This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/2N0PBmo-JPGmYxEqHyjp2DsuzXM.mft File: 2N0PBmo-JPGmYxEqHyjp2DsuzXM.mft (raw, json) Hash identifier: o6Mog8Ng92psWW9an1xhTreWcYD01ZWmLEx+RIgSYD0= Subject key identifier: FC:EC:4C:B7:EF:64:CE:42:90:87:4F:F6:A1:A2:96:7E:9C:5C:B7:B3 Authority key identifier: D8:DD:0F:06:6A:3E:24:F1:A6:63:11:2A:1F:28:E9:D8:3B:2E:CD:73 Certificate issuer: /CN=d8dd0f066a3e24f1a663112a1f28e9d83b2ecd73 Certificate serial: 019C42EB8A1F52D7BE4E59EDA90E20A5FAFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2N0PBmo-JPGmYxEqHyjp2DsuzXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/2N0PBmo-JPGmYxEqHyjp2DsuzXM.mft Manifest number: 37 Signing time: Mon 09 Feb 2026 15:00:58 +0000 Manifest this update: Mon 09 Feb 2026 15:00:58 +0000 Manifest next update: Tue 10 Feb 2026 15:00:58 +0000 Files and hashes: 1: 2N0PBmo-JPGmYxEqHyjp2DsuzXM.crl (hash: 1FoASwrevyZtd2MCKW91dBFKeYdnUY0tO3w0MOMdIFg=) 2: kpMx_jDvAD2J4w_3QrPa_7EmM7k.roa (hash: s8PvuEvsSULDst+nlshWZnZoN6R6lxtcg9VvUqcdZGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/2N0PBmo-JPGmYxEqHyjp2DsuzXM.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/2N0PBmo-JPGmYxEqHyjp2DsuzXM.mft rsync://rpki.ripe.net/repository/DEFAULT/2N0PBmo-JPGmYxEqHyjp2DsuzXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:8a:1f:52:d7:be:4e:59:ed:a9:0e:20:a5:fa:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8dd0f066a3e24f1a663112a1f28e9d83b2ecd73 Validity Not Before: Feb 9 15:00:58 2026 GMT Not After : Feb 10 15:00:58 2026 GMT Subject: CN=fcec4cb7ef64ce4290874ff6a1a2967e9c5cb7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:13:af:e5:d3:7c:ae:62:c6:6f:15:eb:50:cd: 5b:51:fb:96:69:99:7d:91:8f:43:aa:cc:d3:27:8f: d8:c4:0c:6e:9a:dc:d4:04:77:44:c6:d9:5a:a4:6d: 21:9f:6d:81:96:41:3d:d1:19:93:e0:4c:98:7b:51: 5c:32:16:37:89:a2:5c:68:75:3b:8a:33:1b:5e:dd: fb:5e:91:2d:46:8a:33:4f:fe:f3:57:db:4a:9c:d6: b5:cb:21:e2:1b:9b:ac:70:a7:52:2d:5c:fe:a4:11: 72:3e:8a:95:37:86:87:7f:f4:84:ac:ab:5f:5c:dc: c7:8a:f4:c9:d3:45:73:c4:db:93:81:6a:83:19:27: bd:c5:f4:d6:33:3d:da:de:68:3f:df:69:db:35:28: 52:44:3e:2a:83:8f:e7:27:76:97:6f:7b:60:d8:fe: b1:50:14:c1:11:63:94:12:26:ed:81:c7:32:33:6c: ca:15:14:29:5f:61:d9:d0:25:49:bc:98:18:8f:c7: 11:cf:7f:3c:74:d2:ca:ef:01:bd:77:9f:8b:6a:a1: 06:69:11:d4:a2:d8:92:2d:9c:dd:1d:0d:cf:70:cf: 4b:d3:f8:27:da:70:d7:e0:b6:d8:73:cc:f1:2e:db: db:1f:25:44:e4:72:0b:d9:86:32:4e:35:c3:8d:5b: fa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EC:4C:B7:EF:64:CE:42:90:87:4F:F6:A1:A2:96:7E:9C:5C:B7:B3 X509v3 Authority Key Identifier: keyid:D8:DD:0F:06:6A:3E:24:F1:A6:63:11:2A:1F:28:E9:D8:3B:2E:CD:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2N0PBmo-JPGmYxEqHyjp2DsuzXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/2N0PBmo-JPGmYxEqHyjp2DsuzXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e4cdc7-4001-4d09-9b28-de4af229e3ba/1/2N0PBmo-JPGmYxEqHyjp2DsuzXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a1:12:00:2f:ee:23:7f:ab:d1:b6:cb:d6:5f:be:63:37:1e: 3e:fa:dd:c5:da:64:87:7b:83:c1:9c:be:c8:4f:24:59:49:31: 46:ed:23:42:34:88:e5:4f:1d:8a:c6:56:31:1d:ea:f2:60:8a: 08:ef:38:2f:2b:0d:01:0e:f1:91:cc:08:5b:0b:9e:17:f5:ac: f5:1c:3d:c0:ac:5e:b1:b5:49:07:38:05:63:5c:a5:70:da:7b: ab:77:5b:df:4d:ac:01:8d:33:75:f3:7e:66:11:61:5e:fc:50: 2e:58:26:1a:96:e3:13:26:b6:6f:62:15:b3:84:94:52:cc:73: 71:86:11:dc:a9:87:6a:cf:6a:47:c9:d7:cb:e0:d4:ee:06:12: d4:eb:f6:c8:6b:2c:40:2c:02:91:0d:0d:c1:8d:23:65:62:4d: ef:49:15:f0:34:ef:b0:cb:a7:09:f6:a3:ae:57:be:ba:38:d5: f6:b6:5d:3e:f8:9f:31:b7:f0:a6:06:11:d2:e7:6f:37:b8:be: b0:3d:1b:62:70:c1:a2:f4:fe:75:db:d4:d9:a7:bb:b8:3c:c3: 96:bf:54:83:80:57:91:95:dd:7b:84:1b:ee:20:91:a8:85:cc: b0:81:16:63:0a:16:ed:96:7c:d6:1c:f7:cb:98:76:73:ef:d5: 30:23:11:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64ofUte+TlntqQ4gpfr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZGQwZjA2NmEzZTI0ZjFhNjYzMTEyYTFmMjhlOWQ4M2Iy ZWNkNzMwHhcNMjYwMjA5MTUwMDU4WhcNMjYwMjEwMTUwMDU4WjAzMTEwLwYDVQQD EyhmY2VjNGNiN2VmNjRjZTQyOTA4NzRmZjZhMWEyOTY3ZTljNWNiN2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BOv5dN8rmLGbxXrUM1bUfuWaZl9 kY9DqszTJ4/YxAxumtzUBHdExtlapG0hn22BlkE90RmT4EyYe1FcMhY3iaJcaHU7 ijMbXt37XpEtRoozT/7zV9tKnNa1yyHiG5uscKdSLVz+pBFyPoqVN4aHf/SErKtf XNzHivTJ00VzxNuTgWqDGSe9xfTWMz3a3mg/32nbNShSRD4qg4/nJ3aXb3tg2P6x UBTBEWOUEibtgccyM2zKFRQpX2HZ0CVJvJgYj8cRz388dNLK7wG9d5+LaqEGaRHU otiSLZzdHQ3PcM9L0/gn2nDX4LbYc8zxLtvbHyVE5HIL2YYyTjXDjVv6ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzsTLfvZM5CkIdP9qGiln6cXLezMB8GA1UdIwQY MBaAFNjdDwZqPiTxpmMRKh8o6dg7Ls1zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk4wUEJtby1KUEdtWXhFcUh5anAyRHN1elhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNGNkYzctNDAwMS00ZDA5LTliMjgt ZGU0YWYyMjllM2JhLzEvMk4wUEJtby1KUEdtWXhFcUh5anAyRHN1elhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNGNkYzctNDAwMS00ZDA5LTliMjgtZGU0YWYyMjllM2Jh LzEvMk4wUEJtby1KUEdtWXhFcUh5anAyRHN1elhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6ESAC/u I3+r0bbL1l++YzcePvrdxdpkh3uDwZy+yE8kWUkxRu0jQjSI5U8disZWMR3q8mCK CO84LysNAQ7xkcwIWwueF/Ws9Rw9wKxesbVJBzgFY1ylcNp7q3db302sAY0zdfN+ ZhFhXvxQLlgmGpbjEya2b2IVs4SUUsxzcYYR3KmHas9qR8nXy+DU7gYS1Ov2yGss QCwCkQ0NwY0jZWJN70kV8DTvsMunCfajrle+ujjV9rZdPvifMbfwpgYR0udvN7i+ sD0bYnDBovT+ddvU2ae7uDzDlr9Ug4BXkZXde4Qb7iCRqIXMsIEWYwoW7ZZ81hz3 y5h2c+/VMCMRiQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:24 2026 by rpki-client