This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json) Hash identifier: u1TOJQVzZmdGZXE/SdmyLfc62hrqRCsWhu985c2cK2w= Subject key identifier: C1:1D:33:83:C8:03:C9:A7:2B:AC:07:8F:54:AE:40:02:62:0F:E1:A9 Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6 Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6 Certificate serial: 019C43229B7776D116E353AF1919F63D908D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft Manifest number: 05C9 Signing time: Mon 09 Feb 2026 16:01:07 +0000 Manifest this update: Mon 09 Feb 2026 16:01:07 +0000 Manifest next update: Tue 10 Feb 2026 16:01:07 +0000 Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: pIlGyzsAsNwsvRkYEXFfg1l8VjiyAq/mF6ZZf2GqPgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:9b:77:76:d1:16:e3:53:af:19:19:f6:3d:90:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6 Validity Not Before: Feb 9 16:01:07 2026 GMT Not After : Feb 10 16:01:07 2026 GMT Subject: CN=c11d3383c803c9a72bac078f54ae4002620fe1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e2:cd:11:10:fa:c6:84:f9:82:91:72:2e:51: 25:0a:96:bc:a0:d8:ce:d3:b8:86:30:61:20:cf:06: e0:ca:96:bf:00:1c:9c:24:19:36:56:5e:79:34:63: fa:db:3e:d0:84:32:8f:a7:15:3e:02:81:e1:35:d7: 1b:d7:02:5a:15:8b:b4:6b:da:dc:a0:90:e9:23:ad: f3:9c:00:2c:3b:77:da:bd:af:85:22:5b:ba:c0:a7: cc:a7:42:fb:f5:45:f3:26:7f:44:cf:59:65:aa:41: 5c:41:06:d6:b8:9f:83:08:9c:0a:06:e4:1e:3f:f2: a1:db:1c:f9:68:d5:86:4c:2f:5a:32:cd:35:3a:98: 0f:04:09:32:af:73:e9:4c:63:da:69:af:8c:da:d8: d2:d8:56:b5:0f:b6:ae:c1:4f:0f:6c:a8:a9:a6:17: d7:5a:ef:a1:65:3e:57:58:5c:d5:c1:94:f0:a2:ed: 30:88:47:2d:8d:68:e1:6c:15:1e:19:07:32:67:0b: 38:9d:c6:81:b5:18:f0:75:df:0e:dc:9b:1b:53:c4: 74:d5:88:71:eb:aa:bf:c9:38:e9:7c:a2:54:e9:65: cc:08:1e:54:54:74:9b:cb:d7:e2:1a:a7:bd:79:6c: 33:9b:97:28:52:78:4e:89:43:d8:1a:a1:96:18:d9: 0d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1D:33:83:C8:03:C9:A7:2B:AC:07:8F:54:AE:40:02:62:0F:E1:A9 X509v3 Authority Key Identifier: keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:91:cb:43:48:05:f0:7f:31:da:f2:87:91:05:87:83:0b:dd: 2f:f0:07:b5:95:46:1b:8f:97:e6:d3:fa:1b:72:b6:76:a2:a0: 09:d1:ab:44:0c:5c:69:bb:6c:cf:6d:3b:db:08:40:82:6c:f2: bb:3d:31:99:54:fe:6f:5b:fc:61:1d:7b:a4:cb:a9:ae:b0:86: 59:68:fd:75:90:5b:26:ad:5d:8f:54:66:7b:a8:66:a4:95:f6: ba:f8:04:f4:2f:e4:82:7d:f9:18:5d:ce:68:bb:c1:a8:ce:9f: b3:58:3d:ba:b0:41:b3:30:d5:32:b6:2a:85:6f:f0:44:fa:0f: 5d:bb:91:f4:82:c6:a8:9d:fe:e0:33:a3:40:ed:cd:d1:bb:f0: df:6a:0d:ae:d3:ef:12:60:74:1e:18:e8:a3:25:41:1e:23:9c: 32:47:45:aa:be:0e:35:94:0c:b8:cb:bf:7b:46:01:74:d1:f8: a1:15:e5:4b:15:ca:fd:4a:01:45:2a:d3:8e:eb:57:ed:a1:99: 5a:d6:de:28:e5:43:b3:bc:4b:f1:1d:f4:92:cb:05:84:5c:d2: e0:44:5a:60:0d:94:f3:9f:bc:4c:6d:e8:59:14:00:e2:9d:6c: 72:97:89:8e:66:05:f2:ff:b5:05:3c:23:b3:3b:83:06:86:05: e9:4f:45:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpt3dtEW41OvGRn2PZCNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZWQ4Yjg5NjBlODdhYTY2OTM1YWQ2NjgzYmMxNWYxZTQ3 OTkzYjYwHhcNMjYwMjA5MTYwMTA3WhcNMjYwMjEwMTYwMTA3WjAzMTEwLwYDVQQD EyhjMTFkMzM4M2M4MDNjOWE3MmJhYzA3OGY1NGFlNDAwMjYyMGZlMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuLNERD6xoT5gpFyLlElCpa8oNjO 07iGMGEgzwbgypa/ABycJBk2Vl55NGP62z7QhDKPpxU+AoHhNdcb1wJaFYu0a9rc oJDpI63znAAsO3fava+FIlu6wKfMp0L79UXzJn9Ez1llqkFcQQbWuJ+DCJwKBuQe P/Kh2xz5aNWGTC9aMs01OpgPBAkyr3PpTGPaaa+M2tjS2Fa1D7auwU8PbKipphfX Wu+hZT5XWFzVwZTwou0wiEctjWjhbBUeGQcyZws4ncaBtRjwdd8O3JsbU8R01Yhx 66q/yTjpfKJU6WXMCB5UVHSby9fiGqe9eWwzm5coUnhOiUPYGqGWGNkNjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEdM4PIA8mnK6wHj1SuQAJiD+GpMB8GA1UdIwQY MBaAFETti4lg6HqmaTWtZoO8FfHkeZO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk8yTGlXRG9lcVpwTmExbWc3d1Y4ZVI1azdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi84ZjlkYjUtZTlhZC00NjRmLWFiYTkt YmQxYmE0YzE5Zjc2LzEvUk8yTGlXRG9lcVpwTmExbWc3d1Y4ZVI1azdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi84ZjlkYjUtZTlhZC00NjRmLWFiYTktYmQxYmE0YzE5Zjc2 LzEvUk8yTGlXRG9lcVpwTmExbWc3d1Y4ZVI1azdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJHLQ0gF 8H8x2vKHkQWHgwvdL/AHtZVGG4+X5tP6G3K2dqKgCdGrRAxcabtsz2072whAgmzy uz0xmVT+b1v8YR17pMuprrCGWWj9dZBbJq1dj1Rme6hmpJX2uvgE9C/kgn35GF3O aLvBqM6fs1g9urBBszDVMrYqhW/wRPoPXbuR9ILGqJ3+4DOjQO3N0bvw32oNrtPv EmB0HhjooyVBHiOcMkdFqr4ONZQMuMu/e0YBdNH4oRXlSxXK/UoBRSrTjutX7aGZ WtbeKOVDs7xL8R30kssFhFzS4ERaYA2U85+8TG3oWRQA4p1scpeJjmYF8v+1BTwj szuDBoYF6U9FUA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:27 2026 by rpki-client