This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json) Hash identifier: L2k7PzCKjmALxAKC6SxYW8C1tKxPleGhVDn8YIzu4iE= Subject key identifier: AA:0F:7F:89:71:3B:F8:A2:6D:6D:A7:C1:B1:6A:F3:5A:3C:CD:4A:B1 Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa Certificate serial: 019C427DBCBEC3449EA7D36154CB6614E031 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft Manifest number: 0767 Signing time: Mon 09 Feb 2026 13:01:02 +0000 Manifest this update: Mon 09 Feb 2026 13:01:02 +0000 Manifest next update: Tue 10 Feb 2026 13:01:02 +0000 Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: lXc6euKv2tIb3FG6bJibSnXIYuLqcXoXNrk1iWu1D9U=) 2: IqfljPmovMw0h8ewZdeewCrDYzo.roa (hash: F5c+FwRQPizdSJcZKPHuANU8/2CYQYjIuD51CmmE3Ko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:bc:be:c3:44:9e:a7:d3:61:54:cb:66:14:e0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa Validity Not Before: Feb 9 13:01:02 2026 GMT Not After : Feb 10 13:01:02 2026 GMT Subject: CN=aa0f7f89713bf8a26d6da7c1b16af35a3ccd4ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:68:e5:3c:f2:8c:9b:82:39:b9:2b:aa:a9: fa:f7:20:80:ed:92:ed:cc:d3:45:20:57:84:6b:af: 59:dc:f3:a5:7b:e4:42:03:0b:a0:5f:99:b0:b3:ef: 3e:23:81:7a:14:34:f7:3e:f4:2e:60:1b:ad:55:36: 3e:b5:d6:ca:60:70:0d:d9:cb:c8:a1:12:5b:30:85: b4:4b:4a:6a:0d:4d:6d:ac:16:72:b3:ca:20:ea:d5: 9b:e9:be:29:5d:05:ef:d0:08:69:dc:66:10:e9:af: 35:6a:af:1e:2e:8f:5e:d5:e8:e5:62:c4:e4:58:5d: 1b:2e:11:b5:e8:cb:f1:47:0d:45:4f:2e:77:4f:3d: 4a:32:e6:5b:b0:90:5b:60:d6:0d:16:f0:db:91:35: 92:0e:a0:a0:91:d7:31:2c:a5:ad:f9:55:cd:13:ee: 3f:ec:21:7d:1c:c8:c8:f2:ff:7f:ce:90:a6:8b:e9: 4b:cf:84:31:5a:a8:5a:ae:06:c9:b7:f6:6c:b3:be: a9:88:0d:6f:0d:f9:fe:78:15:07:d0:13:c4:f0:f1: 06:cb:66:10:67:5f:01:a4:c6:39:c0:b4:51:45:3e: ba:75:48:9b:29:44:de:d2:dd:32:c4:99:26:f2:ba: c3:75:cf:5e:92:86:1a:6a:f1:12:6e:d1:be:e5:30: 99:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0F:7F:89:71:3B:F8:A2:6D:6D:A7:C1:B1:6A:F3:5A:3C:CD:4A:B1 X509v3 Authority Key Identifier: keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:71:ca:68:9d:6d:88:79:69:2d:e5:42:da:79:03:3c:db:f4: c1:35:8b:dc:fb:f3:3a:4a:f2:98:53:1d:6a:6b:6f:f7:4f:dd: 88:ea:ab:90:09:34:27:02:fc:e9:ba:56:5a:19:bc:65:f1:68: b0:11:08:47:d5:50:23:ea:a4:11:47:5f:fe:1d:e2:70:3b:83: 80:69:b5:48:7e:a0:d5:f3:01:15:50:e0:7a:d8:36:37:a4:55: 3d:91:68:e7:8d:c1:1b:1d:fd:f3:de:5f:95:6b:79:9f:25:9f: 82:43:b9:96:0b:35:d9:70:2d:b6:5a:2d:f5:3d:db:51:af:15: bf:f3:6b:a0:0a:5a:fb:eb:33:a0:f1:dd:6a:81:32:3d:0c:84: 83:fa:b0:c7:dc:6e:42:30:6f:83:3c:8b:7c:07:a2:63:43:c2: f4:8a:f7:80:98:84:70:8a:7b:0d:10:ed:85:61:b6:74:25:12: 1b:52:8f:6f:0a:53:a6:5c:5a:b7:2c:26:45:65:cb:be:4b:d4: d3:5e:f0:60:09:64:36:f1:b6:e3:82:82:49:01:19:9b:e7:ae: e0:ed:84:7f:81:09:aa:ef:93:47:14:e8:f2:14:49:c3:85:a6: 79:9c:10:fc:e5:d7:1e:81:90:0a:68:7d:2e:57:90:15:59:25: 2f:3e:c5:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfby+w0Sep9NhVMtmFOAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMGFhMTM1ZTc2NmJjNWIyN2RkMmY1MDE0ZmI2M2FlYjU5 MWY4ZmEwHhcNMjYwMjA5MTMwMTAyWhcNMjYwMjEwMTMwMTAyWjAzMTEwLwYDVQQD EyhhYTBmN2Y4OTcxM2JmOGEyNmQ2ZGE3YzFiMTZhZjM1YTNjY2Q0YWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEVo5TzyjJuCObkrqqn69yCA7ZLt zNNFIFeEa69Z3POle+RCAwugX5mws+8+I4F6FDT3PvQuYButVTY+tdbKYHAN2cvI oRJbMIW0S0pqDU1trBZys8og6tWb6b4pXQXv0Ahp3GYQ6a81aq8eLo9e1ejlYsTk WF0bLhG16MvxRw1FTy53Tz1KMuZbsJBbYNYNFvDbkTWSDqCgkdcxLKWt+VXNE+4/ 7CF9HMjI8v9/zpCmi+lLz4QxWqhargbJt/Zss76piA1vDfn+eBUH0BPE8PEGy2YQ Z18BpMY5wLRRRT66dUibKUTe0t0yxJkm8rrDdc9ekoYaavESbtG+5TCZfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoPf4lxO/iibW2nwbFq81o8zUqxMB8GA1UdIwQY MBaAFNoKoTXnZrxbJ90vUBT7Y661kfj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEt YWYzYWYwODJmOTQzLzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEtYWYzYWYwODJmOTQz LzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnHKaJ1t iHlpLeVC2nkDPNv0wTWL3PvzOkrymFMdamtv90/diOqrkAk0JwL86bpWWhm8ZfFo sBEIR9VQI+qkEUdf/h3icDuDgGm1SH6g1fMBFVDgetg2N6RVPZFo543BGx39895f lWt5nyWfgkO5lgs12XAttlot9T3bUa8Vv/NroApa++szoPHdaoEyPQyEg/qwx9xu QjBvgzyLfAeiY0PC9Ir3gJiEcIp7DRDthWG2dCUSG1KPbwpTplxatywmRWXLvkvU 017wYAlkNvG244KCSQEZm+eu4O2Ef4EJqu+TRxTo8hRJw4WmeZwQ/OXXHoGQCmh9 LleQFVklLz7Fkg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:20 2026 by rpki-client