This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft File: m2JkjpE6NkDwMbY6a9krDijhOfs.mft (raw, json) Hash identifier: X+l7C0thQx9QIiszQISVYx9WroLA1Yk0lbVP4jP9Bl0= Subject key identifier: 79:64:8A:C7:BE:94:01:08:03:D4:9F:D2:64:57:68:E5:B0:BE:40:7D Authority key identifier: 9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB Certificate issuer: /CN=9b62648e913a3640f031b63a6bd92b0e28e139fb Certificate serial: 019C42465DD3526DA1BD30F0064548487B84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft Manifest number: 03A9 Signing time: Mon 09 Feb 2026 12:00:33 +0000 Manifest this update: Mon 09 Feb 2026 12:00:33 +0000 Manifest next update: Tue 10 Feb 2026 12:00:33 +0000 Files and hashes: 1: S4wgEzwu0A2vm1VQWPPTFVYsI9o.roa (hash: wQE4gq6WepgedvHZAUnDuDNwD8qtyedRwrEsafYQxBY=) 2: m2JkjpE6NkDwMbY6a9krDijhOfs.crl (hash: hZH/UgDRuQeIiZ0S5+aJzazc7qAJkQOqOQyNochX1mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:5d:d3:52:6d:a1:bd:30:f0:06:45:48:48:7b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b62648e913a3640f031b63a6bd92b0e28e139fb Validity Not Before: Feb 9 12:00:33 2026 GMT Not After : Feb 10 12:00:33 2026 GMT Subject: CN=79648ac7be94010803d49fd2645768e5b0be407d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:77:f0:bb:a3:e4:be:27:10:a7:a6:67:ec:b8: 2b:7a:cf:e9:f2:dc:ab:81:9c:1d:57:e0:75:c6:49: 88:3e:5e:2e:78:57:8b:ad:df:cb:e5:9b:bf:17:35: 82:a3:c9:25:51:ea:66:60:d5:d4:59:b6:49:a4:4a: cc:4e:b7:73:ad:f0:93:e8:a7:c7:bc:c0:32:0b:03: 21:db:f1:54:ce:4e:80:f5:f1:f0:4a:39:4a:6a:d9: e9:0b:8e:5f:3a:58:8f:f3:32:d3:ce:d6:f7:b3:79: ae:e0:f3:bc:08:91:4f:2d:46:0e:7a:96:7b:a0:7f: e2:10:ac:90:02:f1:c4:05:ec:c7:43:ff:33:c9:10: d7:14:45:2f:0c:5c:a0:c8:79:61:28:61:17:b3:2f: ff:32:2c:a7:ef:30:e9:5f:7e:00:d3:88:34:cd:4e: 0f:75:f1:ba:f8:c6:f3:92:3d:06:1d:64:9d:c3:c4: 60:d6:d8:32:60:b4:6b:d2:ed:e8:c1:d8:1d:78:0b: ea:cb:5a:a9:d2:b7:42:7a:4d:8b:af:4b:63:60:67: f1:50:fe:b0:21:d2:46:dc:8d:f8:9a:97:44:a8:a2: 6e:9e:65:c2:66:44:8a:64:d3:b5:76:9b:a9:5d:7c: 47:e2:29:54:fd:9b:76:02:dd:3a:b7:6a:c0:20:5c: 72:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:64:8A:C7:BE:94:01:08:03:D4:9F:D2:64:57:68:E5:B0:BE:40:7D X509v3 Authority Key Identifier: keyid:9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:17:23:bd:5c:5d:bb:3a:3e:e0:2a:1d:53:60:63:c6:61:07: 8c:d8:5c:8f:24:51:d0:2c:40:ba:e0:e7:96:bd:d3:d8:aa:94: ca:9b:8a:3c:fa:bf:88:3d:c2:10:07:22:31:f8:f0:10:a8:10: 6a:b2:a4:7a:99:38:ed:91:7f:f0:b8:42:b7:34:f9:a3:92:61: 0c:44:d1:ff:5a:a8:8e:d9:13:8e:19:02:ce:2f:e4:8e:fa:e4: e8:4b:b9:c3:d4:b7:37:e3:47:7d:97:75:59:24:ea:3d:e0:c8: 8c:0f:74:27:da:2e:3a:99:73:f1:97:45:60:01:eb:9f:6b:38: ad:b6:f0:61:c8:61:a2:06:95:92:1f:66:6c:45:ae:60:80:d3: 1b:b9:f6:d3:ef:45:cb:d5:bd:6e:7c:b6:80:e6:9d:42:33:d6: 60:cf:00:ad:f3:92:bd:78:20:ca:22:5f:06:58:e8:d6:83:6a: 5e:dd:d9:3e:54:9e:9e:b2:72:fb:64:dd:b3:ed:ee:2a:06:90: d3:4f:77:2e:18:22:31:b2:39:1d:ca:98:7f:56:0c:45:6b:6b: 11:60:c8:a6:d8:4f:24:7a:d8:f7:7e:67:f7:19:32:2e:64:af: 33:5a:eb:db:a2:76:3a:5d:3c:67:0b:86:4b:30:11:5c:f9:95: d4:98:9a:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRl3TUm2hvTDwBkVISHuEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNjI2NDhlOTEzYTM2NDBmMDMxYjYzYTZiZDkyYjBlMjhl MTM5ZmIwHhcNMjYwMjA5MTIwMDMzWhcNMjYwMjEwMTIwMDMzWjAzMTEwLwYDVQQD Eyg3OTY0OGFjN2JlOTQwMTA4MDNkNDlmZDI2NDU3NjhlNWIwYmU0MDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3fwu6PkvicQp6Zn7Lgres/p8tyr gZwdV+B1xkmIPl4ueFeLrd/L5Zu/FzWCo8klUepmYNXUWbZJpErMTrdzrfCT6KfH vMAyCwMh2/FUzk6A9fHwSjlKatnpC45fOliP8zLTztb3s3mu4PO8CJFPLUYOepZ7 oH/iEKyQAvHEBezHQ/8zyRDXFEUvDFygyHlhKGEXsy//Miyn7zDpX34A04g0zU4P dfG6+Mbzkj0GHWSdw8Rg1tgyYLRr0u3owdgdeAvqy1qp0rdCek2Lr0tjYGfxUP6w IdJG3I34mpdEqKJunmXCZkSKZNO1dpupXXxH4ilU/Zt2At06t2rAIFxy2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlkise+lAEIA9Sf0mRXaOWwvkB9MB8GA1UdIwQY MBaAFJtiZI6ROjZA8DG2OmvZKw4o4Tn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJKa2pwRTZOa0R3TWJZNmE5a3JEaWpoT2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ODY1ZDctOWZlYS00N2Y2LWEzZmMt OThiZDE1NjAyOWMwLzEvbTJKa2pwRTZOa0R3TWJZNmE5a3JEaWpoT2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ODY1ZDctOWZlYS00N2Y2LWEzZmMtOThiZDE1NjAyOWMw LzEvbTJKa2pwRTZOa0R3TWJZNmE5a3JEaWpoT2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxcjvVxd uzo+4CodU2BjxmEHjNhcjyRR0CxAuuDnlr3T2KqUypuKPPq/iD3CEAciMfjwEKgQ arKkepk47ZF/8LhCtzT5o5JhDETR/1qojtkTjhkCzi/kjvrk6Eu5w9S3N+NHfZd1 WSTqPeDIjA90J9ouOplz8ZdFYAHrn2s4rbbwYchhogaVkh9mbEWuYIDTG7n20+9F y9W9bny2gOadQjPWYM8ArfOSvXggyiJfBljo1oNqXt3ZPlSenrJy+2Tds+3uKgaQ 0093LhgiMbI5HcqYf1YMRWtrEWDIpthPJHrY935n9xkyLmSvM1rr26J2Ol08ZwuG SzARXPmV1JiaPw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:49 2026 by rpki-client