This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json) Hash identifier: twsAM6qtYJ0xWkrwldJH84UyfeQtlEbIEyuAZzqFD2s= Subject key identifier: FB:23:AE:76:50:8C:8C:D4:58:66:B1:F2:50:A1:25:A7:14:BB:6A:B8 Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c Certificate serial: 019C41D8B35EA4CFEF98ACDF4AF04FA1E821 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft Manifest number: 162A Signing time: Mon 09 Feb 2026 10:00:46 +0000 Manifest this update: Mon 09 Feb 2026 10:00:46 +0000 Manifest next update: Tue 10 Feb 2026 10:00:46 +0000 Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: /67MfmQVi3t8tJg0l7JRCLlm46i2Od76KuJNRQ9im2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:b3:5e:a4:cf:ef:98:ac:df:4a:f0:4f:a1:e8:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c Validity Not Before: Feb 9 10:00:46 2026 GMT Not After : Feb 10 10:00:46 2026 GMT Subject: CN=fb23ae76508c8cd45866b1f250a125a714bb6ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:35:c9:90:13:37:ea:b9:ba:27:95:f2:58: cc:c3:a5:47:09:e3:c6:23:72:e1:53:e1:fd:b2:70: 03:55:27:47:43:45:dc:46:bb:c2:21:93:88:da:6a: a7:20:38:34:db:5b:db:82:46:45:d0:49:9e:ea:9b: 12:4e:dc:f1:a0:e5:22:ac:1c:9e:8f:e1:f5:67:a1: 0f:66:6c:1b:85:a4:8e:45:cd:60:5d:41:c9:07:f1: 96:5e:a4:76:c2:ff:c3:4a:c3:fc:0f:79:e7:ad:74: 47:9d:13:2e:2c:41:40:dd:70:3c:0b:d2:3a:fb:40: fb:e9:e3:3b:ac:c1:b9:40:cf:e4:61:8e:f0:ce:e4: ce:86:b9:f1:ac:d7:f1:6d:3c:68:27:be:39:94:56: 83:a3:3f:aa:55:9b:24:d3:5d:e4:c2:2c:61:d7:93: 54:bb:25:ab:62:54:f6:4b:77:2a:77:65:0f:19:a5: 93:a6:14:f2:92:5a:3f:dc:43:e8:2b:0a:06:a6:89: 27:6a:b5:45:f3:09:d6:fc:07:f5:ae:ea:a2:84:49: b7:67:d2:b5:56:69:e0:75:87:0d:83:61:40:8e:c2: 89:35:02:47:c2:6d:13:76:d8:53:75:96:ef:ec:31: 9e:9e:ae:db:a7:5b:fa:84:49:53:5f:83:ef:5b:ba: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:23:AE:76:50:8C:8C:D4:58:66:B1:F2:50:A1:25:A7:14:BB:6A:B8 X509v3 Authority Key Identifier: keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:01:5d:db:96:02:1d:0a:d9:10:b8:ec:1f:4e:77:ae:0e:98: 32:2c:90:db:43:1f:c9:ad:bc:67:99:1c:74:d0:54:3b:10:ee: 91:38:85:53:c8:35:64:7d:d2:a7:c7:a3:c2:d9:60:46:d8:53: f3:a8:26:86:2d:1f:1b:1e:2e:89:9d:4f:6c:58:4c:34:c1:23: cb:01:ec:8a:11:3b:78:85:83:46:97:ce:0c:73:95:a6:c1:b1: 55:a6:5d:3b:63:6e:6a:64:df:bb:ec:3d:b7:91:d7:c2:2e:66: 17:ba:84:60:89:e4:20:d0:39:2b:ec:4d:38:32:c8:e8:fb:c7: 7f:1b:a1:20:83:14:5d:b2:0c:ce:16:69:f1:43:5e:8a:51:48: 00:08:22:0a:36:e3:1d:f0:80:2a:9f:97:15:c2:28:be:12:d3: e8:0d:29:43:d0:f3:bb:2f:0e:9b:ce:25:e7:65:e0:15:cf:36: fa:ba:83:01:c9:30:6b:58:19:77:c0:11:7c:38:7a:e7:e8:82: 36:44:34:56:9a:dc:ee:cc:8a:eb:3e:4c:5f:3f:12:75:d8:42: e7:05:d1:91:7b:32:d0:00:81:af:d3:2d:b3:6d:5f:ed:20:bf: 67:78:2d:fa:0e:32:27:68:bc:ec:cf:a2:e0:03:62:f9:fb:0b: 0e:31:0c:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2LNepM/vmKzfSvBPoeghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjM1NjAwMDQ1NWI3YjU4OTRjZWQxNDY5ODVhMGE4ODg5 ZjllNGMwHhcNMjYwMjA5MTAwMDQ2WhcNMjYwMjEwMTAwMDQ2WjAzMTEwLwYDVQQD EyhmYjIzYWU3NjUwOGM4Y2Q0NTg2NmIxZjI1MGExMjVhNzE0YmI2YWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjk1yZATN+q5uieV8ljMw6VHCePG I3LhU+H9snADVSdHQ0XcRrvCIZOI2mqnIDg021vbgkZF0Eme6psSTtzxoOUirBye j+H1Z6EPZmwbhaSORc1gXUHJB/GWXqR2wv/DSsP8D3nnrXRHnRMuLEFA3XA8C9I6 +0D76eM7rMG5QM/kYY7wzuTOhrnxrNfxbTxoJ745lFaDoz+qVZsk013kwixh15NU uyWrYlT2S3cqd2UPGaWTphTyklo/3EPoKwoGpoknarVF8wnW/Af1ruqihEm3Z9K1 VmngdYcNg2FAjsKJNQJHwm0TdthTdZbv7DGenq7bp1v6hElTX4PvW7rMywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsjrnZQjIzUWGax8lChJacUu2q4MB8GA1UdIwQY MBaAFNsjVgAEVbe1iUztFGmFoKiIn55MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85Yjg3ZjgtY2E5NC00ODNmLTg4ZWEt NDg2MzkxMTQxMmZhLzEvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC85Yjg3ZjgtY2E5NC00ODNmLTg4ZWEtNDg2MzkxMTQxMmZh LzEvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgFd25YC HQrZELjsH053rg6YMiyQ20Mfya28Z5kcdNBUOxDukTiFU8g1ZH3Sp8ejwtlgRthT 86gmhi0fGx4uiZ1PbFhMNMEjywHsihE7eIWDRpfODHOVpsGxVaZdO2NuamTfu+w9 t5HXwi5mF7qEYInkINA5K+xNODLI6PvHfxuhIIMUXbIMzhZp8UNeilFIAAgiCjbj HfCAKp+XFcIovhLT6A0pQ9Dzuy8Om84l52XgFc82+rqDAckwa1gZd8ARfDh65+iC NkQ0Vprc7syK6z5MXz8SddhC5wXRkXsy0ACBr9Mts21f7SC/Z3gt+g4yJ2i87M+i 4ANi+fsLDjEM9A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:27 2026 by rpki-client