This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft File: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft (raw, json) Hash identifier: KgtOKISrheNjBPGgD/tnb+tWyo2wNx9ato5YWJY0sAU= Subject key identifier: 05:B7:47:96:C4:FE:D6:53:71:4A:F3:90:2A:A0:DE:CF:0E:F9:87:3F Authority key identifier: 0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37 Certificate issuer: /CN=0b69087cef600358ef98c1c97da07234dfd0e037 Certificate serial: 019C42465393F39F06EF08EBDB7C3DDC4560 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft Manifest number: 0281 Signing time: Mon 09 Feb 2026 12:00:31 +0000 Manifest this update: Mon 09 Feb 2026 12:00:31 +0000 Manifest next update: Tue 10 Feb 2026 12:00:31 +0000 Files and hashes: 1: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl (hash: KfkmqpLP3EGfx5IMncdhLodyNRsQIHx8QHrsJR9swp4=) 2: MSRVEgtVF36hLTRoVhlT4zWJzuw.roa (hash: qRuvX1aY6QEfG+9q3uLQWZib4GCEJv3j+Wk3Azr+3ko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:53:93:f3:9f:06:ef:08:eb:db:7c:3d:dc:45:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b69087cef600358ef98c1c97da07234dfd0e037 Validity Not Before: Feb 9 12:00:31 2026 GMT Not After : Feb 10 12:00:31 2026 GMT Subject: CN=05b74796c4fed653714af3902aa0decf0ef9873f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c1:92:31:3c:55:f1:55:20:84:5f:2b:41:5c: 13:78:a3:51:30:56:c7:5a:14:c3:0c:21:e7:cf:b1: 26:75:27:e5:55:1f:18:df:de:c2:88:47:d6:2a:c5: c4:ca:f5:9c:ea:a8:e3:02:c0:d9:0b:58:02:41:76: 61:6e:a0:54:93:2e:88:17:f1:b8:79:1a:ee:94:e8: 98:a3:9d:17:07:30:e4:b4:2b:07:0e:dd:4f:0e:99: 13:ec:af:87:89:66:40:ce:f0:2a:f8:0a:a6:fd:af: bc:d0:fc:5f:5d:1a:09:a5:03:65:ed:44:20:7a:4f: 42:a4:b0:c4:78:d7:ec:b3:44:ff:99:91:6e:3e:4e: 46:5b:04:f6:ef:a9:c3:a9:67:91:1e:b7:62:bc:b4: e8:27:ae:ce:50:3a:10:9c:9d:eb:76:ef:ae:31:90: bb:b3:11:f5:11:44:27:1b:0c:d8:3f:29:fb:55:79: f1:8b:60:0d:11:c5:14:ca:ed:44:d8:9e:82:81:c8: 52:b5:18:76:c8:2c:0f:06:05:f7:3f:a9:74:e1:6c: 29:96:cd:f2:0b:b3:e2:1b:e9:ba:09:a1:2d:5e:c6: b0:fb:8d:1e:a2:46:7d:0b:7f:c1:e3:74:70:02:b1: 4e:1b:fd:06:ad:78:e2:3d:d8:1a:9b:69:00:83:38: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B7:47:96:C4:FE:D6:53:71:4A:F3:90:2A:A0:DE:CF:0E:F9:87:3F X509v3 Authority Key Identifier: keyid:0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ce:f1:cf:79:9e:0b:4e:34:6d:83:9e:ee:85:dc:2e:28:10: c5:ca:4d:00:a5:9f:d4:f0:5f:b1:b6:44:2f:e5:6f:a4:45:fa: 8d:04:80:a0:4c:d9:4a:94:86:05:37:ef:d1:db:f0:2c:b7:5e: e2:2d:05:9e:95:ba:9d:0d:c2:2f:46:53:cf:5b:99:9b:81:2f: 40:2f:25:d4:c4:7d:e5:11:13:b8:de:ed:4c:a0:2f:1b:46:ff: e6:b2:7c:db:81:f0:80:7c:87:0f:3b:5f:97:1f:21:c9:97:09: 90:fb:7e:4b:0f:3b:f8:5b:12:95:e0:f3:95:46:b6:82:a4:7d: 8c:e6:9b:3f:69:0f:31:b4:d9:7b:96:51:c7:32:57:b6:91:3f: b7:56:5c:2e:31:91:32:7c:0f:99:d7:9f:6c:18:6e:b9:0b:e7: 4b:ae:45:da:bf:24:a9:de:06:d1:52:75:b2:64:9f:fb:3f:6d: 0a:4d:e0:3f:db:68:57:86:57:4f:cb:ac:31:69:09:49:9e:1a: a8:9a:8c:79:69:86:89:6e:8e:82:6d:6e:cd:34:04:0a:a7:d2: f7:7b:eb:80:11:80:ef:5a:0d:b9:bd:e7:45:80:f2:b3:2a:d3: ba:e7:9c:b1:31:89:0a:e9:d4:9a:b9:4a:68:71:e9:4b:02:8c: fe:69:50:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRlOT858G7wjr23w93EVgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNjkwODdjZWY2MDAzNThlZjk4YzFjOTdkYTA3MjM0ZGZk MGUwMzcwHhcNMjYwMjA5MTIwMDMxWhcNMjYwMjEwMTIwMDMxWjAzMTEwLwYDVQQD EygwNWI3NDc5NmM0ZmVkNjUzNzE0YWYzOTAyYWEwZGVjZjBlZjk4NzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8GSMTxV8VUghF8rQVwTeKNRMFbH WhTDDCHnz7EmdSflVR8Y397CiEfWKsXEyvWc6qjjAsDZC1gCQXZhbqBUky6IF/G4 eRrulOiYo50XBzDktCsHDt1PDpkT7K+HiWZAzvAq+Aqm/a+80PxfXRoJpQNl7UQg ek9CpLDEeNfss0T/mZFuPk5GWwT276nDqWeRHrdivLToJ67OUDoQnJ3rdu+uMZC7 sxH1EUQnGwzYPyn7VXnxi2ANEcUUyu1E2J6CgchStRh2yCwPBgX3P6l04Wwpls3y C7PiG+m6CaEtXsaw+40eokZ9C3/B43RwArFOG/0GrXjiPdgam2kAgzgXpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAW3R5bE/tZTcUrzkCqg3s8O+Yc/MB8GA1UdIwQY MBaAFAtpCHzvYANY75jByX2gcjTf0OA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzJrSWZPOWdBMWp2bU1ISmZhQnlOTl9RNERjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81ODVlNjEtOWE0OS00NWE5LTkxZjct ZGY4YWRhZDg5N2JmLzEvQzJrSWZPOWdBMWp2bU1ISmZhQnlOTl9RNERjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81ODVlNjEtOWE0OS00NWE5LTkxZjctZGY4YWRhZDg5N2Jm LzEvQzJrSWZPOWdBMWp2bU1ISmZhQnlOTl9RNERjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPc7xz3me C040bYOe7oXcLigQxcpNAKWf1PBfsbZEL+VvpEX6jQSAoEzZSpSGBTfv0dvwLLde 4i0FnpW6nQ3CL0ZTz1uZm4EvQC8l1MR95RETuN7tTKAvG0b/5rJ824HwgHyHDztf lx8hyZcJkPt+Sw87+FsSleDzlUa2gqR9jOabP2kPMbTZe5ZRxzJXtpE/t1ZcLjGR MnwPmdefbBhuuQvnS65F2r8kqd4G0VJ1smSf+z9tCk3gP9toV4ZXT8usMWkJSZ4a qJqMeWmGiW6Ogm1uzTQECqfS93vrgBGA71oNub3nRYDysyrTuuecsTGJCunUmrlK aHHpSwKM/mlQ8g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:56 2026 by rpki-client