This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft File: 2nf6EA1s0ojlRMfLTH1NGIeQee0.mft (raw, json) Hash identifier: aAmo04Mo02d+q7DhFMDzw6sfMFXoqQcbEv2e+KjGNAU= Subject key identifier: 62:0A:E3:3C:51:57:DF:AA:E3:FC:A4:7D:40:80:66:C6:F0:D7:29:B2 Authority key identifier: DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED Certificate issuer: /CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed Certificate serial: 019C42EADE72387BDC200ED4D6046B1F1E44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft Manifest number: 02A3 Signing time: Mon 09 Feb 2026 15:00:14 +0000 Manifest this update: Mon 09 Feb 2026 15:00:14 +0000 Manifest next update: Tue 10 Feb 2026 15:00:14 +0000 Files and hashes: 1: 2nf6EA1s0ojlRMfLTH1NGIeQee0.crl (hash: gJU29Np17LB8H2WAUtMVcTfDsG8Lt5grqMKTfm7orK0=) 2: VHbe_xOVGHCgQR5XnYgh-yKH6cE.roa (hash: 5VSEEsjJBUwWudxQvIdtRqUqe0PKutNTBibCMoL8Zoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:de:72:38:7b:dc:20:0e:d4:d6:04:6b:1f:1e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed Validity Not Before: Feb 9 15:00:14 2026 GMT Not After : Feb 10 15:00:14 2026 GMT Subject: CN=620ae33c5157dfaae3fca47d408066c6f0d729b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:0c:96:9c:1d:e1:97:51:58:fb:4e:9f:ef: 34:fe:27:ff:d9:a3:88:07:25:2f:e4:31:ee:ef:5b: 55:e7:b8:52:d2:60:c6:44:e7:d6:f6:1d:bb:6c:67: ed:a2:f9:d1:aa:92:f1:a6:af:42:98:1d:9a:8b:02: 29:08:0d:7c:d8:bc:c0:db:82:20:58:b9:73:f3:6c: 72:04:0e:b2:54:58:ee:8b:01:2f:fa:0c:08:31:36: a0:b1:60:14:3e:3e:d7:41:ab:7c:6e:57:b1:27:3c: b9:1a:e8:db:7e:f1:88:67:5f:84:e0:84:cf:b8:af: 52:6e:db:08:4a:8b:cf:65:f7:dc:3d:35:b5:19:cc: b3:94:bf:e7:61:de:f8:a7:42:f8:f8:1f:27:38:20: eb:b8:b8:f3:e8:7b:52:17:0a:b4:0a:20:61:13:72: 70:98:18:99:d2:98:d5:c3:af:c2:c8:ec:9c:fd:f6: 06:65:2a:2c:10:b1:ce:5d:69:81:bb:d4:17:aa:68: 5a:77:72:df:bf:f2:4f:45:16:9c:b1:72:9a:1a:4d: 64:a9:16:f6:be:7c:ed:a8:cc:35:b7:f0:58:99:ce: 09:a0:00:37:40:e7:4c:19:f7:db:45:64:f9:0c:59: b9:cf:36:47:eb:fc:76:b5:bc:b7:d9:88:fa:d3:f1: c2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0A:E3:3C:51:57:DF:AA:E3:FC:A4:7D:40:80:66:C6:F0:D7:29:B2 X509v3 Authority Key Identifier: keyid:DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ae:58:4e:30:97:7e:92:0b:8f:a6:2c:60:12:f6:a5:32:8b: 8e:f8:49:e0:6b:68:73:a8:7a:66:71:35:ab:f6:ce:0e:e0:ef: ad:68:f1:ad:fe:c2:9f:8e:9e:a2:6f:67:d1:e1:8c:c3:06:11: 8c:c3:12:12:58:71:87:57:26:96:9d:eb:a3:b4:4f:34:88:d6: a8:db:e8:da:30:63:5c:41:0c:75:6c:ab:07:e3:a5:e2:23:43: 5e:de:a7:a1:89:bc:30:9e:da:69:57:f9:16:87:53:17:3e:29: 27:1e:b9:7d:94:4d:1c:bf:1b:fd:c7:12:9b:1e:50:9b:ba:fe: 15:de:49:30:76:1a:c1:eb:c2:70:6a:83:cc:e7:33:45:f6:f5: 7d:20:32:cf:ed:bc:8b:e2:79:68:63:5e:0f:f4:cc:80:73:77: 96:3c:73:8f:90:53:66:27:b5:b1:c3:4b:96:e7:1c:db:dd:b8: a0:0c:06:3c:58:91:42:e9:4f:37:cc:2b:bf:13:a1:70:01:11: 39:8c:46:f7:13:a6:ba:24:62:12:42:94:07:b7:9f:0f:06:57: bd:20:0f:4a:0a:d5:8e:a9:96:4b:a7:c5:1e:a6:d4:3f:95:3d: 82:24:f2:35:2e:38:72:a9:62:83:19:c2:d9:fe:e2:bf:b2:be: d7:b0:3f:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6t5yOHvcIA7U1gRrHx5EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzdmYTEwMGQ2Y2QyODhlNTQ0YzdjYjRjN2Q0ZDE4ODc5 MDc5ZWQwHhcNMjYwMjA5MTUwMDE0WhcNMjYwMjEwMTUwMDE0WjAzMTEwLwYDVQQD Eyg2MjBhZTMzYzUxNTdkZmFhZTNmY2E0N2Q0MDgwNjZjNmYwZDcyOWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNkMlpwd4ZdRWPtOn+80/if/2aOI ByUv5DHu71tV57hS0mDGROfW9h27bGftovnRqpLxpq9CmB2aiwIpCA182LzA24Ig WLlz82xyBA6yVFjuiwEv+gwIMTagsWAUPj7XQat8blexJzy5GujbfvGIZ1+E4ITP uK9SbtsISovPZffcPTW1GcyzlL/nYd74p0L4+B8nOCDruLjz6HtSFwq0CiBhE3Jw mBiZ0pjVw6/CyOyc/fYGZSosELHOXWmBu9QXqmhad3Lfv/JPRRacsXKaGk1kqRb2 vnztqMw1t/BYmc4JoAA3QOdMGffbRWT5DFm5zzZH6/x2tby32Yj60/HC/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIK4zxRV9+q4/ykfUCAZsbw1ymyMB8GA1UdIwQY MBaAFNp3+hANbNKI5UTHy0x9TRiHkHntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lMzFhZDUtZWY3NC00MGE0LTlhMGQt ZGY4NzJmYjI2OWNmLzEvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lMzFhZDUtZWY3NC00MGE0LTlhMGQtZGY4NzJmYjI2OWNm LzEvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHa5YTjCX fpILj6YsYBL2pTKLjvhJ4Gtoc6h6ZnE1q/bODuDvrWjxrf7Cn46eom9n0eGMwwYR jMMSElhxh1cmlp3ro7RPNIjWqNvo2jBjXEEMdWyrB+Ol4iNDXt6noYm8MJ7aaVf5 FodTFz4pJx65fZRNHL8b/ccSmx5Qm7r+Fd5JMHYawevCcGqDzOczRfb1fSAyz+28 i+J5aGNeD/TMgHN3ljxzj5BTZie1scNLlucc2924oAwGPFiRQulPN8wrvxOhcAER OYxG9xOmuiRiEkKUB7efDwZXvSAPSgrVjqmWS6fFHqbUP5U9giTyNS44cqligxnC 2f7iv7K+17A/2Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:32 2026 by rpki-client