This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json) Hash identifier: kz0GPfB22tHxljUlBkss2AxLD4IwnU1EVVYbatD8ebc= Subject key identifier: F4:60:B9:8D:A8:1C:80:90:7B:89:C9:D5:2B:EB:89:53:FC:FD:95:4A Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49 Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149 Certificate serial: 019C420F5448E1BBC27B9AF2D8D5A9A72C85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft Manifest number: 138B Signing time: Mon 09 Feb 2026 11:00:26 +0000 Manifest this update: Mon 09 Feb 2026 11:00:26 +0000 Manifest next update: Tue 10 Feb 2026 11:00:26 +0000 Files and hashes: 1: c28eAYv0rrRe6_MausaY2by0884.roa (hash: Oxg9SozDO0QIj1rDPvskXO8gNt2LP5JL6/sMnFmtWaM=) 2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: 022yOosXIyulxa7C6ASFFP6ONFguxLsqf6hv6VLD5Cc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:54:48:e1:bb:c2:7b:9a:f2:d8:d5:a9:a7:2c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149 Validity Not Before: Feb 9 11:00:26 2026 GMT Not After : Feb 10 11:00:26 2026 GMT Subject: CN=f460b98da81c80907b89c9d52beb8953fcfd954a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:9b:c5:7b:6a:25:78:6f:8b:a0:e3:6f:2c: c4:91:01:40:8d:2b:17:2b:e5:0a:04:da:fb:f1:a9: c4:a9:df:b9:0b:43:4d:ce:80:b3:c5:f6:5b:9a:df: ad:56:f2:6f:ee:99:25:2e:4c:53:65:7c:72:32:6e: cf:63:40:4b:46:eb:3d:cf:c2:25:04:2b:21:32:2e: 9b:a4:cb:cf:c1:d2:58:3b:41:ee:d1:35:93:9a:12: d9:31:81:06:c9:a8:1b:0d:20:04:4b:52:72:89:e1: b0:9f:87:20:5f:e5:95:d0:28:fc:a5:42:64:50:97: 77:82:74:b1:2e:12:2e:c5:0e:8e:8d:a1:25:89:f6: 16:a0:fd:22:89:c6:4f:66:2a:42:dc:9b:2b:46:82: 05:20:c9:d0:27:ad:b7:99:28:c5:76:46:9d:12:37: b9:7f:47:26:1c:ab:5e:2c:15:c5:9c:69:b2:b9:d6: f2:ed:75:92:54:6c:3c:ee:2a:e0:41:b0:5d:dc:df: e7:8f:15:20:de:73:f7:fc:99:fa:fc:d4:a8:78:7d: 11:53:05:2a:98:60:ca:11:70:4f:5b:c9:a2:15:91: 25:ff:5e:ce:e0:69:da:40:d8:35:63:37:15:23:a8: 4b:f9:84:be:23:6c:75:9b:d9:e3:a8:0f:61:0b:52: 3d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:60:B9:8D:A8:1C:80:90:7B:89:C9:D5:2B:EB:89:53:FC:FD:95:4A X509v3 Authority Key Identifier: keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0e:af:0d:58:75:d8:d7:eb:de:8e:e0:85:54:71:88:ef:24: 02:05:ab:7a:ef:79:ae:20:b0:af:d6:c8:67:22:3e:26:0d:d7: 74:58:f3:78:3a:39:d1:e3:7a:a4:fc:e1:db:ff:c8:eb:6c:9f: ff:7e:8e:de:8b:4e:8c:a6:d4:19:d3:42:1e:64:96:13:0f:93: 6e:21:3a:21:0c:a8:7b:8a:d2:37:78:c6:db:3d:fe:fb:f1:47: 20:36:34:e2:e6:66:f1:52:b9:bc:b4:e6:f7:3c:4b:b2:75:8c: ec:2b:32:ad:f2:76:3b:e9:49:32:d7:a9:a3:be:54:55:9a:89: f5:c1:bf:d2:a9:08:10:69:7d:e5:d2:84:a2:04:73:7e:22:21: cd:9a:50:92:fa:af:e9:1b:25:1d:97:d9:39:68:97:ff:d0:fb: 15:6d:05:c8:5e:79:0d:ee:a4:45:47:d4:cb:32:ed:dd:7a:ab: 1e:67:50:f2:5f:97:63:7d:e6:ba:73:fb:c0:62:8e:9d:b5:aa: a0:d5:fc:0c:b0:35:7a:29:96:2a:58:a8:16:26:0f:1e:c1:d5: 13:5e:c2:dc:76:c1:4f:fa:f2:37:3f:9b:f8:0b:cc:55:d4:45: a6:75:04:44:a4:a6:b4:68:d7:33:e0:f2:2d:c6:09:f2:c9:43: 50:9d:29:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD1RI4bvCe5ry2NWppyyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZmQ5NjdjNmMxOWEzMWI3ZTM4ZTllNWM5Y2E4ZmEwZGUz ZDYxNDkwHhcNMjYwMjA5MTEwMDI2WhcNMjYwMjEwMTEwMDI2WjAzMTEwLwYDVQQD EyhmNDYwYjk4ZGE4MWM4MDkwN2I4OWM5ZDUyYmViODk1M2ZjZmQ5NTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5+bxXtqJXhvi6DjbyzEkQFAjSsX K+UKBNr78anEqd+5C0NNzoCzxfZbmt+tVvJv7pklLkxTZXxyMm7PY0BLRus9z8Il BCshMi6bpMvPwdJYO0Hu0TWTmhLZMYEGyagbDSAES1JyieGwn4cgX+WV0Cj8pUJk UJd3gnSxLhIuxQ6OjaElifYWoP0iicZPZipC3JsrRoIFIMnQJ623mSjFdkadEje5 f0cmHKteLBXFnGmyudby7XWSVGw87irgQbBd3N/njxUg3nP3/Jn6/NSoeH0RUwUq mGDKEXBPW8miFZEl/17O4GnaQNg1YzcVI6hL+YS+I2x1m9njqA9hC1I9ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRguY2oHICQe4nJ1SvriVP8/ZVKMB8GA1UdIwQY MBaAFIP9lnxsGaMbfjjp5cnKj6DePWFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ18yV2ZHd1pveHQtT09ubHljcVBvTjQ5WVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hOGRmNTgtZWFiYy00NWQ0LTk0Mzct YjU3NjE2MTM2YWI2LzEvZ18yV2ZHd1pveHQtT09ubHljcVBvTjQ5WVVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hOGRmNTgtZWFiYy00NWQ0LTk0MzctYjU3NjE2MTM2YWI2 LzEvZ18yV2ZHd1pveHQtT09ubHljcVBvTjQ5WVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfg6vDVh1 2Nfr3o7ghVRxiO8kAgWreu95riCwr9bIZyI+Jg3XdFjzeDo50eN6pPzh2//I62yf /36O3otOjKbUGdNCHmSWEw+TbiE6IQyoe4rSN3jG2z3++/FHIDY04uZm8VK5vLTm 9zxLsnWM7CsyrfJ2O+lJMtepo75UVZqJ9cG/0qkIEGl95dKEogRzfiIhzZpQkvqv 6RslHZfZOWiX/9D7FW0FyF55De6kRUfUyzLt3XqrHmdQ8l+XY33munP7wGKOnbWq oNX8DLA1eimWKlioFiYPHsHVE17C3HbBT/ryNz+b+AvMVdRFpnUERKSmtGjXM+Dy LcYJ8slDUJ0phQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:08 2026 by rpki-client