This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json) Hash identifier: t9EysRw+PQal7crPTNqQQyu1gIndgoyfq3PCdVaarKM= Subject key identifier: 95:79:DE:52:07:84:F9:05:C7:21:2D:BA:86:4D:6E:BF:F9:45:FB:38 Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f Certificate serial: 019C4359450C7A217C845B90A243A0FFA93E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft Manifest number: 10F4 Signing time: Mon 09 Feb 2026 17:00:49 +0000 Manifest this update: Mon 09 Feb 2026 17:00:49 +0000 Manifest next update: Tue 10 Feb 2026 17:00:49 +0000 Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: 2N3lFrOllSqyaZP8xU8WUl0LDpytXNvBGRwifrQLfUg=) 2: fGMBgR4dRlgN7od53q3XJYWFyYQ.roa (hash: w9q5mkecYPBNy8Mimx20Bl4XPGkfo1gV/P3fG9sJ0A4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:45:0c:7a:21:7c:84:5b:90:a2:43:a0:ff:a9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f Validity Not Before: Feb 9 17:00:49 2026 GMT Not After : Feb 10 17:00:49 2026 GMT Subject: CN=9579de520784f905c7212dba864d6ebff945fb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:be:6d:16:78:af:48:28:46:86:98:3d:87: d4:e9:1e:2a:97:4b:f1:bf:f2:41:46:49:c8:bf:b0: 8b:da:4a:fb:c6:6f:7e:86:6b:e1:74:7f:3a:f6:10: 5c:49:91:4d:39:8a:68:e0:13:22:92:85:f6:a4:4c: a5:e2:94:42:24:b8:50:3c:cd:7f:e9:16:e7:87:61: 27:91:ef:a1:c2:9e:85:ba:35:34:bd:ee:16:57:4f: 1d:52:47:16:78:58:de:99:30:42:8d:b5:93:e5:11: 4b:fe:be:b8:26:5b:35:23:31:2a:93:7c:80:3e:40: e7:11:94:a1:93:ae:c4:98:27:75:07:20:68:75:02: 47:2e:df:d9:f9:90:11:e4:0c:cf:57:24:1a:94:ac: b9:74:11:f6:77:32:2d:a5:4a:25:b0:16:e8:5b:51: fd:de:50:c9:d1:44:a5:1f:f3:05:c0:67:02:5b:11: 23:43:a4:92:b3:b7:b0:8c:c2:11:03:41:35:6b:95: 38:40:de:df:54:c1:bc:b9:a7:fa:58:4b:d5:48:e9: 0f:e2:1b:bd:a2:ed:b9:9f:51:bd:cf:4a:a0:c4:64: 99:f1:9f:95:49:12:bd:a5:72:8e:cf:06:03:c8:04: c6:2c:b3:62:8d:a4:6c:2b:db:7d:ea:64:09:41:f9: fe:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:79:DE:52:07:84:F9:05:C7:21:2D:BA:86:4D:6E:BF:F9:45:FB:38 X509v3 Authority Key Identifier: keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:81:c9:83:9e:0b:d3:8c:b3:e9:5c:6b:6b:0f:b5:26:fd:a7: 43:c0:f1:60:1f:74:1d:f4:50:1d:77:d9:ce:c5:1c:3c:98:8b: 97:69:1e:8e:f2:34:9b:17:10:c0:ba:3c:40:87:07:90:a2:ff: 93:b3:8a:e6:4c:23:2c:d8:89:f2:b7:3d:1d:49:5e:5b:90:db: ff:f0:41:01:2d:ff:01:e5:d6:e9:00:33:ce:c4:66:dd:25:ba: 22:6f:95:eb:06:6a:02:a7:c6:24:f8:10:b2:8a:30:87:7b:27: ec:ce:56:30:93:6c:6e:60:c4:eb:1e:1c:33:51:54:d2:39:bc: ec:79:50:b2:cc:3c:a5:47:7d:68:7e:d7:83:94:b2:6c:b6:f7: 36:6d:4b:ec:c8:31:1f:f4:36:e5:a2:04:cb:17:29:a9:0b:10: c1:2c:a7:07:aa:7e:e4:7c:cd:dc:55:48:73:be:19:56:9b:24: 0b:8b:b5:74:c0:c7:f3:d4:60:17:fd:6a:1b:46:9c:2f:b9:ff: 80:0f:2c:53:4e:cb:aa:fb:04:42:4f:2c:ce:b2:05:ee:3d:83: 51:99:0e:9a:37:50:da:f3:f8:f3:8d:20:a7:45:d4:cf:39:06: cf:6a:88:e2:df:0e:18:e6:eb:ca:5f:07:f9:fd:8d:1a:91:27: f7:6c:1a:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWUUMeiF8hFuQokOg/6k+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ODg0ZjkyYWZlYjU4ZmZhYjI2NDg3YjIzMjA1ZmUwZDVk YThhOWYwHhcNMjYwMjA5MTcwMDQ5WhcNMjYwMjEwMTcwMDQ5WjAzMTEwLwYDVQQD Eyg5NTc5ZGU1MjA3ODRmOTA1YzcyMTJkYmE4NjRkNmViZmY5NDVmYjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaq+bRZ4r0goRoaYPYfU6R4ql0vx v/JBRknIv7CL2kr7xm9+hmvhdH869hBcSZFNOYpo4BMikoX2pEyl4pRCJLhQPM1/ 6Rbnh2Enke+hwp6FujU0ve4WV08dUkcWeFjemTBCjbWT5RFL/r64Jls1IzEqk3yA PkDnEZShk67EmCd1ByBodQJHLt/Z+ZAR5AzPVyQalKy5dBH2dzItpUolsBboW1H9 3lDJ0USlH/MFwGcCWxEjQ6SSs7ewjMIRA0E1a5U4QN7fVMG8uaf6WEvVSOkP4hu9 ou25n1G9z0qgxGSZ8Z+VSRK9pXKOzwYDyATGLLNijaRsK9t96mQJQfn+QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJV53lIHhPkFxyEtuoZNbr/5Rfs4MB8GA1UdIwQY MBaAFNmIT5Kv61j/qyZIeyMgX+DV2oqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83Y2MzZjgtMDA4Yi00MDdjLWJlZWYt NzY1MzMyNDVmMmJlLzEvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS83Y2MzZjgtMDA4Yi00MDdjLWJlZWYtNzY1MzMyNDVmMmJl LzEvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtYHJg54L 04yz6Vxraw+1Jv2nQ8DxYB90HfRQHXfZzsUcPJiLl2kejvI0mxcQwLo8QIcHkKL/ k7OK5kwjLNiJ8rc9HUleW5Db//BBAS3/AeXW6QAzzsRm3SW6Im+V6wZqAqfGJPgQ soowh3sn7M5WMJNsbmDE6x4cM1FU0jm87HlQssw8pUd9aH7Xg5SybLb3Nm1L7Mgx H/Q25aIEyxcpqQsQwSynB6p+5HzN3FVIc74ZVpskC4u1dMDH89RgF/1qG0acL7n/ gA8sU07LqvsEQk8szrIF7j2DUZkOmjdQ2vP4840gp0XUzzkGz2qI4t8OGObryl8H +f2NGpEn92wafw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:53 2026 by rpki-client