This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json) Hash identifier: j//LIe/+xcP+WYixiHVJoLMB5On33/ECh5CHzqUHS1w= Subject key identifier: 6B:73:3D:1C:F0:5A:CC:62:71:8B:F9:D6:B8:24:0F:EC:0F:D0:3E:95 Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c Certificate serial: 019C41D849913B9A0E4CAB4BEF54EC182D74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft Manifest number: 0F56 Signing time: Mon 09 Feb 2026 10:00:19 +0000 Manifest this update: Mon 09 Feb 2026 10:00:19 +0000 Manifest next update: Tue 10 Feb 2026 10:00:19 +0000 Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: 6smaJ9oj2+a5fsrgjR0ROPKZ+XM77vSMnpm5EkI1vqM=) 2: Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa (hash: zEpFycfVYnZq5Lv9INkh/ljd5iU1KyImwbjPqDc/m94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:49:91:3b:9a:0e:4c:ab:4b:ef:54:ec:18:2d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c Validity Not Before: Feb 9 10:00:19 2026 GMT Not After : Feb 10 10:00:19 2026 GMT Subject: CN=6b733d1cf05acc62718bf9d6b8240fec0fd03e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:ac:f2:55:1d:d5:43:4e:0c:9e:ed:03:97: 55:66:e6:de:d6:bd:c4:41:30:ea:32:48:33:0a:00: 71:d7:d9:9d:46:d8:56:2e:e6:0a:34:9c:ab:eb:79: 62:e6:60:ec:06:91:0d:0e:39:b0:ab:7c:43:ec:4f: ef:99:5c:11:7f:07:0a:6d:36:a5:d1:ad:d3:f1:0f: f8:f2:02:a4:0b:02:3f:7a:4a:b3:90:6e:4d:71:45: db:a4:82:75:fe:6f:2b:4d:52:6c:c8:cd:c3:4d:d5: e1:bf:ec:fc:b0:69:74:5c:27:60:ea:c1:c8:0d:9b: 01:c5:41:92:fe:ad:35:21:07:a8:7a:32:8c:dc:07: b1:f3:8d:a1:15:6a:20:cf:64:ea:b6:72:2a:d5:d1: 06:b3:ea:87:e9:df:46:8b:81:65:ac:3a:c8:b5:6e: 83:67:33:31:c6:02:06:4f:4a:3e:e7:09:42:2b:4c: 9d:d3:bc:d3:8f:a3:a8:d4:d0:b2:67:71:de:e8:2e: 86:03:56:3f:66:c1:5a:9f:87:6c:af:13:e5:86:95: 73:f5:e6:3b:f1:5e:7f:45:3d:58:3c:58:41:33:1f: 84:69:ae:51:ec:db:19:81:c0:db:d2:07:8b:06:16: 8d:30:e5:be:e0:95:18:0d:ed:5b:fd:c8:38:77:dd: c5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:73:3D:1C:F0:5A:CC:62:71:8B:F9:D6:B8:24:0F:EC:0F:D0:3E:95 X509v3 Authority Key Identifier: keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:10:f1:71:48:d4:8e:8d:8c:d5:02:fa:c6:8e:d7:bd:ca:8f: c9:43:0a:3f:a7:97:0b:d6:78:39:fc:41:fc:43:b3:dc:a9:45: 13:f7:cf:6a:4b:32:20:1c:f9:e0:1d:48:4e:a2:07:d7:5b:82: dc:ec:c0:ce:66:2d:01:d8:8c:fd:f9:7b:66:92:b3:c3:95:95: 5b:ca:51:41:80:a0:0d:dc:45:b2:64:27:0c:a5:fd:ed:f0:22: c7:7a:88:66:01:7a:1b:65:39:18:ee:e6:72:40:7c:47:0a:fe: 7c:cf:ff:34:a0:fc:e0:dc:eb:9b:59:a7:61:5f:25:da:61:34: 3e:a8:6f:da:28:9c:4c:02:e9:20:0f:2c:e2:21:2c:5c:a4:72: 6f:0a:09:ee:7b:23:2a:3d:c6:69:a3:d2:20:e6:ff:59:d1:29: a3:cf:dc:32:53:8d:cf:fa:43:65:4c:d1:7a:cc:ab:66:a4:b5: 02:a2:ca:a7:2a:d5:f5:7d:e3:39:fb:25:44:8b:33:43:c3:1c: b4:6f:59:f6:95:ae:27:b3:47:3d:3d:a3:fe:d8:55:82:6a:a5: 79:7b:52:2b:b5:3d:e2:ed:fa:f9:b2:4d:2e:98:d4:1f:88:73: eb:d1:02:cf:f9:34:6a:12:84:ad:81:8b:34:5b:95:d0:13:de: e2:da:24:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2EmRO5oOTKtL71TsGC10MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWM3OTYyNDMzYzJmZTBiZjYyYjhjMzg4MzkyOTk1Zjk0 MmIxNGMwHhcNMjYwMjA5MTAwMDE5WhcNMjYwMjEwMTAwMDE5WjAzMTEwLwYDVQQD Eyg2YjczM2QxY2YwNWFjYzYyNzE4YmY5ZDZiODI0MGZlYzBmZDAzZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr12s8lUd1UNODJ7tA5dVZube1r3E QTDqMkgzCgBx19mdRthWLuYKNJyr63li5mDsBpENDjmwq3xD7E/vmVwRfwcKbTal 0a3T8Q/48gKkCwI/ekqzkG5NcUXbpIJ1/m8rTVJsyM3DTdXhv+z8sGl0XCdg6sHI DZsBxUGS/q01IQeoejKM3Aex842hFWogz2TqtnIq1dEGs+qH6d9Gi4FlrDrItW6D ZzMxxgIGT0o+5wlCK0yd07zTj6Oo1NCyZ3He6C6GA1Y/ZsFan4dsrxPlhpVz9eY7 8V5/RT1YPFhBMx+Eaa5R7NsZgcDb0geLBhaNMOW+4JUYDe1b/cg4d93F4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtzPRzwWsxicYv51rgkD+wP0D6VMB8GA1UdIwQY MBaAFNgceWJDPC/gv2K4w4g5KZX5QrFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZWE3MGMtZjVmNi00YjI3LTk0Y2Et M2QzNDRjOWMyNmI2LzEvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84ZWE3MGMtZjVmNi00YjI3LTk0Y2EtM2QzNDRjOWMyNmI2 LzEvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixDxcUjU jo2M1QL6xo7XvcqPyUMKP6eXC9Z4OfxB/EOz3KlFE/fPaksyIBz54B1ITqIH11uC 3OzAzmYtAdiM/fl7ZpKzw5WVW8pRQYCgDdxFsmQnDKX97fAix3qIZgF6G2U5GO7m ckB8Rwr+fM//NKD84Nzrm1mnYV8l2mE0Pqhv2iicTALpIA8s4iEsXKRybwoJ7nsj Kj3GaaPSIOb/WdEpo8/cMlONz/pDZUzResyrZqS1AqLKpyrV9X3jOfslRIszQ8Mc tG9Z9pWuJ7NHPT2j/thVgmqleXtSK7U94u36+bJNLpjUH4hz69ECz/k0ahKErYGL NFuV0BPe4tokTA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:58 2026 by rpki-client