This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json) Hash identifier: MP+QnWbCUiofoMsIUKUl+lVzdpO6gPWoPP0Zr3qmC0Q= Subject key identifier: BB:31:49:9A:79:54:96:3A:75:89:5D:D6:22:91:3A:AB:1A:F3:C6:27 Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4 Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4 Certificate serial: 019C4210079C76DB8EC4D0ED5D278E10E87C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft Manifest number: 0F53 Signing time: Mon 09 Feb 2026 11:01:12 +0000 Manifest this update: Mon 09 Feb 2026 11:01:12 +0000 Manifest next update: Tue 10 Feb 2026 11:01:12 +0000 Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: hJBcML0VA0TPtSuHCeU+WT3OUPKcfUFvpn2JaQ0gbMM=) 2: BTAvCBcRqPKnpuDR5p2Gq8wAQ3o.roa (hash: PhNCstC0mG6N6OSSLCaGAFo+BJH+pelpZfoyx1/vinI=) 3: LZIb0ymnvJVoat3eKMXkwKhNB3s.roa (hash: MiIObMs9Gh9JbmWmMRy+8OGwOPF9Eqpf22VuDL3pf3g=) 4: zWYuzq0jad5Hmb8WA-NfP-3d2Zw.roa (hash: Yyyb//vmnQwxfSQUibaXnsRT2TgMJg/Syp1I0vzXlrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:07:9c:76:db:8e:c4:d0:ed:5d:27:8e:10:e8:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4 Validity Not Before: Feb 9 11:01:12 2026 GMT Not After : Feb 10 11:01:12 2026 GMT Subject: CN=bb31499a7954963a75895dd622913aab1af3c627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:2c:c4:b6:cd:31:c0:6d:2b:21:80:12:14: f4:58:ef:53:e7:3a:e8:c1:c2:51:7b:01:dc:98:6e: a7:8a:b7:5c:09:fa:f3:8d:be:a7:f6:47:83:aa:f0: a5:a8:b8:84:48:72:d7:70:9d:67:06:81:5d:04:eb: dd:73:f7:d7:64:7d:76:23:44:cf:6f:67:d2:c2:2a: 7a:a3:e6:0c:96:bf:02:bc:36:9e:dd:c4:f8:89:96: 80:ef:4d:b4:ef:6e:f6:48:e0:88:44:42:81:d4:f9: 2c:6b:e7:91:d4:35:41:a0:e3:7c:bf:25:d6:66:29: da:0c:ff:fb:d2:f5:da:24:27:3d:4a:d1:41:50:14: 78:f6:aa:83:f1:52:1d:25:52:a8:4f:d4:12:9e:a3: 59:6c:2e:eb:1b:6d:42:bb:be:be:51:0e:81:c2:f1: 0c:5c:ac:f1:82:30:74:40:2c:a4:88:86:ff:43:3b: 30:e3:38:58:ed:c7:bd:42:39:8e:b4:de:0c:85:22: d0:d5:95:0b:5d:5d:6b:eb:2d:dc:3d:37:6a:74:75: e1:c3:57:d1:c7:02:85:93:db:bf:9f:f6:74:92:6b: 0f:54:1a:f8:8a:36:ea:c0:6c:38:8a:84:a5:a6:d5: 09:2a:a1:52:18:2c:04:f6:48:7c:61:41:6f:4d:3a: d5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:31:49:9A:79:54:96:3A:75:89:5D:D6:22:91:3A:AB:1A:F3:C6:27 X509v3 Authority Key Identifier: keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:7e:fc:84:90:b8:8a:d7:26:82:b3:18:42:1b:71:43:c3:2b: e5:82:af:0c:59:13:c2:63:31:6b:95:ad:c2:ec:0c:93:d9:bb: 0e:36:4f:93:72:9c:9b:3f:08:e2:20:ef:7c:86:5a:6a:9f:e5: 00:9b:61:d8:64:28:3f:31:83:54:e7:5a:86:be:a3:61:e5:64: 94:57:74:c8:eb:96:7e:cb:ab:18:a2:a9:49:f5:7c:b3:e6:df: 0f:f6:e5:04:fa:c8:fb:33:b0:89:53:06:66:f0:a9:7b:6e:f7: 06:83:1e:a7:26:92:23:27:e3:36:62:9c:5a:ae:bd:18:52:09: 7c:26:5e:30:b8:12:b8:52:1e:cc:f4:70:e7:c4:a1:dc:58:82: 85:e1:f8:ae:8a:31:55:54:f2:d6:7a:f5:8f:0e:9a:b7:c3:78: 69:ad:78:a4:b1:a4:f4:62:95:cc:12:e2:60:98:15:64:b3:80: 39:44:a3:f0:19:f6:46:97:50:77:40:d4:1d:b0:76:05:52:91: b9:1e:c0:b5:8e:76:3d:33:55:6f:6e:81:1c:73:a4:80:8b:42: be:bd:70:61:b3:0c:2c:46:6d:6c:57:0d:99:79:b6:b2:20:5e: 41:ae:80:d7:d9:75:25:db:8a:2f:b8:7f:bb:80:f2:52:46:f6: 48:f9:10:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEAecdtuOxNDtXSeOEOh8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzBjNDQxZmI4OTJiOGM5ODE2NTM0ODg1MDY5ZmNkMzMw MGM5YTQwHhcNMjYwMjA5MTEwMTEyWhcNMjYwMjEwMTEwMTEyWjAzMTEwLwYDVQQD EyhiYjMxNDk5YTc5NTQ5NjNhNzU4OTVkZDYyMjkxM2FhYjFhZjNjNjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKQsxLbNMcBtKyGAEhT0WO9T5zro wcJRewHcmG6nirdcCfrzjb6n9keDqvClqLiESHLXcJ1nBoFdBOvdc/fXZH12I0TP b2fSwip6o+YMlr8CvDae3cT4iZaA70207272SOCIREKB1Pksa+eR1DVBoON8vyXW ZinaDP/70vXaJCc9StFBUBR49qqD8VIdJVKoT9QSnqNZbC7rG21Cu76+UQ6BwvEM XKzxgjB0QCykiIb/Qzsw4zhY7ce9QjmOtN4MhSLQ1ZULXV1r6y3cPTdqdHXhw1fR xwKFk9u/n/Z0kmsPVBr4ijbqwGw4ioSlptUJKqFSGCwE9kh8YUFvTTrVfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsxSZp5VJY6dYld1iKROqsa88YnMB8GA1UdIwQY MBaAFNpwxEH7iSuMmBZTSIUGn80zAMmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMt MTVmYzBiNjhmODQ0LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMtMTVmYzBiNjhmODQ0 LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYX78hJC4 itcmgrMYQhtxQ8Mr5YKvDFkTwmMxa5WtwuwMk9m7DjZPk3Kcmz8I4iDvfIZaap/l AJth2GQoPzGDVOdahr6jYeVklFd0yOuWfsurGKKpSfV8s+bfD/blBPrI+zOwiVMG ZvCpe273BoMepyaSIyfjNmKcWq69GFIJfCZeMLgSuFIezPRw58Sh3FiCheH4roox VVTy1nr1jw6at8N4aa14pLGk9GKVzBLiYJgVZLOAOUSj8Bn2RpdQd0DUHbB2BVKR uR7AtY52PTNVb26BHHOkgItCvr1wYbMMLEZtbFcNmXm2siBeQa6A19l1JduKL7h/ u4DyUkb2SPkQXA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:40 2026 by rpki-client