This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json) Hash identifier: 4k4fR2mn4iHOMTdfQeFpbMZsjJmSZXSpFIowdKizWow= Subject key identifier: 52:E7:B4:9F:BE:F0:3A:3B:E6:40:7A:24:88:78:0A:1D:B8:4B:93:B3 Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71 Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771 Certificate serial: 019C43901B3A510A0A09E8678ED43FD4D300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 18:00:43 +0000 Manifest this update: Mon 09 Feb 2026 18:00:43 +0000 Manifest next update: Tue 10 Feb 2026 18:00:43 +0000 Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: VM8/KKoy64IoCe0BZALc/ELSgORGT41OVcQo1ZYrw0k=) 2: 9Rw9HjBiECAUVxYX36cGTQBrzgU.roa (hash: GJ7fGRkyTbBjdupFC7YOaoxIT0ejDo9/XKN0jdNtTmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:1b:3a:51:0a:0a:09:e8:67:8e:d4:3f:d4:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771 Validity Not Before: Feb 9 18:00:43 2026 GMT Not After : Feb 10 18:00:43 2026 GMT Subject: CN=52e7b49fbef03a3be6407a2488780a1db84b93b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:66:fd:fa:b6:ef:ad:90:02:70:ca:e1:8e: fe:0b:a7:f1:8e:dc:10:3e:f2:0b:fe:e1:13:c8:15: 7c:a4:2a:97:ac:39:d1:04:21:c8:c0:73:d5:e7:f2: 8b:1c:c8:7f:30:5f:db:85:88:3c:28:e9:b6:e5:09: a4:8d:ac:c3:bd:2f:9e:7c:72:87:00:fe:87:6d:bc: f7:11:eb:c9:e2:4b:b5:f0:4e:2c:ea:0d:6f:5f:e8: 4b:5d:0c:3d:d0:d3:d0:1a:15:de:e5:1a:ce:fb:34: d7:4b:a6:d2:93:ff:1d:88:40:c7:1b:4e:2d:bd:af: e6:bf:d2:8e:06:a2:86:af:f8:00:26:02:46:b5:98: 63:99:c5:95:e1:00:db:27:ee:14:23:19:c8:d4:d4: 15:10:b6:b6:4b:0e:7d:e0:8a:a8:45:89:96:f4:d5: b6:b6:a0:04:33:73:75:36:7b:1e:e6:5e:a3:36:a0: 52:4e:84:65:b0:92:d9:ce:b5:f0:89:96:d4:a8:af: bc:87:6b:39:36:26:1e:01:ec:0e:0a:9f:65:01:49: 4c:bf:db:63:09:75:46:a8:83:00:b5:4b:16:88:8c: e4:0e:ff:2d:63:3b:bc:b6:de:e9:ff:79:2f:a3:5e: 76:d7:e9:23:dd:a4:8b:70:b2:2e:e9:b9:5e:d2:eb: a6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E7:B4:9F:BE:F0:3A:3B:E6:40:7A:24:88:78:0A:1D:B8:4B:93:B3 X509v3 Authority Key Identifier: keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d9:e9:0b:c8:3d:79:48:ee:ac:3b:4c:9b:b6:2a:f0:dc:72: 49:60:d2:8f:24:36:64:8a:9e:9f:18:5b:6b:e2:1f:d8:ea:d3: 8a:ae:a0:61:4b:8d:18:10:cd:d0:97:74:ee:a3:2d:56:e4:d2: 93:0d:63:ff:95:e4:cc:9c:8b:82:c3:ff:4a:65:60:7a:97:23: b1:25:24:5f:91:0a:37:2f:61:59:62:04:75:36:0c:1d:c3:a0: 56:fb:38:cd:b5:23:72:26:61:e0:a8:5e:12:e7:da:db:cf:b8: 92:eb:93:02:3d:a5:c4:bc:7b:4f:31:51:cd:1e:d2:3e:3c:06: 83:c8:7c:d7:dc:64:94:7d:a1:9f:38:b5:26:d4:a2:3d:3d:f0: 80:51:e6:a7:7f:c7:64:6e:ed:dd:0c:d0:9f:ad:3c:e2:2b:db: bb:08:0e:94:28:b3:ce:4b:49:9d:91:e5:30:d7:4b:71:84:ab: 2b:5d:8b:96:b1:24:2a:9c:cf:40:b1:15:f0:00:38:a7:da:6f: 31:09:dd:f1:e9:2a:bb:c4:ef:d4:8b:9d:4d:cf:3d:85:a8:51: e6:55:42:32:0e:53:34:b1:62:62:e1:a4:4e:90:62:ce:66:24: dd:c2:a3:c3:51:44:83:d6:55:b4:aa:16:9c:56:0e:aa:90:09: 98:1f:f8:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkBs6UQoKCehnjtQ/1NMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjFjMDMwODhlYmZlNTUzODEyYjMxNTQ3YzAzYzkwYTI1 ZDg3NzEwHhcNMjYwMjA5MTgwMDQzWhcNMjYwMjEwMTgwMDQzWjAzMTEwLwYDVQQD Eyg1MmU3YjQ5ZmJlZjAzYTNiZTY0MDdhMjQ4ODc4MGExZGI4NGI5M2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbNm/fq2762QAnDK4Y7+C6fxjtwQ PvIL/uETyBV8pCqXrDnRBCHIwHPV5/KLHMh/MF/bhYg8KOm25QmkjazDvS+efHKH AP6Hbbz3EevJ4ku18E4s6g1vX+hLXQw90NPQGhXe5RrO+zTXS6bSk/8diEDHG04t va/mv9KOBqKGr/gAJgJGtZhjmcWV4QDbJ+4UIxnI1NQVELa2Sw594IqoRYmW9NW2 tqAEM3N1Nnse5l6jNqBSToRlsJLZzrXwiZbUqK+8h2s5NiYeAewOCp9lAUlMv9tj CXVGqIMAtUsWiIzkDv8tYzu8tt7p/3kvo1521+kj3aSLcLIu6ble0uumKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLntJ++8Do75kB6JIh4Ch24S5OzMB8GA1UdIwQY MBaAFNqxwDCI6/5VOBKzFUfAPJCiXYdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEt YjcyMzk4MDcwODIzLzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEtYjcyMzk4MDcwODIz LzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdnpC8g9 eUjurDtMm7Yq8NxySWDSjyQ2ZIqenxhba+If2OrTiq6gYUuNGBDN0Jd07qMtVuTS kw1j/5XkzJyLgsP/SmVgepcjsSUkX5EKNy9hWWIEdTYMHcOgVvs4zbUjciZh4Khe Eufa28+4kuuTAj2lxLx7TzFRzR7SPjwGg8h819xklH2hnzi1JtSiPT3wgFHmp3/H ZG7t3QzQn6084ivbuwgOlCizzktJnZHlMNdLcYSrK12LlrEkKpzPQLEV8AA4p9pv MQnd8ekqu8Tv1IudTc89hahR5lVCMg5TNLFiYuGkTpBizmYk3cKjw1FEg9ZVtKoW nFYOqpAJmB/4kg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:56 2026 by rpki-client