This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json) Hash identifier: qtiZ32rBVXo4uQXx2EwwlK+fKE6b+KRvPGJcvGETmPE= Subject key identifier: 6A:35:8D:4E:CA:BB:31:59:C7:12:01:E5:9D:81:0C:B5:28:12:1A:7C Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61 Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461 Certificate serial: 019C43229A61B619A5C81C1BA6586E69B1B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 16:01:07 +0000 Manifest this update: Mon 09 Feb 2026 16:01:07 +0000 Manifest next update: Tue 10 Feb 2026 16:01:07 +0000 Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: 3AXJbOWfEE0IvSgsoo48ABgZ2p6diJYqmbLlzWzw8tU=) 2: uWdyVKFrhKn03chUHfeK0y0qk7Q.roa (hash: dt9A+qc2boc7/F2tKhjup1ZYyV2tp8NxgEsRgPLzDSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:9a:61:b6:19:a5:c8:1c:1b:a6:58:6e:69:b1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461 Validity Not Before: Feb 9 16:01:07 2026 GMT Not After : Feb 10 16:01:07 2026 GMT Subject: CN=6a358d4ecabb3159c71201e59d810cb528121a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:a4:79:dc:59:19:b6:0d:8b:e1:49:06:7b: 24:b5:ab:b7:1c:f5:cc:48:8d:8b:ed:fd:24:40:25: 79:cc:1e:76:0a:4c:e5:56:7a:39:1d:19:69:5b:3b: fd:7a:8a:59:81:ad:52:4e:50:d2:4d:ca:f1:64:fb: 20:ba:80:43:08:be:dc:7b:cf:c8:61:c1:f7:6b:43: 43:03:f5:eb:ef:64:1c:a1:b1:85:38:67:59:6f:7f: 68:ac:d6:f7:9b:fb:79:5f:f9:65:ca:69:f8:dd:6e: 4b:71:49:ce:d5:82:a6:05:89:ec:d8:ff:df:7b:b5: fb:78:09:6f:41:3d:57:5f:89:c3:1c:bf:2b:8a:5a: 05:9c:0c:c6:a8:d0:25:78:d3:f2:3c:db:ea:58:a5: 91:6e:ef:6f:00:2e:13:f8:26:fb:77:1a:32:dc:48: c7:73:bd:f7:53:9f:ea:5f:d9:12:03:62:35:cc:06: 0f:77:a3:42:e4:24:fc:d5:df:cf:05:c4:92:f0:d3: 18:bc:9b:c8:28:8b:db:64:13:2f:7a:f5:e5:5a:ca: cc:2b:a8:2a:7c:34:8a:a4:9a:bf:bc:3f:3b:61:df: 28:22:cd:10:da:79:64:9e:19:8c:b0:61:37:2d:1f: 61:d4:86:af:cb:98:fa:59:cb:aa:e2:ba:66:19:39: f5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:35:8D:4E:CA:BB:31:59:C7:12:01:E5:9D:81:0C:B5:28:12:1A:7C X509v3 Authority Key Identifier: keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:88:2d:cc:14:fe:cb:9d:89:56:f0:b9:26:e4:a3:39:05:cb: e3:cd:5b:72:47:14:df:37:95:aa:9f:f3:8f:14:87:80:bc:82: 51:ff:a6:50:f1:f4:e4:ee:ec:95:ba:50:c8:29:76:66:8d:b3: c6:55:ac:69:e9:eb:95:a1:76:b0:0b:11:61:9d:9f:4d:0f:1d: e6:bd:6e:92:07:87:f0:d8:9f:d5:01:4f:da:05:5b:c4:c3:03: 47:3d:c2:9c:ea:2b:d7:8e:70:39:cd:a0:bc:16:c5:50:3e:b0: 8b:71:29:e6:f3:9a:09:a6:70:5e:d7:43:dd:99:58:1c:4d:42: 13:b0:72:2a:66:e6:15:e2:6f:20:af:d4:b6:a9:94:05:68:31: de:69:a4:8e:1d:98:ef:3d:de:9f:7e:38:d0:db:83:d8:51:0d: 51:38:a3:1f:fe:4e:c5:3c:24:b2:67:d7:e0:dd:89:4b:56:83: bd:f7:73:78:97:3e:99:c3:fc:cb:c6:7d:b2:33:3a:20:ad:fe: f6:7f:b4:40:96:8c:01:92:66:ec:a5:4e:05:62:96:2f:b3:38: 5b:07:96:91:72:5d:ef:68:e9:75:00:58:53:28:af:28:8d:34: 6c:2e:e4:75:95:6e:ad:f4:75:2d:41:26:74:65:28:e8:85:ae: 64:90:6b:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpphthmlyBwbplhuabG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNjA5OWU3ZmYzYTE3MWJjZTNiNmZlOTllYmI0ZDI0Y2I4 NWU0NjEwHhcNMjYwMjA5MTYwMTA3WhcNMjYwMjEwMTYwMTA3WjAzMTEwLwYDVQQD Eyg2YTM1OGQ0ZWNhYmIzMTU5YzcxMjAxZTU5ZDgxMGNiNTI4MTIxYTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrWkedxZGbYNi+FJBnsktau3HPXM SI2L7f0kQCV5zB52CkzlVno5HRlpWzv9eopZga1STlDSTcrxZPsguoBDCL7ce8/I YcH3a0NDA/Xr72QcobGFOGdZb39orNb3m/t5X/llymn43W5LcUnO1YKmBYns2P/f e7X7eAlvQT1XX4nDHL8riloFnAzGqNAleNPyPNvqWKWRbu9vAC4T+Cb7dxoy3EjH c733U5/qX9kSA2I1zAYPd6NC5CT81d/PBcSS8NMYvJvIKIvbZBMvevXlWsrMK6gq fDSKpJq/vD87Yd8oIs0Q2nlknhmMsGE3LR9h1Iavy5j6Wcuq4rpmGTn1YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGo1jU7KuzFZxxIB5Z2BDLUoEhp8MB8GA1UdIwQY MBaAFNpgmef/Ohcbzjtv6Z67TSTLheRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUt NDU5ODY4OWQ1NTFlLzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUtNDU5ODY4OWQ1NTFl LzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvYgtzBT+ y52JVvC5JuSjOQXL481bckcU3zeVqp/zjxSHgLyCUf+mUPH05O7slbpQyCl2Zo2z xlWsaenrlaF2sAsRYZ2fTQ8d5r1ukgeH8Nif1QFP2gVbxMMDRz3CnOor145wOc2g vBbFUD6wi3Ep5vOaCaZwXtdD3ZlYHE1CE7ByKmbmFeJvIK/UtqmUBWgx3mmkjh2Y 7z3en3440NuD2FENUTijH/5OxTwksmfX4N2JS1aDvfdzeJc+mcP8y8Z9sjM6IK3+ 9n+0QJaMAZJm7KVOBWKWL7M4WweWkXJd72jpdQBYUyivKI00bC7kdZVurfR1LUEm dGUo6IWuZJBr6w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:53 2026 by rpki-client