This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json) Hash identifier: C/IuTeqdc0jfMhkob0dTT/8xcrs/xj7c1NceYbVDR8g= Subject key identifier: 84:08:43:70:4F:D1:33:08:35:06:4F:32:0A:89:3B:0D:D1:DD:97:3D Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97 Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97 Certificate serial: 019C4322AD0780E8656B8727DBBC12B6A74F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft Manifest number: 0B56 Signing time: Mon 09 Feb 2026 16:01:11 +0000 Manifest this update: Mon 09 Feb 2026 16:01:11 +0000 Manifest next update: Tue 10 Feb 2026 16:01:11 +0000 Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: plR1ObyurlmDYRA2O3GHMV/EprBtX5cWw1R3YWj9P+o=) 2: wHcGZeO9fssaMojMLh7b76eEutw.roa (hash: Z81zBTKFgXNzuuqrSSQF/QN+FUjXh697pGYZEocelm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ad:07:80:e8:65:6b:87:27:db:bc:12:b6:a7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97 Validity Not Before: Feb 9 16:01:11 2026 GMT Not After : Feb 10 16:01:11 2026 GMT Subject: CN=840843704fd1330835064f320a893b0dd1dd973d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1c:7f:b3:d0:23:c7:6a:55:c8:53:0d:fa:17: 6a:19:e5:75:dd:2f:fd:ba:f0:d1:76:6c:b8:96:78: 8c:58:17:50:0a:1f:2c:b6:91:2b:11:c1:e2:2a:61: 1b:92:96:6a:0b:c3:01:e7:ac:12:73:5c:64:37:d5: 8d:19:48:fd:5a:48:ab:d5:7e:7d:de:39:a5:aa:da: ac:5e:71:3a:35:61:41:7f:3a:1b:c2:68:21:3b:6a: a9:cd:db:8f:58:b4:c0:e3:d6:1d:e7:a3:76:02:0e: c8:4d:6d:05:54:d1:03:f8:21:31:b3:41:fd:1b:15: 80:5f:44:70:45:ce:4c:97:c4:ea:72:3e:d0:4d:ef: 15:6e:3e:cf:9a:da:f9:7b:d7:5f:41:ea:2e:da:da: af:39:81:9c:65:96:80:bc:8c:90:8d:0a:76:96:61: 4a:ae:f9:0d:0c:a5:fe:cb:3d:d3:9a:72:1c:88:d3: f1:2b:98:f9:b6:d5:40:07:5b:e7:de:b4:0a:f1:4e: 2e:9d:45:01:bb:39:37:e6:32:eb:17:42:6e:ae:21: 15:87:04:71:70:60:e5:75:65:56:32:cb:4c:c6:76: e4:9c:c7:58:7c:f6:5b:4a:56:25:91:4c:77:13:65: ac:c2:6b:85:b4:2d:c6:67:f7:0a:dc:c4:56:a1:68: fc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:08:43:70:4F:D1:33:08:35:06:4F:32:0A:89:3B:0D:D1:DD:97:3D X509v3 Authority Key Identifier: keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:77:b9:c1:4c:65:22:e6:da:c3:35:88:50:3f:e1:ce:bd:bc: ee:56:b3:81:c2:7d:39:9c:b0:9f:0c:37:eb:2a:08:d4:20:ed: 9c:34:1b:66:18:48:9c:93:4b:5b:85:9d:99:d8:7b:5a:91:cb: 2d:c3:77:7a:da:6d:ad:c0:cc:3f:c6:a4:49:f2:4b:f3:cb:5a: 1f:cf:dd:70:a7:99:c8:a6:de:95:67:08:62:62:6c:a9:70:03: c1:3a:a6:fb:13:21:53:18:a9:d2:f8:3c:a1:68:5a:1a:9b:f3: 9c:3a:d5:40:15:a0:b2:94:a0:5e:45:81:12:fa:8c:3e:30:ee: 37:70:88:45:d5:f3:ae:39:f2:7f:e2:8b:35:3d:80:8c:6d:a5: 6d:2c:bb:ba:39:10:53:9e:5a:c8:e0:aa:be:27:34:2d:ca:d7: 62:97:33:20:39:0c:f6:25:48:98:32:28:60:aa:80:38:c4:7b: 15:37:b9:8b:48:21:b9:f4:45:0f:2b:03:73:74:f7:f1:06:e4: 5b:9e:21:f5:31:e5:88:26:02:cc:34:65:a0:41:d5:75:15:a3: 18:99:8e:d8:47:8d:35:14:f9:84:c7:9a:65:c5:cd:e6:43:2e: bc:90:b5:a7:bb:82:d4:9d:10:aa:54:bd:80:7b:70:87:be:36: 97:38:30:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIq0HgOhla4cn27wStqdPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3Njg0YTdlYmY5ZGUyOTQ4MzFhMmMwM2UxYjVhMDEyNDIw YWNkOTcwHhcNMjYwMjA5MTYwMTExWhcNMjYwMjEwMTYwMTExWjAzMTEwLwYDVQQD Eyg4NDA4NDM3MDRmZDEzMzA4MzUwNjRmMzIwYTg5M2IwZGQxZGQ5NzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xx/s9Ajx2pVyFMN+hdqGeV13S/9 uvDRdmy4lniMWBdQCh8stpErEcHiKmEbkpZqC8MB56wSc1xkN9WNGUj9Wkir1X59 3jmlqtqsXnE6NWFBfzobwmghO2qpzduPWLTA49Yd56N2Ag7ITW0FVNED+CExs0H9 GxWAX0RwRc5Ml8Tqcj7QTe8Vbj7Pmtr5e9dfQeou2tqvOYGcZZaAvIyQjQp2lmFK rvkNDKX+yz3TmnIciNPxK5j5ttVAB1vn3rQK8U4unUUBuzk35jLrF0JuriEVhwRx cGDldWVWMstMxnbknMdYfPZbSlYlkUx3E2WswmuFtC3GZ/cK3MRWoWj8hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQIQ3BP0TMINQZPMgqJOw3R3Zc9MB8GA1UdIwQY MBaAFEdoSn6/neKUgxosA+G1oBJCCs2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUt YjI2ZjcwZTAzZDc2LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUtYjI2ZjcwZTAzZDc2 LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHe5wUxl IubawzWIUD/hzr287lazgcJ9OZywnww36yoI1CDtnDQbZhhInJNLW4Wdmdh7WpHL LcN3etptrcDMP8akSfJL88taH8/dcKeZyKbelWcIYmJsqXADwTqm+xMhUxip0vg8 oWhaGpvznDrVQBWgspSgXkWBEvqMPjDuN3CIRdXzrjnyf+KLNT2AjG2lbSy7ujkQ U55ayOCqvic0LcrXYpczIDkM9iVImDIoYKqAOMR7FTe5i0ghufRFDysDc3T38Qbk W54h9THliCYCzDRloEHVdRWjGJmO2EeNNRT5hMeaZcXN5kMuvJC1p7uC1J0QqlS9 gHtwh742lzgwdw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:02 2026 by rpki-client