This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json) Hash identifier: hzDqYsnfBvzAWdCb/RLnvCznOyqyhkAC9qYr3KpIUdU= Subject key identifier: 93:0F:1E:05:40:2F:4C:7D:E0:4C:94:F4:E8:75:38:32:91:81:DF:D9 Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa Certificate serial: 019C427D7ADDD207946E1247CE1582A93D52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 13:00:45 +0000 Manifest this update: Mon 09 Feb 2026 13:00:45 +0000 Manifest next update: Tue 10 Feb 2026 13:00:45 +0000 Files and hashes: 1: 23Zi6Py4gat9DXMFNsAI-_q8-4M.roa (hash: JvpZNhbX4GuKh0NLAnQpWeYECOq74QqIFmrg5zgTOUo=) 2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: OyYzxHFuvtO7e+5c4/QKcPeju3H+neWmeLLmQ6lMGtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:7a:dd:d2:07:94:6e:12:47:ce:15:82:a9:3d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa Validity Not Before: Feb 9 13:00:45 2026 GMT Not After : Feb 10 13:00:45 2026 GMT Subject: CN=930f1e05402f4c7de04c94f4e87538329181dfd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:f8:3f:74:d0:95:e7:6b:34:af:f8:e4:7f: 1f:e7:c0:58:6e:9c:54:c7:e5:7a:28:52:e6:b5:e0: 22:74:cf:d1:1b:78:63:35:c2:fa:32:d1:a9:e3:b1: 38:3d:f0:13:14:80:ea:c7:74:51:d1:64:8c:d4:d8: 1b:43:fc:fa:3e:87:54:91:2b:71:e4:0d:81:65:46: 38:00:54:ba:f2:40:9a:cc:d6:07:2a:8a:23:14:f0: 50:23:0f:40:46:96:2c:37:bc:30:a4:81:cf:f6:ba: 4c:ae:8d:80:5f:3f:69:27:56:70:47:59:7c:d4:fc: c1:09:8f:84:c7:ed:2a:d5:bd:20:76:6d:02:f1:8e: 54:14:db:84:36:a6:d5:68:18:ff:05:ea:3f:84:ab: 2d:e6:66:ee:aa:9d:06:1a:5c:80:86:50:a8:a2:7f: a4:2c:ec:98:3d:37:34:81:13:c9:e9:f9:82:86:7e: c6:b7:e9:b3:a8:29:44:8c:c6:c7:f9:9e:4c:40:58: c0:df:16:03:b7:70:e4:ad:2a:a6:f3:32:df:7c:ea: ae:3a:48:f2:31:bb:3c:21:07:40:f5:89:46:86:4c: c1:fe:59:bb:9c:c8:7a:54:d8:5f:4c:ea:d1:a0:5f: 7d:4e:1d:f3:b9:3b:53:56:28:9c:c2:4b:9d:86:72: 52:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0F:1E:05:40:2F:4C:7D:E0:4C:94:F4:E8:75:38:32:91:81:DF:D9 X509v3 Authority Key Identifier: keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c6:e0:60:8e:cb:90:cd:5b:fd:41:ea:24:23:9f:36:1d:ee: ac:df:c0:6f:1f:1f:85:93:ed:dc:2e:0f:04:08:e6:7f:3e:50: ab:f8:7e:19:69:96:ba:41:4c:58:86:fa:ca:9d:b2:c0:f5:25: ee:5c:3f:38:e4:24:50:79:42:48:75:96:a9:de:93:c4:7c:b5: 54:2f:93:95:eb:3d:13:2c:0f:c5:12:89:f1:10:49:f9:6f:15: 75:2a:72:ca:84:5b:32:7f:b7:a3:23:1a:bc:c1:d6:51:6c:5a: b4:28:6c:f6:16:d6:33:d1:17:30:48:a6:ca:f7:0e:f9:da:05: 74:43:b6:b1:e5:1d:82:8f:b2:a4:98:fa:18:57:16:35:c1:60: e5:00:d4:0a:44:62:5f:cd:33:65:ff:f7:d8:c1:70:1b:1d:f6: 7e:4f:d0:24:64:c9:22:94:62:fd:51:8e:35:f3:0c:12:45:5a: 31:74:f7:65:8f:a2:25:6e:ba:26:a0:79:7e:d8:f3:b2:a1:df: b9:57:7e:27:56:3b:4d:92:35:1e:6a:74:c8:85:04:8a:62:14: 25:53:00:58:ab:1d:78:c1:95:56:ba:d8:60:10:87:2e:ed:f9: cb:60:93:81:1a:2d:e4:9d:0a:63:b7:e1:ac:b4:0a:a4:eb:42: d5:7d:ba:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfXrd0geUbhJHzhWCqT1SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNjZjNTNiMTM1NjZkMDFjNGE4OTNhZGYxMzBiYmI0ZmEx NjUzYWEwHhcNMjYwMjA5MTMwMDQ1WhcNMjYwMjEwMTMwMDQ1WjAzMTEwLwYDVQQD Eyg5MzBmMWUwNTQwMmY0YzdkZTA0Yzk0ZjRlODc1MzgzMjkxODFkZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYH4P3TQledrNK/45H8f58BYbpxU x+V6KFLmteAidM/RG3hjNcL6MtGp47E4PfATFIDqx3RR0WSM1NgbQ/z6PodUkStx 5A2BZUY4AFS68kCazNYHKoojFPBQIw9ARpYsN7wwpIHP9rpMro2AXz9pJ1ZwR1l8 1PzBCY+Ex+0q1b0gdm0C8Y5UFNuENqbVaBj/Beo/hKst5mbuqp0GGlyAhlCoon+k LOyYPTc0gRPJ6fmChn7Gt+mzqClEjMbH+Z5MQFjA3xYDt3DkrSqm8zLffOquOkjy Mbs8IQdA9YlGhkzB/lm7nMh6VNhfTOrRoF99Th3zuTtTViicwkudhnJS8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMPHgVAL0x94EyU9Oh1ODKRgd/ZMB8GA1UdIwQY MBaAFGtmxTsTVm0BxKiTrfEwu7T6FlOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2Yt N2JjMjY4YTBiNTE3LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2YtN2JjMjY4YTBiNTE3 LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsbgYI7L kM1b/UHqJCOfNh3urN/Abx8fhZPt3C4PBAjmfz5Qq/h+GWmWukFMWIb6yp2ywPUl 7lw/OOQkUHlCSHWWqd6TxHy1VC+Tles9EywPxRKJ8RBJ+W8VdSpyyoRbMn+3oyMa vMHWUWxatChs9hbWM9EXMEimyvcO+doFdEO2seUdgo+ypJj6GFcWNcFg5QDUCkRi X80zZf/32MFwGx32fk/QJGTJIpRi/VGONfMMEkVaMXT3ZY+iJW66JqB5ftjzsqHf uVd+J1Y7TZI1Hmp0yIUEimIUJVMAWKsdeMGVVrrYYBCHLu35y2CTgRot5J0KY7fh rLQKpOtC1X26Aw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:59 2026 by rpki-client