This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json) Hash identifier: mIltm4oggtp9xu9CDPTWEAcq/vdYtZ29W0M+wIVJ7lc= Subject key identifier: 9D:0F:E9:55:A5:32:F7:6B:EC:6C:C2:1E:0D:56:99:92:F8:33:A6:57 Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11 Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511 Certificate serial: 019C44A2B7EF52CFB9E6BC19179CF839871D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft Manifest number: 0E9F Signing time: Mon 09 Feb 2026 23:00:40 +0000 Manifest this update: Mon 09 Feb 2026 23:00:40 +0000 Manifest next update: Tue 10 Feb 2026 23:00:40 +0000 Files and hashes: 1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: 5rC2GR/JDg4GuhYbK927/CMdCgUy0j5EhQqlgUqt01E=) 2: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (hash: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:b7:ef:52:cf:b9:e6:bc:19:17:9c:f8:39:87:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511 Validity Not Before: Feb 9 23:00:40 2026 GMT Not After : Feb 10 23:00:40 2026 GMT Subject: CN=9d0fe955a532f76bec6cc21e0d569992f833a657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:52:11:4c:06:79:92:c1:94:73:bd:fb:72:f1: b0:f9:c3:9c:b1:a9:bc:28:be:9e:a1:22:0a:46:fb: e9:ca:aa:4a:6b:26:aa:d4:7d:52:c2:05:4d:89:08: e3:28:58:41:b5:0a:26:e5:cd:ef:f9:2f:68:58:16: d9:a6:cc:db:cd:2e:74:d0:12:0e:98:b7:30:5e:48: 85:f7:df:1f:f2:04:bc:57:db:81:2c:03:af:da:2f: a8:26:e1:0c:20:03:33:59:7b:71:4f:de:60:8c:43: 61:33:fc:de:0e:d1:f4:6a:5c:d8:93:c7:06:66:1f: ab:11:b3:36:7a:fb:d4:25:85:4f:76:1b:7d:b9:ff: 08:60:f2:22:3c:0a:24:5e:89:f3:7b:e0:6e:79:82: 18:af:c0:e9:ec:9c:62:f4:34:c7:e8:cc:ba:a5:88: 0f:8b:67:e8:6f:d2:27:bd:f5:a9:cb:2e:e8:1f:29: ae:51:9c:83:10:fd:15:f1:26:33:5a:f5:78:d0:a2: ad:15:82:9a:b3:b1:62:53:f6:69:44:7b:0f:c0:a2: aa:50:58:bf:a1:4b:8d:64:a9:bd:9a:b9:ec:55:23: e4:6b:0c:44:31:02:aa:26:cf:28:91:1f:9e:dd:76: 16:df:1e:de:91:50:47:e7:5b:6b:64:31:28:d1:d7: b3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0F:E9:55:A5:32:F7:6B:EC:6C:C2:1E:0D:56:99:92:F8:33:A6:57 X509v3 Authority Key Identifier: keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:bb:07:ae:8e:8a:fd:36:74:80:a2:fb:f2:31:fd:ad:a2:3e: 15:aa:63:db:26:6c:54:a3:13:9f:00:56:dc:8d:75:d0:a2:b4: 8f:e8:7c:ff:88:a8:4e:da:fe:6e:ee:95:a7:2b:ab:a3:a6:a7: fa:8f:de:97:6f:04:32:4d:0d:06:51:f0:74:9e:c4:75:86:83: 8a:8b:9d:ba:6c:08:c2:35:c5:59:b8:53:d3:ee:ac:b5:ef:c2: 24:ae:69:e5:cf:99:9a:3e:d5:84:24:7a:39:c7:be:21:69:24: b1:01:28:54:d9:ab:3a:ff:cb:7b:78:d0:aa:88:e8:7c:25:e9: 81:7f:0a:87:0a:f0:cd:95:f0:a3:ea:2c:a8:be:b6:9e:86:ad: 71:b5:a1:48:4f:bf:af:04:fd:74:96:7d:ae:62:cc:3e:41:31: 94:8a:a7:8c:f5:b8:30:39:d4:da:2f:8b:73:bd:bc:1b:fb:76: 44:89:28:6c:96:45:b9:e5:ff:c2:8a:a2:f1:a3:76:da:b4:c5: ba:76:72:6e:9b:2f:a1:2f:4e:09:d6:16:b5:86:c6:1c:e9:a7: 11:9a:89:cd:31:2d:eb:ef:4e:5d:de:21:39:3c:fe:b9:a5:d0: 39:36:f7:cd:9a:e0:fe:2f:13:82:57:03:15:e5:70:da:38:3a: 77:8a:4d:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEorfvUs+55rwZF5z4OYcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWQ0MmFhZTAxOWU0ZWE0NGE2MTYzNzhlYjY2YjM4OWRl OGM1MTEwHhcNMjYwMjA5MjMwMDQwWhcNMjYwMjEwMjMwMDQwWjAzMTEwLwYDVQQD Eyg5ZDBmZTk1NWE1MzJmNzZiZWM2Y2MyMWUwZDU2OTk5MmY4MzNhNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lIRTAZ5ksGUc737cvGw+cOcsam8 KL6eoSIKRvvpyqpKayaq1H1SwgVNiQjjKFhBtQom5c3v+S9oWBbZpszbzS500BIO mLcwXkiF998f8gS8V9uBLAOv2i+oJuEMIAMzWXtxT95gjENhM/zeDtH0alzYk8cG Zh+rEbM2evvUJYVPdht9uf8IYPIiPAokXonze+BueYIYr8Dp7Jxi9DTH6My6pYgP i2fob9InvfWpyy7oHymuUZyDEP0V8SYzWvV40KKtFYKas7FiU/ZpRHsPwKKqUFi/ oUuNZKm9mrnsVSPkawxEMQKqJs8okR+e3XYW3x7ekVBH51trZDEo0dezDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0P6VWlMvdr7GzCHg1WmZL4M6ZXMB8GA1UdIwQY MBaAFNgdQqrgGeTqRKYWN462azid6MURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjct OTY4NTU1NTE5MGM0LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjctOTY4NTU1NTE5MGM0 LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrsHro6K /TZ0gKL78jH9raI+Fapj2yZsVKMTnwBW3I110KK0j+h8/4ioTtr+bu6Vpyuro6an +o/el28EMk0NBlHwdJ7EdYaDioudumwIwjXFWbhT0+6ste/CJK5p5c+Zmj7VhCR6 Oce+IWkksQEoVNmrOv/Le3jQqojofCXpgX8KhwrwzZXwo+osqL62noatcbWhSE+/ rwT9dJZ9rmLMPkExlIqnjPW4MDnU2i+Lc728G/t2RIkobJZFueX/woqi8aN22rTF unZybpsvoS9OCdYWtYbGHOmnEZqJzTEt6+9OXd4hOTz+uaXQOTb3zZrg/i8TglcD FeVw2jg6d4pNEw== -----END CERTIFICATE-----Generated at Tue Feb 10 04:02:23 2026 by rpki-client