This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft File: 2q4t5U2ijHPxmz4E75V06ZBX8aI.mft (raw, json) Hash identifier: A3phZHQobqx6WTBMdGkA3WD84kykcMY4QiiP2OY4UUE= Subject key identifier: FF:DE:23:1C:CE:1A:C6:B3:6B:3A:D3:54:1C:8D:FF:86:27:21:FC:F4 Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2 Certificate issuer: /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2 Certificate serial: 019C1C14B9539596D995D95E187F4FD11641 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft Manifest number: 0457 Signing time: Mon 02 Feb 2026 02:00:45 +0000 Manifest this update: Mon 02 Feb 2026 02:00:45 +0000 Manifest next update: Tue 03 Feb 2026 02:00:45 +0000 Files and hashes: 1: 2q4t5U2ijHPxmz4E75V06ZBX8aI.crl (hash: COlVZFtuKzOREJbX8wc+1ZV0g1fgSGy6uvI9WscMpwM=) 2: UZ8q061lhr49y8UQ7iXkyIxsq6A.roa (hash: 80cHA2mR1v8ITCV1mpXv6NqG4jtnNEE6uxd13vN06FA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:14:b9:53:95:96:d9:95:d9:5e:18:7f:4f:d1:16:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2 Validity Not Before: Feb 2 02:00:45 2026 GMT Not After : Feb 3 02:00:45 2026 GMT Subject: CN=ffde231cce1ac6b36b3ad3541c8dff862721fcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:9d:a4:62:6f:c8:91:5d:45:cc:b2:33:c8: 18:a6:3d:fd:f8:b0:d6:b2:81:70:08:99:4d:5f:f2: b2:a1:44:0e:89:96:c2:8b:5a:43:04:41:dd:b6:1b: 75:82:2c:11:be:17:e7:9b:8b:ae:59:73:b2:c1:27: 37:23:37:1b:a0:a5:7f:20:b9:e4:06:0f:92:9f:f1: 65:bd:bb:a3:ed:ab:a1:3f:5d:77:0b:45:fd:f5:14: b0:5d:16:5e:07:5d:9a:e3:44:08:69:0e:df:01:97: 28:91:36:e5:10:dd:6b:14:d7:9b:ee:9d:7c:6a:e9: 78:ef:6d:d5:2e:0b:8d:a4:40:60:f9:a6:b9:e7:a4: de:49:ac:cd:5b:9b:53:2a:cc:f3:0b:7a:b1:f5:db: c8:39:b1:65:c0:09:d9:ba:35:94:13:63:68:d1:e8: ba:4d:3c:4c:e4:f2:d3:a3:55:99:4d:c2:18:2f:20: 73:28:25:66:d2:dc:5e:a0:a6:9a:43:6a:b0:a6:a6: 8b:d4:4b:34:f8:9c:01:24:cc:16:fb:61:8f:23:9a: 8b:c7:a5:ae:f1:83:be:8b:c6:d0:dd:85:17:59:0d: 3f:7c:cb:28:b4:80:1d:b7:f9:5c:26:10:10:d4:1b: 13:bc:6a:e5:a8:3d:bf:32:13:a9:ff:d1:3c:1d:3a: 1c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DE:23:1C:CE:1A:C6:B3:6B:3A:D3:54:1C:8D:FF:86:27:21:FC:F4 X509v3 Authority Key Identifier: keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a6:bd:e0:20:b9:e6:c6:3f:83:22:df:16:32:24:66:b7:99: 02:44:3a:38:5c:a3:73:2c:8c:02:0f:81:19:e4:98:4f:60:56: ab:56:8f:27:46:3f:1b:f6:53:62:61:92:ca:e2:9f:b4:5c:c8: 55:a2:47:0e:a7:f8:89:19:aa:e2:b2:e0:20:42:13:f9:0a:6f: 11:58:f3:5c:ea:08:32:1d:91:d1:ef:3e:8d:eb:7b:6f:d8:ee: b0:fa:94:2f:84:a1:2f:c6:fe:09:fe:61:16:10:d9:5a:0e:cb: fb:75:fd:56:cf:41:df:a7:9c:1b:87:0c:75:d7:48:f1:08:72: 11:b5:b3:d9:8d:3f:fa:38:99:d2:47:86:e1:04:e0:f2:d1:27: 83:dc:43:ac:0a:3f:cd:3b:b3:b4:33:db:17:8f:ac:90:56:93: 6d:e6:61:6d:bf:d4:ba:2e:59:4f:a1:03:66:d7:a9:69:c5:b6: 08:45:2e:c9:c5:65:fd:c2:1e:00:85:df:6a:e4:ec:84:8b:00: 79:2b:19:e2:1a:41:1c:0a:ff:43:1c:48:04:13:b1:84:77:2e: e5:81:28:4b:60:aa:80:bb:2f:6f:21:a9:2b:78:a2:b3:89:69: fd:3d:48:8e:da:15:8e:96:26:6c:5f:e2:2c:39:bd:1a:21:4e: 88:7c:45:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFLlTlZbZldleGH9P0RZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWUyZGU1NGRhMjhjNzNmMTliM2UwNGVmOTU3NGU5OTA1 N2YxYTIwHhcNMjYwMjAyMDIwMDQ1WhcNMjYwMjAzMDIwMDQ1WjAzMTEwLwYDVQQD EyhmZmRlMjMxY2NlMWFjNmIzNmIzYWQzNTQxYzhkZmY4NjI3MjFmY2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVadpGJvyJFdRcyyM8gYpj39+LDW soFwCJlNX/KyoUQOiZbCi1pDBEHdtht1giwRvhfnm4uuWXOywSc3IzcboKV/ILnk Bg+Sn/Flvbuj7auhP113C0X99RSwXRZeB12a40QIaQ7fAZcokTblEN1rFNeb7p18 aul4723VLguNpEBg+aa556TeSazNW5tTKszzC3qx9dvIObFlwAnZujWUE2No0ei6 TTxM5PLTo1WZTcIYLyBzKCVm0txeoKaaQ2qwpqaL1Es0+JwBJMwW+2GPI5qLx6Wu 8YO+i8bQ3YUXWQ0/fMsotIAdt/lcJhAQ1BsTvGrlqD2/MhOp/9E8HToc2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/eIxzOGsazazrTVByN/4YnIfz0MB8GA1UdIwQY MBaAFNquLeVNooxz8Zs+BO+VdOmQV/GiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lM2FlYjctY2ExMC00MzI2LThiMWMt NjAwOGU2MGNkMzBiLzEvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lM2FlYjctY2ExMC00MzI2LThiMWMtNjAwOGU2MGNkMzBi LzEvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqa94CC5 5sY/gyLfFjIkZreZAkQ6OFyjcyyMAg+BGeSYT2BWq1aPJ0Y/G/ZTYmGSyuKftFzI VaJHDqf4iRmq4rLgIEIT+QpvEVjzXOoIMh2R0e8+jet7b9jusPqUL4ShL8b+Cf5h FhDZWg7L+3X9Vs9B36ecG4cMdddI8QhyEbWz2Y0/+jiZ0keG4QTg8tEng9xDrAo/ zTuztDPbF4+skFaTbeZhbb/Uui5ZT6EDZtepacW2CEUuycVl/cIeAIXfauTshIsA eSsZ4hpBHAr/QxxIBBOxhHcu5YEoS2CqgLsvbyGpK3iis4lp/T1IjtoVjpYmbF/i LDm9GiFOiHxFMA== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:24 2026 by rpki-client