This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json) Hash identifier: iNN9Qeps66IAe4YR0ZFhg6xohFg5bEZRwwA8fyEI0/g= Subject key identifier: B9:7F:3C:F5:40:0A:21:67:BD:F4:5E:ED:F9:C3:AF:E8:4C:A4:55:33 Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce Certificate serial: 019C41A21D3B013B875D2F6C353F8FE6931E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft Manifest number: 0FDC Signing time: Mon 09 Feb 2026 09:01:09 +0000 Manifest this update: Mon 09 Feb 2026 09:01:09 +0000 Manifest next update: Tue 10 Feb 2026 09:01:09 +0000 Files and hashes: 1: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: A1G+pXsAymOWtAwICTZCz1IFakSyuUB935FZsJxWGTA=) 2: teusCgS3LurWsd8zjYQXrHloX04.roa (hash: 3awmFsX5Wn0/BjbRN3/chw8uSeDnVLCWi3foqHP86Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:1d:3b:01:3b:87:5d:2f:6c:35:3f:8f:e6:93:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce Validity Not Before: Feb 9 09:01:09 2026 GMT Not After : Feb 10 09:01:09 2026 GMT Subject: CN=b97f3cf5400a2167bdf45eedf9c3afe84ca45533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:df:5f:9b:1e:bc:ac:5e:fe:f7:a0:01:79:da: 7f:84:a0:c2:08:e5:44:73:25:28:9e:a3:08:e1:88: 23:1e:82:40:0f:8a:51:d3:4f:20:00:4f:1d:0c:9f: bf:70:0e:ab:1a:bf:5d:7e:64:73:84:53:94:cc:59: b6:78:80:b5:0a:f7:c3:61:b1:7a:c6:fa:9c:6b:b9: 46:1e:65:f4:52:03:77:56:7e:bd:ed:99:bf:c0:6b: c2:4d:6b:97:e4:cc:9a:76:46:f5:bd:7b:20:ed:4d: e3:7b:35:af:7b:08:07:ac:1a:ca:0b:99:b2:47:f9: 0e:5b:4f:d8:97:d0:36:5f:e0:ec:2d:67:e2:62:38: 34:bf:b6:18:1d:5a:ad:69:c1:49:8b:fe:c1:f6:6d: 1e:f3:f5:c1:a4:a8:19:68:70:fc:ae:d9:e1:08:54: 34:1c:ab:73:65:dc:aa:76:d8:ab:9b:6c:d8:4a:b2: cf:c7:d8:79:4a:9e:19:15:e7:a9:34:77:3a:fb:0e: 63:a1:e9:c0:d2:78:15:8b:ea:c5:91:40:4c:85:36: 86:35:0c:d6:99:0a:0b:41:21:b9:db:3e:ae:65:07: 91:ea:c7:ce:1c:e1:01:44:c4:e7:39:5e:4e:c2:b1: da:46:80:00:81:61:19:fa:32:12:82:3f:f5:70:8a: 42:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7F:3C:F5:40:0A:21:67:BD:F4:5E:ED:F9:C3:AF:E8:4C:A4:55:33 X509v3 Authority Key Identifier: keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:98:1d:18:48:8a:ef:c1:c2:f6:f9:a0:48:d6:7f:c6:84:d4: 64:07:bc:32:46:2d:50:67:90:ba:34:c5:f8:70:e3:d7:65:4d: 4e:0c:ec:88:be:69:22:2b:b0:95:ba:2d:5f:24:f6:85:e2:83: 6e:20:ec:e3:ed:50:9c:d8:de:b8:bb:d7:99:a5:48:e8:6d:55: 7c:b8:49:32:85:ba:31:75:a8:37:34:75:19:dd:36:d1:29:82: ad:17:08:2b:89:7c:7a:6f:6d:4c:79:5f:39:64:d0:4e:c2:66: 3c:6f:67:81:06:6b:2d:49:7d:5b:fa:c6:0f:65:06:b8:52:43: 79:73:63:65:e7:36:ae:1e:66:58:af:ff:ac:68:eb:18:a4:9e: b9:49:d6:45:2c:73:89:f2:2a:a0:86:45:6b:50:76:cc:31:c2: ce:c9:57:8f:15:cc:6d:2e:04:8a:88:3d:83:4e:e1:33:1a:84: 21:fb:70:f8:ce:a2:3d:d7:2c:b4:10:12:a1:44:70:9d:56:7b: d4:f2:03:5b:1d:c5:71:d2:4b:ed:1e:bb:d1:cd:00:86:49:49: 05:a5:4c:1d:e9:9c:06:ef:eb:8e:29:95:4a:d5:9e:99:74:5d: da:fa:ae:b8:42:21:ba:85:f7:bf:e4:8a:9b:91:1f:aa:d6:f4: d7:51:74:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoh07ATuHXS9sNT+P5pMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjc4ZjE0ZjhiMjI4OGQ0OTU1N2NhNmZiMWJkZjQ3OTM5 MjdkY2UwHhcNMjYwMjA5MDkwMTA5WhcNMjYwMjEwMDkwMTA5WjAzMTEwLwYDVQQD EyhiOTdmM2NmNTQwMGEyMTY3YmRmNDVlZWRmOWMzYWZlODRjYTQ1NTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt9fmx68rF7+96ABedp/hKDCCOVE cyUonqMI4YgjHoJAD4pR008gAE8dDJ+/cA6rGr9dfmRzhFOUzFm2eIC1CvfDYbF6 xvqca7lGHmX0UgN3Vn697Zm/wGvCTWuX5Myadkb1vXsg7U3jezWvewgHrBrKC5my R/kOW0/Yl9A2X+DsLWfiYjg0v7YYHVqtacFJi/7B9m0e8/XBpKgZaHD8rtnhCFQ0 HKtzZdyqdtirm2zYSrLPx9h5Sp4ZFeepNHc6+w5joenA0ngVi+rFkUBMhTaGNQzW mQoLQSG52z6uZQeR6sfOHOEBRMTnOV5OwrHaRoAAgWEZ+jISgj/1cIpCfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLl/PPVACiFnvfRe7fnDr+hMpFUzMB8GA1UdIwQY MBaAFCtnjxT4siiNSVV8pvsb30eTkn3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYmE5ZWQtZGEyMS00OTE5LWE4MzEt ZjFjYzg3M2MyZTI3LzEvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iYmE5ZWQtZGEyMS00OTE5LWE4MzEtZjFjYzg3M2MyZTI3 LzEvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJgdGEiK 78HC9vmgSNZ/xoTUZAe8MkYtUGeQujTF+HDj12VNTgzsiL5pIiuwlbotXyT2heKD biDs4+1QnNjeuLvXmaVI6G1VfLhJMoW6MXWoNzR1Gd020SmCrRcIK4l8em9tTHlf OWTQTsJmPG9ngQZrLUl9W/rGD2UGuFJDeXNjZec2rh5mWK//rGjrGKSeuUnWRSxz ifIqoIZFa1B2zDHCzslXjxXMbS4Eiog9g07hMxqEIftw+M6iPdcstBASoURwnVZ7 1PIDWx3FcdJL7R670c0AhklJBaVMHemcBu/rjimVStWemXRd2vquuEIhuoX3v+SK m5Efqtb011F0Wg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:01 2026 by rpki-client