This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft File: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft (raw, json) Hash identifier: +FB9vXqS6otc5F9HmYNro+/Nd/MiTHnUoXsqo82H9t8= Subject key identifier: BA:DB:56:9B:EC:DE:18:0A:F9:28:80:A3:99:4F:6A:92:F9:4C:6B:0C Authority key identifier: D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F Certificate issuer: /CN=d9ad6f484530e57cc60e3a865a695948476c413f Certificate serial: 019C4390CCFE669EBFE956E55EB79979A69F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft Manifest number: 17A0 Signing time: Mon 09 Feb 2026 18:01:28 +0000 Manifest this update: Mon 09 Feb 2026 18:01:28 +0000 Manifest next update: Tue 10 Feb 2026 18:01:28 +0000 Files and hashes: 1: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl (hash: 166rLKvf60zBz8JuB1BXdGyF1vLtIqxrMXzplLoo8xM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:cc:fe:66:9e:bf:e9:56:e5:5e:b7:99:79:a6:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ad6f484530e57cc60e3a865a695948476c413f Validity Not Before: Feb 9 18:01:28 2026 GMT Not After : Feb 10 18:01:28 2026 GMT Subject: CN=badb569becde180af92880a3994f6a92f94c6b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0a:c5:a0:5f:eb:b6:d7:a3:fb:b8:18:80:82: 8a:de:30:14:22:ec:b3:ee:cd:98:98:3e:9c:f6:d8: 5e:dc:56:2f:30:ff:e6:4a:ab:54:95:52:2a:d0:57: cf:f6:d7:21:ff:21:e5:c7:f7:55:02:b4:d1:81:c4: 36:2c:5c:ce:b5:ae:09:34:4d:84:3a:ec:90:e5:ed: e1:a1:d5:dc:2e:e5:64:a3:04:f9:96:86:aa:c6:c5: e1:ac:f4:6f:27:d6:cb:ec:b5:13:40:3f:01:55:bf: 27:24:d3:c8:4e:10:cb:f2:ff:5b:a4:d9:01:9b:fc: 06:df:81:3c:52:27:35:0c:79:d9:a2:e2:f4:51:37: 80:48:de:74:b0:78:43:0c:e2:b1:ab:75:4c:b9:83: 30:aa:ac:b2:06:22:65:68:49:36:9c:50:7d:50:68: 43:2a:aa:d1:03:11:63:d9:89:45:b4:8b:97:ad:21: 80:d1:69:c7:0a:26:98:82:35:57:32:ff:e4:d2:79: d5:6e:56:6c:44:53:b2:73:76:77:31:47:df:2d:6c: e5:9b:bf:41:22:ba:28:83:41:32:99:b4:db:bb:e4: b3:6d:f7:d8:c2:2f:77:f4:f5:0c:b4:99:85:24:61: 17:90:03:50:e1:7e:1c:47:dd:00:4a:86:62:6a:c4: 04:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DB:56:9B:EC:DE:18:0A:F9:28:80:A3:99:4F:6A:92:F9:4C:6B:0C X509v3 Authority Key Identifier: keyid:D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9c:0f:28:64:23:76:b5:c7:17:1f:0f:4f:b2:e0:ec:47:e0: 99:0a:c3:7c:e6:d8:68:08:43:b9:cc:b3:e5:b7:19:e1:e6:48: bc:71:5a:d7:12:90:70:9f:bf:a7:42:64:02:63:e4:4a:e5:16: 48:a0:ff:7c:9c:07:39:7e:88:26:3a:68:a6:a3:aa:a5:65:2e: c7:8b:8b:e4:86:fc:e7:e5:2b:38:50:1b:a8:a0:11:5d:bb:15: 97:e9:4f:a4:b5:53:72:28:b9:3e:28:07:f2:c6:0a:84:95:36: e0:80:9d:1e:35:5e:9e:85:07:63:a2:31:12:a2:b7:b1:91:b1: 33:22:90:e8:5f:f0:fd:66:b0:4c:91:a8:3c:ad:72:91:bb:4c: 52:38:2a:52:4c:20:b5:54:d8:55:a3:a3:60:ac:a9:4e:38:c9: 80:f9:5f:66:a8:c7:9e:82:44:c6:02:61:10:55:5b:db:e9:49: 40:40:eb:3b:88:e7:43:68:3c:ab:ec:4f:9a:e1:b8:2f:e2:19: d7:04:9d:bc:96:b3:56:09:03:53:98:67:81:af:24:20:e3:b5: 98:79:6d:3e:8e:f8:c5:36:0f:3f:0a:14:ea:5f:1c:d7:03:4f: a0:ad:2c:cd:43:81:b8:0d:77:06:af:42:cd:1c:d1:6a:d5:83: 7b:17:f8:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMz+Zp6/6VblXreZeaafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5YWQ2ZjQ4NDUzMGU1N2NjNjBlM2E4NjVhNjk1OTQ4NDc2 YzQxM2YwHhcNMjYwMjA5MTgwMTI4WhcNMjYwMjEwMTgwMTI4WjAzMTEwLwYDVQQD EyhiYWRiNTY5YmVjZGUxODBhZjkyODgwYTM5OTRmNmE5MmY5NGM2YjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgrFoF/rttej+7gYgIKK3jAUIuyz 7s2YmD6c9the3FYvMP/mSqtUlVIq0FfP9tch/yHlx/dVArTRgcQ2LFzOta4JNE2E OuyQ5e3hodXcLuVkowT5loaqxsXhrPRvJ9bL7LUTQD8BVb8nJNPIThDL8v9bpNkB m/wG34E8Uic1DHnZouL0UTeASN50sHhDDOKxq3VMuYMwqqyyBiJlaEk2nFB9UGhD KqrRAxFj2YlFtIuXrSGA0WnHCiaYgjVXMv/k0nnVblZsRFOyc3Z3MUffLWzlm79B Iroog0EymbTbu+SzbffYwi939PUMtJmFJGEXkANQ4X4cR90ASoZiasQEfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrbVpvs3hgK+SiAo5lPapL5TGsMMB8GA1UdIwQY MBaAFNmtb0hFMOV8xg46hlppWUhHbEE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmExdlNFVXc1WHpHRGpxR1dtbFpTRWRzUVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jNTE1YmItN2U1Mi00NDc1LWFlMjUt ZDE4MWQxZjc2MTI4LzEvMmExdlNFVXc1WHpHRGpxR1dtbFpTRWRzUVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9jNTE1YmItN2U1Mi00NDc1LWFlMjUtZDE4MWQxZjc2MTI4 LzEvMmExdlNFVXc1WHpHRGpxR1dtbFpTRWRzUVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpwPKGQj drXHFx8PT7Lg7EfgmQrDfObYaAhDucyz5bcZ4eZIvHFa1xKQcJ+/p0JkAmPkSuUW SKD/fJwHOX6IJjpopqOqpWUux4uL5Ib85+UrOFAbqKARXbsVl+lPpLVTcii5PigH 8sYKhJU24ICdHjVenoUHY6IxEqK3sZGxMyKQ6F/w/WawTJGoPK1ykbtMUjgqUkwg tVTYVaOjYKypTjjJgPlfZqjHnoJExgJhEFVb2+lJQEDrO4jnQ2g8q+xPmuG4L+IZ 1wSdvJazVgkDU5hnga8kIOO1mHltPo74xTYPPwoU6l8c1wNPoK0szUOBuA13Bq9C zRzRatWDexf4AQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:17 2026 by rpki-client