This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json) Hash identifier: RDZ3E3BK7QkFv6LUSpg0mNw03zsXDS6pzyGm0p8cGyo= Subject key identifier: BC:C8:C9:96:99:07:93:CD:0E:0E:5E:5F:52:BD:B9:01:6B:FF:B5:E9 Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67 Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867 Certificate serial: 019C427D2C6614044F1E92F4762DB37C3D1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft Manifest number: 038F Signing time: Mon 09 Feb 2026 13:00:25 +0000 Manifest this update: Mon 09 Feb 2026 13:00:25 +0000 Manifest next update: Tue 10 Feb 2026 13:00:25 +0000 Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: SFEzCNKvvVhTgR2blvxR2cZl6aIIHDLRZYRS9yIsW7E=) 2: YKz64qjzkcbm2W2sbtXQlg38t8Y.roa (hash: md6cmjkCVjBhp2ILYsYMB25tfvee/yTEOqBHj6QyZqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:2c:66:14:04:4f:1e:92:f4:76:2d:b3:7c:3d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867 Validity Not Before: Feb 9 13:00:25 2026 GMT Not After : Feb 10 13:00:25 2026 GMT Subject: CN=bcc8c996990793cd0e0e5e5f52bdb9016bffb5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:c1:95:48:dc:38:b4:4a:41:f7:b2:e5:c3: f1:b7:c7:e4:13:f3:24:a7:af:88:70:ac:b8:5a:05: da:d2:47:5c:bd:ae:5a:eb:9d:94:5c:97:0f:4b:9c: f4:06:41:d4:7f:2c:ae:28:da:6e:c0:18:ae:ff:82: d8:23:5e:6c:e3:19:93:1c:ea:0e:89:da:d7:01:3b: c3:e5:88:7d:83:7e:42:d7:f5:64:a2:2c:74:ea:49: 64:cb:e3:cf:9c:b4:64:9e:2a:9f:f5:4d:b2:ab:0d: f8:ae:f3:32:b3:41:91:b1:13:2e:94:e5:03:8a:76: 3e:c9:db:2d:8f:0b:f6:f8:69:47:39:34:bb:b7:d4: 71:28:b6:34:f9:a8:cd:9f:7a:89:ea:8a:ad:84:62: 3e:f0:45:ce:49:6e:df:3e:73:fc:6d:6b:e2:e7:c0: 65:90:b8:31:10:da:84:47:82:75:6b:bd:5a:6d:83: be:ca:b2:90:5a:6f:75:e5:90:50:bc:bc:83:92:9f: 13:c8:ba:28:dc:4c:1a:68:26:68:80:d8:f2:2b:41: 74:ff:fc:7d:fe:ca:9b:45:e5:d8:e4:eb:9f:d8:26: 9b:ad:74:fc:cb:20:88:13:64:64:4b:f0:ef:8f:65: 8e:cb:52:c3:fe:15:c2:cd:bd:5a:51:71:25:c9:1b: a1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C8:C9:96:99:07:93:CD:0E:0E:5E:5F:52:BD:B9:01:6B:FF:B5:E9 X509v3 Authority Key Identifier: keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:98:25:09:ed:33:c8:c2:eb:8b:79:45:89:d1:d1:a6:72:72: 74:fc:87:2e:6f:16:f9:30:d0:9a:10:84:43:a6:30:00:bc:33: 6c:b0:ce:3c:7e:d9:af:3d:86:3f:88:a0:74:03:63:6a:ca:44: 6b:9b:01:14:dc:76:1f:df:df:ed:32:22:1c:e0:0b:dc:d5:43: 82:5e:69:00:6f:29:80:36:0e:ba:71:40:4e:f2:d3:10:45:10: c5:31:0c:0b:c3:59:66:35:84:c2:c3:ff:ba:05:1d:19:c8:85: 56:a6:85:71:7f:9b:13:4a:bb:56:63:3a:d8:20:e4:01:e9:1f: ad:c8:91:fc:61:53:ea:d7:1c:c0:4e:24:a0:24:9a:dd:06:7b: 79:48:96:2b:61:a7:b5:4c:c9:48:c3:92:cf:ad:cd:9f:8d:5b: e6:20:62:11:fd:f2:e2:d1:a5:05:28:5f:0a:80:5c:84:59:13: f9:53:7b:a5:d8:0f:28:92:ee:1b:18:02:60:78:96:2e:5e:e8: 62:fd:74:dd:44:fe:0e:4c:5e:79:b0:c2:75:a3:13:87:99:50: df:12:12:84:42:ab:95:00:28:07:21:ba:c2:c1:f7:f1:b5:b4: 72:51:99:ec:9f:64:13:fa:36:a6:ff:03:a7:9f:52:47:c0:9b: d2:8a:9b:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfSxmFARPHpL0di2zfD0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OGM0ZThhMGVhMjk3ZDY3YjQzMWFhYzQzOGExYzIwNjc1 ZWY4NjcwHhcNMjYwMjA5MTMwMDI1WhcNMjYwMjEwMTMwMDI1WjAzMTEwLwYDVQQD EyhiY2M4Yzk5Njk5MDc5M2NkMGUwZTVlNWY1MmJkYjkwMTZiZmZiNWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvonBlUjcOLRKQfey5cPxt8fkE/Mk p6+IcKy4WgXa0kdcva5a652UXJcPS5z0BkHUfyyuKNpuwBiu/4LYI15s4xmTHOoO idrXATvD5Yh9g35C1/Vkoix06klky+PPnLRkniqf9U2yqw34rvMys0GRsRMulOUD inY+ydstjwv2+GlHOTS7t9RxKLY0+ajNn3qJ6oqthGI+8EXOSW7fPnP8bWvi58Bl kLgxENqER4J1a71abYO+yrKQWm915ZBQvLyDkp8TyLoo3EwaaCZogNjyK0F0//x9 /sqbReXY5Ouf2CabrXT8yyCIE2RkS/Dvj2WOy1LD/hXCzb1aUXElyRuh9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzIyZaZB5PNDg5eX1K9uQFr/7XpMB8GA1UdIwQY MBaAFNmMTooOopfWe0MarEOKHCBnXvhnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81YTM1MmUtNWJjYS00NDY4LWI4ZDYt YmEwNmU3NGRiOTFjLzEvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81YTM1MmUtNWJjYS00NDY4LWI4ZDYtYmEwNmU3NGRiOTFj LzEvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5glCe0z yMLri3lFidHRpnJydPyHLm8W+TDQmhCEQ6YwALwzbLDOPH7Zrz2GP4igdANjaspE a5sBFNx2H9/f7TIiHOAL3NVDgl5pAG8pgDYOunFATvLTEEUQxTEMC8NZZjWEwsP/ ugUdGciFVqaFcX+bE0q7VmM62CDkAekfrciR/GFT6tccwE4koCSa3QZ7eUiWK2Gn tUzJSMOSz63Nn41b5iBiEf3y4tGlBShfCoBchFkT+VN7pdgPKJLuGxgCYHiWLl7o Yv103UT+DkxeebDCdaMTh5lQ3xIShEKrlQAoByG6wsH38bW0clGZ7J9kE/o2pv8D p59SR8Cb0oqb1w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:51 2026 by rpki-client