E0w8tIii6g65h8gye6dPI9p7UQ8JitQlkGjWa1sGCdPBJnMkODJ92rE o37U7MhgTH9HlQZFBiSP0Q4YrVu+hQeB1PQQGboFR+tVXAMQNX+Z+RNMn+YrIx2/ Mv8kiE0LrAFfq12OAcq57B1EZsNvYLgBU0IKtTulqy0qifBSjpNvyCxcEXmLXuRk +Epb4p3GrxHJmA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:30:41 2026 by rpki-client