This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json) Hash identifier: dzW6SPpYexaujeNQ0yZ8Wvp1+W+uAjcaBRjaYu6D9k8= Subject key identifier: A9:3B:6E:94:56:79:82:9B:44:67:77:31:4E:E7:DA:C9:47:F6:C7:0F Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4 Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4 Certificate serial: 019C42465B20457E696C8B1CBD562295CE6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft Manifest number: 1286 Signing time: Mon 09 Feb 2026 12:00:32 +0000 Manifest this update: Mon 09 Feb 2026 12:00:32 +0000 Manifest next update: Tue 10 Feb 2026 12:00:32 +0000 Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: fMyiM3fvQ1x3OXqdmDz4TfEj78j+wJC0pdbT7vPhDws=) 2: nHxsg3Vb7uE33ofxGXwMwSMwNYg.roa (hash: 0EcEDTfIvYa8nWZ2uBH/Q7MaxIIlMfcPGz+c3XxNfrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:5b:20:45:7e:69:6c:8b:1c:bd:56:22:95:ce:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4 Validity Not Before: Feb 9 12:00:32 2026 GMT Not After : Feb 10 12:00:32 2026 GMT Subject: CN=a93b6e945679829b446777314ee7dac947f6c70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:88:c1:86:f1:71:87:1b:06:84:79:69:62:c6: 57:91:c6:bc:b3:c2:19:21:ba:10:ef:fe:b4:e1:d9: 8c:b9:4b:ac:18:5f:ea:67:83:1c:e9:3f:60:8f:5f: 01:fc:2a:02:79:aa:30:ab:0d:6a:ee:42:7f:31:81: 4d:9e:b4:e8:e4:74:37:38:8e:f8:68:cd:13:b6:32: e2:ca:f8:9b:bf:8f:f1:1b:ce:70:85:1b:7d:5f:c8: 4d:96:38:26:f3:74:87:07:a6:6e:48:67:93:7d:4d: 57:af:51:0e:d9:86:e4:74:69:74:7b:ad:85:46:1a: 3e:67:d9:22:57:6f:25:60:f4:dc:94:56:03:69:e9: 93:c9:1f:d7:e4:ff:70:84:09:ce:b1:62:26:7c:04: c8:b4:13:57:b3:d9:d9:ba:a2:51:5e:b2:01:17:ab: 60:b5:64:08:72:97:c9:d9:90:92:9d:c1:1e:cf:09: 08:c8:e3:d0:36:fd:18:2c:38:4c:8f:cd:66:7c:de: ef:d8:5d:b6:89:b2:fe:02:8c:f5:d8:82:9a:13:a2: 1d:95:46:94:40:fd:10:30:07:0c:79:ff:d7:b4:33: 47:07:fe:f5:66:2d:86:d8:34:56:f8:79:e4:30:04: 82:bb:ae:a2:c8:03:ad:65:38:16:c5:39:71:90:be: 45:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3B:6E:94:56:79:82:9B:44:67:77:31:4E:E7:DA:C9:47:F6:C7:0F X509v3 Authority Key Identifier: keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:52:73:5d:d5:23:34:85:dc:bd:d4:3b:cb:3c:ff:ba:29:49: f2:3a:27:13:54:a7:d4:75:c5:6f:d4:92:25:da:28:4f:4e:a1: a1:ec:b5:ea:85:d5:48:1a:23:7a:0e:b0:32:39:69:46:1e:ca: a6:ac:2a:1e:8f:45:2d:4c:a8:52:f3:ac:a3:6c:14:26:67:42: 08:e0:90:84:da:92:d5:ee:45:69:f8:e6:f2:30:66:46:5f:d4: eb:c0:8d:8c:68:f8:e3:d8:cb:ab:fb:56:d3:9f:72:4d:ae:7c: 3e:9b:03:bd:51:21:c0:ed:1c:c5:00:06:2a:49:cd:c9:bb:ca: d8:4b:3d:1c:a0:c2:75:98:c1:84:1b:bb:34:11:fa:5e:e5:2c: 56:5f:ce:f5:52:66:e6:f2:e5:6d:0e:42:a1:33:a2:5b:2a:b3: 31:55:36:ca:fc:61:e6:9f:90:6f:fb:a1:09:85:9f:2d:21:94: 64:85:c2:d0:79:fb:ca:14:4e:8d:cf:7f:7f:67:e3:9f:23:d6: 00:1f:e2:9b:e0:0f:d1:48:51:25:0e:94:9b:06:d0:48:da:21: ed:48:24:80:e6:7d:49:9f:5a:78:31:ec:9c:fb:23:ab:d0:c6: d2:53:df:4b:dd:9d:aa:0d:d3:e2:62:13:f1:f5:94:4b:dc:f1: 29:a7:4b:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRlsgRX5pbIscvVYilc5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MTgyYTk4ZDZlZjgwZmZiMjkxODI3ZGE4YWNjYTc0NDkx MDgwYjQwHhcNMjYwMjA5MTIwMDMyWhcNMjYwMjEwMTIwMDMyWjAzMTEwLwYDVQQD EyhhOTNiNmU5NDU2Nzk4MjliNDQ2Nzc3MzE0ZWU3ZGFjOTQ3ZjZjNzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YjBhvFxhxsGhHlpYsZXkca8s8IZ IboQ7/604dmMuUusGF/qZ4Mc6T9gj18B/CoCeaowqw1q7kJ/MYFNnrTo5HQ3OI74 aM0TtjLiyvibv4/xG85whRt9X8hNljgm83SHB6ZuSGeTfU1Xr1EO2YbkdGl0e62F Rho+Z9kiV28lYPTclFYDaemTyR/X5P9whAnOsWImfATItBNXs9nZuqJRXrIBF6tg tWQIcpfJ2ZCSncEezwkIyOPQNv0YLDhMj81mfN7v2F22ibL+Aoz12IKaE6IdlUaU QP0QMAcMef/XtDNHB/71Zi2G2DRW+HnkMASCu66iyAOtZTgWxTlxkL5F/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKk7bpRWeYKbRGd3MU7n2slH9scPMB8GA1UdIwQY MBaAFNgYKpjW74D/spGCfaisynRJEIC0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kODUyMzUtODA4Yy00YzBhLTljOTct OWIzNjBlMWJhMzIxLzEvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kODUyMzUtODA4Yy00YzBhLTljOTctOWIzNjBlMWJhMzIx LzEvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFJzXdUj NIXcvdQ7yzz/uilJ8jonE1Sn1HXFb9SSJdooT06hoey16oXVSBojeg6wMjlpRh7K pqwqHo9FLUyoUvOso2wUJmdCCOCQhNqS1e5Fafjm8jBmRl/U68CNjGj449jLq/tW 059yTa58PpsDvVEhwO0cxQAGKknNybvK2Es9HKDCdZjBhBu7NBH6XuUsVl/O9VJm 5vLlbQ5CoTOiWyqzMVU2yvxh5p+Qb/uhCYWfLSGUZIXC0Hn7yhROjc9/f2fjnyPW AB/im+AP0UhRJQ6UmwbQSNoh7UgkgOZ9SZ9aeDHsnPsjq9DG0lPfS92dqg3T4mIT 8fWUS9zxKadLqA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:01:55 2026 by rpki-client