This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json) Hash identifier: ntMcI5dnNYgCpDPiiMCAafK2+v/yT6XfFgIEqt+il7s= Subject key identifier: 94:04:BE:F4:1D:83:E1:3C:9F:34:79:3A:19:D8:10:6A:CA:95:8D:37 Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40 Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140 Certificate serial: 019C43902CA937796299C2432691B1C775CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft Manifest number: 0DEF Signing time: Mon 09 Feb 2026 18:00:47 +0000 Manifest this update: Mon 09 Feb 2026 18:00:47 +0000 Manifest next update: Tue 10 Feb 2026 18:00:47 +0000 Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: 7cGn1ws8XtdaluPzDi5saJOzh4zVHPQ0+jWFo11n7u0=) 2: BlOWKc5j8045KgpD8U1F9Iq5Es0.roa (hash: omB3tGHeY8VhpaATCQuElzuZOvNWwAi3D0qIf2YFIKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:2c:a9:37:79:62:99:c2:43:26:91:b1:c7:75:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140 Validity Not Before: Feb 9 18:00:47 2026 GMT Not After : Feb 10 18:00:47 2026 GMT Subject: CN=9404bef41d83e13c9f34793a19d8106aca958d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ec:c1:d4:48:2e:b0:1b:ca:f1:eb:a4:42:35: ed:5d:5f:0d:e9:1b:ac:60:06:13:d7:81:89:b7:79: 39:96:d0:5d:c7:9f:71:c2:f1:4b:25:62:83:53:56: 04:09:31:0b:77:fc:27:96:64:f2:6e:7d:d7:76:cd: fe:ac:23:a7:8a:85:a2:45:8d:87:c7:ff:19:e2:f7: e1:36:85:63:97:94:ca:b8:c6:43:63:b7:cc:3d:fa: 88:38:db:de:ad:a8:d6:47:07:52:f8:a3:c1:0e:09: be:22:c5:98:a4:b1:60:66:fa:db:ce:74:42:83:42: 28:33:4e:ed:c9:7a:85:f1:35:05:e6:f2:7a:98:a9: 4d:d0:b5:15:ea:b2:66:20:e9:b1:62:2c:ff:0c:0c: 88:85:3b:cf:e4:62:2d:db:e0:ed:51:47:d4:6d:4b: 2b:52:30:65:6f:28:b4:e2:e8:df:3e:50:06:cb:ac: 5a:48:58:d0:8f:f7:ff:92:43:6a:0c:fb:96:a0:48: 4e:e0:b1:8a:00:e9:d5:4d:ae:a4:7d:28:7b:76:22: da:3c:a9:c7:6c:fe:4c:00:1d:bb:47:ba:e2:d0:27: 52:0b:51:8c:db:98:0b:8f:d9:a4:ab:b6:0d:1c:14: d7:12:37:02:63:5d:e4:94:3f:79:f8:de:99:3e:15: 17:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:04:BE:F4:1D:83:E1:3C:9F:34:79:3A:19:D8:10:6A:CA:95:8D:37 X509v3 Authority Key Identifier: keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:7e:4a:86:07:fa:6b:ec:46:be:2d:80:fe:bf:11:9a:38:db: 08:4d:c5:08:69:01:56:6c:30:c1:48:fb:db:92:a2:f2:be:14: 93:ae:00:4e:26:af:c4:8a:d7:d8:2e:41:77:9e:a4:93:05:32: 1a:9c:fa:f7:47:74:46:c6:e4:a4:4c:02:bb:91:7e:d9:34:51: 68:c3:37:50:39:be:63:0e:2d:44:38:a6:41:4e:d6:45:5f:10: b4:9b:60:d2:9e:17:e4:19:a2:7e:1b:bf:be:83:8a:71:bd:05: fb:50:0c:fc:95:64:db:f7:9c:ec:9e:15:37:24:e9:53:3b:af: bd:cc:80:66:2c:c1:6e:14:92:02:5d:61:22:a8:38:c1:fe:b9: 3a:18:8e:cb:d8:a3:d2:34:18:2f:e7:ed:94:9a:6d:08:e0:ec: a0:d4:db:5c:86:ba:77:50:37:f4:c9:61:d8:84:b6:b6:dd:65: 3f:f6:6f:bb:ae:d8:7e:2e:20:c8:27:de:a7:a1:f6:03:29:3d: 1c:26:cf:54:33:d0:a1:ca:12:1b:70:9c:1a:19:97:08:5e:09: 6b:2a:6c:9d:4d:c4:1b:ec:8b:1e:84:04:b3:01:aa:85:3b:b3: 5e:87:22:76:4d:ba:c2:fb:48:3f:d7:29:82:a0:07:de:07:ce: ea:04:b7:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkCypN3limcJDJpGxx3XOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MzAwOTM2ZmI1MDBhNzQ1NjQ0MGFiYThiM2I4YWQ1M2M5 ZjAxNDAwHhcNMjYwMjA5MTgwMDQ3WhcNMjYwMjEwMTgwMDQ3WjAzMTEwLwYDVQQD Eyg5NDA0YmVmNDFkODNlMTNjOWYzNDc5M2ExOWQ4MTA2YWNhOTU4ZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OzB1EgusBvK8eukQjXtXV8N6Rus YAYT14GJt3k5ltBdx59xwvFLJWKDU1YECTELd/wnlmTybn3Xds3+rCOnioWiRY2H x/8Z4vfhNoVjl5TKuMZDY7fMPfqIONverajWRwdS+KPBDgm+IsWYpLFgZvrbznRC g0IoM07tyXqF8TUF5vJ6mKlN0LUV6rJmIOmxYiz/DAyIhTvP5GIt2+DtUUfUbUsr UjBlbyi04ujfPlAGy6xaSFjQj/f/kkNqDPuWoEhO4LGKAOnVTa6kfSh7diLaPKnH bP5MAB27R7ri0CdSC1GM25gLj9mkq7YNHBTXEjcCY13klD95+N6ZPhUXzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQEvvQdg+E8nzR5OhnYEGrKlY03MB8GA1UdIwQY MBaAFNgwCTb7UAp0VkQKuos7itU8nwFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzkt YWRkY2Q4NTUyMDI2LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzktYWRkY2Q4NTUyMDI2 LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV35Khgf6 a+xGvi2A/r8RmjjbCE3FCGkBVmwwwUj725Ki8r4Uk64ATiavxIrX2C5Bd56kkwUy Gpz690d0RsbkpEwCu5F+2TRRaMM3UDm+Yw4tRDimQU7WRV8QtJtg0p4X5Bmifhu/ voOKcb0F+1AM/JVk2/ec7J4VNyTpUzuvvcyAZizBbhSSAl1hIqg4wf65OhiOy9ij 0jQYL+ftlJptCODsoNTbXIa6d1A39Mlh2IS2tt1lP/Zvu67Yfi4gyCfep6H2Ayk9 HCbPVDPQocoSG3CcGhmXCF4JaypsnU3EG+yLHoQEswGqhTuzXocidk26wvtIP9cp gqAH3gfO6gS32A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:43 2026 by rpki-client