This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft File: 2QqBMQKSV7_3YURI5va1A8Ersp0.mft (raw, json) Hash identifier: tYGgeWaHw8IZPfcLCA6b2O4+AyPDOIYmFHnpGjPju6A= Subject key identifier: 58:C2:F3:3F:94:15:3F:AB:29:A1:59:94:F5:C9:49:6C:AD:4E:CB:48 Authority key identifier: D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D Certificate issuer: /CN=d90a8131029257bff7614448e6f6b503c12bb29d Certificate serial: 019C42B3F8793F5686D5139DCCB1792F9558 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft Manifest number: 04E1 Signing time: Mon 09 Feb 2026 14:00:16 +0000 Manifest this update: Mon 09 Feb 2026 14:00:16 +0000 Manifest next update: Tue 10 Feb 2026 14:00:16 +0000 Files and hashes: 1: 2QqBMQKSV7_3YURI5va1A8Ersp0.crl (hash: 700j9zxbCuM2nvxfSimEsJ60aYcj03TUZAVvcyUPVBQ=) 2: qTa7UU6Qri1LNslfL1VV2t1o7uE.roa (hash: 2xhVFcGKtML/9CwTX6mgniStIE2RskPbIQ6SKVau5AA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:f8:79:3f:56:86:d5:13:9d:cc:b1:79:2f:95:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90a8131029257bff7614448e6f6b503c12bb29d Validity Not Before: Feb 9 14:00:16 2026 GMT Not After : Feb 10 14:00:16 2026 GMT Subject: CN=58c2f33f94153fab29a15994f5c9496cad4ecb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:b0:a3:87:57:b5:b8:9c:9f:0a:a6:dd:fc: d5:29:56:24:bc:0e:94:8a:9c:f7:77:f7:77:9a:47: e0:1e:f7:97:03:21:8a:65:ad:18:30:c7:79:0b:59: dd:02:82:c6:95:90:03:de:68:48:1f:8b:b7:ba:82: 31:08:7f:fd:4e:36:d9:a3:bb:8d:fe:9e:26:c8:09: 2c:5f:7c:f4:b7:92:86:f2:ec:68:7c:32:6b:3a:1f: 31:d4:43:34:84:42:12:af:45:46:32:6f:e9:22:ba: cb:8c:ff:69:50:06:16:ef:ef:83:5a:f1:ed:c8:12: 65:65:3d:ac:2a:a9:88:4c:07:a5:c6:a3:e7:8f:d5: 76:15:40:4a:21:70:8d:af:52:59:ab:c2:6e:e8:1e: 73:67:3a:31:1f:a2:7f:87:ab:43:d8:4f:42:e1:76: f1:d9:89:f6:cc:8b:37:3f:dc:7d:f7:0e:8b:5a:e6: 39:da:3e:14:6a:81:a5:7f:5d:a7:bf:1c:81:ee:cc: e7:0f:97:bf:aa:72:91:da:f0:fe:ea:da:8f:14:6f: ad:f4:ad:49:50:de:3d:8e:0c:f3:53:df:31:9e:da: f4:b3:f8:cd:a4:a3:39:02:b9:6c:f6:0f:6b:8d:65: ca:9b:a2:88:5e:18:f2:0b:aa:1c:0c:65:70:e9:f1: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C2:F3:3F:94:15:3F:AB:29:A1:59:94:F5:C9:49:6C:AD:4E:CB:48 X509v3 Authority Key Identifier: keyid:D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b9:3b:76:83:4f:62:e4:f6:04:d0:d0:29:41:b8:58:78:e5: b2:7a:42:14:ec:8f:d7:5f:4f:74:a1:7b:4e:f8:9d:3a:fe:aa: 75:57:94:1f:6e:a2:24:25:05:68:67:05:f7:1f:97:15:e3:0d: 3c:3a:c7:9c:c1:38:23:e8:dd:ff:1d:a9:4c:61:a3:1b:bc:f0: c2:af:d6:5a:d9:18:69:49:4b:7b:ca:e8:57:bb:3a:0a:58:84: 8e:80:27:f0:63:6c:01:ef:2c:27:c2:33:d8:d3:0a:fc:2d:a3: 28:fa:8f:48:1e:86:9a:80:c3:8d:fe:e9:2f:cf:fd:86:57:95: 1e:cd:c5:41:b3:15:3d:9e:a3:78:f3:71:f2:cd:f1:d6:d1:7f: 36:00:42:1f:4b:4c:ed:c6:95:9e:1c:55:d7:47:33:ec:5d:a0: d9:1b:ba:af:68:0b:53:e8:44:50:2a:dc:40:69:3b:3e:2b:46: f6:09:89:d0:fd:64:b4:8f:9e:41:fa:b9:8e:81:38:52:3c:28: 63:f8:12:f2:c0:96:e1:00:c4:4e:48:dd:2d:57:c6:60:dc:6f: 39:30:48:d7:bc:a8:21:c5:b7:f4:a7:79:60:45:62:c2:80:ec: 48:fc:5e:d5:4c:79:58:d3:39:b8:d5:06:f5:a2:f4:22:20:7d: 23:11:6a:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/h5P1aG1ROdzLF5L5VYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MGE4MTMxMDI5MjU3YmZmNzYxNDQ0OGU2ZjZiNTAzYzEy YmIyOWQwHhcNMjYwMjA5MTQwMDE2WhcNMjYwMjEwMTQwMDE2WjAzMTEwLwYDVQQD Eyg1OGMyZjMzZjk0MTUzZmFiMjlhMTU5OTRmNWM5NDk2Y2FkNGVjYjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1awo4dXtbicnwqm3fzVKVYkvA6U ipz3d/d3mkfgHveXAyGKZa0YMMd5C1ndAoLGlZAD3mhIH4u3uoIxCH/9TjbZo7uN /p4myAksX3z0t5KG8uxofDJrOh8x1EM0hEISr0VGMm/pIrrLjP9pUAYW7++DWvHt yBJlZT2sKqmITAelxqPnj9V2FUBKIXCNr1JZq8Ju6B5zZzoxH6J/h6tD2E9C4Xbx 2Yn2zIs3P9x99w6LWuY52j4UaoGlf12nvxyB7sznD5e/qnKR2vD+6tqPFG+t9K1J UN49jgzzU98xntr0s/jNpKM5Arls9g9rjWXKm6KIXhjyC6ocDGVw6fFZEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjC8z+UFT+rKaFZlPXJSWytTstIMB8GA1UdIwQY MBaAFNkKgTECkle/92FESOb2tQPBK7KdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlFxQk1RS1NWN18zWVVSSTV2YTFBOEVyc3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84ZmYyYWQtYTY4Zi00NDY1LThkMTgt OTZjZDg2ZmQwY2I3LzEvMlFxQk1RS1NWN18zWVVSSTV2YTFBOEVyc3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi84ZmYyYWQtYTY4Zi00NDY1LThkMTgtOTZjZDg2ZmQwY2I3 LzEvMlFxQk1RS1NWN18zWVVSSTV2YTFBOEVyc3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLk7doNP YuT2BNDQKUG4WHjlsnpCFOyP119PdKF7TvidOv6qdVeUH26iJCUFaGcF9x+XFeMN PDrHnME4I+jd/x2pTGGjG7zwwq/WWtkYaUlLe8roV7s6CliEjoAn8GNsAe8sJ8Iz 2NMK/C2jKPqPSB6GmoDDjf7pL8/9hleVHs3FQbMVPZ6jePNx8s3x1tF/NgBCH0tM 7caVnhxV10cz7F2g2Ru6r2gLU+hEUCrcQGk7PitG9gmJ0P1ktI+eQfq5joE4Ujwo Y/gS8sCW4QDETkjdLVfGYNxvOTBI17yoIcW39Kd5YEViwoDsSPxe1Ux5WNM5uNUG 9aL0IiB9IxFqmw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:40 2026 by rpki-client