This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
File: 2q_pD50IEzTMko7e6bxzFUBwjf0.mft (raw, json)
Hash identifier: 7mKzen9U8o1lEA42Ul/HzMASYyftgxRMfvc1Qje+uoI=
Subject key identifier: FC:2A:E7:EF:56:A9:EA:2A:87:66:9B:2C:65:F2:0B:34:F6:8C:9F:0B
Authority key identifier: DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
Certificate issuer: /CN=daafe90f9d081334cc928edee9bc731540708dfd
Certificate serial: 019C420F2AD105F10C31443496A99E786847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
Manifest number: 0B65
Signing time: Mon 09 Feb 2026 11:00:16 +0000
Manifest this update: Mon 09 Feb 2026 11:00:16 +0000
Manifest next update: Tue 10 Feb 2026 11:00:16 +0000
Files and hashes: 1: 1JQv5SOtSeXXkOrfiZJVS0aL7xU.roa (hash: AMT4fhj0NQTYFJqA1ljnLjH+q0LAKk7Eo+Nf4uYT4Lg=)
2: 2q_pD50IEzTMko7e6bxzFUBwjf0.crl (hash: 7SfM7SnfOChLWlrlXD/SmOg6PbfLv8id0W/UYOAUTwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:2a:d1:05:f1:0c:31:44:34:96:a9:9e:78:68:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daafe90f9d081334cc928edee9bc731540708dfd
Validity
Not Before: Feb 9 11:00:16 2026 GMT
Not After : Feb 10 11:00:16 2026 GMT
Subject: CN=fc2ae7ef56a9ea2a87669b2c65f20b34f68c9f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ff:ac:9e:43:e0:56:b3:06:2c:50:fe:b7:68:
f3:92:8e:1a:e5:a6:8f:53:10:9e:4b:41:81:e5:06:
89:0d:b0:c3:92:dd:97:4a:75:ce:c5:1c:3f:62:61:
09:f3:8d:b4:cd:be:26:ff:e9:50:e7:2a:a0:39:86:
2a:97:43:aa:31:87:08:ea:80:07:e4:d5:0b:87:f9:
33:ba:4d:63:8e:a7:fe:56:de:58:2b:70:c2:5d:9d:
c1:ce:24:a7:e6:21:ea:c1:37:76:da:93:3c:09:51:
74:d9:79:c9:3f:d7:88:8e:c4:82:2f:6f:eb:41:28:
37:16:f0:29:97:37:33:f4:61:49:9f:c4:79:bb:f5:
7a:e1:74:df:d5:fe:74:5e:fa:ef:3c:aa:d3:68:e2:
8c:c7:9c:29:ee:87:63:82:73:66:be:55:89:ed:4e:
12:64:3a:e4:07:4e:2c:44:ba:75:0f:df:38:87:77:
2e:e0:95:01:86:e2:05:c5:62:e2:ce:d0:23:67:d3:
e8:3b:49:b4:0b:7e:d8:7d:68:01:08:47:77:f5:97:
cb:f4:2a:29:9b:cf:9d:3d:5d:a6:9d:bc:9d:d7:74:
57:41:e0:e8:9d:62:53:f1:f3:6c:76:dc:d4:4b:72:
ce:df:2f:08:14:3a:fa:2b:b8:aa:6f:88:50:b8:ff:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2A:E7:EF:56:A9:EA:2A:87:66:9B:2C:65:F2:0B:34:F6:8C:9F:0B
X509v3 Authority Key Identifier:
keyid:DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c3:6a:47:f2:19:99:76:1a:23:7a:9a:b1:47:61:66:e1:70:
01:52:1e:ec:ca:9b:27:59:9a:6c:48:38:1c:36:1d:3a:11:0d:
75:3d:02:8e:5f:b6:4b:49:9b:00:35:f7:34:cf:06:7a:72:a9:
21:a2:16:79:a3:f5:c7:2f:d1:cb:57:ad:35:d5:53:c7:ab:56:
7f:69:5e:bf:1b:53:85:c8:34:53:df:43:3f:5d:b1:ad:09:83:
9d:03:4b:d8:e2:17:25:c4:0c:30:ff:c1:14:c1:ea:71:1d:8d:
c6:90:39:92:01:e8:a3:84:78:0a:5b:00:e2:89:29:28:58:43:
87:22:70:b4:8d:f8:f7:a7:17:45:59:41:a1:3e:2e:d4:26:0c:
24:4b:de:a2:b1:85:08:77:7c:bc:f2:db:3b:98:a4:59:e8:ae:
ef:90:47:06:af:0b:19:84:0f:79:68:39:ec:c2:5d:d7:2f:fe:
f4:53:b5:b5:48:af:87:6b:3a:96:38:05:9c:cf:59:b2:d6:bd:
92:20:c3:72:f4:40:e5:0b:28:b7:54:fe:c9:82:fb:c0:6d:61:
40:9f:b6:ed:50:ee:30:6b:ad:68:56:f0:7a:0d:e6:b1:ec:83:
7f:f6:1b:3a:0d:57:58:c9:66:8e:94:47:ea:90:18:36:c3:7b:
3d:e4:c3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:03 2026 by rpki-client