This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft File: 2dHiILYBtn_jDLt7fBvyL74i-08.mft (raw, json) Hash identifier: l/8TzXY/pqOINUGruoFFWSMNO43tncxpdSTQZchFym8= Subject key identifier: A5:9F:85:48:78:EA:2C:E0:5D:4E:5A:E9:58:02:11:A8:28:A2:F1:61 Authority key identifier: D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F Certificate issuer: /CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f Certificate serial: 019C420F435CDE19C71C070B8DDB13DD6047 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft Manifest number: 0C9D Signing time: Mon 09 Feb 2026 11:00:22 +0000 Manifest this update: Mon 09 Feb 2026 11:00:22 +0000 Manifest next update: Tue 10 Feb 2026 11:00:22 +0000 Files and hashes: 1: 2dHiILYBtn_jDLt7fBvyL74i-08.crl (hash: Amb8q2sXmQ/sxQiMnwa13hREussgNT5xacxh8kUoZ2o=) 2: RHS11XqX5pjtfXZH7I66Gp4Ow3s.roa (hash: 9qk+uC8E6OyhqYxBRe7jo40pbmRAOPPP2eDmccn/Upc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:43:5c:de:19:c7:1c:07:0b:8d:db:13:dd:60:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f Validity Not Before: Feb 9 11:00:22 2026 GMT Not After : Feb 10 11:00:22 2026 GMT Subject: CN=a59f854878ea2ce05d4e5ae9580211a828a2f161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:9d:2d:5b:a0:c4:94:ba:48:71:28:e4:24: 5b:da:7e:47:61:b0:3e:fe:b2:b7:56:c4:b1:0e:05: ab:02:3e:c2:1e:5f:00:ed:62:75:5a:85:51:0d:a5: 17:a5:2e:64:bc:96:ce:13:da:f4:2e:f6:f2:b1:20: ea:06:45:7a:2a:23:75:e1:8c:60:d1:9d:67:35:4c: 4f:5a:9c:ec:b1:7a:70:95:0e:35:e6:6d:f2:d6:43: b5:c7:54:31:a5:65:b5:d7:ea:ec:28:48:a1:ea:92: 06:7c:ff:ee:63:40:83:f8:62:25:70:89:7a:13:6f: ad:90:7a:55:79:a6:14:6b:03:3b:21:c7:95:09:f5: 32:fe:8f:d0:2d:e2:6f:18:55:05:e7:8b:a1:90:aa: 7b:2e:98:4d:39:18:82:ea:bc:ff:32:6d:b0:4e:07: 8d:6c:79:2e:95:82:29:e8:90:e0:0f:8f:ca:93:0b: 0c:11:fb:08:8c:9b:90:c8:b6:ff:b3:f9:78:21:e8: 7b:7c:f7:2e:8a:b1:f7:39:dd:9f:0f:80:2c:71:c8: e0:f1:4d:c1:1c:73:ea:47:c5:ae:a9:00:12:94:f1: 0f:6e:4b:91:75:21:6d:62:13:bd:8b:17:71:01:cc: eb:8f:54:b0:41:36:c3:03:05:6f:c5:92:bf:e0:71: a9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9F:85:48:78:EA:2C:E0:5D:4E:5A:E9:58:02:11:A8:28:A2:F1:61 X509v3 Authority Key Identifier: keyid:D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:85:09:3d:7e:90:47:fd:5c:42:3b:28:3e:19:69:67:5a:5c: dc:0a:1c:c2:7c:9d:d2:6a:e7:90:8f:fb:b3:a7:35:88:39:b7: 44:a8:99:97:07:2b:7a:41:65:55:d8:8a:cb:15:a5:13:e7:cf: bd:61:4c:c4:cc:1a:c9:0d:fa:81:da:69:1b:68:f6:6b:df:28: 4d:bd:f1:28:30:36:0b:44:ee:db:7e:96:aa:07:20:15:ed:07: a6:df:c3:fa:cd:75:1c:8c:73:c9:00:f2:8b:8c:da:ba:0a:50: 0a:ca:d9:ad:de:d5:2d:c1:8a:57:4c:75:13:d4:19:c1:71:57: fd:21:a4:04:c9:77:67:92:74:c8:fa:5b:8d:1f:73:6c:d7:01: e8:22:a7:eb:bf:80:b4:b7:30:03:73:25:44:6d:f2:92:bc:58: 13:06:94:85:d5:80:77:76:b6:f1:f1:96:dc:73:33:42:f2:83: 80:95:42:90:73:7e:48:f0:9d:84:dc:c8:b2:6d:01:c1:cc:c2: 50:49:a9:62:89:44:83:6b:b9:06:2e:9c:68:24:b4:44:68:da: b7:2e:cd:6a:3a:4e:f8:8c:bf:db:51:0b:40:23:a8:13:4e:62: 71:7e:3e:e9:53:e7:9e:07:d2:03:ba:27:cd:59:fb:bd:12:6d: 2e:b1:b3:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0Nc3hnHHAcLjdsT3WBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZDFlMjIwYjYwMWI2N2ZlMzBjYmI3YjdjMWJmMjJmYmUy MmZiNGYwHhcNMjYwMjA5MTEwMDIyWhcNMjYwMjEwMTEwMDIyWjAzMTEwLwYDVQQD EyhhNTlmODU0ODc4ZWEyY2UwNWQ0ZTVhZTk1ODAyMTFhODI4YTJmMTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqedLVugxJS6SHEo5CRb2n5HYbA+ /rK3VsSxDgWrAj7CHl8A7WJ1WoVRDaUXpS5kvJbOE9r0LvbysSDqBkV6KiN14Yxg 0Z1nNUxPWpzssXpwlQ415m3y1kO1x1QxpWW11+rsKEih6pIGfP/uY0CD+GIlcIl6 E2+tkHpVeaYUawM7IceVCfUy/o/QLeJvGFUF54uhkKp7LphNORiC6rz/Mm2wTgeN bHkulYIp6JDgD4/KkwsMEfsIjJuQyLb/s/l4Ieh7fPcuirH3Od2fD4Asccjg8U3B HHPqR8WuqQASlPEPbkuRdSFtYhO9ixdxAczrj1SwQTbDAwVvxZK/4HGp7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWfhUh46izgXU5a6VgCEagoovFhMB8GA1UdIwQY MBaAFNnR4iC2AbZ/4wy7e3wb8i++IvtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmRIaUlMWUJ0bl9qREx0N2ZCdnlMNzRpLTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82NDExOWYtOTY4NC00Mjg0LWIyMzIt YWYyN2Q3Y2ExYmY2LzEvMmRIaUlMWUJ0bl9qREx0N2ZCdnlMNzRpLTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82NDExOWYtOTY4NC00Mjg0LWIyMzItYWYyN2Q3Y2ExYmY2 LzEvMmRIaUlMWUJ0bl9qREx0N2ZCdnlMNzRpLTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIUJPX6Q R/1cQjsoPhlpZ1pc3Aocwnyd0mrnkI/7s6c1iDm3RKiZlwcrekFlVdiKyxWlE+fP vWFMxMwayQ36gdppG2j2a98oTb3xKDA2C0Tu236WqgcgFe0Hpt/D+s11HIxzyQDy i4zaugpQCsrZrd7VLcGKV0x1E9QZwXFX/SGkBMl3Z5J0yPpbjR9zbNcB6CKn67+A tLcwA3MlRG3ykrxYEwaUhdWAd3a28fGW3HMzQvKDgJVCkHN+SPCdhNzIsm0BwczC UEmpYolEg2u5Bi6caCS0RGjaty7NajpO+Iy/21ELQCOoE05icX4+6VPnngfSA7on zVn7vRJtLrGzfA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:19 2026 by rpki-client