This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json) Hash identifier: +JygDsjNSjO77hJZ7k2r/dXysnqS5YD8DH2kNiJ3M8Y= Subject key identifier: 0A:C7:C0:1D:4E:96:25:0C:D9:10:5C:9B:F5:8D:BE:21:2F:BD:A6:4B Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf Certificate serial: 019C42EB4222F82CA83FFFCC35203F03A4FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft Manifest number: 0AF1 Signing time: Mon 09 Feb 2026 15:00:40 +0000 Manifest this update: Mon 09 Feb 2026 15:00:40 +0000 Manifest next update: Tue 10 Feb 2026 15:00:40 +0000 Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: MLvU09BkweRxRDa3mEBjZo7lo/owzPoDeDeYdeByThE=) 2: JIYstMzj3XMQkjCArmJ9XqVMqDY.roa (hash: k7cdPGB7pam4WDhGNFWSKy/9FY+XZ5uPNxWgkgZIrdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:42:22:f8:2c:a8:3f:ff:cc:35:20:3f:03:a4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf Validity Not Before: Feb 9 15:00:40 2026 GMT Not After : Feb 10 15:00:40 2026 GMT Subject: CN=0ac7c01d4e96250cd9105c9bf58dbe212fbda64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9b:21:6d:49:21:de:07:88:7e:95:78:2a:7b: d1:1f:df:75:63:8c:18:d1:aa:c8:99:61:e2:4c:6f: a9:d9:1a:f6:77:bb:11:be:ce:2c:9d:ff:1d:9e:67: 4e:df:82:56:34:46:45:6c:8e:20:f9:4d:bd:cb:d5: 77:78:70:ae:e7:98:92:3f:b4:ef:1f:56:d6:14:73: 91:65:0a:42:85:ea:bf:1c:fa:1e:b0:b1:3b:a0:71: 21:d3:4a:0f:e4:72:e5:b6:ea:ea:29:ff:4a:69:39: d0:33:46:d3:1e:da:ea:b5:27:c8:f0:5c:66:d9:1c: 48:2a:5d:b3:cd:ed:23:c5:a8:6a:af:e6:c9:cb:81: d5:7b:50:e3:e5:77:bc:74:3c:cf:c4:9d:1c:64:8a: 66:54:ae:78:0a:08:56:0f:79:4d:6a:96:93:77:9e: 65:63:9f:81:c8:5e:c4:33:0f:7c:e0:bf:31:ef:1d: b8:14:2c:f7:2f:d5:2e:e2:73:8c:72:a0:61:e5:de: 11:fe:2c:fa:1b:2f:b2:d1:f3:59:45:7f:00:32:93: a2:7b:6b:ae:19:89:85:c4:08:98:62:3e:d1:68:a8: 1d:53:5f:f7:7f:79:ec:9d:16:eb:29:5c:9c:8c:fc: 87:d2:13:39:26:e0:60:e7:ed:b3:06:b9:93:36:df: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C7:C0:1D:4E:96:25:0C:D9:10:5C:9B:F5:8D:BE:21:2F:BD:A6:4B X509v3 Authority Key Identifier: keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:16:d8:02:28:57:4e:6b:10:36:c6:42:29:dc:1f:e6:95:33: f7:b9:f1:ad:1a:e5:2a:6a:fa:28:be:e4:2e:d5:e6:e0:4f:e6: 92:8b:fe:cf:5b:b4:6f:c2:ca:a6:5c:70:43:e2:6c:07:2b:4f: 98:a7:3c:25:21:a5:42:53:56:ca:9d:1e:d9:cf:26:2a:80:f7: 5e:e2:e7:b9:72:3c:1b:8d:0d:f4:7f:12:b3:8a:df:f9:e0:31: 59:58:01:4a:c8:d8:30:84:d3:17:28:cf:dc:79:1f:85:a9:68: 76:8e:cc:6e:c0:b7:12:65:84:3b:b9:9e:94:de:a5:07:95:37: b8:31:a9:18:73:fd:f6:ad:cf:a0:fe:f1:81:35:4e:59:fe:4c: 41:a5:5d:fe:fd:71:d3:b7:07:a9:77:e8:fa:c0:3d:cb:d5:af: cf:04:3c:3d:a4:0a:21:96:85:e6:71:b7:38:6c:a4:47:0a:83: fc:b3:7b:98:f4:7d:35:f6:49:4f:18:ea:71:a5:d2:56:ba:d5: a4:5d:77:29:98:49:90:dd:72:2c:80:e8:04:b1:7f:0b:eb:08: 38:c8:94:b3:2f:7a:23:36:ff:c1:44:a7:30:c8:5b:31:a3:9b: 50:fb:2e:68:e4:d1:01:33:52:47:60:ad:18:93:3b:d0:ab:85: 02:f8:75:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC60Ii+CyoP//MNSA/A6T8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MjE1YjU3ZDMzY2IyZjM0YzE3YzBlODEwM2JiMDUxZmY4 MDFlYmYwHhcNMjYwMjA5MTUwMDQwWhcNMjYwMjEwMTUwMDQwWjAzMTEwLwYDVQQD EygwYWM3YzAxZDRlOTYyNTBjZDkxMDVjOWJmNThkYmUyMTJmYmRhNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75shbUkh3geIfpV4KnvRH991Y4wY 0arImWHiTG+p2Rr2d7sRvs4snf8dnmdO34JWNEZFbI4g+U29y9V3eHCu55iSP7Tv H1bWFHORZQpCheq/HPoesLE7oHEh00oP5HLlturqKf9KaTnQM0bTHtrqtSfI8Fxm 2RxIKl2zze0jxahqr+bJy4HVe1Dj5Xe8dDzPxJ0cZIpmVK54CghWD3lNapaTd55l Y5+ByF7EMw984L8x7x24FCz3L9Uu4nOMcqBh5d4R/iz6Gy+y0fNZRX8AMpOie2uu GYmFxAiYYj7RaKgdU1/3f3nsnRbrKVycjPyH0hM5JuBg5+2zBrmTNt85LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArHwB1OliUM2RBcm/WNviEvvaZLMB8GA1UdIwQY MBaAFNghW1fTPLLzTBfA6BA7sFH/gB6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjA3YTQtNWMwMC00MTQwLTk4OTYt NjJkYzQ0N2ZlNDM4LzEvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjA3YTQtNWMwMC00MTQwLTk4OTYtNjJkYzQ0N2ZlNDM4 LzEvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBbYAihX TmsQNsZCKdwf5pUz97nxrRrlKmr6KL7kLtXm4E/mkov+z1u0b8LKplxwQ+JsBytP mKc8JSGlQlNWyp0e2c8mKoD3XuLnuXI8G40N9H8Ss4rf+eAxWVgBSsjYMITTFyjP 3Hkfhalodo7MbsC3EmWEO7melN6lB5U3uDGpGHP99q3PoP7xgTVOWf5MQaVd/v1x 07cHqXfo+sA9y9WvzwQ8PaQKIZaF5nG3OGykRwqD/LN7mPR9NfZJTxjqcaXSVrrV pF13KZhJkN1yLIDoBLF/C+sIOMiUsy96Izb/wUSnMMhbMaObUPsuaOTRATNSR2Ct GJM70KuFAvh1Xw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:48 2026 by rpki-client