This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json) Hash identifier: k6K6+zdAQf9QEUtnSAV7fFEsRuVz17IF8wVPlQdrSaY= Subject key identifier: 4D:2D:E3:F1:39:D7:20:1F:D8:01:DF:71:EA:41:5C:0E:6F:B9:7C:F4 Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d Certificate serial: 019C4322B06B5F43812108AF7C64E1BB97AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft Manifest number: 12E7 Signing time: Mon 09 Feb 2026 16:01:12 +0000 Manifest this update: Mon 09 Feb 2026 16:01:12 +0000 Manifest next update: Tue 10 Feb 2026 16:01:12 +0000 Files and hashes: 1: O764NAcKXNTjQ9sszmYMH0M-HC0.roa (hash: AyepL0+2wVG0+WCZlglCmaw7Rr7sdYw42s/HNe9N7IM=) 2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: n+vf22iO9wM1KkV+eadSR847JWiwM1FZlq+g2+tTo5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b0:6b:5f:43:81:21:08:af:7c:64:e1:bb:97:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d Validity Not Before: Feb 9 16:01:12 2026 GMT Not After : Feb 10 16:01:12 2026 GMT Subject: CN=4d2de3f139d7201fd801df71ea415c0e6fb97cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:7a:d0:6f:49:17:ef:58:f5:c6:79:19:55: 66:8a:5c:49:55:91:09:41:27:74:7b:b0:99:b2:1d: 65:51:17:9d:cf:e7:97:55:af:6e:40:f9:44:b2:c6: b1:f9:af:e4:d5:7a:08:5e:c7:6d:88:ab:f8:e2:77: 4c:fa:41:f7:2a:6c:21:e8:6f:62:58:87:4d:04:65: e5:ff:44:e1:79:f3:74:a6:5c:c7:55:7a:b2:f7:f0: 51:16:02:2d:42:49:56:a4:0d:a6:68:7b:28:cd:60: 7b:49:4b:e1:c8:a9:d9:9b:a8:d5:83:50:1b:d6:a7: 7b:2f:b6:1d:88:aa:94:eb:bb:aa:53:f6:23:99:00: 15:03:0b:4d:fd:95:94:98:39:9e:60:b5:6f:86:8b: df:fc:10:66:04:34:2c:fb:eb:ed:f6:33:13:56:cd: 67:66:1e:e1:b5:0f:bf:15:c3:a0:71:36:8d:74:e5: 3b:a6:ea:36:90:9d:61:49:47:a5:a1:df:96:e7:c7: 6e:6e:30:d0:94:c6:52:a6:ca:57:e0:4d:a0:3b:7d: 44:1e:89:60:49:a3:8e:e8:2b:35:69:33:72:b1:87: 82:d9:0f:70:fb:06:e5:83:36:c7:3b:d5:72:2d:a9: f5:de:04:f1:d6:6c:8f:a6:f0:21:40:28:e8:7d:88: 25:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2D:E3:F1:39:D7:20:1F:D8:01:DF:71:EA:41:5C:0E:6F:B9:7C:F4 X509v3 Authority Key Identifier: keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8f:18:d0:ae:df:3c:8b:57:03:6f:fd:ee:45:57:d9:1f:ea: 16:5c:90:fd:7f:d2:9d:78:46:ef:5b:f2:ea:ac:32:a3:50:93: bb:6e:df:7f:42:31:ca:09:18:81:b3:62:f2:5b:3f:dc:56:fb: b3:c2:70:c6:b7:a5:9e:b3:80:98:a1:36:f5:1d:ed:af:c5:08: 09:eb:4f:07:89:26:78:9e:c1:5d:eb:40:5f:0b:50:9b:ab:d1: 91:fb:83:11:8f:e7:48:47:3c:e4:8d:9f:16:0c:c0:86:fb:41: 6f:dc:a7:ec:dc:9d:e1:4e:c1:ce:42:83:34:42:d7:04:a7:b7: 67:3d:b3:0b:6f:57:5b:0f:23:49:80:f4:dc:4a:eb:80:80:a9: 15:fc:83:5e:37:15:f6:35:d7:06:ba:4c:3e:9e:84:02:b7:93: 56:64:31:73:a6:ea:68:90:80:d3:01:ff:4d:09:61:eb:4f:4c: 72:95:09:f2:78:cc:02:f0:c2:0d:49:4f:96:bd:68:7e:ae:01: 9d:31:c4:f5:91:f0:1e:5d:84:92:02:b4:7b:a7:98:aa:2a:5b: 24:ba:33:7a:54:9d:35:57:55:8f:ee:2e:c3:d5:10:0a:62:48: ea:11:47:5b:c2:7c:e1:c8:14:9d:c7:4f:36:4e:12:09:3c:65: 23:ee:89:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrBrX0OBIQivfGThu5esMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmIzNjcxYzlmYzc0NmExY2E2MzQ0OTU0NjU1N2NhOWU5 YTdkNmQwHhcNMjYwMjA5MTYwMTEyWhcNMjYwMjEwMTYwMTEyWjAzMTEwLwYDVQQD Eyg0ZDJkZTNmMTM5ZDcyMDFmZDgwMWRmNzFlYTQxNWMwZTZmYjk3Y2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nh60G9JF+9Y9cZ5GVVmilxJVZEJ QSd0e7CZsh1lURedz+eXVa9uQPlEssax+a/k1XoIXsdtiKv44ndM+kH3Kmwh6G9i WIdNBGXl/0ThefN0plzHVXqy9/BRFgItQklWpA2maHsozWB7SUvhyKnZm6jVg1Ab 1qd7L7YdiKqU67uqU/YjmQAVAwtN/ZWUmDmeYLVvhovf/BBmBDQs++vt9jMTVs1n Zh7htQ+/FcOgcTaNdOU7puo2kJ1hSUelod+W58dubjDQlMZSpspX4E2gO31EHolg SaOO6Cs1aTNysYeC2Q9w+wblgzbHO9VyLan13gTx1myPpvAhQCjofYgltQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0t4/E51yAf2AHfcepBXA5vuXz0MB8GA1UdIwQY MBaAFLv7NnHJ/HRqHKY0SVRlV8qemn1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzkt OTVjNTA1MzFkNGQ4LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzktOTVjNTA1MzFkNGQ4 LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcY8Y0K7f PItXA2/97kVX2R/qFlyQ/X/SnXhG71vy6qwyo1CTu27ff0IxygkYgbNi8ls/3Fb7 s8JwxrelnrOAmKE29R3tr8UICetPB4kmeJ7BXetAXwtQm6vRkfuDEY/nSEc85I2f FgzAhvtBb9yn7Nyd4U7BzkKDNELXBKe3Zz2zC29XWw8jSYD03ErrgICpFfyDXjcV 9jXXBrpMPp6EAreTVmQxc6bqaJCA0wH/TQlh609McpUJ8njMAvDCDUlPlr1ofq4B nTHE9ZHwHl2EkgK0e6eYqipbJLozelSdNVdVj+4uw9UQCmJI6hFHW8J84cgUncdP Nk4SCTxlI+6J7A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:42 2026 by rpki-client