This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json) Hash identifier: isr2PEbHcWvU7LH4+bpqMnPtvm+WEPD5Tv/rWmyseoc= Subject key identifier: 0C:F4:E8:24:0D:B8:1B:E2:55:52:90:DC:B8:36:8E:F5:07:D3:CB:87 Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9 Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9 Certificate serial: 019C42B42FE9E30F0D086FBAE5D120244361 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft Manifest number: 03E0 Signing time: Mon 09 Feb 2026 14:00:30 +0000 Manifest this update: Mon 09 Feb 2026 14:00:30 +0000 Manifest next update: Tue 10 Feb 2026 14:00:30 +0000 Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: bMIX/RTHisGN67pOVsAeDr0RlUCsZG8+lsz9KCBn6Hk=) 2: OpkXHZIicfHCPvft3PttWRGy66g.roa (hash: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:2f:e9:e3:0f:0d:08:6f:ba:e5:d1:20:24:43:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9 Validity Not Before: Feb 9 14:00:30 2026 GMT Not After : Feb 10 14:00:30 2026 GMT Subject: CN=0cf4e8240db81be2555290dcb8368ef507d3cb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:a5:cb:97:1d:3c:61:ac:ee:9d:b0:1b:05: df:97:36:b2:ad:d4:4c:49:f6:37:18:d7:51:e9:7a: fc:a8:f8:7e:a7:30:16:a5:66:28:e8:1a:37:06:73: e5:b1:e6:55:0b:44:dc:b2:56:0e:21:97:62:2c:f5: b5:4d:92:53:a2:0e:11:fb:66:ff:26:80:a2:e5:e3: 19:b9:ed:bb:ec:35:71:ee:5f:98:fa:fb:f9:96:4c: 59:f1:eb:04:d3:0c:59:7f:76:9a:db:17:3d:ff:e7: c3:54:b0:0d:62:d7:f1:b2:35:86:dc:24:dd:e9:95: 27:e5:be:b3:60:37:da:5a:65:16:d9:c3:11:f7:f7: fe:9c:a4:7a:80:93:54:14:0e:11:5d:4e:85:f7:09: 6c:49:94:7b:d5:eb:4b:f9:ec:02:5e:70:c6:2a:24: 53:0c:68:5e:dd:7c:b7:5e:7b:9b:49:b8:52:87:f2: 31:79:96:ec:ae:16:69:9a:09:69:77:96:a2:90:89: 21:18:f6:96:37:e6:ff:e1:2e:f8:4a:0a:bf:c6:db: 3f:10:c4:f0:f4:71:83:ec:d3:fd:1f:1e:2e:a3:82: bd:20:d6:b5:22:f9:c9:2e:f7:ec:13:f6:6d:1e:b2: d4:f2:e5:a7:4e:05:f6:5f:15:98:16:ac:e3:30:92: 7e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F4:E8:24:0D:B8:1B:E2:55:52:90:DC:B8:36:8E:F5:07:D3:CB:87 X509v3 Authority Key Identifier: keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:bf:eb:d0:7a:35:dc:b9:38:3f:90:02:00:76:58:d5:8a:ae: cf:15:39:0a:7e:76:a6:76:bd:f4:c8:55:d3:68:c2:11:9c:d8: 1c:40:22:d6:6e:23:34:38:9f:66:09:8c:98:17:f6:2d:57:0e: 69:bd:bb:41:b9:53:68:8b:22:6e:48:c1:6b:88:60:91:d9:e0: 08:ff:f1:0b:2e:a5:90:9b:16:40:65:fa:d5:74:cc:52:f8:f2: 51:f8:1a:29:98:38:a2:29:60:fc:6a:cd:36:b2:8b:b6:72:ca: 2a:95:96:20:cb:4c:7e:45:f2:bf:b4:c2:cb:1a:90:87:58:ed: 37:29:54:af:dc:0f:6b:a0:6b:ae:77:4d:29:1b:e5:a7:31:28: 1b:d6:93:c8:0d:b9:96:eb:d6:b8:88:76:01:1e:6e:87:67:15: 4a:9c:3c:0e:4e:1a:79:20:99:58:02:c1:28:9a:2f:34:77:46: 38:1f:c0:4b:af:a7:ff:08:56:4f:11:9f:29:8b:23:56:87:3a: 6d:dc:ef:34:3e:40:29:ff:fd:15:48:63:8c:07:32:50:b8:6b: 3a:a9:a2:a2:ed:07:94:b5:9b:ec:a1:2e:96:ad:dc:50:06:aa: 78:4f:22:77:12:97:3b:f9:8a:3b:e9:fb:7e:60:c1:0d:fc:eb: fd:a7:21:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtC/p4w8NCG+65dEgJENhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjllNmRmNjA4OWQ0ZDg2MTM2ODcxN2VhNjZlN2I2MTZj NzkwYzkwHhcNMjYwMjA5MTQwMDMwWhcNMjYwMjEwMTQwMDMwWjAzMTEwLwYDVQQD EygwY2Y0ZTgyNDBkYjgxYmUyNTU1MjkwZGNiODM2OGVmNTA3ZDNjYjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7qly5cdPGGs7p2wGwXflzayrdRM SfY3GNdR6Xr8qPh+pzAWpWYo6Bo3BnPlseZVC0TcslYOIZdiLPW1TZJTog4R+2b/ JoCi5eMZue277DVx7l+Y+vv5lkxZ8esE0wxZf3aa2xc9/+fDVLANYtfxsjWG3CTd 6ZUn5b6zYDfaWmUW2cMR9/f+nKR6gJNUFA4RXU6F9wlsSZR71etL+ewCXnDGKiRT DGhe3Xy3XnubSbhSh/IxeZbsrhZpmglpd5aikIkhGPaWN+b/4S74Sgq/xts/EMTw 9HGD7NP9Hx4uo4K9INa1IvnJLvfsE/ZtHrLU8uWnTgX2XxWYFqzjMJJ+qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAz06CQNuBviVVKQ3Lg2jvUH08uHMB8GA1UdIwQY MBaAFCtp5t9gidTYYTaHF+pm57YWx5DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUt MDViM2U0MzFjMWVhLzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUtMDViM2U0MzFjMWVh LzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAb/r0Ho1 3Lk4P5ACAHZY1YquzxU5Cn52pna99MhV02jCEZzYHEAi1m4jNDifZgmMmBf2LVcO ab27QblTaIsibkjBa4hgkdngCP/xCy6lkJsWQGX61XTMUvjyUfgaKZg4oilg/GrN NrKLtnLKKpWWIMtMfkXyv7TCyxqQh1jtNylUr9wPa6BrrndNKRvlpzEoG9aTyA25 luvWuIh2AR5uh2cVSpw8Dk4aeSCZWALBKJovNHdGOB/AS6+n/whWTxGfKYsjVoc6 bdzvND5AKf/9FUhjjAcyULhrOqmiou0HlLWb7KEulq3cUAaqeE8idxKXO/mKO+n7 fmDBDfzr/achaQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:23 2026 by rpki-client