This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json) Hash identifier: /kIvpdtBJpLoBUuBEKRsQCtikwtIUH9bSX5yUexkE20= Subject key identifier: EC:96:9F:F8:BA:EF:5D:F3:A3:CB:17:3D:C7:CA:48:01:34:24:C6:C3 Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26 Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426 Certificate serial: 019BFC530758967FF1D4F2F7F1614EA232CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 22:00:58 +0000 Manifest this update: Mon 26 Jan 2026 22:00:58 +0000 Manifest next update: Tue 27 Jan 2026 22:00:58 +0000 Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: N1gIP9e6FOEQ2Ax/aKXbpYO3Bw88XL4rE02bOq9Gp/o=) 2: maZq56SMgB7nWqqF5eeF3G-X-7A.roa (hash: xVS8tTvs0Q9QEIgJ9B2IqY6QH4qt+wpz/OCltyOVeVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:07:58:96:7f:f1:d4:f2:f7:f1:61:4e:a2:32:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426 Validity Not Before: Jan 26 22:00:58 2026 GMT Not After : Jan 27 22:00:58 2026 GMT Subject: CN=ec969ff8baef5df3a3cb173dc7ca48013424c6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d3:0c:a2:c9:c2:c2:dd:67:2a:90:b1:33:8e: 27:ea:40:46:f9:0b:c8:20:c5:c1:92:60:dc:4b:91: c2:4e:40:3f:06:7a:00:b5:79:14:1d:41:25:6b:1b: 3f:ba:2f:ee:a0:e2:74:21:25:cd:01:72:61:77:f1: 63:c4:0e:e8:22:2b:3c:7f:f1:f7:21:02:91:39:c2: 64:44:73:4d:44:bc:83:c6:ae:5f:3d:57:5a:17:b8: 34:76:83:72:42:70:25:31:4f:4f:16:75:28:a9:7a: 76:47:38:72:ee:14:31:b8:2f:d6:cc:b9:89:ca:8a: 3d:a5:a1:43:01:00:4f:d3:37:10:a5:21:dd:ba:7c: 30:76:aa:d1:12:aa:b5:01:78:2a:6f:53:63:08:c2: 06:a8:60:03:96:cd:7e:b1:00:b6:e6:4d:fc:0d:cb: cd:57:0f:5a:6f:e5:b9:02:1a:32:12:86:4e:33:07: 1a:44:3b:2c:35:17:d2:98:b2:d6:4c:2e:cf:95:84: fa:68:52:36:09:7d:34:53:71:63:e0:08:96:81:16: 1b:95:5a:49:88:34:b6:d6:cc:eb:88:4d:98:6f:56: 26:4b:b5:1a:93:d4:fc:2a:a5:fd:56:08:97:d0:a6: c5:32:00:a4:ed:87:d5:29:04:43:6b:c1:7e:d7:45: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:96:9F:F8:BA:EF:5D:F3:A3:CB:17:3D:C7:CA:48:01:34:24:C6:C3 X509v3 Authority Key Identifier: keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:25:a6:6f:67:8f:60:48:2a:ed:f6:91:b3:0f:bd:af:1c:bb: f9:c2:8e:16:91:1e:f2:a7:91:32:61:2a:bb:cd:09:4a:b2:b4: 44:b3:07:3d:a7:48:1b:9c:76:b7:69:28:ee:dc:42:31:01:f8: 59:50:ad:29:c2:a8:a8:2c:18:7f:de:7d:ba:3f:32:10:c1:d0: 06:ae:ca:99:97:f4:2e:6d:7b:fe:aa:6f:6b:6a:f9:fc:6d:63: 4e:35:b4:8e:23:4f:d2:be:39:81:85:c8:8c:75:8c:ed:71:2e: d2:a5:cb:59:95:f7:69:4f:89:16:01:5e:3c:98:e6:45:d7:2b: dc:0d:a9:9a:1c:0a:6e:99:5b:5d:9b:42:c5:bd:72:25:f1:fa: 12:54:58:10:0d:3d:99:e1:21:70:a7:f3:cb:ec:12:3f:82:f9: 0a:1f:b8:72:75:70:6e:fc:ac:14:c7:bf:88:ca:2b:f7:23:84: 26:3f:cf:79:cd:ec:56:01:24:1a:d3:a7:7a:58:0a:84:a1:03: c0:1a:9c:b7:6e:ec:0a:f9:4a:cb:b8:21:40:43:a8:6f:fb:1a: f5:a3:73:35:d8:0a:a1:d9:19:67:f1:99:34:37:a2:82:e4:0a: 39:6a:60:e6:40:8f:3d:fc:ce:5a:85:9f:0e:93:8a:20:7d:ac: 48:54:f3:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UwdYln/x1PL38WFOojLPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZjkwNDQ5NTA5ZWJmOWUzYjBmNDJjMWNkYzIyZTNlZjQw MDc0MjYwHhcNMjYwMTI2MjIwMDU4WhcNMjYwMTI3MjIwMDU4WjAzMTEwLwYDVQQD EyhlYzk2OWZmOGJhZWY1ZGYzYTNjYjE3M2RjN2NhNDgwMTM0MjRjNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9MMosnCwt1nKpCxM44n6kBG+QvI IMXBkmDcS5HCTkA/BnoAtXkUHUElaxs/ui/uoOJ0ISXNAXJhd/FjxA7oIis8f/H3 IQKROcJkRHNNRLyDxq5fPVdaF7g0doNyQnAlMU9PFnUoqXp2Rzhy7hQxuC/WzLmJ yoo9paFDAQBP0zcQpSHdunwwdqrREqq1AXgqb1NjCMIGqGADls1+sQC25k38DcvN Vw9ab+W5AhoyEoZOMwcaRDssNRfSmLLWTC7PlYT6aFI2CX00U3Fj4AiWgRYblVpJ iDS21szriE2Yb1YmS7Uak9T8KqX9VgiX0KbFMgCk7YfVKQRDa8F+10UB3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyWn/i6713zo8sXPcfKSAE0JMbDMB8GA1UdIwQY MBaAFNn5BElQnr+eOw9Cwc3CLj70AHQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My85YzVjZWYtZDRlNC00NGUxLWFiZjUt YmI0ODgyOGM5ZjA1LzEvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My85YzVjZWYtZDRlNC00NGUxLWFiZjUtYmI0ODgyOGM5ZjA1 LzEvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCWmb2eP YEgq7faRsw+9rxy7+cKOFpEe8qeRMmEqu80JSrK0RLMHPadIG5x2t2ko7txCMQH4 WVCtKcKoqCwYf959uj8yEMHQBq7KmZf0Lm17/qpva2r5/G1jTjW0jiNP0r45gYXI jHWM7XEu0qXLWZX3aU+JFgFePJjmRdcr3A2pmhwKbplbXZtCxb1yJfH6ElRYEA09 meEhcKfzy+wSP4L5Ch+4cnVwbvysFMe/iMor9yOEJj/Pec3sVgEkGtOnelgKhKED wBqct27sCvlKy7ghQEOob/sa9aNzNdgKodkZZ/GZNDeiguQKOWpg5kCPPfzOWoWf DpOKIH2sSFTzpw== -----END CERTIFICATE-----Generated at Mon Jan 26 23:26:59 2026 by rpki-client