This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft File: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json) Hash identifier: 6F7osXNhjg8l9cEZZA1EZGcT0nAhRntaKhykrAG5MUs= Subject key identifier: 27:48:FA:F5:7E:02:D3:3B:69:46:C1:70:6E:16:0E:87:25:A7:AF:AF Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61 Certificate issuer: /CN=936cb336c1beb71d4fbbaae243b23352c6270061 Certificate serial: 019C420F52B368097A0608A4F54F7420A25A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft Manifest number: 106A Signing time: Mon 09 Feb 2026 11:00:26 +0000 Manifest this update: Mon 09 Feb 2026 11:00:26 +0000 Manifest next update: Tue 10 Feb 2026 11:00:26 +0000 Files and hashes: 1: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: gqCRC2CK7p8v51J7QG9L4vsd3b5xf79/M/w2+rSFDJ8=) 2: mvepdebQmu_FRJZg6xdj98CWgmg.roa (hash: vtG0XjCKoYFzRLQ8SOB1Ef/RTJntpMOs72e8cd2gM38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:52:b3:68:09:7a:06:08:a4:f5:4f:74:20:a2:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061 Validity Not Before: Feb 9 11:00:26 2026 GMT Not After : Feb 10 11:00:26 2026 GMT Subject: CN=2748faf57e02d33b6946c1706e160e8725a7afaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c0:0c:27:ce:09:7a:09:c2:47:94:fa:6c:b5: 1b:11:7b:97:d3:7c:7a:26:7a:c1:5c:a5:c1:d7:cc: 7e:20:6a:83:7a:95:75:25:44:a7:98:d6:b7:c8:95: 0b:0e:97:80:85:c0:27:5f:4f:63:f0:7c:ff:a8:fb: 02:1c:5d:0c:16:c9:1c:79:4b:1c:d1:6d:7d:1f:ff: 65:d1:6c:30:8c:db:66:ab:e8:d7:3c:7c:77:16:b9: a8:b4:7b:13:0f:f7:3f:79:91:04:b5:f6:e8:99:b1: a5:85:1c:08:6f:78:0c:ae:42:58:76:e6:22:9a:36: 45:91:a8:c4:fb:59:90:37:8f:e1:6a:81:49:00:d6: ee:e8:e0:d3:77:f1:ca:0e:fc:af:72:7a:3b:15:01: c6:19:ea:8e:2c:6c:12:46:74:8a:1d:1a:b7:62:cd: 4c:73:40:d1:fd:33:56:39:06:36:ce:26:8e:b5:9d: 3a:93:cd:f9:45:6f:d1:01:22:7c:a7:2f:d1:d0:b9: f6:df:e7:b2:d5:d9:6b:68:8a:b8:13:bb:25:6d:b1: 18:5e:f0:8f:03:75:67:69:3c:13:e0:d8:60:4c:27: 6f:18:c3:8f:23:26:69:ff:db:d0:e3:22:60:1d:f6: 9e:3c:72:42:c7:75:48:02:1e:97:05:47:51:4c:7f: ea:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:48:FA:F5:7E:02:D3:3B:69:46:C1:70:6E:16:0E:87:25:A7:AF:AF X509v3 Authority Key Identifier: keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7f:01:58:d2:6d:15:85:bf:ce:63:66:22:78:4c:a8:ab:3f: ce:d7:34:04:4c:99:a1:29:5b:a2:09:11:c4:ad:19:7e:42:1e: e8:bd:1b:95:08:1a:7b:2b:c6:64:41:22:6b:d2:9b:ea:6b:0c: dc:4b:43:1e:2f:d5:85:cc:e9:6c:7f:81:da:b1:ab:23:8d:ca: 5f:77:23:34:af:a2:db:ac:b3:69:05:c2:9b:c9:b1:b7:eb:89: 85:ea:f3:24:5d:0f:bb:38:66:e8:fd:b3:33:23:4e:4b:bd:18: bc:89:24:38:f1:83:bd:ef:68:48:30:c6:1b:52:6d:44:f8:59: 86:a7:ef:65:8e:7a:93:7f:91:78:9d:ac:74:99:7c:b0:c8:60: 4b:5d:3b:19:d0:c5:1e:74:0c:98:d9:2a:f3:da:57:f3:80:f8: 24:a1:73:0b:0d:f4:a3:f1:4e:0a:ff:d0:8e:6e:49:52:5e:1f: c8:de:ee:9c:a5:0c:07:19:1f:76:80:06:13:1c:b1:b0:e4:58: 30:bc:e9:15:0f:7a:f4:ed:89:2c:a5:b0:97:cf:19:df:14:7f: 39:5d:1a:c9:62:92:60:92:95:73:1b:ed:2b:9d:c1:e3:de:2b: c0:59:c7:8c:1a:c8:4f:e6:bb:35:c4:70:67:97:a5:8b:90:d6: 22:be:fa:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD1KzaAl6Bgik9U90IKJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNmNiMzM2YzFiZWI3MWQ0ZmJiYWFlMjQzYjIzMzUyYzYy NzAwNjEwHhcNMjYwMjA5MTEwMDI2WhcNMjYwMjEwMTEwMDI2WjAzMTEwLwYDVQQD EygyNzQ4ZmFmNTdlMDJkMzNiNjk0NmMxNzA2ZTE2MGU4NzI1YTdhZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cAMJ84JegnCR5T6bLUbEXuX03x6 JnrBXKXB18x+IGqDepV1JUSnmNa3yJULDpeAhcAnX09j8Hz/qPsCHF0MFskceUsc 0W19H/9l0WwwjNtmq+jXPHx3FrmotHsTD/c/eZEEtfbombGlhRwIb3gMrkJYduYi mjZFkajE+1mQN4/haoFJANbu6ODTd/HKDvyvcno7FQHGGeqOLGwSRnSKHRq3Ys1M c0DR/TNWOQY2ziaOtZ06k835RW/RASJ8py/R0Ln23+ey1dlraIq4E7slbbEYXvCP A3VnaTwT4NhgTCdvGMOPIyZp/9vQ4yJgHfaePHJCx3VIAh6XBUdRTH/qdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdI+vV+AtM7aUbBcG4WDoclp6+vMB8GA1UdIwQY MBaAFJNsszbBvrcdT7uq4kOyM1LGJwBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kMWRkOWEtOThmNC00NWI4LTkwOTUt NTlkNjBiZmYyMDVmLzEvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kMWRkOWEtOThmNC00NWI4LTkwOTUtNTlkNjBiZmYyMDVm LzEvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjn8BWNJt FYW/zmNmInhMqKs/ztc0BEyZoSlbogkRxK0ZfkIe6L0blQgaeyvGZEEia9Kb6msM 3EtDHi/VhczpbH+B2rGrI43KX3cjNK+i26yzaQXCm8mxt+uJherzJF0Puzhm6P2z MyNOS70YvIkkOPGDve9oSDDGG1JtRPhZhqfvZY56k3+ReJ2sdJl8sMhgS107GdDF HnQMmNkq89pX84D4JKFzCw30o/FOCv/Qjm5JUl4fyN7unKUMBxkfdoAGExyxsORY MLzpFQ969O2JLKWwl88Z3xR/OV0ayWKSYJKVcxvtK53B494rwFnHjBrIT+a7NcRw Z5eli5DWIr76Ww== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:16 2026 by rpki-client