This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json) Hash identifier: MrX9WfsxVqqqEBgcfDCKlx4jO/dUSMZ18GrZwHi7NVM= Subject key identifier: B2:4F:99:96:25:D5:22:96:F6:40:7D:47:5B:ED:27:8E:D7:94:C4:4D Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7 Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7 Certificate serial: 019C420FD8B7EDF75FE3C16C03A4C5F0377B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft Manifest number: 0745 Signing time: Mon 09 Feb 2026 11:01:00 +0000 Manifest this update: Mon 09 Feb 2026 11:01:00 +0000 Manifest next update: Tue 10 Feb 2026 11:01:00 +0000 Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: VrxLvFfSZRHxM1AHezVkk4Eix0tnYX4UxBDOtS7oNu8=) 2: UbKp8SZhnSoZXvXI5ekDZVISvJ0.roa (hash: Qzbo1YF+7OuM7vfSmLC+YBsyPpRh0JaNoTJmEXBDYdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:d8:b7:ed:f7:5f:e3:c1:6c:03:a4:c5:f0:37:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7 Validity Not Before: Feb 9 11:01:00 2026 GMT Not After : Feb 10 11:01:00 2026 GMT Subject: CN=b24f999625d52296f6407d475bed278ed794c44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dc:76:2a:74:8c:59:41:94:97:e5:23:e7:db: 3a:50:0c:74:38:08:dc:08:fb:6d:d9:d3:45:5f:a9: bc:58:4b:a9:5b:62:dc:7e:2c:ad:b6:a8:ca:aa:22: 32:2f:90:27:5f:f0:32:56:1d:dc:d6:92:1c:43:9b: 9a:62:46:45:b9:72:e4:f1:7c:e5:a4:96:10:98:36: b0:a9:c2:0a:29:02:ac:26:32:4d:3f:d5:52:fb:e9: c6:d2:be:e5:26:23:55:46:bf:da:fe:51:eb:25:31: b2:47:ff:c3:36:f5:74:1d:29:bc:5c:8a:11:d0:3e: 27:fb:5c:5d:ec:c0:72:e2:b0:06:6f:ac:8a:de:43: 82:4e:30:7d:59:39:f6:db:9e:80:fc:77:54:63:dc: 75:2f:15:3d:20:ef:98:71:9c:25:fe:f7:68:92:15: 1e:ed:72:ee:73:44:d3:1d:c8:88:91:ce:8d:d8:95: d3:d7:f7:d7:6d:5f:0a:05:68:ee:11:a7:d5:4c:7e: 4e:07:4b:9c:a6:55:db:94:01:fd:7c:2c:7e:05:5a: 6f:db:a4:8c:e7:96:f8:65:bd:bb:29:37:54:6e:3f: 10:0a:b7:87:fc:90:80:a5:29:1c:1f:89:8b:dc:2b: fd:7f:f6:25:55:f0:4b:5d:e2:e7:69:c8:0b:2f:c3: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4F:99:96:25:D5:22:96:F6:40:7D:47:5B:ED:27:8E:D7:94:C4:4D X509v3 Authority Key Identifier: keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f1:3e:1e:7e:52:56:d0:e4:dc:e0:2f:07:17:e0:07:b9:72: 7a:e8:d3:c4:f8:27:d3:41:5d:b8:4a:6c:a6:a2:47:25:09:5b: bf:1f:f3:ec:31:91:36:75:6c:0e:62:1b:40:3f:82:13:6b:b3: 61:f1:ba:75:70:b6:2b:6e:f3:03:bc:3c:9a:48:78:1f:65:a1: d7:df:4d:f9:4b:cf:50:f6:62:82:8f:f3:de:72:1d:d4:d0:b3: cf:21:68:94:51:52:cd:9e:55:f9:2a:45:bf:5b:d7:3f:ae:f8: 2a:f9:04:0d:5d:b6:fd:67:c8:96:82:7f:e7:78:5d:e0:d2:ae: 6c:1a:7b:63:b4:91:80:71:b0:1d:79:f8:1d:ff:72:67:2c:eb: 18:e9:b4:cb:ef:fa:8e:d8:01:b5:1e:22:07:c8:43:80:35:be: 77:42:6f:20:7a:53:2d:a0:4e:56:79:ec:4b:02:1c:68:72:ce: bf:a2:e6:d0:1a:78:b8:04:ba:55:00:f5:ef:ef:61:c4:ae:4d: 89:06:4f:e9:ea:d2:f9:e4:9b:38:07:0b:a7:08:9c:c5:ac:4a: 3f:4b:de:16:67:f2:64:ad:c7:57:c7:48:70:6a:43:7f:9e:c2: 4b:2b:aa:92:d9:21:1c:24:a5:93:2c:9c:c0:1b:43:29:e2:44: cb:fa:fa:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD9i37fdf48FsA6TF8Dd7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OWQ4NmEzNTIzOGQ0ZjJlYjYwY2JkMjE0OTVmODFhMzU3 N2MxYTcwHhcNMjYwMjA5MTEwMTAwWhcNMjYwMjEwMTEwMTAwWjAzMTEwLwYDVQQD EyhiMjRmOTk5NjI1ZDUyMjk2ZjY0MDdkNDc1YmVkMjc4ZWQ3OTRjNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9x2KnSMWUGUl+Uj59s6UAx0OAjc CPtt2dNFX6m8WEupW2LcfiyttqjKqiIyL5AnX/AyVh3c1pIcQ5uaYkZFuXLk8Xzl pJYQmDawqcIKKQKsJjJNP9VS++nG0r7lJiNVRr/a/lHrJTGyR//DNvV0HSm8XIoR 0D4n+1xd7MBy4rAGb6yK3kOCTjB9WTn2256A/HdUY9x1LxU9IO+YcZwl/vdokhUe 7XLuc0TTHciIkc6N2JXT1/fXbV8KBWjuEafVTH5OB0ucplXblAH9fCx+BVpv26SM 55b4Zb27KTdUbj8QCreH/JCApSkcH4mL3Cv9f/YlVfBLXeLnacgLL8N0KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJPmZYl1SKW9kB9R1vtJ47XlMRNMB8GA1UdIwQY MBaAFNmdhqNSONTy62DL0hSV+Bo1d8GnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNTBjMjgtYTRhNS00Yzk0LWFmYmEt Mzc1N2QxMGQ4ODllLzEvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNTBjMjgtYTRhNS00Yzk0LWFmYmEtMzc1N2QxMGQ4ODll LzEvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/E+Hn5S VtDk3OAvBxfgB7lyeujTxPgn00FduEpspqJHJQlbvx/z7DGRNnVsDmIbQD+CE2uz YfG6dXC2K27zA7w8mkh4H2Wh199N+UvPUPZigo/z3nId1NCzzyFolFFSzZ5V+SpF v1vXP674KvkEDV22/WfIloJ/53hd4NKubBp7Y7SRgHGwHXn4Hf9yZyzrGOm0y+/6 jtgBtR4iB8hDgDW+d0JvIHpTLaBOVnnsSwIcaHLOv6Lm0Bp4uAS6VQD17+9hxK5N iQZP6erS+eSbOAcLpwicxaxKP0veFmfyZK3HV8dIcGpDf57CSyuqktkhHCSlkyyc wBtDKeJEy/r69w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:44 2026 by rpki-client