This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft File: 2f8MyFNVS935CZqjzuvTUka5KPU.mft (raw, json) Hash identifier: SpmikVOq1OCoumKi7Fp/TRFGC3UJKlNlBrK64K7KJbg= Subject key identifier: 9D:37:49:5D:4E:C6:EA:E6:EB:D9:29:EC:FA:84:56:18:0F:E3:96:5C Authority key identifier: D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5 Certificate issuer: /CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5 Certificate serial: 019C43594AEDB4E46167591445678ADCC66D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft Manifest number: 53 Signing time: Mon 09 Feb 2026 17:00:51 +0000 Manifest this update: Mon 09 Feb 2026 17:00:51 +0000 Manifest next update: Tue 10 Feb 2026 17:00:51 +0000 Files and hashes: 1: 1-OkpooCR750DOU3KO4Q0Au9Ls5A.roa (hash: Dj+AT1jX9rfVhJFGXz9XaLtPSZgqG/nTfTCrODe4StE=) 2: 2f8MyFNVS935CZqjzuvTUka5KPU.crl (hash: f4DekN9s4g5pWXYu3jE/Kb86L5APIlWr0iFBakyGejU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:4a:ed:b4:e4:61:67:59:14:45:67:8a:dc:c6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ff0cc853554bddf9099aa3ceebd35246b928f5 Validity Not Before: Feb 9 17:00:51 2026 GMT Not After : Feb 10 17:00:51 2026 GMT Subject: CN=9d37495d4ec6eae6ebd929ecfa8456180fe3965c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:b5:2f:1d:1f:f1:af:ca:94:3f:e2:ab:b5: 39:6f:79:81:6f:7c:60:a6:7f:e8:06:20:43:94:08: c4:2c:02:a2:72:09:e7:3c:39:16:72:0b:e1:25:ff: 20:a5:d1:7d:62:a7:eb:f8:57:f5:43:93:f2:c3:14: 98:4d:80:e1:8d:f1:b6:0e:29:c9:ad:70:ff:f0:ba: 35:4b:36:44:80:47:82:e8:e0:9c:79:62:6c:39:ad: 10:ef:37:e9:cc:60:7f:e7:a1:d4:f2:62:11:14:83: dc:78:e0:db:35:bf:2c:92:94:ae:04:cc:13:1a:84: f1:69:b5:15:df:bb:ed:51:72:9b:5d:40:bd:6f:74: 0b:4b:59:86:cf:f7:68:79:6f:da:9a:b7:85:db:c3: 3b:ec:05:d6:ce:b3:02:6f:da:05:48:d5:99:7c:91: cd:39:1a:45:94:c1:fd:a1:0d:4f:0f:1d:33:01:10: e6:a0:cb:29:29:c7:97:15:a4:1a:75:a1:b9:c4:97: 7e:60:50:3a:08:33:3e:52:d5:fb:f6:e8:24:cf:34: b6:e8:48:10:65:0c:08:02:e4:5e:b1:dd:98:fb:47: e8:65:13:5d:3c:ff:e4:1b:7f:42:a8:12:2b:be:94: 38:2d:aa:f3:ef:53:50:f9:79:50:84:76:cd:47:58: ec:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:37:49:5D:4E:C6:EA:E6:EB:D9:29:EC:FA:84:56:18:0F:E3:96:5C X509v3 Authority Key Identifier: keyid:D9:FF:0C:C8:53:55:4B:DD:F9:09:9A:A3:CE:EB:D3:52:46:B9:28:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f8MyFNVS935CZqjzuvTUka5KPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aaa05d-e7b1-4e39-8470-cafe5e7db758/1/2f8MyFNVS935CZqjzuvTUka5KPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:23:9d:cc:ba:a3:99:b5:6f:f4:41:98:f3:b9:a6:c0:34:47: 4e:7c:81:87:0f:bd:58:ac:90:f0:8c:22:3a:83:d4:44:25:37: 34:7c:1a:4f:8a:01:04:d4:b8:ab:59:b5:c7:fd:85:51:33:f8: 6a:8b:67:7a:3b:f1:c4:9d:a4:36:34:e8:4e:60:2d:75:bc:ed: 06:73:df:28:6a:10:9e:12:44:5c:aa:ea:57:3c:f8:4e:b9:69: a5:5c:d0:ff:97:00:0a:0e:f5:b7:5c:35:bb:f1:2e:c7:f4:54: 46:2f:26:eb:37:25:16:39:27:8b:bd:c0:4b:68:0c:5a:04:3b: 19:1a:3d:cb:57:46:01:35:72:fb:bf:bb:46:50:f6:e9:be:a9: 94:94:af:7f:dd:6f:19:4c:8a:05:d5:9b:5f:03:e8:7e:85:72: fd:f4:87:7b:e9:cf:ad:94:31:aa:a3:f0:10:c7:cf:8d:05:ba: 32:18:74:82:c0:6e:1c:b1:d1:0f:eb:70:05:76:e0:f8:a4:59: 9c:7b:19:46:4f:5f:54:a0:23:49:f3:a9:86:55:c0:b6:3c:66: 8c:89:37:13:54:54:d1:3a:2c:f6:69:7b:40:b7:87:bb:fc:11: 1c:3d:95:fd:eb:64:56:4c:71:43:dc:04:e1:ed:f8:c7:9e:5a: 0d:dd:e8:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWUrttORhZ1kURWeK3MZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmYwY2M4NTM1NTRiZGRmOTA5OWFhM2NlZWJkMzUyNDZi OTI4ZjUwHhcNMjYwMjA5MTcwMDUxWhcNMjYwMjEwMTcwMDUxWjAzMTEwLwYDVQQD Eyg5ZDM3NDk1ZDRlYzZlYWU2ZWJkOTI5ZWNmYTg0NTYxODBmZTM5NjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfu1Lx0f8a/KlD/iq7U5b3mBb3xg pn/oBiBDlAjELAKicgnnPDkWcgvhJf8gpdF9Yqfr+Ff1Q5PywxSYTYDhjfG2DinJ rXD/8Lo1SzZEgEeC6OCceWJsOa0Q7zfpzGB/56HU8mIRFIPceODbNb8skpSuBMwT GoTxabUV37vtUXKbXUC9b3QLS1mGz/doeW/amreF28M77AXWzrMCb9oFSNWZfJHN ORpFlMH9oQ1PDx0zARDmoMspKceXFaQadaG5xJd+YFA6CDM+UtX79ugkzzS26EgQ ZQwIAuResd2Y+0foZRNdPP/kG39CqBIrvpQ4Larz71NQ+XlQhHbNR1jsvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ03SV1Oxurm69kp7PqEVhgP45ZcMB8GA1UdIwQY MBaAFNn/DMhTVUvd+Qmao87r01JGuSj1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmY4TXlGTlZTOTM1Q1pxanp1dlRVa2E1S1BVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9hYWEwNWQtZTdiMS00ZTM5LTg0NzAt Y2FmZTVlN2RiNzU4LzEvMmY4TXlGTlZTOTM1Q1pxanp1dlRVa2E1S1BVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9hYWEwNWQtZTdiMS00ZTM5LTg0NzAtY2FmZTVlN2RiNzU4 LzEvMmY4TXlGTlZTOTM1Q1pxanp1dlRVa2E1S1BVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSOdzLqj mbVv9EGY87mmwDRHTnyBhw+9WKyQ8IwiOoPURCU3NHwaT4oBBNS4q1m1x/2FUTP4 aotnejvxxJ2kNjToTmAtdbztBnPfKGoQnhJEXKrqVzz4TrlppVzQ/5cACg71t1w1 u/Eux/RURi8m6zclFjkni73AS2gMWgQ7GRo9y1dGATVy+7+7RlD26b6plJSvf91v GUyKBdWbXwPofoVy/fSHe+nPrZQxqqPwEMfPjQW6Mhh0gsBuHLHRD+twBXbg+KRZ nHsZRk9fVKAjSfOphlXAtjxmjIk3E1RU0Tos9ml7QLeHu/wRHD2V/etkVkxxQ9wE 4e34x55aDd3oSw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:40 2026 by rpki-client