This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json) Hash identifier: EES4+RYlgsReorTI4X29qmfS3/Zbml4b2/4qhUnp01M= Subject key identifier: 34:00:66:8B:24:4A:15:31:15:AA:19:6E:DE:88:3D:76:EC:1A:CB:D3 Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc Certificate serial: 019C41A15BEB3DE9CA9E2D6A507A6834A6FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft Manifest number: 0847 Signing time: Mon 09 Feb 2026 09:00:19 +0000 Manifest this update: Mon 09 Feb 2026 09:00:19 +0000 Manifest next update: Tue 10 Feb 2026 09:00:19 +0000 Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: Z5aRW0JrOb52Wb6owT5jWCu5BK7YLIOn3NO/bE84U7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:5b:eb:3d:e9:ca:9e:2d:6a:50:7a:68:34:a6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc Validity Not Before: Feb 9 09:00:19 2026 GMT Not After : Feb 10 09:00:19 2026 GMT Subject: CN=3400668b244a153115aa196ede883d76ec1acbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:3c:98:1b:02:d0:f9:0a:12:9b:02:d5:9f: 51:88:c6:04:f5:a0:5c:9f:ff:54:48:ed:e1:f5:3c: a7:14:81:fd:24:0f:c0:4f:ec:36:d2:9a:4c:fc:c7: 99:fe:fd:f0:69:d8:f1:93:ab:c4:13:53:95:d1:09: 5f:56:c3:e4:26:7a:8b:5f:ca:6f:f1:7d:f5:5a:47: 30:92:8e:ba:9b:db:2b:53:f5:e7:28:37:08:c3:dd: 3e:b2:cc:a0:ef:e1:a6:1b:ad:2c:3b:ee:ed:90:06: d1:a6:0d:71:87:11:6b:57:36:a1:46:6a:ba:99:bf: 7c:ee:ad:97:d1:7f:0f:ac:1c:68:64:a8:9e:6a:b7: 94:10:a1:97:f3:33:b2:86:a7:6b:50:5d:c8:8c:dd: f2:36:71:97:f2:4b:0f:19:f2:cc:c4:18:65:01:63: 98:2b:45:3f:ea:54:d7:e2:97:ad:17:ca:3e:7d:5c: 11:04:d2:be:2a:27:48:96:65:02:02:dc:10:41:22: ef:58:cb:0f:ea:ce:43:6b:cc:93:9a:1a:b7:07:d3: 39:37:87:d2:a3:70:df:f4:eb:ab:4c:c0:f9:4d:f1: 04:bb:36:4d:af:b3:57:98:c1:d8:f6:c3:54:d9:42: 71:0a:62:91:20:e4:ad:50:08:67:a5:1f:2d:62:04: 17:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:00:66:8B:24:4A:15:31:15:AA:19:6E:DE:88:3D:76:EC:1A:CB:D3 X509v3 Authority Key Identifier: keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cc:0d:f1:3a:14:e0:7e:f7:ed:a7:d2:46:c7:ec:05:e1:ce: 44:f5:da:35:30:d9:27:f1:90:70:bf:fc:2a:f1:60:56:b7:d4: 16:a8:b1:dc:4f:0d:44:d9:74:a7:94:52:cb:be:30:b3:aa:c6: be:f6:a0:23:e1:51:64:20:ec:b9:14:98:2c:13:4d:19:59:60: 77:96:1f:39:ba:93:1a:8f:57:3d:cf:76:f1:f4:ef:09:cc:4a: 3a:01:af:f4:7e:21:f1:92:a8:fb:ce:5e:fa:11:70:63:30:4c: 1d:b8:09:8a:82:24:a2:11:74:26:c8:ca:5c:9c:f9:47:2f:25: 07:05:53:c4:00:8b:3b:bb:dc:7e:73:fe:f0:ca:ed:63:b7:dc: 7e:b8:ae:eb:cb:8a:e9:b4:a6:fc:f9:05:f3:bf:da:41:3a:bf: 32:5e:5d:e3:c8:76:ef:e7:a3:f0:73:5a:a3:50:46:20:b0:ba: a5:40:1f:66:d9:f3:cb:67:3a:50:f4:c5:75:2e:ba:d6:d6:70: 96:a7:68:13:4f:43:6d:4b:5c:33:fc:d4:0a:57:78:51:7f:63: d8:37:e4:01:0a:01:0c:fc:ed:26:4a:77:f0:fd:e3:fd:c2:f8: 00:52:16:97:18:89:42:b0:ff:13:d3:2e:91:aa:c7:bc:73:b4: 9f:3c:6f:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoVvrPenKni1qUHpoNKb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjFlMmQ5MzI3NTZmMDFlM2M2YjczYWM4MjY4OTQ2MWQw ZjYxY2MwHhcNMjYwMjA5MDkwMDE5WhcNMjYwMjEwMDkwMDE5WjAzMTEwLwYDVQQD EygzNDAwNjY4YjI0NGExNTMxMTVhYTE5NmVkZTg4M2Q3NmVjMWFjYmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8Y8mBsC0PkKEpsC1Z9RiMYE9aBc n/9USO3h9TynFIH9JA/AT+w20ppM/MeZ/v3wadjxk6vEE1OV0QlfVsPkJnqLX8pv 8X31Wkcwko66m9srU/XnKDcIw90+ssyg7+GmG60sO+7tkAbRpg1xhxFrVzahRmq6 mb987q2X0X8PrBxoZKieareUEKGX8zOyhqdrUF3IjN3yNnGX8ksPGfLMxBhlAWOY K0U/6lTX4petF8o+fVwRBNK+KidIlmUCAtwQQSLvWMsP6s5Da8yTmhq3B9M5N4fS o3Df9OurTMD5TfEEuzZNr7NXmMHY9sNU2UJxCmKRIOStUAhnpR8tYgQXawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQAZoskShUxFaoZbt6IPXbsGsvTMB8GA1UdIwQY MBaAFCth4tkydW8B48a3OsgmiUYdD2HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDMzMTktMTYxNy00MmI5LWI0YTkt M2YyYmQwYWVmY2IwLzEvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMDMzMTktMTYxNy00MmI5LWI0YTktM2YyYmQwYWVmY2Iw LzEvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADswN8ToU 4H737afSRsfsBeHORPXaNTDZJ/GQcL/8KvFgVrfUFqix3E8NRNl0p5RSy74ws6rG vvagI+FRZCDsuRSYLBNNGVlgd5YfObqTGo9XPc928fTvCcxKOgGv9H4h8ZKo+85e +hFwYzBMHbgJioIkohF0JsjKXJz5Ry8lBwVTxACLO7vcfnP+8MrtY7fcfriu68uK 6bSm/PkF87/aQTq/Ml5d48h27+ej8HNao1BGILC6pUAfZtnzy2c6UPTFdS661tZw lqdoE09DbUtcM/zUCld4UX9j2DfkAQoBDPztJkp38P3j/cL4AFIWlxiJQrD/E9Mu karHvHO0nzxvBA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:50 2026 by rpki-client