This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json) Hash identifier: JYzRIlp3zcyFOdzDXDHX9nAzExxnRUDiBNqb8q+AQDE= Subject key identifier: 88:8C:E1:B6:D6:7F:57:0E:3D:69:EC:4C:34:37:4B:CE:8A:17:6E:07 Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2 Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2 Certificate serial: 019C4390B9AE0A533A4875D3D20C121DC5B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft Manifest number: 0A92 Signing time: Mon 09 Feb 2026 18:01:24 +0000 Manifest this update: Mon 09 Feb 2026 18:01:24 +0000 Manifest next update: Tue 10 Feb 2026 18:01:24 +0000 Files and hashes: 1: UUtPEXMk0hGowhFUM2oFX6Myc_k.roa (hash: m5amu6SfNj0r5BgGVb9s+vJGnsT3MFaddceswbb1NBI=) 2: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: SjGN9nEolxxoR5bJBGDo48lsFfHFFlzODDE6n8vXypQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:b9:ae:0a:53:3a:48:75:d3:d2:0c:12:1d:c5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2 Validity Not Before: Feb 9 18:01:24 2026 GMT Not After : Feb 10 18:01:24 2026 GMT Subject: CN=888ce1b6d67f570e3d69ec4c34374bce8a176e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:67:57:bb:f7:05:bd:04:b5:7c:97:b0:10: 12:c6:cc:68:cc:0b:48:d1:10:ad:3f:c3:f1:ee:65: b8:cb:fb:be:c9:94:3f:81:32:f7:c2:cd:80:57:a9: 66:07:d7:87:85:63:a2:ad:f1:57:d7:9d:80:9a:4a: ad:ee:2d:1c:9b:e2:0b:93:05:8a:e0:1d:ed:59:6a: 96:30:af:c7:d2:f0:36:f8:87:55:fc:06:f2:13:7c: 6e:e2:2c:fd:02:52:d8:6f:84:e8:4f:b3:f3:75:6d: da:19:d8:79:5d:d1:31:b4:67:6f:2f:95:09:06:17: ef:b1:8b:80:1b:35:84:b2:b1:67:2e:39:fa:d8:82: 83:7a:ed:27:e1:c7:f7:dd:0c:7f:59:b0:e3:7c:0a: d3:4d:26:52:2f:60:b9:5d:e2:8f:a7:95:f2:50:a3: f6:45:2f:60:96:70:ed:39:d7:ea:ef:2f:72:63:93: a6:64:d7:cf:fb:67:e7:3a:fa:fa:e6:71:09:ed:45: a3:7b:49:2a:54:cb:3d:fe:24:8d:8a:d4:03:fc:04: eb:70:94:05:60:37:86:f2:0b:98:8c:cf:49:7f:ed: 7f:c2:ef:d3:64:ca:1d:a2:4f:26:f5:39:9e:e8:3b: ea:9b:57:89:25:44:3a:3e:31:df:2a:ac:03:71:46: d1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8C:E1:B6:D6:7F:57:0E:3D:69:EC:4C:34:37:4B:CE:8A:17:6E:07 X509v3 Authority Key Identifier: keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f5:18:ce:90:44:5b:d0:bd:3c:e8:37:2c:9a:db:84:40:27: de:a1:73:e5:f4:c7:d3:3f:f4:71:f6:c3:16:34:3a:d2:d1:7f: d8:a0:93:5b:45:42:56:21:76:f2:f7:75:8e:f2:2c:79:06:31: 6b:5b:9b:84:35:89:ae:08:2c:19:96:51:89:8d:01:37:1a:34: 65:1d:4e:04:8e:46:72:b7:bd:24:aa:27:b6:bf:bf:3e:af:f9: c1:69:49:35:e5:d7:26:dc:db:bc:d5:fa:6d:fe:76:e5:d0:0c: 32:79:91:ff:e9:59:fa:92:8b:72:2c:94:94:c3:f1:20:85:c2: 29:4c:cf:3c:79:21:74:b9:d4:f5:e8:c8:6e:3b:b7:27:42:79: 22:d6:2b:9d:05:69:5b:76:c9:d3:b9:f7:cb:dc:d1:95:ee:cc: fa:5c:f6:49:69:bf:52:dd:69:c2:e3:a7:90:3b:2b:48:73:59: 29:99:16:5a:17:e2:94:f6:56:92:9b:e2:7a:cd:03:39:0d:97: 2c:ea:5c:6b:52:53:42:6c:90:4f:12:23:0a:58:20:e5:5e:34: 9a:41:d0:90:77:f1:9d:32:37:cb:89:b2:14:11:35:17:c2:08: 68:2a:ca:06:e0:ed:23:fb:63:4a:fb:9e:fa:48:9b:6b:11:18: 76:2c:e0:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkLmuClM6SHXT0gwSHcW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz ZmE0YTIwHhcNMjYwMjA5MTgwMTI0WhcNMjYwMjEwMTgwMTI0WjAzMTEwLwYDVQQD Eyg4ODhjZTFiNmQ2N2Y1NzBlM2Q2OWVjNGMzNDM3NGJjZThhMTc2ZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFhnV7v3Bb0EtXyXsBASxsxozAtI 0RCtP8Px7mW4y/u+yZQ/gTL3ws2AV6lmB9eHhWOirfFX152Amkqt7i0cm+ILkwWK 4B3tWWqWMK/H0vA2+IdV/AbyE3xu4iz9AlLYb4ToT7PzdW3aGdh5XdExtGdvL5UJ BhfvsYuAGzWEsrFnLjn62IKDeu0n4cf33Qx/WbDjfArTTSZSL2C5XeKPp5XyUKP2 RS9glnDtOdfq7y9yY5OmZNfP+2fnOvr65nEJ7UWje0kqVMs9/iSNitQD/ATrcJQF YDeG8guYjM9Jf+1/wu/TZModok8m9Tme6Dvqm1eJJUQ6PjHfKqwDcUbRKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiM4bbWf1cOPWnsTDQ3S86KF24HMB8GA1UdIwQY MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt NjNmMzAxODg5NDg2LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2 LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/UYzpBE W9C9POg3LJrbhEAn3qFz5fTH0z/0cfbDFjQ60tF/2KCTW0VCViF28vd1jvIseQYx a1ubhDWJrggsGZZRiY0BNxo0ZR1OBI5Gcre9JKontr+/Pq/5wWlJNeXXJtzbvNX6 bf525dAMMnmR/+lZ+pKLciyUlMPxIIXCKUzPPHkhdLnU9ejIbju3J0J5ItYrnQVp W3bJ07n3y9zRle7M+lz2SWm/Ut1pwuOnkDsrSHNZKZkWWhfilPZWkpvies0DOQ2X LOpca1JTQmyQTxIjClgg5V40mkHQkHfxnTI3y4myFBE1F8IIaCrKBuDtI/tjSvue +kibaxEYdizgzQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:03 2026 by rpki-client