This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft File: 2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json) Hash identifier: rXmDUmKHLP9GXOYIGO93Pyq2eFjQRTSBBu3rdU+YxQ0= Subject key identifier: B2:E6:AE:B5:B4:C2:0C:DB:76:B0:E9:57:3A:E9:D4:A4:AD:B3:4D:B7 Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64 Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664 Certificate serial: 019C424650689844F76C9507E0ABAEE7B9E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft Manifest number: 096D Signing time: Mon 09 Feb 2026 12:00:30 +0000 Manifest this update: Mon 09 Feb 2026 12:00:30 +0000 Manifest next update: Tue 10 Feb 2026 12:00:30 +0000 Files and hashes: 1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: 6GnPd0mZ0rg7kkz3pJj0XZVaddLe6FEe40SzbxVjdo0=) 2: cb6RT1EIH2UE1qS6xuvmhoSY90w.roa (hash: w0eimh8eUGbfM3xNdHnghVn9Aj2SOX0pDoX2BzEu2Mg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:50:68:98:44:f7:6c:95:07:e0:ab:ae:e7:b9:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664 Validity Not Before: Feb 9 12:00:30 2026 GMT Not After : Feb 10 12:00:30 2026 GMT Subject: CN=b2e6aeb5b4c20cdb76b0e9573ae9d4a4adb34db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:bf:e2:86:62:90:50:b6:d4:30:e6:74:c4: a3:92:82:3f:58:3d:f2:6a:52:de:46:ed:3c:c3:db: fd:bc:ee:fe:f3:04:6e:82:d1:49:7d:69:af:0e:37: f1:22:be:a2:75:f1:9a:32:36:82:b9:7a:1d:24:44: cc:bb:22:d4:7d:93:5b:ba:2d:f8:fa:b1:8c:71:23: 0a:f6:e8:36:7f:7e:2a:66:9a:f7:6e:11:bf:e9:3c: 41:e5:ff:b9:a9:00:8d:99:56:81:a2:5d:74:c5:50: 4b:a1:c9:99:6a:71:8d:ac:20:72:f5:33:42:7b:08: a2:ab:25:d1:c4:a0:80:8d:da:1b:58:78:21:df:b5: e0:6e:cf:21:06:7b:9c:ce:ae:bb:79:5a:79:8a:cf: 2b:06:c5:ef:50:ee:82:17:e0:b0:4e:9f:2f:9c:83: 03:97:e1:e1:cf:37:cd:a6:81:ee:ae:12:de:f4:c8: d1:0b:8d:15:5e:39:71:12:7d:97:ed:f1:33:1a:7d: d2:b4:55:ab:04:4c:56:28:ec:d9:45:e7:a1:68:5a: 67:ef:19:a9:94:7f:5b:15:32:b0:4b:38:4f:cb:fb: 12:c3:0e:d4:88:de:ad:44:5b:fe:60:4b:a5:d1:6b: 37:2e:72:24:c0:7c:0f:ec:63:a3:d8:5e:9d:23:21: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E6:AE:B5:B4:C2:0C:DB:76:B0:E9:57:3A:E9:D4:A4:AD:B3:4D:B7 X509v3 Authority Key Identifier: keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:37:cf:e4:fa:de:20:d6:b9:7a:9b:d4:68:2f:b6:97:c4:cf: d6:5e:73:a3:e5:08:ed:d7:66:38:a6:3d:d4:cc:25:60:80:8c: 3c:1f:cb:5b:af:54:20:eb:17:8a:f6:c8:21:8f:fc:50:a0:a3: 9f:c9:08:46:de:fe:d4:4f:90:b8:0e:3a:b4:fc:3c:ba:dd:f6: 07:07:8e:df:77:61:5e:7a:a9:22:0d:c2:0e:1a:d2:e4:a1:86: 63:e3:d1:66:0a:a7:0f:e9:0c:9b:a2:fb:cd:b1:6f:4d:20:1e: ca:4e:70:63:a8:2c:ad:c6:7a:28:2c:05:51:e7:49:4b:a8:15: 9d:4f:17:c2:e3:6e:c5:64:dc:ce:37:4d:d5:44:03:e7:8a:94: f4:8d:bb:48:f2:78:fd:f3:d2:4f:d3:b1:65:d6:90:48:a4:5a: ee:e0:14:90:e0:97:74:a5:2e:ba:98:44:d2:f1:ee:86:7e:08: 9e:c3:ac:fb:6c:07:6c:02:f8:b2:63:8b:d9:4a:b2:81:1b:0b: 51:17:f4:95:91:ea:79:9d:77:39:61:e5:52:81:f7:df:6f:aa: 51:94:90:cd:02:67:5a:8d:57:05:d2:8e:93:de:d1:5a:22:9a: 2b:3e:40:77:1b:30:d7:9b:78:2c:6b:7d:76:d8:e4:42:e5:eb: 1e:df:a5:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRlBomET3bJUH4Kuu57nlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNmRjNDE5MjY0NWM4NDJhNGZhMmY4ODIzNGYyZTVhMTg0 Yzc2NjQwHhcNMjYwMjA5MTIwMDMwWhcNMjYwMjEwMTIwMDMwWjAzMTEwLwYDVQQD EyhiMmU2YWViNWI0YzIwY2RiNzZiMGU5NTczYWU5ZDRhNGFkYjM0ZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUO/4oZikFC21DDmdMSjkoI/WD3y alLeRu08w9v9vO7+8wRugtFJfWmvDjfxIr6idfGaMjaCuXodJETMuyLUfZNbui34 +rGMcSMK9ug2f34qZpr3bhG/6TxB5f+5qQCNmVaBol10xVBLocmZanGNrCBy9TNC ewiiqyXRxKCAjdobWHgh37Xgbs8hBnuczq67eVp5is8rBsXvUO6CF+CwTp8vnIMD l+HhzzfNpoHurhLe9MjRC40VXjlxEn2X7fEzGn3StFWrBExWKOzZReehaFpn7xmp lH9bFTKwSzhPy/sSww7UiN6tRFv+YEul0Ws3LnIkwHwP7GOj2F6dIyFZ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLmrrW0wgzbdrDpVzrp1KSts023MB8GA1UdIwQY MBaAFNptxBkmRchCpPoviCNPLloYTHZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yM2M1N2MtYjhhNy00OWE1LTljMDUt ZWVmNzBhYWIwMzVlLzEvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yM2M1N2MtYjhhNy00OWE1LTljMDUtZWVmNzBhYWIwMzVl LzEvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDfP5Pre INa5epvUaC+2l8TP1l5zo+UI7ddmOKY91MwlYICMPB/LW69UIOsXivbIIY/8UKCj n8kIRt7+1E+QuA46tPw8ut32BweO33dhXnqpIg3CDhrS5KGGY+PRZgqnD+kMm6L7 zbFvTSAeyk5wY6gsrcZ6KCwFUedJS6gVnU8XwuNuxWTczjdN1UQD54qU9I27SPJ4 /fPST9OxZdaQSKRa7uAUkOCXdKUuuphE0vHuhn4InsOs+2wHbAL4smOL2UqygRsL URf0lZHqeZ13OWHlUoH332+qUZSQzQJnWo1XBdKOk97RWiKaKz5Adxsw15t4LGt9 dtjkQuXrHt+lfQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:01 2026 by rpki-client