This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft File: t-2iAv8dfzUSexHeodUPNn6i6Zo.mft (raw, json) Hash identifier: fLo0NAudmAP+fi1MtdxJLkrDASLvqv89spF884Z1K0Y= Subject key identifier: BD:31:EF:87:F1:62:E9:12:70:04:FD:80:BC:39:F9:E6:75:CC:15:38 Authority key identifier: B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A Certificate issuer: /CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a Certificate serial: 019C42EB19E5803E8F23C5DAC30595C4C67F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft Manifest number: 47 Signing time: Mon 09 Feb 2026 15:00:29 +0000 Manifest this update: Mon 09 Feb 2026 15:00:29 +0000 Manifest next update: Tue 10 Feb 2026 15:00:29 +0000 Files and hashes: 1: t-2iAv8dfzUSexHeodUPNn6i6Zo.crl (hash: NJmpN4Y3yeNJhsKkzyJVT+1P9c+0Tw7oE1xnK1UviwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:19:e5:80:3e:8f:23:c5:da:c3:05:95:c4:c6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a Validity Not Before: Feb 9 15:00:29 2026 GMT Not After : Feb 10 15:00:29 2026 GMT Subject: CN=bd31ef87f162e9127004fd80bc39f9e675cc1538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:81:bf:52:ba:5f:3f:32:fd:4d:b4:2a:a6:f4: 5e:6d:94:be:53:8a:16:4c:9f:94:f6:ff:0d:22:7a: b7:90:27:8d:52:35:2e:8d:b6:54:40:80:46:01:c9: 26:f6:1f:60:1e:9f:ee:9f:fc:d6:d7:4b:fa:7e:31: 3c:1c:ee:ec:1b:64:f6:85:b7:a7:d3:d6:85:7e:e3: 53:08:05:c3:02:8f:7d:7d:c6:eb:10:af:b5:6f:e1: e5:03:ed:ca:80:e2:55:fe:3c:97:24:5d:92:8b:63: ed:13:e3:84:c6:8d:65:f4:96:d0:77:cb:b6:35:dd: d2:b7:0b:76:87:53:97:cc:d8:00:a2:67:c9:5d:65: 77:f9:0b:ef:48:0c:17:27:bb:bb:9e:d8:83:fe:8a: d8:99:29:90:ae:c3:73:f6:96:ec:b9:3c:ab:f5:67: dc:98:f0:22:9c:ed:6d:08:82:5d:5e:8d:28:27:9f: 6c:c2:48:75:a3:10:03:5c:23:9f:a4:54:87:f8:5c: 14:e5:9a:cc:10:db:5f:0c:7e:3a:d4:63:81:3b:71: b2:a0:ed:04:2e:61:b0:45:58:ae:3c:28:a9:9b:81: f3:1e:f5:92:7a:70:f4:73:7e:96:a0:78:f9:77:00: b1:75:de:c4:06:87:4d:c4:77:31:fb:c7:61:e8:0a: 29:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:31:EF:87:F1:62:E9:12:70:04:FD:80:BC:39:F9:E6:75:CC:15:38 X509v3 Authority Key Identifier: keyid:B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:19:63:06:c9:6d:cc:f3:60:74:ce:9b:ba:8c:73:69:98:fb: c5:1e:99:79:d2:87:03:18:a2:52:ba:57:dd:d9:45:fd:d3:a0: 67:e2:6d:0e:dc:82:26:07:fb:d7:0d:ca:05:ba:5a:85:8b:03: da:5f:f7:6c:1e:34:47:30:42:4d:cf:bf:dc:9a:8d:23:a4:a9: de:cf:18:a6:c1:79:1d:8b:d7:21:c2:4c:5f:7f:a8:54:2c:e4: a7:e8:da:fb:ab:58:75:aa:c3:95:d4:7b:bf:1d:de:1c:31:55: e5:17:c9:ed:81:32:14:05:01:25:5b:8a:90:2f:51:80:cd:af: 6c:2d:9a:27:f5:27:ef:54:09:f7:fb:9d:f2:b7:1a:23:b1:f1: cd:20:21:30:05:ff:a5:b3:51:f6:5f:bd:55:c1:bd:d7:fb:c1: a4:f2:15:c1:21:e6:02:ec:da:91:e1:de:45:94:76:74:5c:54: 44:00:0a:44:66:75:30:1b:e1:51:3f:5d:a6:88:89:b3:09:8a: e0:59:d8:4d:c5:e6:5b:7c:99:da:32:a0:63:38:a7:fe:a4:43: 87:f9:53:f0:ab:f3:f2:3c:e2:b2:43:da:e3:8b:51:06:67:c9: 57:cd:09:41:03:7b:5c:c1:a4:bd:c4:1c:30:99:94:18:a9:3e: e1:55:2c:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6xnlgD6PI8XawwWVxMZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZWRhMjAyZmYxZDdmMzUxMjdiMTFkZWExZDUwZjM2N2Vh MmU5OWEwHhcNMjYwMjA5MTUwMDI5WhcNMjYwMjEwMTUwMDI5WjAzMTEwLwYDVQQD EyhiZDMxZWY4N2YxNjJlOTEyNzAwNGZkODBiYzM5ZjllNjc1Y2MxNTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oG/UrpfPzL9TbQqpvRebZS+U4oW TJ+U9v8NInq3kCeNUjUujbZUQIBGAckm9h9gHp/un/zW10v6fjE8HO7sG2T2hben 09aFfuNTCAXDAo99fcbrEK+1b+HlA+3KgOJV/jyXJF2Si2PtE+OExo1l9JbQd8u2 Nd3Stwt2h1OXzNgAomfJXWV3+QvvSAwXJ7u7ntiD/orYmSmQrsNz9pbsuTyr9Wfc mPAinO1tCIJdXo0oJ59swkh1oxADXCOfpFSH+FwU5ZrMENtfDH461GOBO3GyoO0E LmGwRViuPCipm4HzHvWSenD0c36WoHj5dwCxdd7EBodNxHcx+8dh6Aop5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0x74fxYukScAT9gLw5+eZ1zBU4MB8GA1UdIwQY MBaAFLftogL/HX81EnsR3qHVDzZ+oumaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdC0yaUF2OGRmelVTZXhIZW9kVVBObjZpNlpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82YWU3NmQtYjU5OS00MzllLWIxN2Et MmJmZjFhNzAwMGE5LzEvdC0yaUF2OGRmelVTZXhIZW9kVVBObjZpNlpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi82YWU3NmQtYjU5OS00MzllLWIxN2EtMmJmZjFhNzAwMGE5 LzEvdC0yaUF2OGRmelVTZXhIZW9kVVBObjZpNlpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRljBslt zPNgdM6buoxzaZj7xR6ZedKHAxiiUrpX3dlF/dOgZ+JtDtyCJgf71w3KBbpahYsD 2l/3bB40RzBCTc+/3JqNI6Sp3s8YpsF5HYvXIcJMX3+oVCzkp+ja+6tYdarDldR7 vx3eHDFV5RfJ7YEyFAUBJVuKkC9RgM2vbC2aJ/Un71QJ9/ud8rcaI7HxzSAhMAX/ pbNR9l+9VcG91/vBpPIVwSHmAuzakeHeRZR2dFxURAAKRGZ1MBvhUT9dpoiJswmK 4FnYTcXmW3yZ2jKgYzin/qRDh/lT8Kvz8jziskPa44tRBmfJV80JQQN7XMGkvcQc MJmUGKk+4VUsyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:36 2026 by rpki-client