This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json) Hash identifier: L6D7wvOm53KOpZvgogrkqr67Yh/ZJFUSHIThHFwna5M= Subject key identifier: D8:47:B5:CF:6E:A9:1A:FA:CE:93:E0:88:10:74:50:8B:FE:57:40:C6 Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1 Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1 Certificate serial: 019C4322E6A1DBD432336E5CFF20575554CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft Manifest number: 1600 Signing time: Mon 09 Feb 2026 16:01:26 +0000 Manifest this update: Mon 09 Feb 2026 16:01:26 +0000 Manifest next update: Tue 10 Feb 2026 16:01:26 +0000 Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: Ge7akHPMAd1Pm4gGfgfkdAt3TVtI5oM2mqlonHxDung=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:e6:a1:db:d4:32:33:6e:5c:ff:20:57:55:54:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1 Validity Not Before: Feb 9 16:01:26 2026 GMT Not After : Feb 10 16:01:26 2026 GMT Subject: CN=d847b5cf6ea91aface93e0881074508bfe5740c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ea:32:cd:a1:99:c8:75:ea:ea:55:59:7a:91: 3a:4d:e7:8e:a3:07:90:18:ea:6d:30:93:93:43:74: 0f:ea:ba:b5:4b:bc:b8:cd:25:9c:2d:85:ac:c2:ef: 61:cd:bc:fa:f5:b3:be:ed:99:6b:b1:be:15:19:24: 9e:be:d2:d0:f3:5f:e1:7c:0b:b9:e8:74:7e:14:b5: 8c:1f:4f:b9:28:fe:dd:ec:22:a8:42:48:67:7d:cd: 8b:58:37:37:28:a6:3e:b5:2b:d3:4f:67:f8:23:a8: 41:0e:85:87:b3:b1:73:d1:b0:e5:cb:10:ea:ec:7a: 85:f1:c3:d5:06:48:c8:a7:86:31:79:54:0b:ca:d8: f2:eb:72:22:9c:57:b8:79:1a:c9:d4:8b:67:b8:d9: 67:5d:44:68:1f:63:1e:6d:1d:aa:b6:10:6b:3a:a0: 34:e7:4c:ec:20:69:4b:16:26:7b:28:e1:fe:b0:79: fe:2d:08:03:eb:9e:e1:e4:af:1a:45:36:81:d6:f5: 17:be:08:e8:da:82:47:ff:ed:b5:ae:71:19:e1:b1: 9a:97:4c:e7:df:53:7f:1a:24:2a:00:b0:95:91:1a: e4:81:97:80:5d:38:25:08:77:f0:a8:d8:60:40:1e: 89:e5:fa:78:6f:4d:d3:ca:75:0b:24:c9:d7:0e:cd: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:47:B5:CF:6E:A9:1A:FA:CE:93:E0:88:10:74:50:8B:FE:57:40:C6 X509v3 Authority Key Identifier: keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:3e:ce:65:57:5a:e8:14:d0:79:cc:16:89:c3:81:e1:b8:81: 12:e0:c5:0f:ca:58:7c:25:63:16:ee:da:aa:fc:e5:51:8a:45: 54:62:21:a6:ad:e2:e4:6c:ca:c3:48:38:59:f1:19:a5:f6:6e: 17:84:85:02:10:51:91:23:f8:04:e7:bf:1c:3c:b0:64:d2:66: ea:7b:9c:90:08:49:fe:1f:69:fa:97:b8:d8:41:16:92:40:2e: 10:94:eb:86:bb:35:68:ad:da:c6:dd:cc:f7:ab:b8:b5:78:01: 08:80:19:24:cd:88:0f:6e:fb:a5:4a:3a:37:78:e7:8d:8f:a5: 9b:8e:97:69:63:99:82:1c:0b:cd:a5:fa:6d:e0:98:f5:52:da: 31:6a:c9:0b:7b:67:c7:a0:f0:4f:a1:41:c1:1f:16:9d:d3:6c: 06:0d:9c:03:56:33:72:27:41:e2:de:bb:40:9c:9a:2a:7a:0f: 2d:97:d6:09:49:78:19:84:52:65:0f:b6:48:82:ca:6b:f7:bd: 69:da:7a:da:99:dc:e5:2f:66:69:05:b3:72:36:8f:7f:22:e6: 60:d8:a2:5b:25:d2:8e:77:03:d4:2c:ea:90:0f:15:2d:04:c2: 95:38:ae:b4:a7:0f:24:fb:b9:fc:ec:42:08:5e:e0:a7:d6:5b: e8:7a:73:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIuah29QyM25c/yBXVVTLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZjViY2I5MWM2NDBhMGEzNDI5MDVlNWE1MTcwNzUyOGY1 YTMzYTEwHhcNMjYwMjA5MTYwMTI2WhcNMjYwMjEwMTYwMTI2WjAzMTEwLwYDVQQD EyhkODQ3YjVjZjZlYTkxYWZhY2U5M2UwODgxMDc0NTA4YmZlNTc0MGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueoyzaGZyHXq6lVZepE6TeeOoweQ GOptMJOTQ3QP6rq1S7y4zSWcLYWswu9hzbz69bO+7Zlrsb4VGSSevtLQ81/hfAu5 6HR+FLWMH0+5KP7d7CKoQkhnfc2LWDc3KKY+tSvTT2f4I6hBDoWHs7Fz0bDlyxDq 7HqF8cPVBkjIp4YxeVQLytjy63IinFe4eRrJ1ItnuNlnXURoH2MebR2qthBrOqA0 50zsIGlLFiZ7KOH+sHn+LQgD657h5K8aRTaB1vUXvgjo2oJH/+21rnEZ4bGal0zn 31N/GiQqALCVkRrkgZeAXTglCHfwqNhgQB6J5fp4b03TynULJMnXDs0IfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhHtc9uqRr6zpPgiBB0UIv+V0DGMB8GA1UdIwQY MBaAFNv1vLkcZAoKNCkF5aUXB1KPWjOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yN2VkMmQtMDdjNy00MWQ4LTljMjQt MTJiNGViYzQxNDUxLzEvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yN2VkMmQtMDdjNy00MWQ4LTljMjQtMTJiNGViYzQxNDUx LzEvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAD7OZVda 6BTQecwWicOB4biBEuDFD8pYfCVjFu7aqvzlUYpFVGIhpq3i5GzKw0g4WfEZpfZu F4SFAhBRkSP4BOe/HDywZNJm6nuckAhJ/h9p+pe42EEWkkAuEJTrhrs1aK3axt3M 96u4tXgBCIAZJM2ID277pUo6N3jnjY+lm46XaWOZghwLzaX6beCY9VLaMWrJC3tn x6DwT6FBwR8WndNsBg2cA1YzcidB4t67QJyaKnoPLZfWCUl4GYRSZQ+2SILKa/e9 adp62pnc5S9maQWzcjaPfyLmYNiiWyXSjncD1CzqkA8VLQTClTiutKcPJPu5/OxC CF7gp9Zb6HpzAg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:25 2026 by rpki-client