This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json) Hash identifier: H/sNOkusLyM+eqMtMaUVvk8NZ8iniZ7qIHcxe6QL2RQ= Subject key identifier: 7A:50:7D:65:AC:DF:19:72:4A:15:73:04:E1:C2:A6:53:7C:50:2E:FD Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b Certificate serial: 019C45113819CB9540F9988A01184DF9A70E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft Manifest number: 179E Signing time: Tue 10 Feb 2026 01:01:22 +0000 Manifest this update: Tue 10 Feb 2026 01:01:22 +0000 Manifest next update: Wed 11 Feb 2026 01:01:22 +0000 Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: 8kSXTpAFSkB/LYU59jNnsKqtZZjXkeqdh7NgbF2YUSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:11:38:19:cb:95:40:f9:98:8a:01:18:4d:f9:a7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b Validity Not Before: Feb 10 01:01:22 2026 GMT Not After : Feb 11 01:01:22 2026 GMT Subject: CN=7a507d65acdf19724a157304e1c2a6537c502efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:0c:c1:a5:c5:95:a4:07:1a:10:f1:c1:98: 7a:e1:90:12:3b:1d:5a:2b:52:cb:28:e3:42:23:8c: f4:4a:0d:b9:f6:28:63:be:c3:b9:c2:d8:1a:89:7d: bb:6c:a7:e9:52:ee:69:4b:cb:9e:5a:e6:c8:15:0c: 0c:e8:c3:a3:c6:ae:fb:3f:a2:b8:98:ec:8c:a3:e6: fc:67:68:69:29:fa:e1:69:5c:ac:ea:e2:92:c5:26: 8d:e8:88:75:96:4f:62:8a:22:1c:60:71:4f:67:c6: be:84:ed:2f:0a:3e:e0:45:c3:39:0d:a4:5b:62:5f: 12:91:e8:83:f7:7b:ff:6f:45:74:cf:14:13:35:80: 8e:45:43:65:61:5c:3f:c4:b9:af:ef:67:70:3b:da: 08:25:11:1d:28:af:59:66:98:99:6e:57:58:dd:da: 3b:c3:d8:0c:49:5a:34:32:cb:6f:ce:94:4b:9e:17: 7a:a4:79:73:78:99:ff:29:98:88:fc:bc:59:35:1d: bb:46:d3:35:eb:31:50:de:1c:d9:98:f5:3f:3e:53: 76:fb:11:fc:7d:b4:58:48:9c:24:bb:a0:85:87:6c: 8c:eb:a7:dc:89:a7:17:e5:a8:e4:6d:40:0b:67:81: 93:cf:0f:10:a8:04:4b:28:7d:4b:8d:2d:26:fa:1e: f2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:50:7D:65:AC:DF:19:72:4A:15:73:04:E1:C2:A6:53:7C:50:2E:FD X509v3 Authority Key Identifier: keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:88:d3:ef:bd:2e:86:c3:75:e7:f3:5b:90:5f:7c:26:8f:08: 17:8f:b8:69:b8:12:73:2f:36:63:10:77:47:87:1b:6e:9d:f3: 64:c4:07:bd:f1:5c:b8:d2:a1:3c:e0:f8:4e:c3:bb:86:0d:13: 23:8e:b1:87:1d:62:2f:3b:1b:42:45:17:73:64:bf:15:ca:b6: 53:09:74:d9:15:19:ba:74:fd:01:c0:fd:9a:54:f8:d8:53:00: fe:54:4d:f0:9f:fa:f2:3e:41:a1:32:51:ee:81:3f:f8:62:55: 96:56:3c:5a:a8:9c:44:bd:41:d9:a9:c8:c4:e5:20:79:84:94: 7e:68:d0:e8:5d:5c:b6:7d:f0:1d:0f:1f:b7:d2:37:48:da:1c: 03:29:5b:96:c9:6b:e4:1d:3d:1b:bd:3c:3f:e3:4d:08:c0:68: fd:c2:61:01:a6:94:0f:bc:90:00:21:84:a6:1d:0c:0f:e7:b2: bb:5d:6e:e1:a5:74:39:de:c6:d7:a8:31:75:91:e5:d9:a4:1e: 60:87:97:5b:18:66:f4:12:9d:0a:4c:7c:ba:20:49:68:69:79: 1f:d3:b4:ca:18:cf:0d:f2:ab:48:1a:fe:e6:4e:9f:b2:9f:8e: 6d:f8:1e:c2:18:ba:2e:e6:9a:8c:17:fb:50:e9:77:b4:8d:f2: 7c:28:c1:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFETgZy5VA+ZiKARhN+acOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzA0MmViMGM0OGVjYjM3MTllNWMwZWUyZTE5Yzc0ZTI4 ODBmM2IwHhcNMjYwMjEwMDEwMTIyWhcNMjYwMjExMDEwMTIyWjAzMTEwLwYDVQQD Eyg3YTUwN2Q2NWFjZGYxOTcyNGExNTczMDRlMWMyYTY1MzdjNTAyZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmUMwaXFlaQHGhDxwZh64ZASOx1a K1LLKONCI4z0Sg259ihjvsO5wtgaiX27bKfpUu5pS8ueWubIFQwM6MOjxq77P6K4 mOyMo+b8Z2hpKfrhaVys6uKSxSaN6Ih1lk9iiiIcYHFPZ8a+hO0vCj7gRcM5DaRb Yl8SkeiD93v/b0V0zxQTNYCORUNlYVw/xLmv72dwO9oIJREdKK9ZZpiZbldY3do7 w9gMSVo0MstvzpRLnhd6pHlzeJn/KZiI/LxZNR27RtM16zFQ3hzZmPU/PlN2+xH8 fbRYSJwku6CFh2yM66fciacX5ajkbUALZ4GTzw8QqARLKH1LjS0m+h7y0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpQfWWs3xlyShVzBOHCplN8UC79MB8GA1UdIwQY MBaAFNpwQusMSOyzcZ5cDuLhnHTiiA87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lY2E3ZTYtZDI3Ny00Y2Q0LWFjZjMt NTAxZjc3YjQyZTlhLzEvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9lY2E3ZTYtZDI3Ny00Y2Q0LWFjZjMtNTAxZjc3YjQyZTlh LzEvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4jT770u hsN15/NbkF98Jo8IF4+4abgScy82YxB3R4cbbp3zZMQHvfFcuNKhPOD4TsO7hg0T I46xhx1iLzsbQkUXc2S/Fcq2Uwl02RUZunT9AcD9mlT42FMA/lRN8J/68j5BoTJR 7oE/+GJVllY8WqicRL1B2anIxOUgeYSUfmjQ6F1ctn3wHQ8ft9I3SNocAylblslr 5B09G708P+NNCMBo/cJhAaaUD7yQACGEph0MD+eyu11u4aV0Od7G16gxdZHl2aQe YIeXWxhm9BKdCkx8uiBJaGl5H9O0yhjPDfKrSBr+5k6fsp+Obfgewhi6LuaajBf7 UOl3tI3yfCjBfg== -----END CERTIFICATE-----Generated at Tue Feb 10 05:51:24 2026 by rpki-client