This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft (raw, json) Hash identifier: Nnt0Zxq3lZiYtGxWUZQzjvY6V9dmIXmXTmfKy5toULQ= Subject key identifier: 22:DE:46:07:22:CC:A6:0F:D3:B6:68:1D:ED:E7:F4:C3:A7:E0:52:36 Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32 Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932 Certificate serial: 019BFBE4FB329C5E227430BD3FEB7F5F48D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft Manifest number: 02C4 Signing time: Mon 26 Jan 2026 20:00:46 +0000 Manifest this update: Mon 26 Jan 2026 20:00:46 +0000 Manifest next update: Tue 27 Jan 2026 20:00:46 +0000 Files and hashes: 1: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl (hash: tpjlevnOFnvGVjt5oQxZDYaNJewGeUbLrD0ZIxdIcDo=) 2: g5qpXHQ9YaIQcSP18I2z298mHVU.roa (hash: OPcErLNEwIQeoOOXzCBshI4BboTsjuLPiVED3RVYlVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e4:fb:32:9c:5e:22:74:30:bd:3f:eb:7f:5f:48:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d97a77930122879a766470df8d660c98442a9932 Validity Not Before: Jan 26 20:00:46 2026 GMT Not After : Jan 27 20:00:46 2026 GMT Subject: CN=22de460722cca60fd3b6681dede7f4c3a7e05236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e4:08:5e:6e:89:9d:3b:9c:3a:e0:98:85:08: 16:fa:11:da:ae:93:e8:38:6d:f4:44:5a:84:9e:23: 6f:af:24:64:42:f5:cf:fd:8e:be:af:81:ee:bc:db: cb:c8:9e:47:b5:e3:f5:dc:5d:69:85:89:ea:ef:8e: 42:ca:50:7d:6a:e7:ad:c2:32:a8:24:6d:fe:55:68: 9e:d3:27:af:d9:56:3b:e7:59:2e:a8:ee:0f:bc:68: dc:9a:67:06:d7:17:48:a5:3d:76:84:c9:c0:98:bf: 02:e0:7f:de:5c:93:82:c3:8a:aa:db:38:aa:04:84: d7:b4:46:ab:84:3a:0e:34:ab:be:e6:aa:2b:50:a5: 2a:a2:88:cf:9d:c9:df:41:09:8b:b4:1e:6c:d1:25: 21:f7:ec:ff:2f:0e:18:77:b4:84:c9:fc:d1:0e:94: 25:55:83:52:c0:5b:0e:62:29:8b:fa:de:65:97:2c: c5:6c:21:20:69:10:96:40:e5:78:fc:55:79:eb:76: 98:2f:f7:be:c4:aa:c6:63:36:77:b0:2e:ab:38:67: 03:59:6d:1c:a8:ff:80:12:71:d4:a7:0f:f9:9e:fb: c0:ce:dd:d8:bb:a0:cd:3f:97:a2:25:95:bc:16:fb: 2a:f1:e4:53:3e:c4:44:7e:b8:c9:5c:8f:c9:f9:9c: e7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DE:46:07:22:CC:A6:0F:D3:B6:68:1D:ED:E7:F4:C3:A7:E0:52:36 X509v3 Authority Key Identifier: keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:88:c0:c5:96:8f:84:59:0a:ea:a0:25:d2:4c:b0:a9:ec:41: 0a:22:42:a1:6e:1b:1d:10:03:8c:a9:df:1b:24:28:e8:86:d0: 29:45:a2:c6:4a:8d:a5:fc:32:2f:99:51:bf:e4:d0:59:b0:6e: fe:97:79:e0:f7:36:a5:9f:45:8c:73:79:50:1c:ec:96:34:1d: 59:b9:3a:7d:0c:85:38:2c:66:89:ff:e7:8e:ee:bb:9e:e6:96: b8:60:58:28:2e:b6:e5:a8:a8:1d:15:ee:2b:22:e3:f4:f3:7d: c0:43:f6:4c:ca:23:7f:72:ac:4a:24:29:dd:07:51:cb:23:c4: 9c:3b:f2:7e:f7:c3:83:f0:76:99:dd:33:53:9d:26:9d:86:54: 7b:60:d6:6b:a4:ff:6e:d8:e9:5b:8c:7b:5d:06:17:f3:4e:49: 37:e8:ae:ed:8e:0c:0d:90:02:1e:3a:8c:43:86:3d:67:f1:29: f0:e0:fc:2c:bb:cd:f1:35:41:00:7a:ae:a3:1d:52:9e:02:fd: 2d:1f:81:9c:b9:52:53:e9:44:94:aa:2f:6c:4d:9b:0d:b7:eb: ef:7b:24:96:71:a0:b7:e4:13:6a:92:b2:65:81:92:48:b0:86: 66:83:2d:2e:d2:9a:e0:10:91:9f:f9:d1:58:39:f7:11:72:e7: 3d:de:80:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75PsynF4idDC9P+t/X0jQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5N2E3NzkzMDEyMjg3OWE3NjY0NzBkZjhkNjYwYzk4NDQy YTk5MzIwHhcNMjYwMTI2MjAwMDQ2WhcNMjYwMTI3MjAwMDQ2WjAzMTEwLwYDVQQD EygyMmRlNDYwNzIyY2NhNjBmZDNiNjY4MWRlZGU3ZjRjM2E3ZTA1MjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuQIXm6JnTucOuCYhQgW+hHarpPo OG30RFqEniNvryRkQvXP/Y6+r4HuvNvLyJ5HteP13F1phYnq745CylB9auetwjKo JG3+VWie0yev2VY751kuqO4PvGjcmmcG1xdIpT12hMnAmL8C4H/eXJOCw4qq2ziq BITXtEarhDoONKu+5qorUKUqoojPncnfQQmLtB5s0SUh9+z/Lw4Yd7SEyfzRDpQl VYNSwFsOYimL+t5llyzFbCEgaRCWQOV4/FV563aYL/e+xKrGYzZ3sC6rOGcDWW0c qP+AEnHUpw/5nvvAzt3Yu6DNP5eiJZW8Fvsq8eRTPsREfrjJXI/J+Zzn1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLeRgcizKYP07ZoHe3n9MOn4FI2MB8GA1UdIwQY MBaAFNl6d5MBIoeadmRw341mDJhEKpkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlhwM2t3RWloNXAyWkhEZmpXWU1tRVFxbVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yYTQ5MjItNDM0Yi00N2IxLWIzMDQt Y2Q0NTlhNjU3MjFiLzEvMlhwM2t3RWloNXAyWkhEZmpXWU1tRVFxbVRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yYTQ5MjItNDM0Yi00N2IxLWIzMDQtY2Q0NTlhNjU3MjFi LzEvMlhwM2t3RWloNXAyWkhEZmpXWU1tRVFxbVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGojAxZaP hFkK6qAl0kywqexBCiJCoW4bHRADjKnfGyQo6IbQKUWixkqNpfwyL5lRv+TQWbBu /pd54Pc2pZ9FjHN5UBzsljQdWbk6fQyFOCxmif/nju67nuaWuGBYKC625aioHRXu KyLj9PN9wEP2TMojf3KsSiQp3QdRyyPEnDvyfvfDg/B2md0zU50mnYZUe2DWa6T/ btjpW4x7XQYX805JN+iu7Y4MDZACHjqMQ4Y9Z/Ep8OD8LLvN8TVBAHquox1SngL9 LR+BnLlSU+lElKovbE2bDbfr73sklnGgt+QTapKyZYGSSLCGZoMtLtKa4BCRn/nR WDn3EXLnPd6A9w== -----END CERTIFICATE-----Generated at Tue Jan 27 01:07:47 2026 by rpki-client