This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json) Hash identifier: 5DOGr689rA7k2GS/Hm9pAsjPkftfpJDJ6gbtxQLtTyg= Subject key identifier: 3F:7E:CE:9C:4D:82:64:70:F0:22:23:01:4E:64:B0:A7:99:D4:3F:99 Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73 Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773 Certificate serial: 019C41D8659FCBE0FF95154A24F115776890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft Manifest number: 08AB Signing time: Mon 09 Feb 2026 10:00:26 +0000 Manifest this update: Mon 09 Feb 2026 10:00:26 +0000 Manifest next update: Tue 10 Feb 2026 10:00:26 +0000 Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: 9DZ4Dpcbm8h2R5xt5FHvN7t8YW9Iehu/4zP42Uci0V4=) 2: I7P5hrATQOr4FMojmomQFSpigt8.roa (hash: cp4VK2ZuXPC8H2sQqnOgkjqJPdpF+R6ME3S2G7buLzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:65:9f:cb:e0:ff:95:15:4a:24:f1:15:77:68:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773 Validity Not Before: Feb 9 10:00:26 2026 GMT Not After : Feb 10 10:00:26 2026 GMT Subject: CN=3f7ece9c4d826470f02223014e64b0a799d43f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7b:e5:05:bf:3e:22:d9:2b:22:45:13:72:03: e3:b2:60:60:e1:65:e0:5e:f1:a2:14:ee:21:15:2c: 6c:f3:5f:8f:e0:77:28:c3:27:72:0b:52:ac:b2:ab: e7:17:67:e2:34:0f:41:9d:45:9a:9c:00:49:ec:1a: 0d:e7:64:5b:f3:3e:5a:b9:3e:ab:c0:de:0a:ba:bf: e0:a0:1f:b6:47:b2:91:d6:96:46:76:7e:9d:d7:31: 4c:38:bf:7e:7a:bb:9d:61:21:ca:4d:dc:63:b2:eb: 67:d9:18:d7:99:da:e9:8b:f0:5a:71:b5:6d:48:c3: e2:fa:0b:58:cc:b4:9e:42:e9:80:66:ec:12:26:46: ec:a0:58:0d:00:93:4b:39:62:75:2b:ce:58:88:63: 55:f4:7b:79:60:3f:ee:72:28:17:ca:0c:c1:d1:1d: b6:df:10:33:49:4a:af:ed:98:fa:73:2a:46:90:db: 45:0a:3a:e3:71:e7:01:cc:39:da:ed:8c:a3:1a:06: cb:ec:e4:73:9d:0a:9c:2d:a0:30:b1:f2:77:64:9e: f5:c2:be:2a:14:e3:b4:e5:b5:34:ea:65:da:e4:f6: 6a:73:60:e4:ac:3a:59:f9:ea:bc:4d:c5:82:01:2b: 2e:24:a6:fd:92:bd:f2:60:93:0d:b7:f0:30:e9:83: 8f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7E:CE:9C:4D:82:64:70:F0:22:23:01:4E:64:B0:A7:99:D4:3F:99 X509v3 Authority Key Identifier: keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:7a:5e:bc:05:3e:10:9c:93:44:dd:1b:99:42:4e:49:50:3b: bd:f9:94:28:73:2a:9e:ca:df:62:f2:81:51:cc:2b:07:e2:6a: ea:31:6b:79:d6:85:3b:ab:1b:3f:67:16:d5:53:83:b4:93:6b: 64:d1:4a:51:e3:c5:b2:27:71:c4:88:bd:ac:0e:e4:6b:07:34: 5c:22:80:a0:85:2c:bb:5b:dd:36:72:e0:b2:f2:40:d3:0e:fd: ac:85:e8:81:5e:8d:c1:f1:ff:20:df:05:9f:9c:1a:3e:8d:9d: 7d:79:5f:4c:56:f5:4e:79:aa:60:d8:9d:85:47:bc:a6:ae:66: 05:6c:27:91:9a:3e:fe:4a:01:8a:fc:24:e4:39:9e:47:5a:1c: 0f:9f:d1:03:4b:e0:ee:cd:d6:71:42:5e:57:2c:ab:fc:7e:8b: ba:cf:6e:90:f7:ad:c4:a9:6b:9d:c4:43:8b:03:9d:7f:77:d8: 02:21:89:7a:74:28:eb:de:1b:03:de:45:c5:d1:35:7a:fe:c6: 04:b7:e8:7e:67:39:e3:20:3f:58:b3:f1:7a:66:63:8c:70:e5: 9d:21:bf:30:20:ed:97:64:ab:b2:bf:86:e0:30:8f:ba:38:2e: 94:29:d3:33:7f:1a:fc:83:9e:36:58:d9:92:d2:7a:0c:53:ec: 76:eb:33:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2GWfy+D/lRVKJPEVd2iQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWVjNTk3ZDFiMzc5ZWE4MzIzNjMxMmM2ZjhiMmJjZTc0 Mzk3NzMwHhcNMjYwMjA5MTAwMDI2WhcNMjYwMjEwMTAwMDI2WjAzMTEwLwYDVQQD EygzZjdlY2U5YzRkODI2NDcwZjAyMjIzMDE0ZTY0YjBhNzk5ZDQzZjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXvlBb8+ItkrIkUTcgPjsmBg4WXg XvGiFO4hFSxs81+P4HcowydyC1KssqvnF2fiNA9BnUWanABJ7BoN52Rb8z5auT6r wN4Kur/goB+2R7KR1pZGdn6d1zFMOL9+erudYSHKTdxjsutn2RjXmdrpi/BacbVt SMPi+gtYzLSeQumAZuwSJkbsoFgNAJNLOWJ1K85YiGNV9Ht5YD/ucigXygzB0R22 3xAzSUqv7Zj6cypGkNtFCjrjcecBzDna7YyjGgbL7ORznQqcLaAwsfJ3ZJ71wr4q FOO05bU06mXa5PZqc2DkrDpZ+eq8TcWCASsuJKb9kr3yYJMNt/Aw6YOPRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9+zpxNgmRw8CIjAU5ksKeZ1D+ZMB8GA1UdIwQY MBaAFNquxZfRs3nqgyNjEsb4srznQ5dzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3Mjct OGI4NWIyOGZiYjc5LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3MjctOGI4NWIyOGZiYjc5 LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXpevAU+ EJyTRN0bmUJOSVA7vfmUKHMqnsrfYvKBUcwrB+Jq6jFredaFO6sbP2cW1VODtJNr ZNFKUePFsidxxIi9rA7kawc0XCKAoIUsu1vdNnLgsvJA0w79rIXogV6NwfH/IN8F n5waPo2dfXlfTFb1TnmqYNidhUe8pq5mBWwnkZo+/koBivwk5DmeR1ocD5/RA0vg 7s3WcUJeVyyr/H6Lus9ukPetxKlrncRDiwOdf3fYAiGJenQo694bA95FxdE1ev7G BLfofmc54yA/WLPxemZjjHDlnSG/MCDtl2Srsr+G4DCPujgulCnTM38a/IOeNljZ ktJ6DFPsduszEg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:32 2026 by rpki-client