This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft File: 2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json) Hash identifier: dAxb7kOJJHqxhK/cX5jhMpdptySxniW0I9wEc2vpBFI= Subject key identifier: 87:79:51:10:BA:BC:31:C5:A7:3E:41:F9:F9:E0:D8:CC:EF:53:D5:75 Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2 Certificate issuer: /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2 Certificate serial: 019C1CF0A24C7BF132C9EE297E03C6AFB389 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft Manifest number: 0407 Signing time: Mon 02 Feb 2026 06:00:57 +0000 Manifest this update: Mon 02 Feb 2026 06:00:57 +0000 Manifest next update: Tue 03 Feb 2026 06:00:57 +0000 Files and hashes: 1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: U/dEIR1Xt9ag1KjVNBY4iWb+SjV8vJaVu52yq3PSYDA=) 2: XJrQypw2eXZ7ezpEOpOj8qOwJlc.roa (hash: U5AFVavv4y8bxwhEhQQ2exL+ZJwtyEE2Q3oN6TBpcsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:f0:a2:4c:7b:f1:32:c9:ee:29:7e:03:c6:af:b3:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2 Validity Not Before: Feb 2 06:00:57 2026 GMT Not After : Feb 3 06:00:57 2026 GMT Subject: CN=87795110babc31c5a73e41f9f9e0d8ccef53d575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:76:79:16:09:23:e0:56:32:a4:0b:e2:42: e7:95:04:fd:00:54:21:37:a4:0a:0f:4f:e5:cf:e4: be:16:52:2a:2c:55:47:12:39:b2:ba:5e:26:99:12: 36:47:f7:bc:28:74:aa:7b:52:f9:33:3a:83:dc:ae: e5:0e:38:79:b0:c2:f1:25:0d:4d:c4:95:f9:5f:ac: 67:0e:fc:72:38:9f:e7:89:64:11:ed:5f:c5:99:34: 9a:0f:3c:5f:0c:53:c2:48:14:bb:00:a2:26:03:65: b8:a6:34:95:cf:03:97:fa:ec:91:00:f5:88:42:5c: 89:d1:fe:f3:30:13:bf:95:3a:a8:44:f1:13:44:fd: 66:21:d2:cf:ee:f5:d6:63:42:45:21:ed:96:42:09: 8e:b1:a3:e7:a3:35:7d:99:c3:01:51:56:b0:83:6e: 9c:fb:f5:20:6c:40:ac:c0:d4:41:63:fd:98:4e:17: a0:c2:aa:8d:e1:50:b8:fc:62:f3:5c:dd:0b:bc:ed: 63:a4:47:a9:aa:09:0a:0a:e1:25:10:d7:72:a9:05: 9d:bf:ac:38:e9:42:ae:5f:43:83:e1:97:db:f9:e5: 3e:0d:b3:76:39:ef:bc:12:e3:ff:c6:8a:eb:0e:99: 3a:56:09:b6:68:e6:aa:b1:a9:ee:17:75:a5:9b:b0: 82:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:79:51:10:BA:BC:31:C5:A7:3E:41:F9:F9:E0:D8:CC:EF:53:D5:75 X509v3 Authority Key Identifier: keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:bf:56:32:a6:22:57:26:b8:c9:c9:d8:fa:e8:26:aa:00:08: de:ca:37:41:02:c3:e2:46:99:bd:23:e7:7e:13:dc:d0:5b:54: 9c:ab:ba:df:20:10:e1:05:23:95:50:76:41:cb:51:12:29:eb: 22:fb:fc:11:92:9f:42:03:dd:40:5c:32:cf:43:d8:fd:41:2d: 85:6e:08:65:e6:3b:bb:dc:23:65:7f:a2:59:c6:99:9f:70:c4: a8:d2:85:fc:c8:2e:5d:b4:77:0d:c8:d1:3b:18:5d:c5:4f:3b: 0c:d5:62:c2:ea:90:2a:b2:5d:89:fc:21:d1:2b:bb:79:0d:a8: 87:28:27:17:a8:42:e4:bc:82:f3:60:7c:37:4d:55:5d:1d:0e: c1:6a:da:3f:ff:37:52:f7:8f:a7:94:2a:c0:53:5a:6b:28:aa: 2e:39:1e:04:b6:f5:69:e9:f4:94:52:56:1c:c2:29:68:b0:5c: 8f:0b:bb:23:4d:20:51:5d:55:d0:5c:ff:2e:5f:b5:0d:bc:4c: 28:68:78:ef:86:35:4f:29:a4:9f:38:e7:d3:21:da:ee:10:d2: df:18:38:02:9b:83:6d:04:57:20:41:60:c3:b8:4d:30:81:40: f5:16:cd:d4:7a:cf:6f:e6:a6:ba:ee:b5:be:f1:1d:71:f3:a3: c0:28:d4:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwc8KJMe/Eyye4pfgPGr7OJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmVmOTdjYTAxMGJhZDRmZjU5ZWY3ZDJiNmJjOTA3Nzg2 MGFhYjIwHhcNMjYwMjAyMDYwMDU3WhcNMjYwMjAzMDYwMDU3WjAzMTEwLwYDVQQD Eyg4Nzc5NTExMGJhYmMzMWM1YTczZTQxZjlmOWUwZDhjY2VmNTNkNTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupF2eRYJI+BWMqQL4kLnlQT9AFQh N6QKD0/lz+S+FlIqLFVHEjmyul4mmRI2R/e8KHSqe1L5MzqD3K7lDjh5sMLxJQ1N xJX5X6xnDvxyOJ/niWQR7V/FmTSaDzxfDFPCSBS7AKImA2W4pjSVzwOX+uyRAPWI QlyJ0f7zMBO/lTqoRPETRP1mIdLP7vXWY0JFIe2WQgmOsaPnozV9mcMBUVawg26c +/UgbECswNRBY/2YThegwqqN4VC4/GLzXN0LvO1jpEepqgkKCuElENdyqQWdv6w4 6UKuX0OD4Zfb+eU+DbN2Oe+8EuP/xorrDpk6Vgm2aOaqsanuF3Wlm7CCzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFId5URC6vDHFpz5B+fng2MzvU9V1MB8GA1UdIwQY MBaAFNr++XygELrU/1nvfStryQd4YKqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yOTIxZTYtODFjNi00NDQ3LTlkNzgt YmZhOTRlYjFhYTAyLzEvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yOTIxZTYtODFjNi00NDQ3LTlkNzgtYmZhOTRlYjFhYTAy LzEvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp79WMqYi Vya4ycnY+ugmqgAI3so3QQLD4kaZvSPnfhPc0FtUnKu63yAQ4QUjlVB2QctREinr Ivv8EZKfQgPdQFwyz0PY/UEthW4IZeY7u9wjZX+iWcaZn3DEqNKF/MguXbR3DcjR OxhdxU87DNViwuqQKrJdifwh0Su7eQ2ohygnF6hC5LyC82B8N01VXR0OwWraP/83 UvePp5QqwFNaayiqLjkeBLb1aen0lFJWHMIpaLBcjwu7I00gUV1V0Fz/Ll+1DbxM KGh474Y1Tymknzjn0yHa7hDS3xg4ApuDbQRXIEFgw7hNMIFA9RbN1HrPb+amuu61 vvEdcfOjwCjUJQ== -----END CERTIFICATE-----Generated at Mon Feb 2 15:57:50 2026 by rpki-client