This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft File: 2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft (raw, json) Hash identifier: hzgArkud9cFmVpX2WW+gK7R0HWRfpfvSEx0NXDBaDI0= Subject key identifier: 2F:AE:99:D0:3D:4B:61:C5:12:17:C7:45:C1:C8:7E:3F:EF:C5:FE:63 Authority key identifier: DB:14:0E:06:9B:31:F2:B8:4C:5D:BD:21:3E:D4:67:73:B0:63:3E:52 Certificate issuer: /CN=db140e069b31f2b84c5dbd213ed46773b0633e52 Certificate serial: 019C427DEEF41C9FE7E5CFCC1B8975B3BF92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft Manifest number: 12 Signing time: Mon 09 Feb 2026 13:01:15 +0000 Manifest this update: Mon 09 Feb 2026 13:01:15 +0000 Manifest next update: Tue 10 Feb 2026 13:01:15 +0000 Files and hashes: 1: 2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl (hash: td3FpuDrRnPKPTp/7AKG7EeiiJgn/0XUgx8P9mn969k=) 2: QZpcoFZ-mTdXgaU_KSl2tUqS-WA.roa (hash: kKgOgir5OcWMeFMyd0QfuGiJS19k1i7Dnvnix7dS1ZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ee:f4:1c:9f:e7:e5:cf:cc:1b:89:75:b3:bf:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db140e069b31f2b84c5dbd213ed46773b0633e52 Validity Not Before: Feb 9 13:01:15 2026 GMT Not After : Feb 10 13:01:15 2026 GMT Subject: CN=2fae99d03d4b61c51217c745c1c87e3fefc5fe63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:0e:ba:42:40:aa:06:bf:53:39:eb:6d:fa: 14:5f:19:cb:46:d1:28:4d:0b:bc:dc:0c:dc:79:9a: cc:53:f4:e4:10:28:7e:86:85:83:0e:02:0c:64:cc: 33:4b:1a:2a:27:0f:c9:5c:26:56:b6:34:b5:e9:77: a3:d6:dc:05:9f:a4:05:75:05:34:37:9b:d0:d2:9f: 40:32:18:93:0a:b6:04:a7:a7:c9:3e:a9:51:fc:28: 6d:c4:a2:db:a8:3d:e8:c8:ca:89:93:49:f4:f9:b8: 76:84:d8:be:9a:82:61:7d:9c:f4:26:f1:63:a5:c7: 7e:7b:19:d4:bd:08:5c:70:6d:ff:64:e2:2d:f8:50: 75:24:41:d2:ea:2a:1c:b6:b0:0a:2b:75:94:bb:25: d2:e9:a2:03:be:31:00:cf:00:39:46:d7:4a:ea:56: 2b:9b:ad:b9:f7:3b:da:10:bc:c7:69:7a:bc:d5:ed: ad:b2:84:d3:94:9c:58:57:b5:23:fd:f9:c2:a2:99: 3f:1e:1f:9b:8a:9e:13:2b:96:bd:55:9e:91:14:44: c6:0e:be:0c:ba:4e:ef:5d:7b:88:11:54:05:76:c7: d1:66:ca:22:e9:45:5c:6e:38:d2:ce:e5:b8:21:24: 54:8b:bc:0b:b3:9b:a2:d6:fc:ef:d5:80:65:29:6b: e8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AE:99:D0:3D:4B:61:C5:12:17:C7:45:C1:C8:7E:3F:EF:C5:FE:63 X509v3 Authority Key Identifier: keyid:DB:14:0E:06:9B:31:F2:B8:4C:5D:BD:21:3E:D4:67:73:B0:63:3E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xQOBpsx8rhMXb0hPtRnc7BjPlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e37b66-45a1-4956-9731-3496e48e5514/1/2xQOBpsx8rhMXb0hPtRnc7BjPlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:be:d8:64:c0:85:03:f6:72:70:7c:ee:b2:07:9e:cf:c7:cf: 63:c9:13:9a:24:85:8a:00:fa:42:78:ec:ba:f5:14:8c:67:50: 8c:3b:a5:33:4c:d9:4a:f7:e5:ce:6e:e4:70:d7:0e:5d:7b:01: 0b:f1:ac:74:1d:48:07:ac:2c:61:b7:e6:d8:e7:c1:99:70:b2: 55:2e:6c:a6:08:00:a8:dc:1a:30:c9:b6:52:0a:3f:b5:18:e3: 31:26:33:1f:2c:ab:4f:fe:44:b1:e1:74:16:6c:e3:9f:85:a9: 2a:1c:94:c3:e1:44:af:a6:9f:80:7b:c6:41:74:6c:8d:db:64: 43:ee:ea:9e:6c:9c:93:0b:58:a1:73:e8:30:fa:f0:53:cc:05: 6f:dd:19:c4:7f:68:f8:d6:da:c1:b3:08:c7:af:01:c9:2e:d7: dd:43:fa:62:ce:80:a1:d3:87:f8:38:6c:03:5c:69:33:03:30: 28:59:75:e2:c7:9a:b9:5e:11:39:77:cb:1c:1a:dc:89:0e:75: b8:23:8d:97:c3:02:ec:85:24:2d:0c:8e:98:ac:56:c1:92:e0: 81:14:4f:86:51:57:ab:ff:a2:b3:46:30:4b:40:3e:9e:70:5a: 32:f7:7a:44:f8:75:a9:bf:bc:e2:ac:1e:45:d0:19:08:8f:6d: 0b:cb:dd:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfe70HJ/n5c/MG4l1s7+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMTQwZTA2OWIzMWYyYjg0YzVkYmQyMTNlZDQ2NzczYjA2 MzNlNTIwHhcNMjYwMjA5MTMwMTE1WhcNMjYwMjEwMTMwMTE1WjAzMTEwLwYDVQQD EygyZmFlOTlkMDNkNGI2MWM1MTIxN2M3NDVjMWM4N2UzZmVmYzVmZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdkOukJAqga/UznrbfoUXxnLRtEo TQu83AzceZrMU/TkECh+hoWDDgIMZMwzSxoqJw/JXCZWtjS16Xej1twFn6QFdQU0 N5vQ0p9AMhiTCrYEp6fJPqlR/ChtxKLbqD3oyMqJk0n0+bh2hNi+moJhfZz0JvFj pcd+exnUvQhccG3/ZOIt+FB1JEHS6ioctrAKK3WUuyXS6aIDvjEAzwA5RtdK6lYr m6259zvaELzHaXq81e2tsoTTlJxYV7Uj/fnCopk/Hh+bip4TK5a9VZ6RFETGDr4M uk7vXXuIEVQFdsfRZsoi6UVcbjjSzuW4ISRUi7wLs5ui1vzv1YBlKWvoqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+umdA9S2HFEhfHRcHIfj/vxf5jMB8GA1UdIwQY MBaAFNsUDgabMfK4TF29IT7UZ3OwYz5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnhRT0Jwc3g4cmhNWGIwaFB0Um5jN0JqUGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lMzdiNjYtNDVhMS00OTU2LTk3MzEt MzQ5NmU0OGU1NTE0LzEvMnhRT0Jwc3g4cmhNWGIwaFB0Um5jN0JqUGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9lMzdiNjYtNDVhMS00OTU2LTk3MzEtMzQ5NmU0OGU1NTE0 LzEvMnhRT0Jwc3g4cmhNWGIwaFB0Um5jN0JqUGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXL7YZMCF A/ZycHzusgeez8fPY8kTmiSFigD6QnjsuvUUjGdQjDulM0zZSvflzm7kcNcOXXsB C/GsdB1IB6wsYbfm2OfBmXCyVS5spggAqNwaMMm2Ugo/tRjjMSYzHyyrT/5EseF0 Fmzjn4WpKhyUw+FEr6afgHvGQXRsjdtkQ+7qnmyckwtYoXPoMPrwU8wFb90ZxH9o +NbawbMIx68ByS7X3UP6Ys6AodOH+DhsA1xpMwMwKFl14seauV4ROXfLHBrciQ51 uCONl8MC7IUkLQyOmKxWwZLggRRPhlFXq/+is0YwS0A+nnBaMvd6RPh1qb+84qwe RdAZCI9tC8vdDw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:36 2026 by rpki-client