This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json) Hash identifier: a78QqHbCr24RvIoBVxRZ52+ESC+HyovOWba0HcN/LNY= Subject key identifier: 9C:05:F1:4C:24:34:D6:7D:C2:D1:82:25:90:BA:69:F7:1C:91:36:50 Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b Certificate serial: 019C43FD98544CBDCBBA2934BA1C6C8CCEB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 20:00:18 +0000 Manifest this update: Mon 09 Feb 2026 20:00:18 +0000 Manifest next update: Tue 10 Feb 2026 20:00:18 +0000 Files and hashes: 1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: VfwphNp+vxJCsJnDoYHwdDTvGI/2+eVycF8JsCEoO6U=) 2: BaQ-Dwx4jGTP-WyiH6nK6TF34ds.roa (hash: Nnb+Pm8QW6nU8DXHtnpp7btMXm7Fsm1NDGac760ezUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:98:54:4c:bd:cb:ba:29:34:ba:1c:6c:8c:ce:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b Validity Not Before: Feb 9 20:00:18 2026 GMT Not After : Feb 10 20:00:18 2026 GMT Subject: CN=9c05f14c2434d67dc2d1822590ba69f71c913650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:52:fa:c5:91:f5:45:60:ac:3b:42:09:30: d1:6c:01:7a:5d:b9:c7:9e:37:b1:d9:6e:c5:37:ec: 18:1c:e5:21:c6:61:3e:21:f7:ae:ad:a3:3a:22:e9: 3c:c7:04:8e:2f:df:2d:9f:65:81:e5:d8:9a:07:06: 94:9f:9d:f4:8e:a5:9e:e2:d9:ac:9a:99:6f:af:65: 06:cd:f5:32:fd:bb:0a:f3:67:aa:3e:fb:c0:66:d5: 7f:08:71:8d:93:62:ad:d3:1c:7e:d1:bd:5a:c9:85: af:fd:39:43:fd:22:ec:ff:39:6a:dd:f6:8f:72:c8: 6c:0b:8d:b8:d3:ef:a6:fc:7c:8e:0b:0c:94:b1:79: 04:19:06:0a:31:fe:40:c1:ad:0d:e5:32:81:35:a7: 0e:67:f8:a2:9e:a0:89:ec:82:40:e9:12:23:2c:f0: 1d:81:8f:3c:b4:c3:ee:d2:18:6d:e6:5b:af:ea:f5: 42:22:e6:2e:f3:a4:36:8c:bb:c3:19:9a:e1:fd:db: f7:c1:b0:d2:3a:c8:93:5d:19:a8:36:09:9e:82:e5: 10:28:86:62:3a:58:2b:52:b2:26:2d:1c:ad:fc:9f: 72:9b:6f:9f:0f:99:9a:fc:a9:75:63:e8:70:ce:76: d7:c9:39:79:11:34:c6:5a:e8:b7:ba:e0:0c:52:b8: b9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:05:F1:4C:24:34:D6:7D:C2:D1:82:25:90:BA:69:F7:1C:91:36:50 X509v3 Authority Key Identifier: keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:16:f2:8b:27:2d:b1:cd:2e:63:63:1d:1f:0b:40:fa:36:80: 9c:27:da:40:7e:e7:7f:29:4c:f6:75:58:c4:f4:e6:09:cb:39: b4:a8:0e:e0:6c:df:59:72:9b:2f:ae:dd:29:4e:52:5d:86:91: 48:c4:43:8d:19:b5:77:7f:40:91:dd:53:e8:ba:6d:73:64:f0: 07:f3:14:b8:d5:ff:6b:16:a7:cb:98:ff:e3:63:a8:4f:d6:f7: b0:ce:6a:ea:f8:b5:c8:54:93:e1:eb:e3:a4:f7:b1:40:32:3f: 63:fc:06:0b:c2:1a:f5:74:cf:5f:24:57:9e:dc:91:f4:60:f4: 4a:a2:4e:5c:04:56:34:c0:a4:c2:e2:30:5a:a3:48:d8:3c:fa: 1c:e7:82:a4:b1:70:74:fd:50:64:f1:a5:99:c3:df:db:c1:f8: 44:0e:bf:ff:b2:eb:be:68:50:e4:56:d7:56:03:8b:52:ae:99: 32:a4:05:fe:cc:8f:db:15:ae:23:33:19:fb:5d:ec:e4:a3:1c: 7c:dd:52:1e:69:6e:c0:fa:51:9a:6d:cf:3d:20:51:5d:ef:ef: 68:2d:15:77:a2:de:03:d4:21:f8:e2:f4:e1:41:3a:65:6b:33: 36:02:18:fe:a1:9b:24:3d:a0:61:8b:ab:e6:d8:88:30:4d:b4: ac:d9:ff:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/ZhUTL3Luik0uhxsjM64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ODFlNTc3N2NjZTk5MGMwYjJiMGY0YzI5Y2M4ZDJjZjlh ZmU4M2IwHhcNMjYwMjA5MjAwMDE4WhcNMjYwMjEwMjAwMDE4WjAzMTEwLwYDVQQD Eyg5YzA1ZjE0YzI0MzRkNjdkYzJkMTgyMjU5MGJhNjlmNzFjOTEzNjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz9S+sWR9UVgrDtCCTDRbAF6XbnH njex2W7FN+wYHOUhxmE+IfeuraM6Iuk8xwSOL98tn2WB5diaBwaUn530jqWe4tms mplvr2UGzfUy/bsK82eqPvvAZtV/CHGNk2Kt0xx+0b1ayYWv/TlD/SLs/zlq3faP cshsC4240++m/HyOCwyUsXkEGQYKMf5Awa0N5TKBNacOZ/iinqCJ7IJA6RIjLPAd gY88tMPu0hht5luv6vVCIuYu86Q2jLvDGZrh/dv3wbDSOsiTXRmoNgmeguUQKIZi OlgrUrImLRyt/J9ym2+fD5ma/Kl1Y+hwznbXyTl5ETTGWui3uuAMUri5IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwF8UwkNNZ9wtGCJZC6afcckTZQMB8GA1UdIwQY MBaAFNiB5Xd8zpkMCysPTCnMjSz5r+g7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMklIbGQzek9tUXdMS3c5TUtjeU5MUG12NkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYzk1ZjMtZGMzZC00OGViLWI2ZDct ZDgzNWRlMDhiY2Y2LzEvMklIbGQzek9tUXdMS3c5TUtjeU5MUG12NkRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8zYzk1ZjMtZGMzZC00OGViLWI2ZDctZDgzNWRlMDhiY2Y2 LzEvMklIbGQzek9tUXdMS3c5TUtjeU5MUG12NkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRbyiyct sc0uY2MdHwtA+jaAnCfaQH7nfylM9nVYxPTmCcs5tKgO4GzfWXKbL67dKU5SXYaR SMRDjRm1d39Akd1T6Lptc2TwB/MUuNX/axany5j/42OoT9b3sM5q6vi1yFST4evj pPexQDI/Y/wGC8Ia9XTPXyRXntyR9GD0SqJOXARWNMCkwuIwWqNI2Dz6HOeCpLFw dP1QZPGlmcPf28H4RA6//7LrvmhQ5FbXVgOLUq6ZMqQF/syP2xWuIzMZ+13s5KMc fN1SHmluwPpRmm3PPSBRXe/vaC0Vd6LeA9Qh+OL04UE6ZWszNgIY/qGbJD2gYYur 5tiIME20rNn//A== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:41 2026 by rpki-client