This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft File: rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json) Hash identifier: AamGxWz8+wONtVcA5nNZ0E9SYbUvd7F6NbD9gvaHT2Y= Subject key identifier: 2C:BF:40:9B:1D:E7:83:37:90:58:10:B5:B5:55:EE:CF:48:3E:FC:59 Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30 Certificate issuer: /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830 Certificate serial: 019C420F9A1105F40E5DC1B329634C5921D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 11:00:44 +0000 Manifest this update: Mon 09 Feb 2026 11:00:44 +0000 Manifest next update: Tue 10 Feb 2026 11:00:44 +0000 Files and hashes: 1: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: gIEQIaT5ghBnWx51cG7dvOVQLXsouMySKqEJ4rUzuHA=) 2: zilAvi0gPY9JFc-GVd3-_608WgE.roa (hash: ZyVYNr8SF0SGWYnff8EK2MHWbU5TL3VAzX0qJ7R6ce0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:9a:11:05:f4:0e:5d:c1:b3:29:63:4c:59:21:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830 Validity Not Before: Feb 9 11:00:44 2026 GMT Not After : Feb 10 11:00:44 2026 GMT Subject: CN=2cbf409b1de78337905810b5b555eecf483efc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7e:53:90:5f:3f:d3:28:20:38:cd:e3:18:b9: 4a:45:f1:e4:b0:5e:9c:0f:82:0c:99:8d:0c:2d:d9: d1:e3:c7:a8:45:2c:f2:66:bb:b3:0a:07:1b:e1:04: 27:6e:17:b1:4a:24:78:06:c4:03:83:10:a7:da:90: ac:7c:9c:de:f1:9b:2f:69:a4:06:02:1c:85:11:ad: d4:8d:7a:c7:7e:db:52:dd:b1:d2:20:b6:f7:e7:c7: 71:d1:50:46:be:d8:d8:e7:6d:10:e9:c3:16:56:ea: 36:a7:f5:e9:cc:74:86:de:3b:c0:93:b4:4f:f8:89: ca:45:ae:2a:65:62:9c:d4:f8:2e:49:35:93:ab:9f: c1:96:a3:f3:94:c9:cf:2d:52:4f:32:13:1f:71:62: f5:eb:f5:b2:19:1b:da:c0:dd:ca:eb:6f:b8:e6:96: f1:ea:7c:11:9a:62:47:71:20:35:e7:9c:28:3e:af: 42:d9:08:7c:71:0c:75:64:e6:8e:89:fc:61:41:ec: 72:53:5b:a6:11:b7:71:28:f7:e8:54:ce:ba:b6:c4: e5:d9:13:9c:67:16:11:78:df:fe:da:8a:f8:ba:9b: 60:d7:27:c4:ac:e8:cb:ad:87:e7:6a:44:cc:48:6b: 55:19:01:a7:2a:a9:18:9e:b8:76:35:1d:a0:34:a8: 0d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BF:40:9B:1D:E7:83:37:90:58:10:B5:B5:55:EE:CF:48:3E:FC:59 X509v3 Authority Key Identifier: keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9f:fb:67:43:4f:bb:ed:4b:77:c0:f3:ea:01:2d:cf:40:a0: 27:1d:d0:fe:e1:2c:b7:15:54:2c:77:94:0c:e8:55:5c:e7:54: 02:07:ab:1a:25:c7:df:05:c1:fb:60:7c:67:e7:ae:ce:7a:97: d9:70:25:da:e6:46:eb:27:9b:f6:d3:7c:a6:56:1e:5c:79:b6: 5a:14:93:b4:7e:b1:36:61:18:6d:22:f3:03:28:8e:61:fe:ce: 6c:13:9e:22:98:56:da:65:ab:6c:15:61:67:d2:7f:36:90:89: c0:e1:32:8b:6a:ef:bc:fb:6f:72:5b:39:8c:4d:f5:78:bb:57: a7:b1:4d:a6:f1:c6:9b:95:1d:2d:39:43:a6:c6:ee:80:6b:a4: 71:e5:a6:2b:60:6f:03:6e:fb:96:e5:be:e6:14:45:df:8b:dc: c7:ae:86:c1:84:0d:0f:fc:e7:b6:a9:ee:82:33:43:12:64:71: 14:87:ca:dd:1b:71:6e:06:ee:a2:a8:1d:ae:a1:da:e8:55:ed: e0:4e:0b:50:93:e0:07:72:2d:23:3f:27:62:37:0c:75:f9:17: e1:82:bb:6c:5a:15:c6:3b:ae:e6:f3:a0:54:c5:33:91:69:ef: 34:b7:ac:0c:55:73:6d:13:b8:77:4e:45:5f:6c:d2:04:95:0a: 7e:aa:35:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD5oRBfQOXcGzKWNMWSHTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZmQ5MGNiMzU3NDJmOWU1ODFlOGNiZGYwZTNlMTIzYTg0 OWM4MzAwHhcNMjYwMjA5MTEwMDQ0WhcNMjYwMjEwMTEwMDQ0WjAzMTEwLwYDVQQD EygyY2JmNDA5YjFkZTc4MzM3OTA1ODEwYjViNTU1ZWVjZjQ4M2VmYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n5TkF8/0yggOM3jGLlKRfHksF6c D4IMmY0MLdnR48eoRSzyZruzCgcb4QQnbhexSiR4BsQDgxCn2pCsfJze8ZsvaaQG AhyFEa3UjXrHfttS3bHSILb358dx0VBGvtjY520Q6cMWVuo2p/XpzHSG3jvAk7RP +InKRa4qZWKc1PguSTWTq5/BlqPzlMnPLVJPMhMfcWL16/WyGRvawN3K62+45pbx 6nwRmmJHcSA155woPq9C2Qh8cQx1ZOaOifxhQexyU1umEbdxKPfoVM66tsTl2ROc ZxYReN/+2or4uptg1yfErOjLrYfnakTMSGtVGQGnKqkYnrh2NR2gNKgNmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCy/QJsd54M3kFgQtbVV7s9IPvxZMB8GA1UdIwQY MBaAFK39kMs1dC+eWB6MvfDj4SOoScgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmYyUXl6VjBMNTVZSG95OThPUGhJNmhKeURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83ZTIyNGQtZjE1NC00Zjc1LWEyYTgt ZWI3ZWM0ZDdkY2E4LzEvcmYyUXl6VjBMNTVZSG95OThPUGhJNmhKeURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83ZTIyNGQtZjE1NC00Zjc1LWEyYTgtZWI3ZWM0ZDdkY2E4 LzEvcmYyUXl6VjBMNTVZSG95OThPUGhJNmhKeURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZ/7Z0NP u+1Ld8Dz6gEtz0CgJx3Q/uEstxVULHeUDOhVXOdUAgerGiXH3wXB+2B8Z+euznqX 2XAl2uZG6yeb9tN8plYeXHm2WhSTtH6xNmEYbSLzAyiOYf7ObBOeIphW2mWrbBVh Z9J/NpCJwOEyi2rvvPtvcls5jE31eLtXp7FNpvHGm5UdLTlDpsbugGukceWmK2Bv A277luW+5hRF34vcx66GwYQND/zntqnugjNDEmRxFIfK3RtxbgbuoqgdrqHa6FXt 4E4LUJPgB3ItIz8nYjcMdfkX4YK7bFoVxjuu5vOgVMUzkWnvNLesDFVzbRO4d05F X2zSBJUKfqo1sQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:38 2026 by rpki-client