This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft File: 2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json) Hash identifier: drc6uWNd45VTVXfgzvFtu70fx4zR/PRL+OuKMSrxBng= Subject key identifier: A7:D5:67:9F:0C:FE:FD:96:39:2D:5B:FB:A8:9F:9A:7E:59:91:62:25 Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20 Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20 Certificate serial: 019C4322D6F216EFF8B1AAEC034861A22785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft Manifest number: 0CB8 Signing time: Mon 09 Feb 2026 16:01:22 +0000 Manifest this update: Mon 09 Feb 2026 16:01:22 +0000 Manifest next update: Tue 10 Feb 2026 16:01:22 +0000 Files and hashes: 1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: 9sIIzkO49WUKDSRhdG3nHn1Ga11NWUO3a36CwAwTSw0=) 2: CXGcHwGiTiAFOY7NjCNCxVUi-RQ.roa (hash: zsZdBBsP2qLk8Wzoqm4TOlRxt7Nv3YTcIgc+45WHFnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:d6:f2:16:ef:f8:b1:aa:ec:03:48:61:a2:27:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20 Validity Not Before: Feb 9 16:01:22 2026 GMT Not After : Feb 10 16:01:22 2026 GMT Subject: CN=a7d5679f0cfefd96392d5bfba89f9a7e59916225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3e:b7:4c:55:d9:a6:57:35:50:1d:26:b9:59: f9:3c:99:1f:9f:cd:75:ef:78:0b:d4:95:f5:5a:6b: b3:b0:49:c4:4c:18:1a:ca:3c:97:39:03:6f:48:6b: 58:1a:20:17:e5:e5:ed:77:f3:40:a1:f3:6b:7d:62: 46:c0:9b:b8:17:68:60:89:32:aa:cd:0b:86:69:c7: f8:04:7d:d7:e0:75:28:0f:19:36:0d:f5:bf:4c:af: d3:7c:1a:d6:ad:3c:73:b1:0d:d0:1d:51:8c:d6:f5: 3c:b8:63:cc:33:2d:56:3e:09:36:a3:94:80:d3:42: e4:1e:56:a1:08:32:7a:0f:0a:34:28:18:74:d1:b0: e6:4e:47:3d:40:85:1d:b6:99:8d:db:19:cf:69:55: 8a:da:c6:6a:c0:af:e5:a4:5c:79:62:ae:4f:d1:c6: 16:ab:e6:b8:57:3f:94:80:7c:c9:d4:c7:d1:2c:a3: 5f:5f:6d:3d:9c:df:75:2c:7e:15:ea:90:d7:87:b4: 6f:01:9f:d6:5c:f9:b8:31:42:7c:21:f7:4e:f1:22: 67:92:9e:db:28:34:f2:7c:56:19:4c:19:b9:36:8b: 5b:b6:09:b6:2c:4a:96:f3:5e:f5:b2:19:b0:29:d9: 1d:23:85:84:07:ff:86:15:3c:cc:a2:85:f6:a3:c0: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D5:67:9F:0C:FE:FD:96:39:2D:5B:FB:A8:9F:9A:7E:59:91:62:25 X509v3 Authority Key Identifier: keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6e:67:7f:8f:ba:3d:b2:4a:c1:1f:11:e7:71:cc:26:6d:e0: e6:09:b8:c0:49:5a:1a:e7:cf:c4:dc:1b:6b:c6:67:09:cb:55: d2:b1:02:6f:70:29:15:cd:19:23:86:8f:50:95:53:66:ca:c0: 79:6e:45:cd:82:18:d6:02:8b:d2:b6:21:6d:87:45:56:b2:ac: 9c:c2:86:7f:ba:bc:d8:7f:a7:ba:bd:f3:66:11:0f:31:38:97: f7:4a:8b:5c:2e:75:c2:e6:d7:90:fa:5e:dd:f9:77:c3:8b:7f: 57:9d:80:b9:11:97:73:df:11:67:1c:8e:af:33:60:7d:f3:37: 7a:78:7d:ce:83:68:ee:a9:f6:ac:5b:bb:0a:4e:3d:e7:e5:4a: 89:6e:9c:4e:dd:b0:e8:9a:40:13:5a:61:b5:2f:36:f0:99:b2: df:7b:3d:a3:2f:22:8b:58:82:2e:e9:d1:1c:c5:14:aa:85:b3: d7:64:97:33:ad:f4:1e:25:2b:b0:88:e2:2a:24:d9:96:dc:75: 7f:3c:80:a3:1b:22:ce:30:e2:50:74:ef:47:18:e2:fd:c5:6a: 12:7d:5c:68:8b:ed:ff:83:cb:03:0a:34:6e:32:81:37:62:72: 7b:46:d8:03:86:cb:ab:cb:1b:65:e7:77:29:9c:b2:05:ab:c1: 5a:f0:66:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItbyFu/4sarsA0hhoieFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmY5ZTE3YjliNDE5ODhhOTI1OTljYmNhYmEwMzkxZmZi NjFhMjAwHhcNMjYwMjA5MTYwMTIyWhcNMjYwMjEwMTYwMTIyWjAzMTEwLwYDVQQD EyhhN2Q1Njc5ZjBjZmVmZDk2MzkyZDViZmJhODlmOWE3ZTU5OTE2MjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6j63TFXZplc1UB0muVn5PJkfn811 73gL1JX1WmuzsEnETBgayjyXOQNvSGtYGiAX5eXtd/NAofNrfWJGwJu4F2hgiTKq zQuGacf4BH3X4HUoDxk2DfW/TK/TfBrWrTxzsQ3QHVGM1vU8uGPMMy1WPgk2o5SA 00LkHlahCDJ6Dwo0KBh00bDmTkc9QIUdtpmN2xnPaVWK2sZqwK/lpFx5Yq5P0cYW q+a4Vz+UgHzJ1MfRLKNfX209nN91LH4V6pDXh7RvAZ/WXPm4MUJ8IfdO8SJnkp7b KDTyfFYZTBm5Notbtgm2LEqW8171shmwKdkdI4WEB/+GFTzMooX2o8BYzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfVZ58M/v2WOS1b+6ifmn5ZkWIlMB8GA1UdIwQY MBaAFNn/nhe5tBmIqSWZy8q6A5H/thogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80OWQ4NTktNjEwYS00MjQyLThkZGYt MzdhMGU0NzRhYjE1LzEvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80OWQ4NTktNjEwYS00MjQyLThkZGYtMzdhMGU0NzRhYjE1 LzEvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK25nf4+6 PbJKwR8R53HMJm3g5gm4wElaGufPxNwba8ZnCctV0rECb3ApFc0ZI4aPUJVTZsrA eW5FzYIY1gKL0rYhbYdFVrKsnMKGf7q82H+nur3zZhEPMTiX90qLXC51wubXkPpe 3fl3w4t/V52AuRGXc98RZxyOrzNgffM3enh9zoNo7qn2rFu7Ck495+VKiW6cTt2w 6JpAE1phtS828Jmy33s9oy8ii1iCLunRHMUUqoWz12SXM630HiUrsIjiKiTZltx1 fzyAoxsizjDiUHTvRxji/cVqEn1caIvt/4PLAwo0bjKBN2Jye0bYA4bLq8sbZed3 KZyyBavBWvBmaQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:30:30 2026 by rpki-client