This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json) Hash identifier: knWpWwJ8t21zwFJmP1boFoZGczB/MXZmIL8JeH6uefQ= Subject key identifier: A5:87:35:E3:A0:27:15:1B:60:9C:85:38:00:8A:21:9D:FE:5F:50:EE Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77 Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777 Certificate serial: 019C427DF8C48C872BA69D596DF0118D4AD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft Manifest number: 16FA Signing time: Mon 09 Feb 2026 13:01:17 +0000 Manifest this update: Mon 09 Feb 2026 13:01:17 +0000 Manifest next update: Tue 10 Feb 2026 13:01:17 +0000 Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: LsLeOoO9YFs2xCRsDWdum5gqhWACBpnSdLyjiDKZrSo=) 2: F4iAzCEfDLvdpiMWWckwjJJrSsI.roa (hash: YFjFAwlmoqlWOtp7nZ0zL9vJHXGTyX16GUXYOVErggo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:f8:c4:8c:87:2b:a6:9d:59:6d:f0:11:8d:4a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777 Validity Not Before: Feb 9 13:01:17 2026 GMT Not After : Feb 10 13:01:17 2026 GMT Subject: CN=a58735e3a027151b609c8538008a219dfe5f50ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6f:9e:10:56:09:65:72:97:8a:29:98:f2:b1: c3:66:e6:01:ec:52:d7:38:c5:ef:02:d5:f9:92:b7: bd:ee:2a:c3:57:4a:0b:6b:e1:4f:5c:36:c9:ec:6e: f9:db:da:6e:6d:58:b1:51:bc:d2:20:2e:3f:17:d5: d0:eb:ea:19:c3:8c:e5:55:3b:53:b8:c1:a3:2e:f2: 7b:dd:5a:46:23:56:9f:a3:65:08:44:b4:b0:f9:7e: a5:fe:1d:b8:bd:3e:79:f1:be:63:36:ec:6f:32:c0: 95:58:d7:b2:9d:6b:77:a8:2f:dc:c7:d6:9c:1a:e1: 43:23:82:6a:fc:bf:48:01:ba:84:28:19:4e:bd:dc: 12:75:96:7b:4d:b5:bb:24:2a:24:55:95:cc:6b:06: 58:77:d1:0a:01:b8:57:e4:a2:b3:4c:fc:8a:11:f5: 62:28:55:f8:4c:37:49:ab:0a:cc:d2:88:b3:04:cc: 13:fc:c4:c7:74:8b:34:1c:d7:96:90:81:16:4e:47: fd:64:7a:72:a7:cb:bb:de:c3:08:27:a2:3a:26:37: 92:ec:4b:a5:e7:90:38:8a:54:42:cd:f9:15:96:54: be:65:0c:0e:15:40:7e:1b:27:5a:f0:5c:31:68:54: ca:d1:c4:b9:9a:d6:14:a2:c7:e7:cb:62:2e:9b:f9: e7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:87:35:E3:A0:27:15:1B:60:9C:85:38:00:8A:21:9D:FE:5F:50:EE X509v3 Authority Key Identifier: keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:89:cb:4b:11:7b:43:b9:ce:b2:c6:20:0d:85:a0:ab:b3:46: 9d:25:07:8f:e9:1f:da:b0:06:74:e2:25:b8:83:f0:ba:d9:1a: d5:77:b5:24:b2:54:83:f6:b0:c4:74:6a:7c:55:85:1a:44:e5: 81:b9:a2:38:93:65:04:ca:d5:fd:f5:8c:4c:c6:47:5e:85:15: a9:39:d1:df:08:db:77:9c:7a:e2:a4:d6:6c:31:d2:57:34:a9: 8b:c8:50:0a:85:20:78:0c:04:70:66:c6:16:d6:5f:34:e3:42: c6:19:13:81:07:3a:9b:77:15:a5:62:85:33:92:c0:6b:5e:a4: 50:bc:c7:7c:a8:60:b4:58:96:bc:b5:dd:f3:78:87:2a:30:fc: 57:88:0a:9d:4a:c8:ba:f3:56:8b:dd:83:ad:c2:96:01:f5:80: 97:a4:fb:38:4b:77:9b:5d:ad:64:24:33:e4:8f:1f:ca:09:cf: 9a:48:d7:ce:d6:d8:4c:3d:2d:88:3e:c8:6b:0a:fd:66:56:a3: a1:84:f6:60:67:81:37:e6:87:f3:f1:23:65:ed:7e:93:b5:e3: 2f:00:7a:49:b1:2d:01:4e:43:09:ea:62:cb:fe:82:18:5e:c0: 3c:c2:62:1a:19:77:4d:6d:8d:74:1f:74:4f:b2:bf:28:09:9e: 12:64:ec:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffjEjIcrpp1ZbfARjUrSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YTk5NGQ4NDZjYjY2OTZlODg5YzFjYzMyMjg1ZTBiMjNh ZmM3NzcwHhcNMjYwMjA5MTMwMTE3WhcNMjYwMjEwMTMwMTE3WjAzMTEwLwYDVQQD EyhhNTg3MzVlM2EwMjcxNTFiNjA5Yzg1MzgwMDhhMjE5ZGZlNWY1MGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW+eEFYJZXKXiimY8rHDZuYB7FLX OMXvAtX5kre97irDV0oLa+FPXDbJ7G7529pubVixUbzSIC4/F9XQ6+oZw4zlVTtT uMGjLvJ73VpGI1afo2UIRLSw+X6l/h24vT558b5jNuxvMsCVWNeynWt3qC/cx9ac GuFDI4Jq/L9IAbqEKBlOvdwSdZZ7TbW7JCokVZXMawZYd9EKAbhX5KKzTPyKEfVi KFX4TDdJqwrM0oizBMwT/MTHdIs0HNeWkIEWTkf9ZHpyp8u73sMIJ6I6JjeS7Eul 55A4ilRCzfkVllS+ZQwOFUB+Gyda8FwxaFTK0cS5mtYUosfny2Ium/nnyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWHNeOgJxUbYJyFOACKIZ3+X1DuMB8GA1UdIwQY MBaAFNiplNhGy2aW6InBzDIoXgsjr8d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDct MjNhYjU5Nzk4NDIxLzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDctMjNhYjU5Nzk4NDIx LzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGInLSxF7 Q7nOssYgDYWgq7NGnSUHj+kf2rAGdOIluIPwutka1Xe1JLJUg/awxHRqfFWFGkTl gbmiOJNlBMrV/fWMTMZHXoUVqTnR3wjbd5x64qTWbDHSVzSpi8hQCoUgeAwEcGbG FtZfNONCxhkTgQc6m3cVpWKFM5LAa16kULzHfKhgtFiWvLXd83iHKjD8V4gKnUrI uvNWi92DrcKWAfWAl6T7OEt3m12tZCQz5I8fygnPmkjXztbYTD0tiD7Iawr9Zlaj oYT2YGeBN+aH8/EjZe1+k7XjLwB6SbEtAU5DCepiy/6CGF7APMJiGhl3TW2NdB90 T7K/KAmeEmTsNg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:36 2026 by rpki-client