This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json) Hash identifier: z8vdGAJHGLiRb30BuAfzbBYHO0QikftKeIHMPketQRw= Subject key identifier: 1D:59:C8:E3:33:CF:78:13:C9:57:83:AA:44:06:AD:0F:D0:E1:3E:18 Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9 Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9 Certificate serial: 019C43FDB89C6ADCA1642A4704B6EFF2A80D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft Manifest number: 08C2 Signing time: Mon 09 Feb 2026 20:00:27 +0000 Manifest this update: Mon 09 Feb 2026 20:00:27 +0000 Manifest next update: Tue 10 Feb 2026 20:00:27 +0000 Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: VEkKuWefvIobjaIcZTl/IJeqE+vBYBwQcMZCWAqJlOQ=) 2: lEdgyLdP8h_0PnTyGx915-RyS6g.roa (hash: tVEhNOEOaWiBJykoJU0Gzu7c+ZGByjMKsOzSEHCMGFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:b8:9c:6a:dc:a1:64:2a:47:04:b6:ef:f2:a8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9 Validity Not Before: Feb 9 20:00:27 2026 GMT Not After : Feb 10 20:00:27 2026 GMT Subject: CN=1d59c8e333cf7813c95783aa4406ad0fd0e13e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:76:cf:38:20:b4:2b:70:ee:20:32:79:d7: 4a:3d:05:87:67:e3:89:12:ab:ce:a8:f2:2c:12:65: 29:46:37:b0:65:46:e5:ea:ba:20:f2:2e:80:0b:9a: 8a:04:32:42:02:f4:89:0c:c4:ee:c2:41:88:1e:32: 98:36:a4:3b:c5:18:57:ef:26:12:32:a1:e2:c9:6b: e6:c1:38:d1:a9:6d:53:6d:05:ad:02:76:11:8e:67: 19:cf:f5:64:0b:b0:fe:12:c5:d4:63:8c:f7:37:65: cf:9e:9f:fb:13:a7:dd:f8:3b:aa:e6:50:86:2e:78: c8:b8:82:71:a7:ab:1a:8b:82:eb:f4:fb:71:22:54: c8:02:43:db:4c:b3:6c:b3:3a:5a:ca:cd:50:6b:15: 46:8a:c5:b0:ca:f7:d8:43:4a:53:d6:9c:75:0a:3f: e3:9f:c1:31:73:6b:6f:3e:a4:17:c8:1d:73:bc:64: 73:cd:40:78:d9:17:1f:0f:c4:b1:5c:b3:8e:85:af: 4a:87:25:dc:cb:eb:af:80:79:10:49:80:72:87:aa: 0d:d6:06:04:ed:8e:01:4a:ee:d8:ab:4f:88:9b:26: e8:65:dd:04:7d:4d:bc:0c:f8:be:5a:16:38:1a:ca: 3a:d3:6c:24:f0:dc:2b:84:e1:4e:0a:9a:ad:66:fb: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:59:C8:E3:33:CF:78:13:C9:57:83:AA:44:06:AD:0F:D0:E1:3E:18 X509v3 Authority Key Identifier: keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c0:f2:3a:a4:a6:f3:dd:79:b8:e2:4e:46:0b:f5:07:d0:f4: 87:a5:9a:46:fa:2b:42:cc:9d:a1:98:fb:57:18:f6:44:67:cb: ed:ef:43:8f:ae:df:99:c4:77:29:c0:1f:d3:6a:7f:89:38:23: 6a:e6:30:88:6f:d3:cd:e6:fa:0d:ba:0e:58:b7:fa:db:5e:20: 9b:d4:42:5a:15:36:fd:55:f4:40:a1:4f:41:46:18:ce:5d:0c: 48:bd:2b:38:0e:a2:1f:0d:d6:17:df:94:4c:41:80:8e:51:12: 02:5e:78:a3:a1:32:28:83:52:f1:6f:e7:38:a1:62:2b:fb:4d: c6:5a:37:c6:6d:90:b5:18:96:70:9a:22:39:67:61:07:90:0c: 28:82:a5:eb:9b:96:4d:45:21:08:75:eb:93:1e:39:5f:62:65: 00:88:7c:af:2d:f5:32:ee:45:ae:4f:de:95:70:46:35:b7:f6: a5:8d:19:43:13:b4:b7:91:f2:ef:d6:54:a4:4b:62:93:a8:7f: 5f:c8:f3:0d:28:b7:9b:e7:0f:24:d1:d2:f7:bd:1a:a0:0a:67: 37:e8:a1:56:ce:41:d4:68:74:f7:d0:82:74:41:c6:93:24:b7: 91:ec:35:a0:87:ac:2d:5f:48:37:4e:66:e2:01:1c:7c:0a:fc: 3b:a9:f1:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/bicatyhZCpHBLbv8qgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMWI5ZmU4ZjFhMzM5MTdmZWU3ZTRkYmU5ZmFiOTI1ZWI4 NjI1YTkwHhcNMjYwMjA5MjAwMDI3WhcNMjYwMjEwMjAwMDI3WjAzMTEwLwYDVQQD EygxZDU5YzhlMzMzY2Y3ODEzYzk1NzgzYWE0NDA2YWQwZmQwZTEzZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJh2zzggtCtw7iAyeddKPQWHZ+OJ EqvOqPIsEmUpRjewZUbl6rog8i6AC5qKBDJCAvSJDMTuwkGIHjKYNqQ7xRhX7yYS MqHiyWvmwTjRqW1TbQWtAnYRjmcZz/VkC7D+EsXUY4z3N2XPnp/7E6fd+Duq5lCG LnjIuIJxp6sai4Lr9PtxIlTIAkPbTLNsszpays1QaxVGisWwyvfYQ0pT1px1Cj/j n8Exc2tvPqQXyB1zvGRzzUB42RcfD8SxXLOOha9KhyXcy+uvgHkQSYByh6oN1gYE 7Y4BSu7Yq0+ImyboZd0EfU28DPi+WhY4Gso602wk8NwrhOFOCpqtZvu1CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1ZyOMzz3gTyVeDqkQGrQ/Q4T4YMB8GA1UdIwQY MBaAFNobn+jxozkX/ufk2+n6uSXrhiWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmh1ZjZQR2pPUmYtNS1UYjZmcTVKZXVHSmFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80MmExNjYtOGE4Ni00OGRhLWJiOTYt NzlmZDUwMjNkZTM2LzEvMmh1ZjZQR2pPUmYtNS1UYjZmcTVKZXVHSmFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80MmExNjYtOGE4Ni00OGRhLWJiOTYtNzlmZDUwMjNkZTM2 LzEvMmh1ZjZQR2pPUmYtNS1UYjZmcTVKZXVHSmFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsDyOqSm 8915uOJORgv1B9D0h6WaRvorQsydoZj7Vxj2RGfL7e9Dj67fmcR3KcAf02p/iTgj auYwiG/Tzeb6DboOWLf6214gm9RCWhU2/VX0QKFPQUYYzl0MSL0rOA6iHw3WF9+U TEGAjlESAl54o6EyKINS8W/nOKFiK/tNxlo3xm2QtRiWcJoiOWdhB5AMKIKl65uW TUUhCHXrkx45X2JlAIh8ry31Mu5Frk/elXBGNbf2pY0ZQxO0t5Hy79ZUpEtik6h/ X8jzDSi3m+cPJNHS970aoApnN+ihVs5B1Gh099CCdEHGkyS3kew1oIesLV9IN05m 4gEcfAr8O6nx9w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:04 2026 by rpki-client