This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json) Hash identifier: BcuDwfvGxYzdZoLH+H3N0zX63Xk89bkGJU284WLbQlE= Subject key identifier: D3:C4:63:4B:44:84:D3:DB:5B:7C:4B:43:A3:71:7F:C0:EC:BA:B2:3A Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8 Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8 Certificate serial: 019C41A148CA09EAACEBB1A085DEAC0B4C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft Manifest number: 1467 Signing time: Mon 09 Feb 2026 09:00:14 +0000 Manifest this update: Mon 09 Feb 2026 09:00:14 +0000 Manifest next update: Tue 10 Feb 2026 09:00:14 +0000 Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: KT2DSZhFWs51gGSLUiLzFR72CUVs+9m5BDZC9TsJjNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:48:ca:09:ea:ac:eb:b1:a0:85:de:ac:0b:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8 Validity Not Before: Feb 9 09:00:14 2026 GMT Not After : Feb 10 09:00:14 2026 GMT Subject: CN=d3c4634b4484d3db5b7c4b43a3717fc0ecbab23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:fd:03:c3:46:8e:b7:d4:b0:8a:38:f8:6a: c8:11:27:4e:c2:51:9f:47:95:4c:a0:5e:de:c9:2f: e8:ba:87:e6:65:f0:37:7d:9d:9b:a8:43:bf:34:bc: 16:8d:ac:52:20:00:b6:6b:f2:f6:93:0d:7f:74:68: 1b:a4:01:bc:ff:14:bf:52:dd:c8:1c:2d:2b:ba:14: 62:8a:5e:9f:01:b0:61:ee:90:25:ae:0d:3d:3a:bd: 8c:14:0a:35:b0:77:f8:e6:e5:0c:9f:06:1f:c8:a5: 25:9a:d5:30:0f:33:51:c5:c0:d9:ca:b4:e3:ec:b6: 98:cc:f2:33:b9:a1:6b:fa:ca:8e:b7:bd:4b:e6:a8: 2b:69:09:29:61:7f:19:b3:ac:f2:df:9b:00:e7:2f: e2:60:83:d5:2d:35:81:00:95:c7:c3:f1:3f:10:01: 51:15:ec:94:65:0b:4d:8a:96:80:ea:1b:86:3e:29: b1:53:d0:29:e6:34:cf:bd:0b:9d:37:c4:73:ed:e0: e5:b4:c1:5b:04:5c:26:22:6e:35:d0:02:1a:c3:48: ac:d2:16:b6:3b:ea:69:94:51:ec:37:61:53:71:ae: d0:63:de:27:14:e9:6d:a8:0c:5f:e4:7f:6a:b5:c4: 2c:54:89:3e:a4:fa:7b:a6:31:73:5f:0c:81:52:2d: 7c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C4:63:4B:44:84:D3:DB:5B:7C:4B:43:A3:71:7F:C0:EC:BA:B2:3A X509v3 Authority Key Identifier: keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:59:14:f2:74:f2:c3:39:bb:4c:55:3b:f2:6e:af:25:79:71: 0a:ec:13:1c:da:9a:cd:ac:7c:53:5e:63:71:77:17:29:76:db: f3:34:d6:0b:c3:a2:97:4c:de:c3:b2:35:0e:5a:1a:a4:70:3a: 68:66:92:a4:ed:cc:a1:4e:c7:66:eb:c8:08:d2:8d:03:a2:72: 9b:b2:1f:4b:7b:cc:9e:e7:63:5f:55:57:7a:68:a8:02:29:25: 9f:57:ee:13:cd:85:2d:21:f5:53:4a:8e:ae:f2:6d:af:83:c1: 89:d7:eb:a0:10:6c:67:1e:fd:59:4d:16:6b:66:f1:bb:2d:4a: 77:92:fc:f3:42:50:aa:b5:8d:96:4b:2d:2c:a4:f9:ef:dc:2c: 47:d6:7f:c3:45:6c:f7:f8:89:c3:1d:0e:3d:79:41:e5:ec:c6: 77:4d:51:66:82:54:4f:43:8b:27:09:f6:71:55:47:fb:ee:6d: 1c:b9:eb:27:ac:34:d9:91:47:ad:69:f4:49:f6:5e:7c:35:fe: f7:39:0d:47:ec:2e:fe:2f:75:62:73:e9:a5:69:b1:ea:f2:bd: 58:0b:3e:93:0e:f5:49:83:a1:5d:9e:c1:32:f0:54:c0:d2:dc: cb:5c:c4:24:16:44:58:e0:8d:d2:af:b8:7d:e2:c0:08:38:8c: b4:6f:86:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoUjKCeqs67Gghd6sC0xAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OGFjMGIxMDY2ZDBkZWZjYjE2OTU2NDNkY2JhYTA3Mzk5 NzVjYTgwHhcNMjYwMjA5MDkwMDE0WhcNMjYwMjEwMDkwMDE0WjAzMTEwLwYDVQQD EyhkM2M0NjM0YjQ0ODRkM2RiNWI3YzRiNDNhMzcxN2ZjMGVjYmFiMjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNP9A8NGjrfUsIo4+GrIESdOwlGf R5VMoF7eyS/ouofmZfA3fZ2bqEO/NLwWjaxSIAC2a/L2kw1/dGgbpAG8/xS/Ut3I HC0ruhRiil6fAbBh7pAlrg09Or2MFAo1sHf45uUMnwYfyKUlmtUwDzNRxcDZyrTj 7LaYzPIzuaFr+sqOt71L5qgraQkpYX8Zs6zy35sA5y/iYIPVLTWBAJXHw/E/EAFR FeyUZQtNipaA6huGPimxU9Ap5jTPvQudN8Rz7eDltMFbBFwmIm410AIaw0is0ha2 O+pplFHsN2FTca7QY94nFOltqAxf5H9qtcQsVIk+pPp7pjFzXwyBUi18pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPEY0tEhNPbW3xLQ6Nxf8DsurI6MB8GA1UdIwQY MBaAFNmKwLEGbQ3vyxaVZD3Lqgc5l1yoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wZjUwYmItMWZlMS00YzgzLThjODgt ZTM1ZDJkNWYwMGY4LzEvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wZjUwYmItMWZlMS00YzgzLThjODgtZTM1ZDJkNWYwMGY4 LzEvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1kU8nTy wzm7TFU78m6vJXlxCuwTHNqazax8U15jcXcXKXbb8zTWC8Oil0zew7I1DloapHA6 aGaSpO3MoU7HZuvICNKNA6Jym7IfS3vMnudjX1VXemioAikln1fuE82FLSH1U0qO rvJtr4PBidfroBBsZx79WU0Wa2bxuy1Kd5L880JQqrWNlkstLKT579wsR9Z/w0Vs 9/iJwx0OPXlB5ezGd01RZoJUT0OLJwn2cVVH++5tHLnrJ6w02ZFHrWn0SfZefDX+ 9zkNR+wu/i91YnPppWmx6vK9WAs+kw71SYOhXZ7BMvBUwNLcy1zEJBZEWOCN0q+4 feLACDiMtG+G9g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:36 2026 by rpki-client