This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json) Hash identifier: +uygJdkYcL93SPEhByKURvPuw8mXjBcPxLkuH2Hob9I= Subject key identifier: 01:66:CE:8E:A5:D4:38:DF:3D:43:44:7E:3A:8A:64:01:74:61:A1:DD Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86 Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86 Certificate serial: 019C427E251A2171EE4FC55D6EAF0C6BBB4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft Manifest number: 0EF1 Signing time: Mon 09 Feb 2026 13:01:26 +0000 Manifest this update: Mon 09 Feb 2026 13:01:26 +0000 Manifest next update: Tue 10 Feb 2026 13:01:26 +0000 Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: zsGJROFUnvoILV0f6xTfqGLPpUvLxJv4viHUsmVqJV8=) 2: qnNx4BbcqCKw4qU9ggM-AvK2t-g.roa (hash: IB/xWqsQwwimaAQrVy3VNbAYORDCQE0bYCHpAZf/Bpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:25:1a:21:71:ee:4f:c5:5d:6e:af:0c:6b:bb:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86 Validity Not Before: Feb 9 13:01:26 2026 GMT Not After : Feb 10 13:01:26 2026 GMT Subject: CN=0166ce8ea5d438df3d43447e3a8a64017461a1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:63:55:4e:8d:ca:1c:13:89:79:29:a4:55:cd: ef:c6:c6:0e:d4:6e:2c:a3:ef:73:51:aa:78:e5:1e: 4c:c8:80:a2:20:66:c4:f0:16:f5:2b:a1:7c:cd:76: 83:58:7e:d1:82:0f:32:f0:ec:5b:8e:67:c3:64:d8: f8:b4:e0:bb:fd:60:6c:a1:7e:f1:a1:a2:ee:c0:5e: f3:24:85:4b:70:a4:01:e0:41:d2:4a:80:3a:ee:20: 12:6b:5e:62:3b:10:71:0b:9c:94:90:a6:92:4d:91: b3:4f:32:26:98:bf:af:9d:da:be:ce:33:ba:e7:12: 23:e0:dd:0c:0f:7c:e7:a4:af:7c:a9:9b:85:6d:0a: 78:15:e0:90:43:9b:26:01:1c:cc:c8:43:91:99:f9: b8:d8:1d:aa:e3:20:3a:5f:4d:1b:b6:f2:b0:2a:8e: d9:fd:3c:29:ac:a4:30:5c:7b:41:55:55:6a:5c:a3: 40:d1:26:dd:87:ee:27:8d:17:1f:eb:61:bd:6c:95: 1c:01:21:7c:d9:95:08:37:cf:3f:6b:fe:eb:1d:84: 4d:bc:68:4f:e7:c4:76:76:b0:36:d0:3b:61:a7:f9: eb:cd:c7:94:3f:c3:05:80:b8:84:fa:23:76:77:38: b6:65:2d:a3:29:f6:0d:7e:77:c9:38:4c:f6:25:cb: 4f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:66:CE:8E:A5:D4:38:DF:3D:43:44:7E:3A:8A:64:01:74:61:A1:DD X509v3 Authority Key Identifier: keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:fe:93:54:c8:a7:27:33:a2:2b:6c:16:37:8a:30:26:d7:87: 90:63:51:f7:27:a0:ef:c7:c0:bc:ff:77:b2:af:bf:e0:11:ab: 3e:51:5b:9b:74:5b:50:f2:3f:39:69:1b:f7:44:ad:5d:60:0d: 04:1b:9c:e5:17:5f:24:d2:a0:30:54:49:02:9b:a4:79:af:8b: 19:02:31:cb:8b:b3:07:a1:84:de:59:87:c7:6d:a6:4f:84:bb: 4f:f1:7a:ca:35:92:f0:f0:95:07:9d:fa:5c:43:bd:90:6d:31: fd:9b:68:16:07:23:3e:7e:8f:8a:a2:b8:e2:a0:62:c4:bf:88: 23:d2:0d:0e:fb:e6:d5:ae:ce:e0:94:de:73:ef:3c:15:f9:10: 69:b5:db:c7:e6:04:11:b1:ad:92:a7:65:be:40:d5:35:f7:a1: 96:ab:65:a1:4d:c0:a3:33:93:8a:fc:9b:38:6f:bb:ec:90:14: 7d:c2:4c:ce:49:9c:81:bc:b2:43:9f:7b:b0:05:96:58:15:bb: 12:85:2e:74:24:8e:fa:d5:56:fe:74:91:ca:99:63:b0:b7:b2: 2f:5e:73:80:8f:89:65:6d:2b:45:50:89:83:3c:9b:d4:19:b1: 3f:3d:76:67:0b:9d:8e:36:54:26:18:7b:29:12:3b:44:25:4b: 97:f6:3f:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfiUaIXHuT8Vdbq8Ma7tOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNmY5NzdkYzNkNWFjNjNiZGJkNmYwZjhhZDVlNmJhYTdj NTRkODYwHhcNMjYwMjA5MTMwMTI2WhcNMjYwMjEwMTMwMTI2WjAzMTEwLwYDVQQD EygwMTY2Y2U4ZWE1ZDQzOGRmM2Q0MzQ0N2UzYThhNjQwMTc0NjFhMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12NVTo3KHBOJeSmkVc3vxsYO1G4s o+9zUap45R5MyICiIGbE8Bb1K6F8zXaDWH7Rgg8y8OxbjmfDZNj4tOC7/WBsoX7x oaLuwF7zJIVLcKQB4EHSSoA67iASa15iOxBxC5yUkKaSTZGzTzImmL+vndq+zjO6 5xIj4N0MD3znpK98qZuFbQp4FeCQQ5smARzMyEORmfm42B2q4yA6X00btvKwKo7Z /TwprKQwXHtBVVVqXKNA0Sbdh+4njRcf62G9bJUcASF82ZUIN88/a/7rHYRNvGhP 58R2drA20Dthp/nrzceUP8MFgLiE+iN2dzi2ZS2jKfYNfnfJOEz2JctPjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFmzo6l1DjfPUNEfjqKZAF0YaHdMB8GA1UdIwQY MBaAFDNvl33D1axjvb1vD4rV5rqnxU2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTItWGZjUFZyR085dlc4UGl0WG11cWZGVFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yYTQ1NjEtZjJkMy00NmQyLWE0ZjIt M2Y2ODY4YjJkZTk4LzEvTTItWGZjUFZyR085dlc4UGl0WG11cWZGVFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yYTQ1NjEtZjJkMy00NmQyLWE0ZjItM2Y2ODY4YjJkZTk4 LzEvTTItWGZjUFZyR085dlc4UGl0WG11cWZGVFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARv6TVMin JzOiK2wWN4owJteHkGNR9yeg78fAvP93sq+/4BGrPlFbm3RbUPI/OWkb90StXWAN BBuc5RdfJNKgMFRJApukea+LGQIxy4uzB6GE3lmHx22mT4S7T/F6yjWS8PCVB536 XEO9kG0x/ZtoFgcjPn6PiqK44qBixL+II9INDvvm1a7O4JTec+88FfkQabXbx+YE EbGtkqdlvkDVNfehlqtloU3AozOTivybOG+77JAUfcJMzkmcgbyyQ597sAWWWBW7 EoUudCSO+tVW/nSRypljsLeyL15zgI+JZW0rRVCJgzyb1BmxPz12ZwudjjZUJhh7 KRI7RCVLl/Y/8Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:47 2026 by rpki-client