This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json) Hash identifier: TfGexIRqz0YXsLHT0NY+/mR+Mt9EqfKqbj/Q4kMz0i4= Subject key identifier: 63:0B:66:DC:A0:4E:87:4A:1D:47:0E:2F:45:74:B5:FB:6E:11:43:10 Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65 Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65 Certificate serial: 019C427DEE74C5B8C35FA932458CEFBFE2FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft Manifest number: 020F Signing time: Mon 09 Feb 2026 13:01:15 +0000 Manifest this update: Mon 09 Feb 2026 13:01:15 +0000 Manifest next update: Tue 10 Feb 2026 13:01:15 +0000 Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: 2WsO5QuAKAoaH6sOJsFoiUDV9d9YVSmpsVVrJUbRCYI=) 2: mwRdGEd4WRoql9JK1a5PSVnSLxU.roa (hash: sRHWQB29NgjpyQT+asPP0Z1+0SKF0k83xk50WN9aQks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ee:74:c5:b8:c3:5f:a9:32:45:8c:ef:bf:e2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65 Validity Not Before: Feb 9 13:01:15 2026 GMT Not After : Feb 10 13:01:15 2026 GMT Subject: CN=630b66dca04e874a1d470e2f4574b5fb6e114310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:0b:35:6e:88:b5:5c:41:c9:09:c4:47:f0: 59:7c:40:8b:65:b1:48:d5:d5:c1:66:28:fe:f6:fe: f4:ca:d2:e1:d6:6e:22:27:9b:11:a8:4f:79:96:f4: 07:db:68:f3:dc:39:f7:72:d8:2c:c2:85:ad:bd:4d: 01:42:53:68:e1:a7:0e:cf:5c:70:e8:08:50:93:57: 8f:e8:69:0f:31:1a:d7:78:72:c5:97:3d:ea:27:97: 7f:de:5c:1c:85:3f:4b:81:6f:87:d5:56:1c:2f:0f: 9d:52:26:ec:6b:cf:d2:6a:dc:75:71:f0:3b:09:d2: 53:a9:cd:ca:70:e6:14:88:cf:37:8a:10:31:53:c5: 21:8d:ca:f4:c9:2b:ea:67:09:4e:79:1f:76:ee:fc: 59:cd:11:ed:5c:61:f4:85:92:7c:f4:8d:b2:89:c4: 4c:d9:94:67:7c:bc:50:04:81:8a:02:2c:70:aa:de: df:2e:1b:a0:74:ac:4f:5b:c5:e2:ff:7e:2f:ab:ff: 33:77:68:82:8c:cf:3a:55:67:bf:c2:81:56:ea:32: 02:e2:b5:3d:c5:06:3a:86:89:c7:c7:a7:39:b2:49: db:5f:8c:d4:fe:f9:b6:2e:e5:f7:fd:78:c2:1b:ec: 9b:73:ad:2d:c6:e2:5d:f7:01:aa:60:01:e7:ae:20: 83:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0B:66:DC:A0:4E:87:4A:1D:47:0E:2F:45:74:B5:FB:6E:11:43:10 X509v3 Authority Key Identifier: keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:34:a0:b4:25:e3:09:bf:8f:54:e7:3e:46:66:47:ab:c7:cd: a8:85:74:ab:91:b9:fd:4d:4c:04:0d:8b:f1:5b:10:10:2a:80: 85:29:05:64:e9:dd:6a:76:d6:85:53:2d:01:bf:b6:0d:61:d8: 75:1d:3d:c4:8c:3a:90:d4:fc:ea:ca:19:0f:4e:dd:df:e5:49: a2:f3:3a:8c:8a:7e:f5:6e:1c:11:08:c2:94:20:91:2e:7b:96: 90:12:f5:78:ae:53:8a:56:a8:b1:84:b2:65:e0:c3:3d:4e:c9: 11:a9:b3:99:76:c6:b5:87:66:c7:e7:83:b7:3b:e5:58:7f:b1: 47:ff:ef:c6:6e:2f:13:c8:56:c6:56:30:22:78:60:3f:77:fa: 86:a3:0b:3e:23:17:18:46:a9:5a:fe:06:88:f2:53:c5:a0:9a: 61:13:4e:d4:06:df:e7:11:44:dd:08:2a:71:d2:65:a8:91:0b: 64:bd:35:5b:ce:14:c9:ea:d8:46:22:33:8b:9a:c5:9b:83:1c: 18:4b:fb:c4:20:ee:cd:59:f2:86:de:79:b2:a0:b7:67:3c:cf: 2b:a9:1e:e6:26:55:73:cc:56:71:9f:84:06:60:78:bd:f3:df: 0d:8f:03:a6:dd:97:0e:85:29:7f:e1:4a:0e:be:9f:38:23:fc: bb:12:73:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfe50xbjDX6kyRYzvv+L7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MTc4NmEwNjllNDkzNGIyNjgxYmI4ZTliMzczODA3OWIy NGVmNjUwHhcNMjYwMjA5MTMwMTE1WhcNMjYwMjEwMTMwMTE1WjAzMTEwLwYDVQQD Eyg2MzBiNjZkY2EwNGU4NzRhMWQ0NzBlMmY0NTc0YjVmYjZlMTE0MzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu8LNW6ItVxByQnER/BZfECLZbFI 1dXBZij+9v70ytLh1m4iJ5sRqE95lvQH22jz3Dn3ctgswoWtvU0BQlNo4acOz1xw 6AhQk1eP6GkPMRrXeHLFlz3qJ5d/3lwchT9LgW+H1VYcLw+dUibsa8/Satx1cfA7 CdJTqc3KcOYUiM83ihAxU8Uhjcr0ySvqZwlOeR927vxZzRHtXGH0hZJ89I2yicRM 2ZRnfLxQBIGKAixwqt7fLhugdKxPW8Xi/34vq/8zd2iCjM86VWe/woFW6jIC4rU9 xQY6honHx6c5sknbX4zU/vm2LuX3/XjCG+ybc60txuJd9wGqYAHnriCD9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMLZtygTodKHUcOL0V0tftuEUMQMB8GA1UdIwQY MBaAFNkXhqBp5JNLJoG7jps3OAebJO9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUt NTJjYmE5N2Q5YjllLzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUtNTJjYmE5N2Q5Yjll LzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzSgtCXj Cb+PVOc+RmZHq8fNqIV0q5G5/U1MBA2L8VsQECqAhSkFZOndanbWhVMtAb+2DWHY dR09xIw6kNT86soZD07d3+VJovM6jIp+9W4cEQjClCCRLnuWkBL1eK5TilaosYSy ZeDDPU7JEamzmXbGtYdmx+eDtzvlWH+xR//vxm4vE8hWxlYwInhgP3f6hqMLPiMX GEapWv4GiPJTxaCaYRNO1Abf5xFE3QgqcdJlqJELZL01W84UyerYRiIzi5rFm4Mc GEv7xCDuzVnyht55sqC3ZzzPK6ke5iZVc8xWcZ+EBmB4vfPfDY8Dpt2XDoUpf+FK Dr6fOCP8uxJztA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:33 2026 by rpki-client