This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json) Hash identifier: KKriNKjmAjVNB/NoMDWaa+OTkxtGRGQE0j9I7te/K+k= Subject key identifier: 5C:0F:7A:FB:A7:98:56:67:93:D0:3E:8B:77:B5:F5:58:BD:41:AF:D9 Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33 Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233 Certificate serial: 019C40FD3CDF96934E6FC736A1537434E6E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft Manifest number: 01AA Signing time: Mon 09 Feb 2026 06:01:03 +0000 Manifest this update: Mon 09 Feb 2026 06:01:03 +0000 Manifest next update: Tue 10 Feb 2026 06:01:03 +0000 Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: 56yfWC5CyMdQbUZNZYz0A6cG3ZVaETBAeNhaEq7yNE8=) 2: O0den7khHq0NCn8QYd3S-g6e7Zw.roa (hash: f/zSeANbHfo0P2exhcovKtgSVaUQTewmpP+aAALiENE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:3c:df:96:93:4e:6f:c7:36:a1:53:74:34:e6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233 Validity Not Before: Feb 9 06:01:03 2026 GMT Not After : Feb 10 06:01:03 2026 GMT Subject: CN=5c0f7afba798566793d03e8b77b5f558bd41afd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:0c:14:f6:b5:5a:05:10:52:01:b6:ef:84: bf:04:9a:38:b0:03:6f:99:b7:d4:88:ff:c9:be:1c: 41:84:e9:18:af:0e:7c:83:49:ba:31:ec:aa:5b:fe: 08:a6:96:e7:fc:5e:48:8a:63:bb:1d:a8:eb:c9:25: 3c:03:dc:f0:26:d0:a9:de:5a:6c:bb:4d:58:63:fb: 72:54:46:80:77:71:28:ec:26:3b:92:0a:0f:c1:44: 90:e3:22:99:c5:79:76:c2:1f:da:e8:57:b3:f2:0a: f3:9c:d8:ca:4a:44:fa:5f:9b:e9:c3:4c:ed:3e:c9: ad:a3:e0:b4:fd:28:40:36:c7:83:25:cd:d2:8d:77: 0b:d7:7a:5c:b9:0c:36:81:7a:bc:89:85:28:df:c7: c8:11:a4:c2:b9:7a:dd:46:4c:d1:72:92:c5:30:f2: d0:3c:3d:cf:97:f9:8e:94:cf:ec:b6:e2:86:f8:f9: 2c:b9:ff:88:31:06:eb:70:0f:c2:62:df:9c:67:4e: ce:54:ea:be:e4:30:c6:cb:87:b8:b2:8e:5d:82:45: ce:05:2c:c9:6a:73:25:ec:39:3f:e9:ce:d0:50:e3: 9a:9f:8c:49:b6:72:06:f3:11:fa:58:01:06:29:e7: 31:f7:66:e8:c8:19:78:00:92:2c:af:b6:c5:10:d6: 4e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0F:7A:FB:A7:98:56:67:93:D0:3E:8B:77:B5:F5:58:BD:41:AF:D9 X509v3 Authority Key Identifier: keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:70:8b:07:ce:ff:df:66:18:04:60:69:a7:62:47:71:93:86: 8c:b0:54:50:99:89:bd:42:dd:90:4b:b6:4e:a3:0f:cf:31:8a: ea:8c:ae:fe:b4:f2:2c:22:38:1c:c0:d0:53:c1:4b:fc:ac:b7: 1d:6c:b7:1f:61:0a:af:31:92:b6:a8:eb:ac:bf:90:ef:cf:54: 33:c3:c8:3c:fa:b6:59:00:51:f0:c8:cd:57:b6:25:6d:a1:ce: 05:10:8d:86:9a:0f:45:61:fb:1d:5e:e6:7c:94:c4:89:a2:cd: 0d:25:7a:0c:37:a3:a9:1b:d5:1a:e7:d2:e6:b4:6b:05:fa:73: 65:3e:79:06:6f:f9:1b:9e:2a:f7:ff:2f:ec:c4:f7:f8:cf:64: c6:b7:f5:09:8c:dd:aa:c2:2d:50:5c:fd:c7:3c:cb:39:4c:7c: 67:38:d3:23:6c:27:5c:eb:36:26:92:e6:9b:71:60:46:70:79: b7:72:5b:80:55:fd:a8:4a:ca:ca:fd:ae:0c:33:7e:5e:e9:c3: 8f:53:fc:89:90:65:0d:cb:09:e2:b3:43:0b:48:b2:7c:1f:a7: 11:40:15:67:b5:25:be:8d:76:33:a8:46:a8:aa:4d:a3:f5:39: 2c:6c:ff:65:fa:38:23:48:4b:09:2c:59:1b:6c:5b:a6:00:6e: 07:a4:b8:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/TzflpNOb8c2oVN0NObjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjRmNjRiNTEwYTQxYjA3YzlkNTAwMDRiMzUyNTY5NGNj NDIyMzMwHhcNMjYwMjA5MDYwMTAzWhcNMjYwMjEwMDYwMTAzWjAzMTEwLwYDVQQD Eyg1YzBmN2FmYmE3OTg1NjY3OTNkMDNlOGI3N2I1ZjU1OGJkNDFhZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8YMFPa1WgUQUgG274S/BJo4sANv mbfUiP/JvhxBhOkYrw58g0m6MeyqW/4Ippbn/F5IimO7HajrySU8A9zwJtCp3lps u01YY/tyVEaAd3Eo7CY7kgoPwUSQ4yKZxXl2wh/a6Fez8grznNjKSkT6X5vpw0zt Psmto+C0/ShANseDJc3SjXcL13pcuQw2gXq8iYUo38fIEaTCuXrdRkzRcpLFMPLQ PD3Pl/mOlM/stuKG+Pksuf+IMQbrcA/CYt+cZ07OVOq+5DDGy4e4so5dgkXOBSzJ anMl7Dk/6c7QUOOan4xJtnIG8xH6WAEGKecx92boyBl4AJIsr7bFENZO2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwPevunmFZnk9A+i3e19Vi9Qa/ZMB8GA1UdIwQY MBaAFNf09ktRCkGwfJ1QAEs1JWlMxCIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ZTNkY2QtZjFhMi00ZmI5LThjN2Ut ZDU0NTYyZjUyZTkzLzEvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85ZTNkY2QtZjFhMi00ZmI5LThjN2UtZDU0NTYyZjUyZTkz LzEvMV9UMlMxRUtRYkI4blZBQVN6VWxhVXpFSWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnCLB87/ 32YYBGBpp2JHcZOGjLBUUJmJvULdkEu2TqMPzzGK6oyu/rTyLCI4HMDQU8FL/Ky3 HWy3H2EKrzGStqjrrL+Q789UM8PIPPq2WQBR8MjNV7YlbaHOBRCNhpoPRWH7HV7m fJTEiaLNDSV6DDejqRvVGufS5rRrBfpzZT55Bm/5G54q9/8v7MT3+M9kxrf1CYzd qsItUFz9xzzLOUx8ZzjTI2wnXOs2JpLmm3FgRnB5t3JbgFX9qErKyv2uDDN+XunD j1P8iZBlDcsJ4rNDC0iyfB+nEUAVZ7Ulvo12M6hGqKpNo/U5LGz/Zfo4I0hLCSxZ G2xbpgBuB6S4qQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:46 2026 by rpki-client