This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft File: 2My6s6LYEMX6KdzanVAgJhbvueg.mft (raw, json) Hash identifier: Q++qh6PYUx8yVtl5X+XEa9Zr+cuTpwHwYXoX5TU4BSQ= Subject key identifier: B7:FD:16:04:B6:06:1C:BD:E8:CE:18:A4:5D:B9:9D:F8:62:38:EA:9B Authority key identifier: D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8 Certificate issuer: /CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8 Certificate serial: 019C41D8B7FCE3A3C55CA080C88D71FB3165 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft Manifest number: 027A Signing time: Mon 09 Feb 2026 10:00:47 +0000 Manifest this update: Mon 09 Feb 2026 10:00:47 +0000 Manifest next update: Tue 10 Feb 2026 10:00:47 +0000 Files and hashes: 1: 2My6s6LYEMX6KdzanVAgJhbvueg.crl (hash: wSxU9ccLvvjkRSaEDBJ91HvZvS0um3JrQJr5TANni40=) 2: n5FUtwJmC4hLyvlbNVZ9aYw4EWg.roa (hash: ApevewrPNzMKwdZYmudK6D8Ih9aFuZDtkDlyK/2Y0WA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:b7:fc:e3:a3:c5:5c:a0:80:c8:8d:71:fb:31:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8 Validity Not Before: Feb 9 10:00:47 2026 GMT Not After : Feb 10 10:00:47 2026 GMT Subject: CN=b7fd1604b6061cbde8ce18a45db99df86238ea9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:b3:71:bd:f4:18:a6:7e:d8:9b:65:d2:02: 69:92:61:82:cb:1e:a7:bc:27:b3:7e:04:6b:5b:ba: 62:82:f4:9b:53:4e:86:0c:11:58:c4:24:1f:cf:3a: 3d:26:89:d9:90:c4:c2:f6:f8:11:64:b3:9f:55:cf: e5:e3:df:1a:e2:b2:fd:11:c4:82:4c:31:bf:c3:77: cf:da:a2:1f:d4:15:43:47:06:de:c5:ca:5d:2d:c6: cf:5e:c0:d9:35:4b:9e:55:30:04:c5:26:08:b7:9e: 99:9a:20:f9:a5:03:f3:58:12:ab:57:6b:71:8d:8e: f0:18:73:5c:9f:e3:17:85:18:87:88:b1:3f:7a:81: f4:e4:bb:ce:59:63:87:0b:ac:f5:8f:31:74:b1:c3: e1:3d:41:7f:50:42:9b:a0:7c:db:0b:11:9e:15:97: 98:50:2f:29:aa:b2:0f:e4:11:8b:36:dd:f2:7e:b5: c9:6e:9d:46:41:6f:e1:69:8d:75:2f:53:d2:f7:b9: 5c:73:13:95:e8:aa:d5:42:10:41:71:63:23:ad:3d: c5:a2:ad:23:6b:13:96:fa:60:90:52:22:b6:ca:24: 5d:58:8f:d1:86:7f:63:b9:3b:98:57:38:7e:e3:a7: 35:4d:f6:66:28:c5:ad:d2:3e:18:ae:a0:af:ca:d9: 0a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FD:16:04:B6:06:1C:BD:E8:CE:18:A4:5D:B9:9D:F8:62:38:EA:9B X509v3 Authority Key Identifier: keyid:D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a5:c4:d6:97:b0:bd:4f:95:02:f4:c1:ca:bc:b7:9c:ba:5d: 5f:20:2a:45:bd:1d:38:8e:ad:f0:ca:87:4d:e6:af:4f:6e:38: 43:ff:7d:73:27:a7:b8:a3:f3:99:c1:84:a3:7b:c3:81:14:3e: ad:d5:4e:df:59:fd:ba:80:3a:1a:14:7a:17:82:80:05:3d:91: ae:66:cf:30:c3:86:31:29:ed:eb:6b:99:40:c4:cb:43:4b:1d: 1a:8f:a4:7a:a9:38:3d:e9:f5:f1:d5:6f:70:2c:23:71:07:e0: 67:5e:53:5f:d1:08:26:d7:05:01:15:cf:14:59:6c:a5:2c:49: 4d:4e:19:f7:d6:21:8f:e6:1b:a5:39:59:23:23:be:90:bf:e1: 3c:6e:fc:59:34:65:4e:ad:94:2a:ef:98:25:46:ac:88:c0:39: 61:1e:41:5a:7f:ef:2e:c5:1d:79:56:ad:e5:90:e9:9d:ff:1e: f1:a3:30:3e:67:aa:9b:6f:1e:01:b7:1e:ed:ed:6a:fe:89:69: 48:ab:c5:0f:45:80:7f:72:53:f0:a7:ef:8c:68:00:d7:e9:77: 49:b4:07:19:a0:d2:bb:97:7f:81:5f:59:d2:1e:1b:7f:c0:42: 4c:5b:75:ac:f3:c7:36:95:7e:aa:3e:64:de:bd:43:74:2b:ab: 8b:c2:a3:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Lf846PFXKCAyI1x+zFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4Y2NiYWIzYTJkODEwYzVmYTI5ZGNkYTlkNTAyMDI2MTZl ZmI5ZTgwHhcNMjYwMjA5MTAwMDQ3WhcNMjYwMjEwMTAwMDQ3WjAzMTEwLwYDVQQD EyhiN2ZkMTYwNGI2MDYxY2JkZThjZTE4YTQ1ZGI5OWRmODYyMzhlYTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJezcb30GKZ+2Jtl0gJpkmGCyx6n vCezfgRrW7pigvSbU06GDBFYxCQfzzo9JonZkMTC9vgRZLOfVc/l498a4rL9EcSC TDG/w3fP2qIf1BVDRwbexcpdLcbPXsDZNUueVTAExSYIt56ZmiD5pQPzWBKrV2tx jY7wGHNcn+MXhRiHiLE/eoH05LvOWWOHC6z1jzF0scPhPUF/UEKboHzbCxGeFZeY UC8pqrIP5BGLNt3yfrXJbp1GQW/haY11L1PS97lccxOV6KrVQhBBcWMjrT3Foq0j axOW+mCQUiK2yiRdWI/Rhn9juTuYVzh+46c1TfZmKMWt0j4YrqCvytkKPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLf9FgS2Bhy96M4YpF25nfhiOOqbMB8GA1UdIwQY MBaAFNjMurOi2BDF+inc2p1QICYW77noMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk15NnM2TFlFTVg2S2R6YW5WQWdKaGJ2dWVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80NmZhMDItNjU4Ny00YzYyLTk3M2Ut YjEyNTAxZjM0ZmYwLzEvMk15NnM2TFlFTVg2S2R6YW5WQWdKaGJ2dWVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80NmZhMDItNjU4Ny00YzYyLTk3M2UtYjEyNTAxZjM0ZmYw LzEvMk15NnM2TFlFTVg2S2R6YW5WQWdKaGJ2dWVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqXE1pew vU+VAvTByry3nLpdXyAqRb0dOI6t8MqHTeavT244Q/99cyenuKPzmcGEo3vDgRQ+ rdVO31n9uoA6GhR6F4KABT2RrmbPMMOGMSnt62uZQMTLQ0sdGo+keqk4Pen18dVv cCwjcQfgZ15TX9EIJtcFARXPFFlspSxJTU4Z99Yhj+YbpTlZIyO+kL/hPG78WTRl Tq2UKu+YJUasiMA5YR5BWn/vLsUdeVat5ZDpnf8e8aMwPmeqm28eAbce7e1q/olp SKvFD0WAf3JT8KfvjGgA1+l3SbQHGaDSu5d/gV9Z0h4bf8BCTFt1rPPHNpV+qj5k 3r1DdCuri8KjZw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:37 2026 by rpki-client