This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft File: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft (raw, json) Hash identifier: ZJr8+w5QPOYXVOyjW4KLG+uVRbB/1ov6q1jSKKn3bOE= Subject key identifier: 35:F8:93:C1:39:91:FF:C5:E3:81:2F:CF:D7:C4:50:C3:34:ED:95:90 Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C Certificate issuer: /CN=d977120937500eb46696428962e510e02c348e6c Certificate serial: 019C41D8A3D2E50C1C7D7912A952F5617099 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft Manifest number: 0EF7 Signing time: Mon 09 Feb 2026 10:00:42 +0000 Manifest this update: Mon 09 Feb 2026 10:00:42 +0000 Manifest next update: Tue 10 Feb 2026 10:00:42 +0000 Files and hashes: 1: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl (hash: eq4Wk1L8Jxku5lr45+CWQrhJ7P7AOdFSqF0HwSpkBfM=) 2: kPCV9Z9GO0MBuXeU-WIy78ikMug.roa (hash: 0NQx9iiXvgvHENMrWY26SmRkGT/goJQ6m2yue/PuWAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:a3:d2:e5:0c:1c:7d:79:12:a9:52:f5:61:70:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d977120937500eb46696428962e510e02c348e6c Validity Not Before: Feb 9 10:00:42 2026 GMT Not After : Feb 10 10:00:42 2026 GMT Subject: CN=35f893c13991ffc5e3812fcfd7c450c334ed9590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:34:34:79:64:07:b2:90:ca:e0:e5:58:24: 65:74:16:e2:58:af:4a:09:12:a7:2f:69:3d:6d:eb: bf:2f:66:de:b0:e2:f7:b8:10:4b:96:1d:b8:8a:d2: ee:63:31:5f:ca:ed:0f:46:45:06:90:64:fd:0c:ab: 5b:d4:62:18:f5:ab:4b:ea:96:5d:9e:64:d4:3f:7d: 9a:11:01:c7:49:f1:7d:1c:be:db:01:b2:43:e2:cc: 5f:bc:dd:94:2b:88:a2:cc:2f:00:77:43:9c:5a:b8: c8:ac:25:b8:eb:25:a9:ce:9a:68:75:71:d1:27:eb: 09:c9:31:83:99:34:89:48:c4:02:31:f7:94:75:40: a2:4c:4b:83:5b:a6:96:0b:36:a3:32:07:f4:5a:e4: 7c:4c:13:0d:f5:40:02:a0:8f:e5:52:eb:49:0c:03: cb:b8:ce:9d:a4:85:72:16:49:4f:96:62:01:88:35: 52:53:eb:d8:21:6e:34:7a:74:d4:e8:68:ec:0b:2c: 4f:41:17:9d:b0:a9:cd:c2:a5:ec:24:19:33:4d:c2: 56:cb:30:15:74:c0:ca:1e:77:cd:f6:7a:6a:c8:db: ac:a3:2b:57:a0:63:56:ba:cf:57:bc:a2:61:eb:bb: 39:02:39:8e:a9:e3:38:2b:1a:bd:2b:74:da:73:a0: 2d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F8:93:C1:39:91:FF:C5:E3:81:2F:CF:D7:C4:50:C3:34:ED:95:90 X509v3 Authority Key Identifier: keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d8:cf:be:db:aa:4c:2e:28:da:c2:d5:13:23:1e:38:14:a0: 34:29:0d:14:ee:af:e7:a5:fa:82:df:17:3c:20:90:57:6f:26: 36:9c:8e:15:f6:6e:c6:bc:ea:37:d5:23:70:60:f9:07:64:82: 0b:b4:54:18:22:d1:a9:40:88:7a:0d:96:bd:b7:b8:a5:dc:21: e3:1a:34:d9:2a:b7:c7:90:2e:82:43:39:c4:c6:21:ea:13:f9: 1c:79:3f:ec:bd:bb:6b:ee:8c:6f:a6:ba:a9:db:8a:50:cb:49: ec:33:da:5a:7a:f9:c5:41:98:b3:9d:47:4d:8a:26:9b:33:3b: f3:3d:62:49:6e:e1:21:2c:09:88:78:68:2d:2d:f6:8f:b6:70: a1:5a:4c:3c:a0:32:c7:64:16:87:60:6d:63:49:3c:19:ce:32: 3a:6d:b9:e8:46:a9:d7:fd:4c:5d:db:d9:2a:c6:0b:7f:18:a8: 44:c4:41:18:8a:0e:55:6c:8a:59:d1:7a:07:40:3f:3b:fa:09: 96:a8:78:65:8d:b8:2e:52:f6:29:1e:54:52:65:0a:e5:49:41: ce:df:69:77:8f:7a:58:99:aa:e1:e3:e8:60:4e:0f:6f:28:03: 21:b7:42:bd:72:08:10:c2:43:cc:56:84:21:bb:91:d6:d0:ac: fa:be:a7:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2KPS5QwcfXkSqVL1YXCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NzcxMjA5Mzc1MDBlYjQ2Njk2NDI4OTYyZTUxMGUwMmMz NDhlNmMwHhcNMjYwMjA5MTAwMDQyWhcNMjYwMjEwMTAwMDQyWjAzMTEwLwYDVQQD EygzNWY4OTNjMTM5OTFmZmM1ZTM4MTJmY2ZkN2M0NTBjMzM0ZWQ5NTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt00NHlkB7KQyuDlWCRldBbiWK9K CRKnL2k9beu/L2besOL3uBBLlh24itLuYzFfyu0PRkUGkGT9DKtb1GIY9atL6pZd nmTUP32aEQHHSfF9HL7bAbJD4sxfvN2UK4iizC8Ad0OcWrjIrCW46yWpzppodXHR J+sJyTGDmTSJSMQCMfeUdUCiTEuDW6aWCzajMgf0WuR8TBMN9UACoI/lUutJDAPL uM6dpIVyFklPlmIBiDVSU+vYIW40enTU6GjsCyxPQRedsKnNwqXsJBkzTcJWyzAV dMDKHnfN9npqyNusoytXoGNWus9XvKJh67s5AjmOqeM4Kxq9K3Tac6AttwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDX4k8E5kf/F44Evz9fEUMM07ZWQMB8GA1UdIwQY MBaAFNl3Egk3UA60ZpZCiWLlEOAsNI5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlhjU0NUZFFEclJtbGtLSll1VVE0Q3cwam13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZWVkYjktZTU5NC00MTViLWI4OGEt ZGUzODFkYjQzNmVjLzEvMlhjU0NUZFFEclJtbGtLSll1VVE0Q3cwam13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZWVkYjktZTU5NC00MTViLWI4OGEtZGUzODFkYjQzNmVj LzEvMlhjU0NUZFFEclJtbGtLSll1VVE0Q3cwam13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtjPvtuq TC4o2sLVEyMeOBSgNCkNFO6v56X6gt8XPCCQV28mNpyOFfZuxrzqN9UjcGD5B2SC C7RUGCLRqUCIeg2Wvbe4pdwh4xo02Sq3x5AugkM5xMYh6hP5HHk/7L27a+6Mb6a6 qduKUMtJ7DPaWnr5xUGYs51HTYommzM78z1iSW7hISwJiHhoLS32j7ZwoVpMPKAy x2QWh2BtY0k8Gc4yOm256Eap1/1MXdvZKsYLfxioRMRBGIoOVWyKWdF6B0A/O/oJ lqh4ZY24LlL2KR5UUmUK5UlBzt9pd496WJmq4ePoYE4PbygDIbdCvXIIEMJDzFaE IbuR1tCs+r6nEw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:57 2026 by rpki-client