This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json) Hash identifier: r1JqZqQwSphoPTA6DWim+2yGU8r1TyOIT0wTOvEGsjU= Subject key identifier: 0B:D0:A9:2A:6E:04:07:EA:F0:2F:15:FC:90:08:B9:0C:52:7A:F0:1C Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25 Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025 Certificate serial: 019C44352194FB724E738DAFBF8F33040CB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft Manifest number: 06C2 Signing time: Mon 09 Feb 2026 21:00:58 +0000 Manifest this update: Mon 09 Feb 2026 21:00:58 +0000 Manifest next update: Tue 10 Feb 2026 21:00:58 +0000 Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: egiHQWNWtK9aS+LausiW1IosIkPKvv74IyrJmZDC+iA=) 2: GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa (hash: dCxYAJ2dCEl4aeNXHPw7bhwKpVSx+0iwsl5Y1tfVG2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:35:21:94:fb:72:4e:73:8d:af:bf:8f:33:04:0c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025 Validity Not Before: Feb 9 21:00:58 2026 GMT Not After : Feb 10 21:00:58 2026 GMT Subject: CN=0bd0a92a6e0407eaf02f15fc9008b90c527af01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3f:33:34:44:98:81:9b:c3:d4:02:06:4d:db: dd:87:f0:a7:82:f2:1d:9a:55:9a:02:e0:e4:7a:95: ce:11:d8:5d:f3:b2:4f:51:23:0a:44:38:a0:e4:e3: fb:1c:a5:bd:41:28:dd:75:c9:dc:03:ac:ec:0f:c9: dd:15:d4:32:66:5a:6d:3f:a0:05:6c:61:d2:7d:8f: 77:f2:6d:0c:bc:d4:b7:20:97:c6:7f:bb:e0:4b:6a: 4b:4e:01:4d:c0:27:10:28:34:dc:ac:1e:5e:00:33: e0:26:25:25:d2:17:6d:26:9e:ec:ca:17:be:84:a7: f6:41:42:13:07:2f:3c:06:d5:df:37:89:99:f8:b9: 99:4c:1e:71:46:b6:fd:12:d1:d7:ec:2c:e8:7e:0b: 42:55:fc:b9:e1:70:c2:4a:1c:2d:ba:57:d0:25:b6: d8:8e:8c:cf:16:57:bc:56:85:17:6e:51:02:fe:b6: 89:b7:4a:bb:7b:1b:6b:3f:d7:1e:ce:cc:7c:e1:91: 9d:79:2e:07:c4:0f:13:a3:40:20:a3:a6:16:3f:d2: 07:29:18:d1:b4:f3:a5:f6:cd:21:d3:af:c7:18:0d: bc:ec:e6:c2:9e:d5:53:17:80:14:02:01:ef:ee:60: ca:04:9f:75:95:37:56:0a:2a:86:c3:4e:c8:f8:13: 3b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D0:A9:2A:6E:04:07:EA:F0:2F:15:FC:90:08:B9:0C:52:7A:F0:1C X509v3 Authority Key Identifier: keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:6b:7c:24:51:0b:57:74:84:1f:9d:7d:2b:b6:cf:59:bc:e1: 12:50:84:b5:57:6c:1f:67:d4:11:3c:0b:b4:f4:6c:22:70:6e: dc:9d:1e:97:c9:22:db:ba:ed:33:5b:25:76:b6:a9:ae:ec:af: b5:c9:5f:b6:63:6b:f2:7a:e3:87:54:ed:3d:31:8f:b4:de:e3: f6:31:a9:1a:be:34:c4:36:17:ac:c0:bd:ca:44:ae:3d:34:46: 85:63:f6:4f:4b:a7:bd:50:74:23:84:e0:ff:27:b8:f1:e9:b7: 23:5a:d4:c6:40:af:40:3a:53:c9:9e:3f:91:48:e6:73:c4:aa: f6:86:df:e9:10:b9:e4:f7:17:c1:5d:22:86:8e:18:cf:95:21: 9e:a5:79:50:22:a0:25:53:c6:b4:51:b3:02:6b:05:ec:24:2a: 84:ce:09:40:0b:91:dd:75:6e:dc:02:4e:41:40:c7:db:32:3e: b3:c1:ac:38:a9:79:8b:a1:d5:81:ce:da:43:7c:b9:55:dc:a7: d6:30:d2:27:d3:63:2f:96:18:cb:5b:41:a8:2b:fe:22:46:ef: 4e:d4:42:1b:6c:ad:ac:8d:44:a0:87:52:69:aa:f5:18:2c:b9: 89:58:1c:99:0a:c2:33:1b:12:7f:23:b0:2c:19:1b:e4:6b:08: 14:19:f7:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENSGU+3JOc42vv48zBAyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZWNlYzk2YTAzNzFhM2FlNjJkN2FhNmRkN2Q5ZTQzYWM1 NWQwMjUwHhcNMjYwMjA5MjEwMDU4WhcNMjYwMjEwMjEwMDU4WjAzMTEwLwYDVQQD EygwYmQwYTkyYTZlMDQwN2VhZjAyZjE1ZmM5MDA4YjkwYzUyN2FmMDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj8zNESYgZvD1AIGTdvdh/CngvId mlWaAuDkepXOEdhd87JPUSMKRDig5OP7HKW9QSjddcncA6zsD8ndFdQyZlptP6AF bGHSfY938m0MvNS3IJfGf7vgS2pLTgFNwCcQKDTcrB5eADPgJiUl0hdtJp7syhe+ hKf2QUITBy88BtXfN4mZ+LmZTB5xRrb9EtHX7CzofgtCVfy54XDCShwtulfQJbbY jozPFle8VoUXblEC/raJt0q7extrP9cezsx84ZGdeS4HxA8To0Ago6YWP9IHKRjR tPOl9s0h06/HGA287ObCntVTF4AUAgHv7mDKBJ91lTdWCiqGw07I+BM7nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvQqSpuBAfq8C8V/JAIuQxSevAcMB8GA1UdIwQY MBaAFNvs7JagNxo65i16pt19nkOsVdAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMzRmMGMtZDkxMS00ODg3LTk2Yjct YTg3NjY1MjBmZWEyLzEvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xMzRmMGMtZDkxMS00ODg3LTk2YjctYTg3NjY1MjBmZWEy LzEvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzGt8JFEL V3SEH519K7bPWbzhElCEtVdsH2fUETwLtPRsInBu3J0el8ki27rtM1sldrapruyv tclftmNr8nrjh1TtPTGPtN7j9jGpGr40xDYXrMC9ykSuPTRGhWP2T0unvVB0I4Tg /ye48em3I1rUxkCvQDpTyZ4/kUjmc8Sq9obf6RC55PcXwV0iho4Yz5UhnqV5UCKg JVPGtFGzAmsF7CQqhM4JQAuR3XVu3AJOQUDH2zI+s8GsOKl5i6HVgc7aQ3y5Vdyn 1jDSJ9NjL5YYy1tBqCv+IkbvTtRCG2ytrI1EoIdSaar1GCy5iVgcmQrCMxsSfyOw LBkb5GsIFBn3zA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:43 2026 by rpki-client