This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json) Hash identifier: SqI8cfdEd37heNtH6/8Lu6YbceQvVKnTtj4rFV4DZm8= Subject key identifier: 07:58:C3:5F:BF:B0:F3:54:6B:7C:0E:24:1E:B4:CF:C4:A6:71:5C:BF Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Certificate serial: 019C42EB0DB0FC6E21190543B356A58C94D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 15:00:26 +0000 Manifest this update: Mon 09 Feb 2026 15:00:26 +0000 Manifest next update: Tue 10 Feb 2026 15:00:26 +0000 Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: dMzE/xYA9g4ZNkdb+Ecy0HVwOMAIopFohkbczZSvoE0=) 2: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (hash: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:0d:b0:fc:6e:21:19:05:43:b3:56:a5:8c:94:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Validity Not Before: Feb 9 15:00:26 2026 GMT Not After : Feb 10 15:00:26 2026 GMT Subject: CN=0758c35fbfb0f3546b7c0e241eb4cfc4a6715cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:d1:8d:ce:34:57:d3:2f:f2:7e:e3:5a:33:ec: a6:43:03:c3:5b:97:73:69:0a:a1:d2:22:e0:dc:6f: 91:26:33:47:90:80:74:e8:61:02:31:53:57:fb:4c: 61:8b:37:53:b2:e8:ab:e1:ce:fe:37:aa:cc:67:63: 77:47:a0:02:cd:a8:79:6d:83:89:ec:62:7c:ca:2f: 3f:f5:1d:bc:9f:34:82:45:b0:19:a9:f1:28:1c:c2: 3a:2d:5f:90:4b:1f:5e:b8:e1:4a:6c:4a:fd:b2:f3: cb:b5:f3:09:0b:38:ad:df:4d:7a:6a:e4:f1:b9:3e: cf:70:60:33:94:aa:7f:75:f1:a6:94:95:15:5c:e8: d5:0f:62:ae:6c:73:59:79:2f:33:71:dd:80:39:06: 0e:3c:b5:e4:cf:6e:80:30:0d:40:ae:ed:f7:4d:69: 7b:f6:3f:5e:01:1e:f1:76:a9:cd:41:6a:80:7f:95: 97:5c:a5:85:87:c4:e7:bb:53:83:38:23:da:ff:56: 33:b4:b1:31:3c:c7:b5:aa:b4:54:40:65:02:a3:d3: e3:9d:4b:44:12:df:e5:0d:7c:d2:31:cc:67:ef:e1: e6:90:90:4c:da:0c:24:7c:d5:40:34:f9:aa:fc:a0: 46:0c:37:a3:6b:17:01:73:22:68:dc:90:3b:d0:fc: 37:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:58:C3:5F:BF:B0:F3:54:6B:7C:0E:24:1E:B4:CF:C4:A6:71:5C:BF X509v3 Authority Key Identifier: keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f8:8c:59:4d:c9:b1:e5:35:5b:c6:40:93:07:13:dc:c7:90: 3b:59:c6:dd:0e:bb:94:09:e8:6f:9a:18:df:28:0c:d9:7f:2e: 58:37:b1:27:b7:64:9d:ba:2b:6f:a6:10:1d:79:10:1f:9d:23: 42:51:c6:7a:2c:ba:ff:eb:a2:f0:64:57:3c:24:f2:2b:4f:94: c3:96:0f:c2:0f:0d:26:01:4e:36:ae:37:b2:f3:dc:a4:3e:ce: 1e:ca:0c:23:36:eb:44:c7:34:39:86:5c:9b:c6:62:c0:8f:68: 9d:b2:64:3d:2f:2e:84:7f:54:db:84:62:88:04:da:a8:2f:bd: 9d:70:0c:2e:0d:f3:7d:cb:20:5b:e5:b1:4d:24:f6:9e:a5:b6: 43:1c:3a:23:71:fc:24:ea:76:db:b6:eb:08:76:1f:ee:7d:82: 05:14:d3:b2:2f:38:a3:63:b3:83:ec:df:5a:99:7b:51:94:f9: be:97:8d:00:07:40:f0:3b:64:b8:14:78:9b:27:ce:72:85:77: d4:2e:ec:0c:82:50:4b:30:aa:89:5e:9b:8b:8a:69:a9:2e:0f: 64:0c:9f:50:c5:47:86:eb:c1:27:d5:f7:57:ac:1b:94:3b:5b: f2:27:a8:97:37:94:18:ed:60:43:a1:e2:fd:e9:a9:07:70:a6: 05:1f:b0:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6w2w/G4hGQVDs1aljJTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YWFhYzA1OTk2YTViNDYxNGM2ZWVkYWZmZTdmOGY1Zjlh MmJjNjcwHhcNMjYwMjA5MTUwMDI2WhcNMjYwMjEwMTUwMDI2WjAzMTEwLwYDVQQD EygwNzU4YzM1ZmJmYjBmMzU0NmI3YzBlMjQxZWI0Y2ZjNGE2NzE1Y2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+9GNzjRX0y/yfuNaM+ymQwPDW5dz aQqh0iLg3G+RJjNHkIB06GECMVNX+0xhizdTsuir4c7+N6rMZ2N3R6ACzah5bYOJ 7GJ8yi8/9R28nzSCRbAZqfEoHMI6LV+QSx9euOFKbEr9svPLtfMJCzit3016auTx uT7PcGAzlKp/dfGmlJUVXOjVD2KubHNZeS8zcd2AOQYOPLXkz26AMA1Aru33TWl7 9j9eAR7xdqnNQWqAf5WXXKWFh8Tnu1ODOCPa/1YztLExPMe1qrRUQGUCo9PjnUtE Et/lDXzSMcxn7+HmkJBM2gwkfNVANPmq/KBGDDejaxcBcyJo3JA70Pw34wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdYw1+/sPNUa3wOJB60z8SmcVy/MB8GA1UdIwQY MBaAFNiqrAWZaltGFMbu2v/n+PX5orxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYt ZjUzZWUzMmVkODE2LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYtZjUzZWUzMmVkODE2 LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfiMWU3J seU1W8ZAkwcT3MeQO1nG3Q67lAnob5oY3ygM2X8uWDexJ7dknborb6YQHXkQH50j QlHGeiy6/+ui8GRXPCTyK0+Uw5YPwg8NJgFONq43svPcpD7OHsoMIzbrRMc0OYZc m8ZiwI9onbJkPS8uhH9U24RiiATaqC+9nXAMLg3zfcsgW+WxTST2nqW2Qxw6I3H8 JOp227brCHYf7n2CBRTTsi84o2Ozg+zfWpl7UZT5vpeNAAdA8DtkuBR4myfOcoV3 1C7sDIJQSzCqiV6bi4ppqS4PZAyfUMVHhuvBJ9X3V6wblDtb8ieolzeUGO1gQ6Hi /empB3CmBR+wyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:22 2026 by rpki-client