This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json) Hash identifier: 6AevE9WLEMRCYVdY1KH6OFCYFT4wtCJgFIqp5ZPLPSI= Subject key identifier: D7:04:55:84:25:D7:D4:9D:A4:F6:1D:FA:02:61:47:07:06:25:9C:E6 Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18 Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818 Certificate serial: 019C42461B111D6D982055F992D112F9007A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft Manifest number: 027D Signing time: Mon 09 Feb 2026 12:00:16 +0000 Manifest this update: Mon 09 Feb 2026 12:00:16 +0000 Manifest next update: Tue 10 Feb 2026 12:00:16 +0000 Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: P6MlnEogwR2IWsAjWE7fjO13d3IE+sLfA6Hp9dWBNQg=) 2: uzwRSecIzXXYWfgJfZsJeESUkdo.roa (hash: F/+k7rYQfNtdvgAZPkZ7IVUpCs68QRZv55pPhKsqLbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:1b:11:1d:6d:98:20:55:f9:92:d1:12:f9:00:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818 Validity Not Before: Feb 9 12:00:16 2026 GMT Not After : Feb 10 12:00:16 2026 GMT Subject: CN=d704558425d7d49da4f61dfa0261470706259ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:bf:3a:6a:64:ac:75:ab:d1:9d:8d:d0:15: 8a:ed:31:f7:c2:6c:e1:19:76:17:4a:cf:b0:8b:cc: 74:00:d5:05:30:bc:c2:61:57:9e:47:31:75:2f:34: e3:37:bf:a7:94:83:fc:84:ab:cd:a3:e5:fe:00:70: bd:21:0b:de:62:93:be:fd:ae:6e:87:0d:c7:6f:33: 2f:53:1e:7d:15:cb:82:be:2f:3d:d8:37:33:ae:ee: c8:f1:53:75:42:74:73:7a:26:54:df:cd:3c:b4:eb: e0:fd:ca:dd:7d:f4:ec:a1:f2:d8:9e:82:43:50:1b: 1e:52:93:0e:b9:0d:47:13:9f:68:a8:bc:09:42:bf: 86:52:f2:c1:d4:e9:06:78:43:5d:c0:e7:78:db:a0: 61:8c:f1:50:b2:df:03:aa:e1:bf:d9:f6:40:63:de: 4f:b4:cf:b5:9d:02:d1:29:b9:a7:9a:1c:e6:6b:c5: 5f:5e:a8:56:11:af:92:21:2e:e4:b4:dc:7f:12:dc: 54:7f:e8:a9:df:c5:a7:8f:43:ba:b5:a3:d4:09:47: 79:9a:41:c5:42:2e:83:42:c5:63:8a:f5:e9:a8:8c: 85:d0:64:8f:7e:ef:7a:18:27:71:16:7c:5c:b2:84: fb:8d:8a:e3:d2:39:d3:70:d4:b5:cf:0c:2b:f5:9d: c4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:04:55:84:25:D7:D4:9D:A4:F6:1D:FA:02:61:47:07:06:25:9C:E6 X509v3 Authority Key Identifier: keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:eb:6b:6c:d5:55:04:c7:4a:33:2f:f9:11:0d:11:53:42:ed: 0f:00:e3:fa:2d:fc:d4:ab:ba:5d:ea:39:58:26:a1:3d:5f:18: e0:12:fd:f1:cd:a6:9a:92:23:eb:86:fe:87:41:0a:f4:89:22: 27:33:87:5c:dd:56:57:b5:5c:b6:ea:e5:5e:e4:e5:13:a6:2b: 78:bd:2e:82:fe:27:4f:e8:fd:d1:60:88:17:27:be:97:d1:de: 6c:36:0b:93:5d:85:4e:1e:78:ba:05:41:b4:95:11:b5:80:54: 1a:32:63:a8:81:cb:3d:01:8e:39:5b:1c:bb:14:49:19:4c:d0: 97:5e:82:96:d8:40:dd:49:5b:e3:8f:16:9c:4e:56:00:c9:12: c2:e3:4d:aa:19:a8:14:c3:6b:3b:8a:b6:2b:cf:d3:42:80:9b: cf:ab:2d:85:e5:36:5e:4a:fe:0f:f0:98:7c:af:d6:7d:b1:d1: 0d:62:b2:05:bc:16:df:a0:65:d8:c6:73:e9:86:71:d8:8d:8d: 88:65:c8:63:54:2d:30:ca:05:ac:40:4a:3e:2f:69:05:d6:67: 07:5c:83:d6:36:79:8f:75:98:5b:f0:6b:e9:c0:cf:5c:8e:13: 72:fa:32:71:e9:51:fc:28:41:7c:4d:8e:ef:5f:18:50:45:36: d2:d7:a2:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRhsRHW2YIFX5ktES+QB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhY2UyOGYyMmM2ZTdlNDQ0YmIwYTdlNTJhMTUzM2I4MGRl ZTc4MTgwHhcNMjYwMjA5MTIwMDE2WhcNMjYwMjEwMTIwMDE2WjAzMTEwLwYDVQQD EyhkNzA0NTU4NDI1ZDdkNDlkYTRmNjFkZmEwMjYxNDcwNzA2MjU5Y2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphW/OmpkrHWr0Z2N0BWK7TH3wmzh GXYXSs+wi8x0ANUFMLzCYVeeRzF1LzTjN7+nlIP8hKvNo+X+AHC9IQveYpO+/a5u hw3HbzMvUx59FcuCvi892Dczru7I8VN1QnRzeiZU3808tOvg/crdffTsofLYnoJD UBseUpMOuQ1HE59oqLwJQr+GUvLB1OkGeENdwOd426BhjPFQst8DquG/2fZAY95P tM+1nQLRKbmnmhzma8VfXqhWEa+SIS7ktNx/EtxUf+ip38Wnj0O6taPUCUd5mkHF Qi6DQsVjivXpqIyF0GSPfu96GCdxFnxcsoT7jYrj0jnTcNS1zwwr9Z3ErwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcEVYQl19SdpPYd+gJhRwcGJZzmMB8GA1UdIwQY MBaAFNrOKPIsbn5ES7Cn5SoVM7gN7ngYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hOTZjOWMtYjg1NS00ZmRhLWE1Zjct NzVjOWIyNDc4ZTNlLzEvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hOTZjOWMtYjg1NS00ZmRhLWE1ZjctNzVjOWIyNDc4ZTNl LzEvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAetrbNVV BMdKMy/5EQ0RU0LtDwDj+i381Ku6Xeo5WCahPV8Y4BL98c2mmpIj64b+h0EK9Iki JzOHXN1WV7VcturlXuTlE6YreL0ugv4nT+j90WCIFye+l9HebDYLk12FTh54ugVB tJURtYBUGjJjqIHLPQGOOVscuxRJGUzQl16ClthA3Ulb448WnE5WAMkSwuNNqhmo FMNrO4q2K8/TQoCbz6stheU2Xkr+D/CYfK/WfbHRDWKyBbwW36Bl2MZz6YZx2I2N iGXIY1QtMMoFrEBKPi9pBdZnB1yD1jZ5j3WYW/Br6cDPXI4TcvoycelR/ChBfE2O 718YUEU20teiXg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:22 2026 by rpki-client