This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json) Hash identifier: nFjJlt2ZJLOtegvRxH24Dygvm1inVnwe8nldqoJN8UY= Subject key identifier: 37:4B:86:40:80:0A:C0:59:71:CC:E2:61:F4:AA:E6:43:35:68:15:73 Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24 Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24 Certificate serial: 019C446C70264BB29BBB71F705BDE40320B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft Manifest number: 100E Signing time: Mon 09 Feb 2026 22:01:23 +0000 Manifest this update: Mon 09 Feb 2026 22:01:23 +0000 Manifest next update: Tue 10 Feb 2026 22:01:23 +0000 Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: MYGCJ7ue+t/DkJaebXPvulOmtQKmsE4f7POZoJChT2k=) 2: pKvOJm4n5sPhRA8ulxbp0fcdwlI.roa (hash: D5Xw6rzftd0rg3vZPJZf2WpziTWWuDu/9Tmy/JZh8qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:70:26:4b:b2:9b:bb:71:f7:05:bd:e4:03:20:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24 Validity Not Before: Feb 9 22:01:23 2026 GMT Not After : Feb 10 22:01:23 2026 GMT Subject: CN=374b8640800ac05971cce261f4aae64335681573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:05:1f:b5:0c:f2:7c:f7:ce:5b:8a:17:f6:13: bd:96:7d:72:ba:25:fd:64:be:d0:f4:fe:16:dc:33: 25:a4:f8:cb:10:03:c4:f6:74:3a:ce:cd:26:c4:27: a9:c3:e9:da:66:01:4d:d6:15:00:29:6b:e3:f5:f1: 63:cb:a6:9a:67:8e:bf:69:5e:12:8c:7e:85:e6:00: 48:f8:fa:2b:16:40:4d:d7:78:30:92:15:cf:4a:94: 6e:69:b1:a7:91:ba:cf:82:bf:43:32:29:96:a7:5a: 1e:1c:85:32:b3:a5:be:c6:88:34:2d:fa:ff:5d:69: 38:fb:ee:02:55:90:f1:15:b3:82:df:63:6a:22:b6: 27:24:03:5b:79:d2:ad:21:21:cf:0c:8d:24:46:8f: d7:39:15:61:e4:ef:87:91:85:9b:41:60:8d:eb:94: cd:5f:0b:d8:be:13:40:9d:5a:e2:56:11:c6:fd:e8: cf:86:c7:e8:f9:2f:c9:6e:c3:78:f8:7e:9f:5f:b6: dd:57:ef:30:11:f5:63:83:66:c6:3a:e6:c0:b0:f9: 82:c2:05:36:1f:fc:d7:32:ec:73:10:5b:64:94:d3: 89:d9:12:6f:c2:54:f9:b5:8b:fe:f7:05:61:dc:2e: 49:95:0d:39:5a:98:43:f7:30:fe:6a:dc:f3:d9:c8: 04:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4B:86:40:80:0A:C0:59:71:CC:E2:61:F4:AA:E6:43:35:68:15:73 X509v3 Authority Key Identifier: keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:bb:a3:54:c7:f5:b6:38:43:5b:18:90:53:15:50:e3:ce:6b: ee:a7:43:59:8f:85:22:64:e6:59:96:bb:5e:84:c7:40:5e:2d: 90:2a:d2:c1:c2:d6:f8:55:6f:51:c8:47:11:fd:cf:b3:32:8a: b8:02:c3:b7:3c:44:1a:fb:77:00:eb:99:7d:1b:9f:8f:15:b9: ad:b1:60:bf:91:e2:5e:ff:c3:7c:ae:50:b3:a0:e8:9e:79:50: 86:cc:cf:3c:61:7c:6c:c4:e0:66:b2:e2:59:99:39:bf:16:60: 00:6c:da:19:d2:25:15:f4:15:15:2c:fb:af:29:ab:bc:5c:a4: 9b:d5:3c:61:03:a2:9a:37:6a:60:99:bc:78:25:64:d5:41:91: 0e:49:cd:a7:85:3d:c3:ed:d5:d4:c0:e2:96:c8:ed:3c:50:0c: 2d:6c:8b:20:f0:a8:76:86:a6:69:14:6e:8c:26:db:d2:fc:72: 99:af:56:f9:fe:56:45:8d:85:bd:dc:ce:91:53:3c:61:af:55: 0a:a4:f2:80:ba:a1:d1:15:fa:d6:d4:fc:ef:12:76:8b:2b:f9: 78:0e:d5:d1:ed:03:81:02:d5:76:a4:23:0d:6b:db:16:62:b4: e3:01:35:a3:5b:16:04:37:35:a7:27:30:52:8b:59:f9:00:4c: 79:b8:f5:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbHAmS7Kbu3H3Bb3kAyCwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MDE1NWM1MWZmMjM5NGRhNzg0YTM4NGFhNzE3Yzc2ZTMw MzJjMjQwHhcNMjYwMjA5MjIwMTIzWhcNMjYwMjEwMjIwMTIzWjAzMTEwLwYDVQQD EygzNzRiODY0MDgwMGFjMDU5NzFjY2UyNjFmNGFhZTY0MzM1NjgxNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gUftQzyfPfOW4oX9hO9ln1yuiX9 ZL7Q9P4W3DMlpPjLEAPE9nQ6zs0mxCepw+naZgFN1hUAKWvj9fFjy6aaZ46/aV4S jH6F5gBI+PorFkBN13gwkhXPSpRuabGnkbrPgr9DMimWp1oeHIUys6W+xog0Lfr/ XWk4++4CVZDxFbOC32NqIrYnJANbedKtISHPDI0kRo/XORVh5O+HkYWbQWCN65TN XwvYvhNAnVriVhHG/ejPhsfo+S/JbsN4+H6fX7bdV+8wEfVjg2bGOubAsPmCwgU2 H/zXMuxzEFtklNOJ2RJvwlT5tYv+9wVh3C5JlQ05WphD9zD+atzz2cgEhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdLhkCACsBZccziYfSq5kM1aBVzMB8GA1UdIwQY MBaAFNkBVcUf8jlNp4SjhKpxfHbjAywkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYt NDIyYmI0Mzc1M2JlLzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYtNDIyYmI0Mzc1M2Jl LzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlbujVMf1 tjhDWxiQUxVQ485r7qdDWY+FImTmWZa7XoTHQF4tkCrSwcLW+FVvUchHEf3PszKK uALDtzxEGvt3AOuZfRufjxW5rbFgv5HiXv/DfK5Qs6DonnlQhszPPGF8bMTgZrLi WZk5vxZgAGzaGdIlFfQVFSz7rymrvFykm9U8YQOimjdqYJm8eCVk1UGRDknNp4U9 w+3V1MDilsjtPFAMLWyLIPCodoamaRRujCbb0vxyma9W+f5WRY2FvdzOkVM8Ya9V CqTygLqh0RX61tT87xJ2iyv5eA7V0e0DgQLVdqQjDWvbFmK04wE1o1sWBDc1pycw UotZ+QBMebj1zg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:17 2026 by rpki-client