This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json) Hash identifier: nF1mNV+VWhRODBzHlc1totqm04F//4DzPk2z0CwVQ4I= Subject key identifier: 94:B3:3C:BD:29:B6:4B:5F:21:C0:1E:AF:77:44:BB:EF:B7:64:01:7F Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66 Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466 Certificate serial: 019C41D857BA5208BF29FAD4CC140F35CFC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 10:00:22 +0000 Manifest this update: Mon 09 Feb 2026 10:00:22 +0000 Manifest next update: Tue 10 Feb 2026 10:00:22 +0000 Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: WXv658E5rUH/qj9/0K0AwQn3ZQGlKFR4m5PlMsSrvyY=) 2: xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa (hash: LHuMkoFuyABxZJIkd6bMQ80Etxt39qZubcGAijE5D7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:57:ba:52:08:bf:29:fa:d4:cc:14:0f:35:cf:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466 Validity Not Before: Feb 9 10:00:22 2026 GMT Not After : Feb 10 10:00:22 2026 GMT Subject: CN=94b33cbd29b64b5f21c01eaf7744bbefb764017f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:81:2d:d1:42:1e:89:bd:b9:b5:d8:e3:7c: a0:b2:d7:5b:b0:40:e7:1e:aa:d2:00:bf:ba:6c:3f: 99:f6:dc:a4:52:79:c1:3d:b2:e6:78:fd:47:78:f2: 01:83:bb:cb:b4:0a:63:f6:e3:e2:f3:35:e7:ea:61: ad:dc:94:0f:5e:6f:37:bb:c9:84:11:83:2c:35:eb: 9e:85:44:bc:19:3c:ec:9d:66:55:43:55:59:6a:a9: 68:cc:51:54:05:62:e7:f3:ec:b4:22:73:82:57:d4: ec:ec:63:39:3e:f3:16:ec:a2:23:1f:46:6b:ec:83: e8:36:bb:c0:ee:1b:20:c0:f5:dc:83:e9:1b:41:57: ab:73:f2:22:5d:de:f7:b1:b9:89:2c:9a:d8:46:d4: 59:73:1a:48:fb:2f:b7:ad:a6:ce:26:99:58:ca:9d: c1:1a:fc:6e:91:ee:5f:a5:03:d1:43:53:12:40:f3: d9:dc:36:6b:62:8b:52:92:b9:57:6e:3f:96:b5:bb: ce:fe:07:5f:23:a2:0d:3d:21:b3:4d:2b:d6:b8:fb: 05:a2:f2:9c:f1:74:de:8f:ea:88:3a:fb:96:b3:3a: c6:91:ea:fa:a5:19:b0:36:73:23:96:c8:7b:5d:5d: 5d:45:b4:aa:a6:ff:8f:aa:26:33:4c:f3:e6:60:0d: dc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B3:3C:BD:29:B6:4B:5F:21:C0:1E:AF:77:44:BB:EF:B7:64:01:7F X509v3 Authority Key Identifier: keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:53:88:ef:b4:9b:69:3e:43:4c:ae:e3:56:52:67:4e:0f:c9: fc:85:eb:9b:e9:e3:e0:8f:22:5c:3a:80:bb:a7:0b:e8:1c:13: 30:02:a4:65:f1:ff:8b:25:c4:25:31:b0:9c:30:2f:fe:41:b1: 24:be:f8:c7:e4:a0:be:61:bf:f9:cf:c2:74:43:5b:40:d7:c3: 7d:a6:22:57:64:53:78:c4:9b:36:97:3a:7c:2e:ec:04:20:fd: 57:ae:99:97:25:07:4e:0c:88:33:d0:12:54:9d:3c:2e:d1:5e: 1e:6d:f7:65:4e:4a:b1:3a:2f:8d:d8:9d:9a:ee:a2:e9:49:70: a8:d1:c2:03:b6:61:f7:ed:d7:7a:c3:02:cc:ae:79:77:73:50: 2b:ca:44:b6:48:94:5d:2b:d0:b5:7c:7c:3e:80:60:4e:f1:2b: c7:fc:90:17:76:d5:eb:f1:32:c8:92:23:fa:a3:d6:bd:d0:c2: 08:bc:e1:8a:7c:95:a7:50:42:a4:28:e7:0a:d6:5e:e5:10:ce: 52:a5:69:86:54:97:b2:91:a0:a7:b1:23:c2:a0:4d:cf:3f:5b: 03:68:b0:d7:2c:72:33:58:01:1c:ad:a6:f3:9f:a7:35:5c:97: 71:d2:e7:b1:f8:5a:c5:97:9b:b1:d1:99:1c:3a:38:01:11:4b: 9f:8e:11:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Fe6Ugi/KfrUzBQPNc/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDA0N2RhYzhlZWY4OTQ0ZDc4YzFiN2EyNjg2OGMwM2Uy Y2U0NjYwHhcNMjYwMjA5MTAwMDIyWhcNMjYwMjEwMTAwMDIyWjAzMTEwLwYDVQQD Eyg5NGIzM2NiZDI5YjY0YjVmMjFjMDFlYWY3NzQ0YmJlZmI3NjQwMTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE2BLdFCHom9ubXY43ygstdbsEDn HqrSAL+6bD+Z9tykUnnBPbLmeP1HePIBg7vLtApj9uPi8zXn6mGt3JQPXm83u8mE EYMsNeuehUS8GTzsnWZVQ1VZaqlozFFUBWLn8+y0InOCV9Ts7GM5PvMW7KIjH0Zr 7IPoNrvA7hsgwPXcg+kbQVerc/IiXd73sbmJLJrYRtRZcxpI+y+3rabOJplYyp3B Gvxuke5fpQPRQ1MSQPPZ3DZrYotSkrlXbj+WtbvO/gdfI6INPSGzTSvWuPsFovKc 8XTej+qIOvuWszrGker6pRmwNnMjlsh7XV1dRbSqpv+PqiYzTPPmYA3cmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSzPL0ptktfIcAer3dEu++3ZAF/MB8GA1UdIwQY MBaAFNoAR9rI7viUTXjBt6JoaMA+LORmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEt YWM5YzhhNTBmMjRlLzEvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEtYWM5YzhhNTBmMjRl LzEvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4VOI77Sb aT5DTK7jVlJnTg/J/IXrm+nj4I8iXDqAu6cL6BwTMAKkZfH/iyXEJTGwnDAv/kGx JL74x+SgvmG/+c/CdENbQNfDfaYiV2RTeMSbNpc6fC7sBCD9V66ZlyUHTgyIM9AS VJ08LtFeHm33ZU5KsTovjdidmu6i6UlwqNHCA7Zh9+3XesMCzK55d3NQK8pEtkiU XSvQtXx8PoBgTvErx/yQF3bV6/EyyJIj+qPWvdDCCLzhinyVp1BCpCjnCtZe5RDO UqVphlSXspGgp7EjwqBNzz9bA2iw1yxyM1gBHK2m85+nNVyXcdLnsfhaxZebsdGZ HDo4ARFLn44Rug== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:42 2026 by rpki-client