This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json) Hash identifier: jRKZHeCUP+LcPiaPeN1g+okRyHXgY9X8i8y5qDuoVu0= Subject key identifier: 36:08:D3:B8:22:86:D1:28:61:D8:33:58:12:8F:17:0C:34:4D:0E:9B Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3 Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3 Certificate serial: 019C424659A16C05B7DE4A56476C0C340089 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft Manifest number: 1407 Signing time: Mon 09 Feb 2026 12:00:32 +0000 Manifest this update: Mon 09 Feb 2026 12:00:32 +0000 Manifest next update: Tue 10 Feb 2026 12:00:32 +0000 Files and hashes: 1: iECZqjEQaP4vYPdGbi8_2UCo3kQ.roa (hash: bwkxeGL5KMOQda9sUnHQc+cPiNjhbKFYbhK5Z8/KX+0=) 2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: L2JXdhUtZF4gUPtzpmfyXzJ8C4hbvx1A3nas/qYws+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:59:a1:6c:05:b7:de:4a:56:47:6c:0c:34:00:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3 Validity Not Before: Feb 9 12:00:32 2026 GMT Not After : Feb 10 12:00:32 2026 GMT Subject: CN=3608d3b82286d12861d83358128f170c344d0e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:45:5d:84:1a:56:b3:67:b0:8a:1a:7d:16: b4:83:a9:fe:4f:e0:5b:38:23:20:4d:31:7c:f4:82: 89:0a:43:f6:b1:f6:2c:b6:f3:f0:7b:13:6b:d8:ee: d0:a4:f2:0d:6e:06:38:28:47:13:93:e2:ba:b6:91: d2:db:e7:aa:54:ae:5f:e8:38:e2:2a:45:1b:4a:41: 3d:60:da:1b:9d:12:e6:85:ae:66:96:e0:d4:18:23: a4:ab:e6:c8:5f:eb:14:c5:be:ab:25:cb:7e:22:8e: 17:dc:54:e6:78:4e:2c:4a:e4:55:e3:1e:b1:fd:b0: 33:a5:84:1a:e5:82:41:01:c7:4f:67:71:80:a5:31: dd:53:b4:dc:6a:b5:11:b1:5e:c0:7c:a9:17:8b:8d: 4e:15:a3:c5:59:b8:f8:88:50:ce:56:b5:2e:c3:a1: 90:76:2b:4b:86:8a:32:ab:a4:7d:72:c5:c5:9c:86: 26:6d:69:06:ab:e1:fd:f2:e0:9d:ef:54:0d:98:2a: ea:2c:78:08:c4:23:e3:3b:45:44:51:a0:ba:ac:e1: 95:13:e9:ca:d7:65:d4:c8:5f:f5:4c:41:4a:1e:06: 7c:49:15:e2:96:37:99:19:69:4c:54:fb:f4:73:9d: 63:7b:11:ff:7f:0f:04:80:d5:da:39:3b:17:7c:20: 78:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:08:D3:B8:22:86:D1:28:61:D8:33:58:12:8F:17:0C:34:4D:0E:9B X509v3 Authority Key Identifier: keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7a:e3:b0:e7:dc:7f:c1:28:46:c2:79:ef:e3:69:60:02:d3: 14:54:9b:e8:97:6d:ff:bf:b6:c4:a8:f1:6e:c9:b1:a4:35:b6: fe:84:a8:a0:92:8c:7f:32:f6:74:f5:89:a5:d3:8d:bd:b7:93: d2:6b:68:32:84:d2:d4:aa:4c:de:14:39:4c:72:6c:53:c1:61: bb:18:bf:29:d0:7e:b4:a3:12:ed:6b:b8:29:02:c6:65:1c:73: 5f:3c:dc:f8:2b:91:a1:3a:11:95:b1:01:0d:09:df:65:ff:a7: 76:e1:bd:92:a4:6f:30:0e:2d:45:4e:80:8e:4b:bc:97:dc:6e: ec:7a:b8:a6:32:9d:60:7d:8b:21:2b:0f:79:36:d1:2a:5c:40: df:8f:6e:89:cf:db:b5:1a:92:98:90:4d:b5:55:a4:cb:8d:ba: a1:54:d1:2a:f7:72:b7:70:ff:03:b4:ca:b0:51:2f:72:92:9b: 95:b6:ee:fa:1c:ce:58:b6:9c:44:4a:e3:9c:15:80:28:1d:69: ad:68:f7:26:5b:ef:be:01:dc:86:03:62:95:eb:c3:87:ef:c7: 3e:07:07:e2:c1:ad:e9:60:1f:ea:4e:90:53:29:37:88:d3:63: 4b:e2:02:37:28:a8:9b:8c:ec:2e:4b:9b:4c:38:69:2b:52:70: 78:08:99:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRlmhbAW33kpWR2wMNACJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkN2Q4ZGU4Y2EwNjFlYTE2NGU2NzFjMzRlYjMzNzdmNTcz NmJiYzMwHhcNMjYwMjA5MTIwMDMyWhcNMjYwMjEwMTIwMDMyWjAzMTEwLwYDVQQD EygzNjA4ZDNiODIyODZkMTI4NjFkODMzNTgxMjhmMTcwYzM0NGQwZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkVFXYQaVrNnsIoafRa0g6n+T+Bb OCMgTTF89IKJCkP2sfYstvPwexNr2O7QpPINbgY4KEcTk+K6tpHS2+eqVK5f6Dji KkUbSkE9YNobnRLmha5mluDUGCOkq+bIX+sUxb6rJct+Io4X3FTmeE4sSuRV4x6x /bAzpYQa5YJBAcdPZ3GApTHdU7TcarURsV7AfKkXi41OFaPFWbj4iFDOVrUuw6GQ ditLhooyq6R9csXFnIYmbWkGq+H98uCd71QNmCrqLHgIxCPjO0VEUaC6rOGVE+nK 12XUyF/1TEFKHgZ8SRXiljeZGWlMVPv0c51jexH/fw8EgNXaOTsXfCB4bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYI07gihtEoYdgzWBKPFww0TQ6bMB8GA1UdIwQY MBaAFK19jejKBh6hZOZxw06zN39XNrvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hMDg1MjAtN2YwNi00ZjEyLTg2NDAt NDk3ODVmY2RkOWM0LzEvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hMDg1MjAtN2YwNi00ZjEyLTg2NDAtNDk3ODVmY2RkOWM0 LzEvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXrjsOfc f8EoRsJ57+NpYALTFFSb6Jdt/7+2xKjxbsmxpDW2/oSooJKMfzL2dPWJpdONvbeT 0mtoMoTS1KpM3hQ5THJsU8Fhuxi/KdB+tKMS7Wu4KQLGZRxzXzzc+CuRoToRlbEB DQnfZf+nduG9kqRvMA4tRU6Ajku8l9xu7Hq4pjKdYH2LISsPeTbRKlxA349uic/b tRqSmJBNtVWky426oVTRKvdyt3D/A7TKsFEvcpKblbbu+hzOWLacRErjnBWAKB1p rWj3JlvvvgHchgNilevDh+/HPgcH4sGt6WAf6k6QUyk3iNNjS+ICNyiom4zsLkub TDhpK1JweAiZBA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:36 2026 by rpki-client