This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft File: r2sB3cUdknQsPMSisx3H_Bg75X8.mft (raw, json) Hash identifier: zJ9gZka4bvw9574tpEX2nD2mQHei1Ld9q0jnhZVocXA= Subject key identifier: 14:19:96:BF:9F:E7:F7:AC:B2:28:78:8F:85:75:3B:35:F6:8C:80:86 Authority key identifier: AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F Certificate issuer: /CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f Certificate serial: 019C427DB67BC36AF2B43A02B6CC6C786033 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft Manifest number: 0D65 Signing time: Mon 09 Feb 2026 13:01:00 +0000 Manifest this update: Mon 09 Feb 2026 13:01:00 +0000 Manifest next update: Tue 10 Feb 2026 13:01:00 +0000 Files and hashes: 1: r2sB3cUdknQsPMSisx3H_Bg75X8.crl (hash: EqpP2cmeKa0U0wbRDn/AQTltwuW0ogiU88G5ORzQtSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:b6:7b:c3:6a:f2:b4:3a:02:b6:cc:6c:78:60:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f Validity Not Before: Feb 9 13:01:00 2026 GMT Not After : Feb 10 13:01:00 2026 GMT Subject: CN=141996bf9fe7f7acb228788f85753b35f68c8086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:4d:ff:1e:64:74:11:ed:e9:38:1a:26:db: ab:52:93:13:8e:1a:20:0c:fa:ca:61:08:a6:06:b5: a9:d0:48:f6:07:63:6f:a0:db:40:b1:ba:8e:53:24: f9:a2:8e:3c:26:33:e3:73:e6:6a:ed:57:6e:d0:a8: 7b:23:5e:db:1f:19:95:a5:0f:54:64:e4:cd:f6:54: 08:ac:78:5a:29:ee:9a:f3:6c:1b:26:d9:e7:d2:69: 3a:52:40:f9:d9:10:65:ed:a9:3c:49:bd:a9:ed:b4: 57:46:5d:3c:70:75:99:07:1d:94:0f:7c:65:89:b0: 62:d7:31:8b:00:47:bc:3f:0c:17:a3:f0:10:a1:02: 68:02:98:24:af:95:b7:f1:34:6a:74:43:6d:4d:a7: 25:d7:72:0d:00:03:92:b7:b6:38:14:63:80:8e:da: 89:2d:72:f6:7b:75:0d:6f:97:b2:c7:f8:c6:09:f6: e8:45:2a:d8:a2:a8:1e:95:de:c2:6f:fc:97:b5:f6: ca:53:1f:29:c6:59:aa:6d:e5:ba:49:2a:31:c2:bd: 57:0b:ec:e9:1f:b3:75:e8:ef:7e:08:bc:b8:55:c5: 0f:29:f0:61:a9:95:26:3f:0b:69:ef:e9:f8:a4:5d: 1f:69:5e:a9:dc:d7:87:6c:b6:2b:bf:cc:6c:77:7e: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:19:96:BF:9F:E7:F7:AC:B2:28:78:8F:85:75:3B:35:F6:8C:80:86 X509v3 Authority Key Identifier: keyid:AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:80:cf:d2:ed:db:41:6e:b0:ce:b1:45:4e:e5:f6:35:99:2a: 75:58:a9:cd:74:f1:c0:59:66:9f:72:ad:83:2e:ab:0d:75:d9: dc:64:fd:2d:ae:24:a2:df:81:9d:c9:26:b9:b7:87:d5:68:60: 4a:88:6b:ee:94:fb:aa:74:2e:be:a5:dc:cf:73:5c:46:99:ca: 35:51:e0:f7:8e:08:88:e5:f7:88:97:c0:7b:3e:b0:7d:e5:73: 86:56:b6:57:95:34:3b:a8:a4:1e:9e:ff:e9:e5:0a:03:6f:7e: ee:bc:86:47:23:b1:8c:22:7d:0a:88:62:06:1c:8a:84:44:d6: fe:a2:18:83:a2:f2:5a:5e:53:07:17:88:c7:9b:51:db:4f:36: 5d:9a:c7:bd:1c:f2:8c:30:c9:d1:a7:d3:c2:df:a9:ef:39:e1: 36:a2:07:70:fe:ee:f3:58:58:1c:1b:47:be:c0:d6:ec:82:18: 63:28:02:8e:99:f6:4d:e3:20:7f:55:c0:ff:53:40:55:bc:02: f9:71:8d:9b:2b:03:47:0b:6a:93:1c:82:ff:f1:73:59:9f:21: b4:86:75:2e:53:1c:a2:3f:64:ee:0d:14:73:33:96:b4:4f:3b: 95:d2:f5:fe:cb:c8:0f:8b:cf:70:06:a6:1a:20:b1:51:39:18: db:61:f9:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfbZ7w2rytDoCtsxseGAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNmIwMWRkYzUxZDkyNzQyYzNjYzRhMmIzMWRjN2ZjMTgz YmU1N2YwHhcNMjYwMjA5MTMwMTAwWhcNMjYwMjEwMTMwMTAwWjAzMTEwLwYDVQQD EygxNDE5OTZiZjlmZTdmN2FjYjIyODc4OGY4NTc1M2IzNWY2OGM4MDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVxN/x5kdBHt6TgaJturUpMTjhog DPrKYQimBrWp0Ej2B2NvoNtAsbqOUyT5oo48JjPjc+Zq7Vdu0Kh7I17bHxmVpQ9U ZOTN9lQIrHhaKe6a82wbJtnn0mk6UkD52RBl7ak8Sb2p7bRXRl08cHWZBx2UD3xl ibBi1zGLAEe8PwwXo/AQoQJoApgkr5W38TRqdENtTacl13INAAOSt7Y4FGOAjtqJ LXL2e3UNb5eyx/jGCfboRSrYoqgeld7Cb/yXtfbKUx8pxlmqbeW6SSoxwr1XC+zp H7N16O9+CLy4VcUPKfBhqZUmPwtp7+n4pF0faV6p3NeHbLYrv8xsd363zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQZlr+f5/essih4j4V1OzX2jICGMB8GA1UdIwQY MBaAFK9rAd3FHZJ0LDzEorMdx/wYO+V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zN2EwMDItMjA3MS00NGVjLWJmNTAt MjljYTE2NTc2ZWRlLzEvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8zN2EwMDItMjA3MS00NGVjLWJmNTAtMjljYTE2NTc2ZWRl LzEvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIDP0u3b QW6wzrFFTuX2NZkqdVipzXTxwFlmn3Ktgy6rDXXZ3GT9La4kot+BnckmubeH1Whg Sohr7pT7qnQuvqXcz3NcRpnKNVHg944IiOX3iJfAez6wfeVzhla2V5U0O6ikHp7/ 6eUKA29+7ryGRyOxjCJ9CohiBhyKhETW/qIYg6LyWl5TBxeIx5tR2082XZrHvRzy jDDJ0afTwt+p7znhNqIHcP7u81hYHBtHvsDW7IIYYygCjpn2TeMgf1XA/1NAVbwC +XGNmysDRwtqkxyC//FzWZ8htIZ1LlMcoj9k7g0UczOWtE87ldL1/svID4vPcAam GiCxUTkY22H59A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:34 2026 by rpki-client