This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft File: 2GkQtETemfqBw5NVDJfkoyC86BI.mft (raw, json) Hash identifier: 3+ae1soAs7gLC1MpsT6pTqXH7zPZQlfPnDgH1Mz4Szg= Subject key identifier: 57:08:99:87:82:B0:98:8F:6B:82:5F:90:8B:37:C3:F9:42:61:39:0C Authority key identifier: D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12 Certificate issuer: /CN=d86910b444de99fa81c393550c97e4a320bce812 Certificate serial: 019C4358DA109EE0CFD8AC8601978E63A163 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft Manifest number: 0F18 Signing time: Mon 09 Feb 2026 17:00:22 +0000 Manifest this update: Mon 09 Feb 2026 17:00:22 +0000 Manifest next update: Tue 10 Feb 2026 17:00:22 +0000 Files and hashes: 1: 2GkQtETemfqBw5NVDJfkoyC86BI.crl (hash: 1JzvsdJy538EXO31KfaAkyNfGguKPvmYPbbZl+qtne0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:da:10:9e:e0:cf:d8:ac:86:01:97:8e:63:a1:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d86910b444de99fa81c393550c97e4a320bce812 Validity Not Before: Feb 9 17:00:22 2026 GMT Not After : Feb 10 17:00:22 2026 GMT Subject: CN=5708998782b0988f6b825f908b37c3f94261390c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:30:8a:7b:ce:a8:1e:70:5f:b1:77:e0:05:6f: 73:da:e9:29:76:ba:70:3a:25:bb:31:3e:9f:bf:b6: 9b:85:7a:5a:b4:65:0c:19:3f:db:8b:ec:03:6a:74: 74:47:f9:1f:bf:6c:b2:22:d3:c7:47:af:e1:0b:7d: f8:5f:99:82:29:5f:95:c9:2f:b9:fa:e0:fa:42:7c: 08:18:a0:01:55:41:d6:85:61:9e:16:b1:59:3c:3f: e8:67:e6:a4:ef:14:0d:2b:06:b5:f4:92:55:23:9e: 5a:5b:af:d7:59:6e:13:39:f6:6e:02:76:e9:fa:d5: 28:1b:b1:40:77:2e:e2:76:15:43:65:4a:ad:50:30: 28:19:4a:57:ce:b1:88:2a:4f:e6:29:42:ce:7c:95: ad:8e:52:18:71:06:1f:b6:e1:f9:67:b2:5b:72:c8: d7:7b:26:7d:7a:35:b9:c2:b3:70:a5:c4:d0:bb:2b: 8f:c9:5d:48:4d:9f:94:f1:3d:e7:ed:66:9f:20:63: 34:26:59:41:f2:0a:aa:7e:4e:c6:fc:ec:53:f6:d4: 5a:12:9c:4d:47:20:b0:82:0e:d8:e8:35:ad:1b:9c: 66:11:75:83:34:60:17:65:50:90:ee:7d:8d:15:c5: ab:8b:fb:7a:aa:6a:da:c7:b3:a4:2a:7b:4e:0f:f9: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:08:99:87:82:B0:98:8F:6B:82:5F:90:8B:37:C3:F9:42:61:39:0C X509v3 Authority Key Identifier: keyid:D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8e:dc:a6:7b:1d:64:a2:2d:e8:54:9d:4e:8f:01:f1:35:4a: 4d:6b:6b:ac:e3:8e:3d:28:55:bb:7e:f9:ce:16:0b:aa:69:3e: 99:a0:52:e6:20:4d:5d:36:c9:11:d3:a8:a9:58:93:56:32:4e: 0e:91:da:46:50:1c:90:aa:b1:5f:bb:7a:b2:3e:a3:22:a8:40: 5f:ea:f0:6a:24:35:95:fa:15:be:10:22:bc:f1:32:40:64:18: c9:46:27:63:33:b2:37:e3:50:45:05:ec:6e:44:b3:24:29:14: 78:49:1c:ec:5f:65:19:c7:3a:45:a9:09:9b:29:e2:4c:e4:73: de:df:04:9e:af:b5:8b:ef:c4:53:b9:00:4e:2e:96:a5:3b:eb: e4:19:a0:d6:a3:92:61:67:26:01:15:ba:73:f2:c4:36:1c:d4: 89:46:86:c3:ba:b2:65:b4:f5:9d:6e:96:5f:a6:36:77:34:bc: 81:f6:25:48:c0:bd:5f:a8:10:91:63:64:b4:c8:d5:3f:fe:41: 25:dc:60:8d:e3:83:1e:bc:8d:3a:af:b3:16:43:bd:7e:40:28: 66:33:4c:31:d9:45:6f:f8:3f:e7:0b:c8:4a:c6:f8:1c:a0:07: 08:19:71:2a:08:8e:1c:39:24:57:91:7f:75:0c:2c:d6:da:32: 8e:01:d1:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWNoQnuDP2KyGAZeOY6FjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NjkxMGI0NDRkZTk5ZmE4MWMzOTM1NTBjOTdlNGEzMjBi Y2U4MTIwHhcNMjYwMjA5MTcwMDIyWhcNMjYwMjEwMTcwMDIyWjAzMTEwLwYDVQQD Eyg1NzA4OTk4NzgyYjA5ODhmNmI4MjVmOTA4YjM3YzNmOTQyNjEzOTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zCKe86oHnBfsXfgBW9z2ukpdrpw OiW7MT6fv7abhXpatGUMGT/bi+wDanR0R/kfv2yyItPHR6/hC334X5mCKV+VyS+5 +uD6QnwIGKABVUHWhWGeFrFZPD/oZ+ak7xQNKwa19JJVI55aW6/XWW4TOfZuAnbp +tUoG7FAdy7idhVDZUqtUDAoGUpXzrGIKk/mKULOfJWtjlIYcQYftuH5Z7JbcsjX eyZ9ejW5wrNwpcTQuyuPyV1ITZ+U8T3n7WafIGM0JllB8gqqfk7G/OxT9tRaEpxN RyCwgg7Y6DWtG5xmEXWDNGAXZVCQ7n2NFcWri/t6qmrax7OkKntOD/kuXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcImYeCsJiPa4JfkIs3w/lCYTkMMB8GA1UdIwQY MBaAFNhpELRE3pn6gcOTVQyX5KMgvOgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkdrUXRFVGVtZnFCdzVOVkRKZmtveUM4NkJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80ZjI1NjMtMmU4Mi00NzhlLThmNjAt ODY5MzFiZmUzZWVhLzEvMkdrUXRFVGVtZnFCdzVOVkRKZmtveUM4NkJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80ZjI1NjMtMmU4Mi00NzhlLThmNjAtODY5MzFiZmUzZWVh LzEvMkdrUXRFVGVtZnFCdzVOVkRKZmtveUM4NkJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATY7cpnsd ZKIt6FSdTo8B8TVKTWtrrOOOPShVu375zhYLqmk+maBS5iBNXTbJEdOoqViTVjJO DpHaRlAckKqxX7t6sj6jIqhAX+rwaiQ1lfoVvhAivPEyQGQYyUYnYzOyN+NQRQXs bkSzJCkUeEkc7F9lGcc6RakJmyniTORz3t8Enq+1i+/EU7kATi6WpTvr5Bmg1qOS YWcmARW6c/LENhzUiUaGw7qyZbT1nW6WX6Y2dzS8gfYlSMC9X6gQkWNktMjVP/5B JdxgjeODHryNOq+zFkO9fkAoZjNMMdlFb/g/5wvISsb4HKAHCBlxKgiOHDkkV5F/ dQws1toyjgHR9g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:02 2026 by rpki-client