This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json) Hash identifier: 1nJWZbafjk8OyskOPyldcZXT9tDSrT876A6g3OIk6NQ= Subject key identifier: B2:4A:8F:50:AC:B4:DD:F3:7C:38:DA:96:64:97:DA:BE:0C:80:AB:0E Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b Certificate serial: 019C43907CBA441ECEFC6D780BEB4E43B4E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft Manifest number: 0A5F Signing time: Mon 09 Feb 2026 18:01:08 +0000 Manifest this update: Mon 09 Feb 2026 18:01:08 +0000 Manifest next update: Tue 10 Feb 2026 18:01:08 +0000 Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: e+cx8+UjbsOeqPPpuE9l33kas8qCyOMr9w+oEg6UYPg=) 2: d2St0IuqAQY3CJ7fhkugSTKW_7g.roa (hash: Dy+8wfeJNHpJN4BkHVBW1ZF1+KeLsec0xtu4JQ1x7+g=) 3: ilVq-nmREmsF_IogBLSMFfK48ko.roa (hash: cbgnf31haY9YqLo/bu+j3+xEzS5pgdYiJl6FAmr/CjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:7c:ba:44:1e:ce:fc:6d:78:0b:eb:4e:43:b4:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b Validity Not Before: Feb 9 18:01:08 2026 GMT Not After : Feb 10 18:01:08 2026 GMT Subject: CN=b24a8f50acb4ddf37c38da966497dabe0c80ab0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:b7:e1:ec:82:49:86:ed:31:31:76:fc:fb: 46:26:a0:f6:f7:31:2e:25:22:80:71:42:ec:ab:52: 7a:33:0f:4c:fd:da:4b:c2:47:9b:c6:92:d6:f6:f0: 3a:72:8f:17:1e:b2:b7:13:13:e2:03:7d:24:bb:f4: 74:34:a7:db:a7:3c:fa:15:b6:76:48:7f:58:65:29: b1:80:83:55:e7:07:aa:3e:62:fa:de:87:c0:0d:91: 25:25:f0:f6:7d:f2:36:bc:e1:2e:cf:0e:af:e7:0c: bd:33:fa:fb:51:26:b6:58:9e:9d:66:68:bd:44:e2: 0a:63:8e:26:29:cc:0e:76:65:65:4b:89:99:32:87: ae:0c:d6:22:b9:33:23:b4:fa:2f:36:4c:37:35:84: 2a:38:6c:50:22:7e:68:f9:21:26:6f:08:94:39:36: 8a:dd:54:fe:6a:dc:5c:55:65:1d:61:95:fe:36:be: 17:13:2c:7d:28:74:11:1d:39:51:f8:46:97:4b:1f: b4:c1:f6:13:21:3b:11:98:a4:fa:1c:e3:36:6e:18: da:80:06:bf:e3:17:79:b0:0a:38:ff:71:4d:86:5e: ae:92:cc:5e:ef:86:12:db:41:28:fb:e2:63:65:af: 5c:3d:91:8a:f4:5b:7a:5b:d7:52:4d:92:db:2c:5e: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4A:8F:50:AC:B4:DD:F3:7C:38:DA:96:64:97:DA:BE:0C:80:AB:0E X509v3 Authority Key Identifier: keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:90:22:a9:0f:28:49:79:a9:91:6a:a3:89:7e:64:5b:1a:d2: dc:0f:ec:db:81:1f:77:88:9b:22:4e:95:f3:13:5a:86:1e:f9: 8c:75:62:e5:96:a2:b5:e8:96:72:2b:5b:b7:a0:f2:11:f9:a4: d3:52:c5:67:81:d6:7c:a3:59:93:be:51:23:4e:4d:5e:7e:2b: c7:02:62:be:c7:5e:92:2b:6e:c9:1c:2f:78:d2:f4:be:d4:0b: d5:d6:82:c5:fe:a6:ee:2b:a7:2f:5b:47:30:e3:f8:a4:0a:86: 8a:72:17:18:18:71:26:8a:50:dc:75:a4:fe:b9:d0:c9:4f:df: d5:28:fc:f8:2a:67:f5:20:59:a0:c5:78:d4:34:a9:5e:76:2e: 8d:e6:09:10:56:0d:f3:e7:e0:bb:4d:a9:ac:cc:d2:33:da:d3: c6:ff:cc:66:36:a1:75:87:70:7f:9c:89:ce:d9:ce:6d:ef:3e: 02:a4:25:00:cd:0d:c5:7b:db:f0:9f:30:e5:4e:79:5e:48:6a: d3:d5:85:39:8f:ea:9f:92:4c:2d:48:8a:38:81:31:9a:dc:39: 65:5f:7c:8c:d5:6c:d2:7e:cf:27:ee:f0:f5:8d:01:cc:b4:ae: 65:da:80:9b:49:0d:66:20:8c:b7:91:44:37:0a:01:dd:bc:a6: 75:3d:e4:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkHy6RB7O/G14C+tOQ7TiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZjIwMGUyZDM4NjgzYTdjYjFjZTVjYWJiZWUzNGMwNjg4 MzRhMGIwHhcNMjYwMjA5MTgwMTA4WhcNMjYwMjEwMTgwMTA4WjAzMTEwLwYDVQQD EyhiMjRhOGY1MGFjYjRkZGYzN2MzOGRhOTY2NDk3ZGFiZTBjODBhYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWC34eyCSYbtMTF2/PtGJqD29zEu JSKAcULsq1J6Mw9M/dpLwkebxpLW9vA6co8XHrK3ExPiA30ku/R0NKfbpzz6FbZ2 SH9YZSmxgINV5weqPmL63ofADZElJfD2ffI2vOEuzw6v5wy9M/r7USa2WJ6dZmi9 ROIKY44mKcwOdmVlS4mZMoeuDNYiuTMjtPovNkw3NYQqOGxQIn5o+SEmbwiUOTaK 3VT+atxcVWUdYZX+Nr4XEyx9KHQRHTlR+EaXSx+0wfYTITsRmKT6HOM2bhjagAa/ 4xd5sAo4/3FNhl6uksxe74YS20Eo++JjZa9cPZGK9Ft6W9dSTZLbLF6qdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJKj1CstN3zfDjalmSX2r4MgKsOMB8GA1UdIwQY MBaAFNnyAOLThoOnyxzlyrvuNMBog0oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEt MDljOGZlNzI0Y2Q3LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEtMDljOGZlNzI0Y2Q3 LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJAiqQ8o SXmpkWqjiX5kWxrS3A/s24Efd4ibIk6V8xNahh75jHVi5ZaiteiWcitbt6DyEfmk 01LFZ4HWfKNZk75RI05NXn4rxwJivsdekituyRwveNL0vtQL1daCxf6m7iunL1tH MOP4pAqGinIXGBhxJopQ3HWk/rnQyU/f1Sj8+Cpn9SBZoMV41DSpXnYujeYJEFYN 8+fgu02prMzSM9rTxv/MZjahdYdwf5yJztnObe8+AqQlAM0NxXvb8J8w5U55Xkhq 09WFOY/qn5JMLUiKOIExmtw5ZV98jNVs0n7PJ+7w9Y0BzLSuZdqAm0kNZiCMt5FE NwoB3bymdT3k7g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:21 2026 by rpki-client