This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json) Hash identifier: zdUnQPm8mzE0yJDx9LEbvj3PAFboa95ytx6Dv6QvQ78= Subject key identifier: 7A:A2:41:6A:C5:02:44:2A:93:2D:AA:46:C6:BE:B9:E6:9F:E2:AF:2A Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d Certificate serial: 019C43C6F343FFA377A4D46D7B7335E1E9E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 19:00:37 +0000 Manifest this update: Mon 09 Feb 2026 19:00:37 +0000 Manifest next update: Tue 10 Feb 2026 19:00:37 +0000 Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: Bzoy7r4TydyX+g5gCrVxUuilQZ+hjds+sLRHQ67LiW0=) 2: 7CuuMu75v2ke5Xdx3b9qKN7n4Y4.roa (hash: 4EY3GSH/tIrLwl1yZXfEtQ+XZsJnpbfMvJM5DC8DJrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:f3:43:ff:a3:77:a4:d4:6d:7b:73:35:e1:e9:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d Validity Not Before: Feb 9 19:00:37 2026 GMT Not After : Feb 10 19:00:37 2026 GMT Subject: CN=7aa2416ac502442a932daa46c6beb9e69fe2af2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:50:07:d4:2d:b5:59:9c:45:de:eb:44:72: a4:c5:4c:4c:28:ae:08:d5:79:1a:81:6a:85:f4:f6: 8f:b9:33:ee:f3:39:83:08:38:3c:fb:2d:82:26:38: fb:ed:4e:e9:34:cd:19:99:9b:59:c7:ae:ef:4d:5e: ff:bb:75:a7:a6:f2:70:da:58:75:90:9a:07:12:53: 29:b7:f1:c0:85:5b:b0:d9:8c:cb:a1:19:00:d5:1a: 2f:f4:a6:b4:27:03:3f:0e:b1:1c:4a:ee:bf:ed:49: 1c:bd:eb:48:b8:a5:41:b1:54:ac:17:73:bc:be:f1: 05:53:b9:8d:55:18:1f:4e:f2:f4:a5:d4:69:ed:52: f6:ff:37:e9:2e:fc:fd:ed:0f:a4:d6:a3:16:be:d7: 17:44:cc:c7:db:a0:fa:fa:25:1a:c8:e6:ff:3c:b5: 7a:3b:21:af:fb:34:0d:01:f4:d9:27:ec:7d:28:40: 6c:5e:4f:9e:b8:0e:aa:af:90:b2:c1:a5:79:13:bb: fd:f2:85:db:9c:fb:63:6d:15:e5:4e:5e:31:67:9e: ad:89:cf:01:b8:e8:3b:70:37:8d:92:34:a7:7a:62: 49:cb:59:ca:7e:b4:dc:d1:c9:a1:aa:f7:fc:56:dd: fc:73:ae:a1:92:a3:f2:d2:79:d5:06:5d:06:c2:28: 9b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A2:41:6A:C5:02:44:2A:93:2D:AA:46:C6:BE:B9:E6:9F:E2:AF:2A X509v3 Authority Key Identifier: keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:bb:fd:b3:c4:1b:49:c2:96:a3:20:da:3e:57:77:d8:e3:6a: 01:f2:ea:7b:a8:36:ec:d4:bf:07:2c:4a:2e:af:62:f2:f5:3a: 20:02:f8:dd:27:b5:a3:e2:df:a7:51:de:45:a0:1c:55:e1:0f: bc:9a:43:63:e3:83:97:ee:86:16:be:8b:1b:4d:32:66:f7:6c: f5:cb:0c:2f:93:3a:06:a7:93:e3:f4:fc:51:e2:db:36:3b:c3: 5a:08:2b:70:73:a6:16:84:fc:e8:e9:ba:ba:a7:15:b9:15:2d: b2:dc:c9:52:4d:8f:b0:c4:be:a3:e0:1b:ba:a2:7c:99:44:ed: c7:ca:36:ec:9f:e8:ba:ff:9b:67:22:3b:0d:54:e3:24:fb:d6: f0:96:46:6d:a7:f7:98:51:6b:0d:73:bc:59:65:dd:eb:5e:27: c7:48:08:ab:a2:e5:f7:ca:33:93:35:b3:fb:16:d2:8e:a5:9e: 15:6d:e4:7e:7c:d5:fa:12:12:0e:74:d5:1c:48:ce:9e:69:16: f4:a6:25:71:c7:24:c2:66:a1:5e:63:f6:c7:88:ba:7e:53:cb: 70:73:f0:8f:5e:89:f2:e1:ef:5c:76:3b:c6:f2:8f:40:c9:47: ab:eb:e0:a9:de:3b:a3:0a:72:da:e8:a9:ad:ae:12:f5:88:99: cb:0b:f5:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxvND/6N3pNRte3M14ennMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5Zjg2NmZiMGFhODNhMjcxYTBjYjdkYzkwMzAxODhjODlk MjNlNWQwHhcNMjYwMjA5MTkwMDM3WhcNMjYwMjEwMTkwMDM3WjAzMTEwLwYDVQQD Eyg3YWEyNDE2YWM1MDI0NDJhOTMyZGFhNDZjNmJlYjllNjlmZTJhZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbFQB9QttVmcRd7rRHKkxUxMKK4I 1XkagWqF9PaPuTPu8zmDCDg8+y2CJjj77U7pNM0ZmZtZx67vTV7/u3WnpvJw2lh1 kJoHElMpt/HAhVuw2YzLoRkA1Rov9Ka0JwM/DrEcSu6/7UkcvetIuKVBsVSsF3O8 vvEFU7mNVRgfTvL0pdRp7VL2/zfpLvz97Q+k1qMWvtcXRMzH26D6+iUayOb/PLV6 OyGv+zQNAfTZJ+x9KEBsXk+euA6qr5CywaV5E7v98oXbnPtjbRXlTl4xZ56tic8B uOg7cDeNkjSnemJJy1nKfrTc0cmhqvf8Vt38c66hkqPy0nnVBl0GwiibpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqiQWrFAkQqky2qRsa+ueaf4q8qMB8GA1UdIwQY MBaAFNn4ZvsKqDonGgy33JAwGIyJ0j5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYt NWMxZDVhNjk5MmQ4LzEvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYtNWMxZDVhNjk5MmQ4 LzEvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbv9s8Qb ScKWoyDaPld32ONqAfLqe6g27NS/ByxKLq9i8vU6IAL43Se1o+Lfp1HeRaAcVeEP vJpDY+ODl+6GFr6LG00yZvds9csML5M6BqeT4/T8UeLbNjvDWggrcHOmFoT86Om6 uqcVuRUtstzJUk2PsMS+o+AbuqJ8mUTtx8o27J/ouv+bZyI7DVTjJPvW8JZGbaf3 mFFrDXO8WWXd614nx0gIq6Ll98ozkzWz+xbSjqWeFW3kfnzV+hISDnTVHEjOnmkW 9KYlccckwmahXmP2x4i6flPLcHPwj16J8uHvXHY7xvKPQMlHq+vgqd47owpy2uip ra4S9YiZywv1QQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:21 2026 by rpki-client