This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft File: pR2DPTR-bGymnqCoqyqD9JJnreQ.mft (raw, json) Hash identifier: Pokz55xverj06sCM0UtqQjhF+vd8Xmq26icbdo/m+X4= Subject key identifier: BC:D2:8A:89:5C:C6:2E:A5:76:CF:DC:DA:A2:E9:5C:1F:19:10:F8:9B Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4 Certificate issuer: /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4 Certificate serial: 019C420FB6795D18AE5BAEF657DE57616F84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft Manifest number: 0A44 Signing time: Mon 09 Feb 2026 11:00:51 +0000 Manifest this update: Mon 09 Feb 2026 11:00:51 +0000 Manifest next update: Tue 10 Feb 2026 11:00:51 +0000 Files and hashes: 1: mjzLC2jT-cRXfFiuYH6L8Jcc5gU.roa (hash: cefFeh46n8lkdK1PiJxVAx5PbbceAFsOdaNDkEty/MI=) 2: pR2DPTR-bGymnqCoqyqD9JJnreQ.crl (hash: GzRuoQ1sqeh2VKjuM5Et45nQbF14flqBHQ5FYTj+UDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:b6:79:5d:18:ae:5b:ae:f6:57:de:57:61:6f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4 Validity Not Before: Feb 9 11:00:51 2026 GMT Not After : Feb 10 11:00:51 2026 GMT Subject: CN=bcd28a895cc62ea576cfdcdaa2e95c1f1910f89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:49:b6:0b:8e:e3:6b:3e:34:24:1a:12:d2: 87:3e:bf:3a:03:57:38:8b:02:97:4b:db:0f:ef:37: e8:aa:ed:18:3a:53:86:d1:81:3b:72:88:5a:c0:e9: c8:93:0d:b6:54:51:a0:90:49:de:30:64:09:05:20: 69:4c:1f:1b:48:49:2f:8a:8e:83:65:35:a3:1e:d7: 9e:6b:81:58:ad:c7:8c:0b:19:86:c2:84:08:cc:b0: 12:69:7c:f1:60:6a:bd:ee:5b:94:17:81:0e:ee:7b: 57:08:76:43:83:60:6d:7d:24:3e:0b:4b:29:b5:ac: 95:0c:6a:62:86:54:9a:7b:a6:73:3e:5d:b0:37:7f: b1:af:d0:a3:4f:b5:06:e1:55:81:33:da:40:6d:aa: 8d:ef:c3:f6:a6:5c:38:ca:58:ed:96:47:37:49:fb: 43:21:88:96:a5:8c:76:f5:56:db:c4:b5:71:00:37: 1b:db:fd:dd:5b:90:7a:bf:bc:47:91:de:a4:4c:2f: b2:e4:16:b5:a6:36:3d:d5:30:be:37:3f:fb:78:7d: a0:c0:3b:8c:e8:2a:63:d8:8e:9f:92:79:f6:ac:41: 3d:0e:cc:c7:7b:8f:3e:f3:10:36:43:bb:d4:15:16: 84:91:48:e6:8e:69:3c:80:ad:4a:80:ee:35:50:d0: 3e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D2:8A:89:5C:C6:2E:A5:76:CF:DC:DA:A2:E9:5C:1F:19:10:F8:9B X509v3 Authority Key Identifier: keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:48:76:ea:77:5f:f6:88:41:2c:79:8e:04:8c:bb:6c:71:23: 8b:9f:b6:b5:ad:4c:16:67:3e:1a:f4:2d:08:49:2f:89:f8:dd: ca:c8:cd:8e:77:45:7a:ba:6e:4d:37:0a:50:24:61:e8:c7:21: db:76:d9:8e:42:fe:0f:bc:34:79:66:fd:34:48:89:db:ca:0f: db:f3:18:a9:f0:4b:b0:d3:35:e2:fe:9b:43:35:a3:eb:47:f3: 32:15:39:87:0a:23:44:b2:15:72:2a:08:8a:65:d7:26:6e:c5: e6:4d:fc:4d:a1:71:42:08:34:1a:f4:22:30:44:c5:13:8f:c7: 14:4c:5b:40:e9:0c:f8:db:a2:58:bc:94:e6:58:98:a1:d0:ad: b7:9a:51:9c:39:c3:bb:c4:5f:0e:6a:fb:2e:d7:a5:f6:c7:30: 75:02:44:2e:88:e4:db:70:01:dd:66:86:a6:10:b7:b5:d8:80: 11:dd:72:a1:89:15:67:28:7d:8d:a1:f1:3f:72:84:64:2d:cb: 02:c9:45:16:97:6d:63:fe:e6:d1:a8:58:b7:58:a3:0f:df:71: 4e:bf:87:f6:00:6b:85:de:ca:4e:06:9b:5e:1a:c0:7b:02:e0: 1d:b8:62:df:80:d9:14:5d:45:0b:44:68:d4:05:cf:be:9d:92: 82:84:7b:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD7Z5XRiuW672V95XYW+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MWQ4MzNkMzQ3ZTZjNmNhNjllYTBhOGFiMmE4M2Y0OTI2 N2FkZTQwHhcNMjYwMjA5MTEwMDUxWhcNMjYwMjEwMTEwMDUxWjAzMTEwLwYDVQQD EyhiY2QyOGE4OTVjYzYyZWE1NzZjZmRjZGFhMmU5NWMxZjE5MTBmODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/VJtguO42s+NCQaEtKHPr86A1c4 iwKXS9sP7zfoqu0YOlOG0YE7cohawOnIkw22VFGgkEneMGQJBSBpTB8bSEkvio6D ZTWjHteea4FYrceMCxmGwoQIzLASaXzxYGq97luUF4EO7ntXCHZDg2BtfSQ+C0sp tayVDGpihlSae6ZzPl2wN3+xr9CjT7UG4VWBM9pAbaqN78P2plw4yljtlkc3SftD IYiWpYx29VbbxLVxADcb2/3dW5B6v7xHkd6kTC+y5Ba1pjY91TC+Nz/7eH2gwDuM 6Cpj2I6fknn2rEE9DszHe48+8xA2Q7vUFRaEkUjmjmk8gK1KgO41UNA+CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzSiolcxi6lds/c2qLpXB8ZEPibMB8GA1UdIwQY MBaAFKUdgz00fmxspp6gqKsqg/SSZ63kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFIyRFBUUi1iR3ltbnFDb3F5cUQ5SkpucmVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mZGEyMTYtZWNiYS00MmVlLWFhYjUt NDc4MmI3YThlYTI5LzEvcFIyRFBUUi1iR3ltbnFDb3F5cUQ5SkpucmVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9mZGEyMTYtZWNiYS00MmVlLWFhYjUtNDc4MmI3YThlYTI5 LzEvcFIyRFBUUi1iR3ltbnFDb3F5cUQ5SkpucmVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUh26ndf 9ohBLHmOBIy7bHEji5+2ta1MFmc+GvQtCEkvifjdysjNjndFerpuTTcKUCRh6Mch 23bZjkL+D7w0eWb9NEiJ28oP2/MYqfBLsNM14v6bQzWj60fzMhU5hwojRLIVcioI imXXJm7F5k38TaFxQgg0GvQiMETFE4/HFExbQOkM+NuiWLyU5liYodCtt5pRnDnD u8RfDmr7Ltel9scwdQJELojk23AB3WaGphC3tdiAEd1yoYkVZyh9jaHxP3KEZC3L AslFFpdtY/7m0ahYt1ijD99xTr+H9gBrhd7KTgabXhrAewLgHbhi34DZFF1FC0Ro 1AXPvp2SgoR7dA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:34 2026 by rpki-client