This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json) Hash identifier: urdfKZf2plm+k6n1n4v9McYZrOSBM6hiFEpQvLyf5nU= Subject key identifier: 84:95:97:F3:20:96:37:09:06:4C:89:80:7C:24:34:F7:92:0E:2D:E2 Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9 Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9 Certificate serial: 019C43FDFD69F36AD73DA3076B8B38EE4533 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 20:00:44 +0000 Manifest this update: Mon 09 Feb 2026 20:00:44 +0000 Manifest next update: Tue 10 Feb 2026 20:00:44 +0000 Files and hashes: 1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: 4WfLO2TsI0Svr5EMomXxbFRIsErXUIfLVOQWXZUqevI=) 2: r2Z0mF-ld7ejJHAo1JnNl0agdIw.roa (hash: fBq7MnnqEMG6p2yBeqITh+XzH9thl2M1F8ElvslUqpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:fd:69:f3:6a:d7:3d:a3:07:6b:8b:38:ee:45:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9 Validity Not Before: Feb 9 20:00:44 2026 GMT Not After : Feb 10 20:00:44 2026 GMT Subject: CN=849597f320963709064c89807c2434f7920e2de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f3:74:f1:66:c3:52:42:8c:92:85:23:01:11: b2:da:82:0f:f7:55:db:e3:a9:4a:ea:1b:49:7a:59: 9b:56:f6:de:ab:d7:25:9f:39:65:5d:a8:dc:8d:aa: a7:11:aa:df:c5:33:c5:cc:da:74:cd:7b:db:f5:a0: f7:10:52:26:a1:e6:a0:aa:de:87:3b:ac:b3:76:d3: 98:24:bd:1e:d8:84:58:42:da:92:80:10:ec:00:75: a7:5a:77:14:0f:0a:94:1e:90:e9:02:b8:c1:2f:27: 2b:3b:35:c4:3f:f1:96:75:f7:1e:d7:ab:af:68:ed: cd:0f:95:ca:76:ad:ac:ef:12:f4:09:86:cb:e2:d1: c8:f7:b4:66:00:bd:23:d6:96:b9:b9:bb:9c:00:05: 5b:7c:20:72:a0:f2:46:4c:32:64:53:05:cd:94:7f: 04:0d:5b:a0:40:df:bf:7a:36:78:8a:c9:43:86:3b: 84:ae:fb:a0:77:a1:06:7f:b0:21:62:47:7f:c0:60: 1b:35:ad:10:6b:96:fa:20:8f:87:00:e5:c9:59:e3: 17:93:a4:9f:86:12:18:86:8d:08:a9:fa:45:5c:f0: f7:cf:ce:16:27:b1:61:54:d7:3f:de:da:4a:ff:b2: ec:3a:50:16:9b:cd:d4:c3:86:1c:9a:0c:5a:8d:f9: 1d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:95:97:F3:20:96:37:09:06:4C:89:80:7C:24:34:F7:92:0E:2D:E2 X509v3 Authority Key Identifier: keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e2:08:05:cb:84:3b:f5:2c:eb:50:4b:48:44:d1:35:c1:1b: f6:7a:e4:7e:36:91:9c:ab:85:91:e5:82:b4:2d:8b:1c:ba:c5: 2d:a0:4c:65:27:99:f7:8f:af:24:ce:e0:19:c3:56:6b:84:d5: 85:10:ce:d3:8b:e5:f8:cf:74:20:5a:eb:a7:6d:67:5f:c9:57: 40:90:cd:de:e0:3f:9b:b3:18:d0:3a:02:97:8d:66:6a:0c:d9: d0:09:85:1b:bb:7c:39:84:fb:b1:71:3c:b4:c9:dc:82:6e:e0: 89:1e:6a:57:5e:83:a3:cf:05:4d:b3:08:24:84:6c:a8:cb:cc: 70:05:c2:6d:77:db:e4:1e:4d:e8:b9:62:94:93:07:c4:7c:cc: c0:53:45:bb:26:cc:45:74:39:e5:3c:58:f8:e3:a4:f9:bd:f3: 30:13:6d:bd:e4:70:db:00:fd:8e:08:03:90:f5:d7:51:ff:8b: 73:d8:ce:fa:04:78:5c:60:90:51:4e:34:b8:78:d6:cc:7d:b1: 34:e9:3f:bd:15:d1:d7:de:f7:24:e6:9e:ed:22:76:cc:35:9d: cc:5e:08:52:8a:ce:77:79:b8:07:08:99:6e:5e:40:62:e3:71: 4d:4c:f7:f3:ce:7b:ec:e7:88:a7:a3:8f:d3:17:77:94:9e:8e: 96:fd:62:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/f1p82rXPaMHa4s47kUzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjVkMDNmYzE4ZjJmNDJjZGE1MDM4NjlkZTE5NGZkOGNj MjFhYTkwHhcNMjYwMjA5MjAwMDQ0WhcNMjYwMjEwMjAwMDQ0WjAzMTEwLwYDVQQD Eyg4NDk1OTdmMzIwOTYzNzA5MDY0Yzg5ODA3YzI0MzRmNzkyMGUyZGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/N08WbDUkKMkoUjARGy2oIP91Xb 46lK6htJelmbVvbeq9clnzllXajcjaqnEarfxTPFzNp0zXvb9aD3EFImoeagqt6H O6yzdtOYJL0e2IRYQtqSgBDsAHWnWncUDwqUHpDpArjBLycrOzXEP/GWdfce16uv aO3ND5XKdq2s7xL0CYbL4tHI97RmAL0j1pa5ubucAAVbfCByoPJGTDJkUwXNlH8E DVugQN+/ejZ4islDhjuErvugd6EGf7AhYkd/wGAbNa0Qa5b6II+HAOXJWeMXk6Sf hhIYho0IqfpFXPD3z84WJ7FhVNc/3tpK/7LsOlAWm83Uw4Ycmgxajfkd1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISVl/MgljcJBkyJgHwkNPeSDi3iMB8GA1UdIwQY MBaAFNsl0D/Bjy9CzaUDhp3hlP2MwhqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlYUVA4R1BMMExOcFFPR25lR1VfWXpDR3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81YzIyYzYtN2RjMy00YzhjLTgyYWMt OTM2MTc1YWQyZWIwLzEvMnlYUVA4R1BMMExOcFFPR25lR1VfWXpDR3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81YzIyYzYtN2RjMy00YzhjLTgyYWMtOTM2MTc1YWQyZWIw LzEvMnlYUVA4R1BMMExOcFFPR25lR1VfWXpDR3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+IIBcuE O/Us61BLSETRNcEb9nrkfjaRnKuFkeWCtC2LHLrFLaBMZSeZ94+vJM7gGcNWa4TV hRDO04vl+M90IFrrp21nX8lXQJDN3uA/m7MY0DoCl41magzZ0AmFG7t8OYT7sXE8 tMncgm7giR5qV16Do88FTbMIJIRsqMvMcAXCbXfb5B5N6LlilJMHxHzMwFNFuybM RXQ55TxY+OOk+b3zMBNtveRw2wD9jggDkPXXUf+Lc9jO+gR4XGCQUU40uHjWzH2x NOk/vRXR1973JOae7SJ2zDWdzF4IUorOd3m4BwiZbl5AYuNxTUz388577OeIp6OP 0xd3lJ6Olv1iQA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:20 2026 by rpki-client