This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json) Hash identifier: 0TcRuGcf/K94t90rXrSl2C++Z0h2ebJofykJjFMSlX0= Subject key identifier: 3E:4A:A2:2F:FD:0F:51:12:1D:C6:B0:AA:CB:B1:F9:24:60:2D:82:69 Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4 Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4 Certificate serial: 019C44350EE31FC9C1654BD080B4986EDFF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 21:00:53 +0000 Manifest this update: Mon 09 Feb 2026 21:00:53 +0000 Manifest next update: Tue 10 Feb 2026 21:00:53 +0000 Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: A5yqzoHjlNVpncQuKl/GYhIjfi7K+gVBvKXSLSe90j0=) 2: zc1RxQ-wCAjo2YyTdgBOf576bf0.roa (hash: vkvB5T6NKTKK2PGToAyqMv7sLiy7bF7pWaJUrDMf/r8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:35:0e:e3:1f:c9:c1:65:4b:d0:80:b4:98:6e:df:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4 Validity Not Before: Feb 9 21:00:53 2026 GMT Not After : Feb 10 21:00:53 2026 GMT Subject: CN=3e4aa22ffd0f51121dc6b0aacbb1f924602d8269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:93:47:4f:5b:9d:96:0e:69:6f:2b:21:11: f2:71:ae:04:da:8a:e6:e6:d2:62:e3:7b:3e:17:d3: 28:33:da:39:d1:1a:d0:f5:aa:32:c7:4f:a4:bb:ae: 45:37:c9:0c:7d:79:cb:36:66:33:ba:41:e6:d4:5b: 5f:06:7d:71:1d:f2:28:60:8f:6a:9f:e9:1a:ac:b4: f3:b3:a1:2a:9d:7d:58:45:c0:db:83:ce:40:97:35: 19:a1:22:93:d0:a9:be:75:11:30:88:e8:ee:72:53: 16:04:e1:a0:58:85:b6:1b:93:e4:f3:77:7d:4f:86: 28:b4:eb:7a:55:9a:70:f9:1f:b5:0b:f8:e1:92:bc: 9b:19:b9:f0:22:c5:a3:68:3d:9a:ec:f9:ea:5b:46: d6:df:ad:2e:fa:7a:6a:90:c2:47:38:0b:51:c1:75: e8:50:1e:4f:64:70:b0:a5:fa:6f:49:01:59:a9:2c: 37:b1:ec:ce:39:b5:64:34:32:72:75:e3:4e:40:48: 7b:57:6d:18:9d:f5:77:53:b5:9c:ec:2f:51:a3:a4: 4d:09:b9:c9:59:a1:d7:de:3b:a2:97:45:ac:00:ff: 94:c8:bf:00:5a:29:bc:65:56:54:75:96:ba:8f:80: f5:85:ca:b2:fd:3a:27:74:5b:72:b7:e9:ef:7c:7b: b6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4A:A2:2F:FD:0F:51:12:1D:C6:B0:AA:CB:B1:F9:24:60:2D:82:69 X509v3 Authority Key Identifier: keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:41:8e:73:96:2d:07:0a:09:98:1b:43:ca:a2:34:f9:e3:f4: 7f:25:97:9d:98:2d:8e:2f:4c:ef:af:9e:73:7d:69:e0:7a:32: 5b:73:c5:8c:3b:9e:81:7d:2c:0a:41:fe:44:16:be:e1:a7:29: 66:f4:34:52:d4:6e:54:c8:7f:2b:97:e7:78:20:63:1f:0d:f3: ec:a8:30:2f:d6:25:45:68:ad:49:27:55:08:16:5a:d6:b4:f6: d1:b1:3f:ab:4d:91:05:a5:dd:6e:01:f4:a6:1b:28:63:75:f3: 74:45:66:59:57:8d:67:65:b8:5d:1a:4d:88:37:1e:32:1f:2e: e1:60:34:ae:6c:6d:a7:fc:8d:97:62:9b:9a:69:9e:2d:1a:1d: 36:1a:d8:f3:c6:ca:5b:e5:02:07:8c:4b:90:01:e3:18:74:a6: dc:11:ab:85:21:77:1d:33:55:ff:98:1e:dd:3d:f8:d7:92:48: 49:f7:15:6f:bf:37:e8:d9:28:c2:29:91:ea:d7:4c:c6:53:67: 95:86:eb:17:9e:d3:a3:b3:5f:2b:28:a8:48:a5:c5:f4:2d:81: 7e:f1:20:46:d0:a6:e0:6a:a0:ab:59:96:72:d0:9f:f6:0d:64: 94:ac:a9:de:94:6b:84:15:2b:8e:eb:a8:55:bc:41:8e:12:ff: 7a:0d:e2:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENQ7jH8nBZUvQgLSYbt/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjljOTJiYzA5YmY2YjhkYTY1MzNkZDdhN2IwYjFhNTdl NjVlYTQwHhcNMjYwMjA5MjEwMDUzWhcNMjYwMjEwMjEwMDUzWjAzMTEwLwYDVQQD EygzZTRhYTIyZmZkMGY1MTEyMWRjNmIwYWFjYmIxZjkyNDYwMmQ4MjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK+TR09bnZYOaW8rIRHyca4E2orm 5tJi43s+F9MoM9o50RrQ9aoyx0+ku65FN8kMfXnLNmYzukHm1FtfBn1xHfIoYI9q n+karLTzs6EqnX1YRcDbg85AlzUZoSKT0Km+dREwiOjuclMWBOGgWIW2G5Pk83d9 T4YotOt6VZpw+R+1C/jhkrybGbnwIsWjaD2a7PnqW0bW360u+npqkMJHOAtRwXXo UB5PZHCwpfpvSQFZqSw3sezOObVkNDJydeNOQEh7V20YnfV3U7Wc7C9Ro6RNCbnJ WaHX3juil0WsAP+UyL8AWim8ZVZUdZa6j4D1hcqy/TondFtyt+nvfHu2HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5Koi/9D1ESHcawqsux+SRgLYJpMB8GA1UdIwQY MBaAFCtpySvAm/a42mUz3Xp7CxpX5l6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJuSks4Q2I5cmphWlRQZGVuc0xHbGZtWHFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81YjNmZmUtOWY5ZC00MTg5LWE4Y2Et MDg0YWFiYTBmNTg4LzEvSzJuSks4Q2I5cmphWlRQZGVuc0xHbGZtWHFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81YjNmZmUtOWY5ZC00MTg5LWE4Y2EtMDg0YWFiYTBmNTg4 LzEvSzJuSks4Q2I5cmphWlRQZGVuc0xHbGZtWHFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUGOc5Yt BwoJmBtDyqI0+eP0fyWXnZgtji9M76+ec31p4HoyW3PFjDuegX0sCkH+RBa+4acp ZvQ0UtRuVMh/K5fneCBjHw3z7KgwL9YlRWitSSdVCBZa1rT20bE/q02RBaXdbgH0 phsoY3XzdEVmWVeNZ2W4XRpNiDceMh8u4WA0rmxtp/yNl2KbmmmeLRodNhrY88bK W+UCB4xLkAHjGHSm3BGrhSF3HTNV/5ge3T3415JISfcVb7836NkowimR6tdMxlNn lYbrF57To7NfKyioSKXF9C2BfvEgRtCm4Gqgq1mWctCf9g1klKyp3pRrhBUrjuuo VbxBjhL/eg3itw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:55:40 2026 by rpki-client