This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json) Hash identifier: 0oMvND57nFr1pwyfju1tHcvjawHH2WK/ZXDfCnvQqsc= Subject key identifier: B3:B7:57:DE:BE:57:7F:87:42:93:17:E8:F7:20:7B:7B:1F:02:C7:7C Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Certificate serial: 019BA30FD5ED9484E768706BE525ED87EBCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft Manifest number: 14D6 Signing time: Fri 09 Jan 2026 14:01:22 +0000 Manifest this update: Fri 09 Jan 2026 14:01:22 +0000 Manifest next update: Sat 10 Jan 2026 14:01:22 +0000 Files and hashes: 1: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: fgoUk72xdcoH+GKoAsoi/hqWrn8b772soLPb9vknwE0=) 2: FV5agwPefu87z1wCtIqkpK0uL6w.roa (hash: kbaz5ecyqtDRdizdZmskpU3ubOJCJzahx05LTnstX4A=) 3: M2fYQ-Xh1R9kL12fjU6kj21jnME.roa (hash: RNCxRLIEgxJ5YCHwFJ/0nlizuHzlZR5j4toiJWJqww0=) 4: YyyjEfctC9QB0P54qeYYg9JpeIE.roa (hash: 537NB66eU8bZ7ssJHTKme6abtCTvoFCwgHr4CBOrOww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:0f:d5:ed:94:84:e7:68:70:6b:e5:25:ed:87:eb:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Validity Not Before: Jan 9 14:01:22 2026 GMT Not After : Jan 10 14:01:22 2026 GMT Subject: CN=b3b757debe577f87429317e8f7207b7b1f02c77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:31:af:92:77:a5:d6:04:c6:af:52:14:08:5a: c3:23:97:5c:cb:09:29:75:45:bb:43:d0:d7:10:55: 35:c0:52:42:cd:80:a2:3f:4d:fe:df:6d:4d:cc:6c: 82:1d:75:91:47:13:fc:0d:f9:5e:65:b9:cc:91:52: b2:b2:db:21:07:62:af:f4:db:25:d7:c1:30:cd:e0: 16:48:eb:3c:c3:3f:a0:3b:7b:17:4a:bb:3f:5d:ee: 00:19:52:ad:0e:b4:58:5c:35:f8:bc:fa:07:3d:9c: b1:c7:bd:16:85:47:04:25:4a:57:59:38:4a:94:e9: c2:29:f1:f9:77:6a:12:eb:26:e0:19:95:34:12:72: d9:36:0b:87:cc:83:f5:ac:c2:38:81:0b:cc:70:6d: 02:d1:ee:f7:ef:9d:7d:86:9a:5f:3d:7a:dc:25:0b: 11:57:5c:83:6c:bd:49:54:32:81:86:2c:ec:82:c6: 92:d8:2a:a2:2d:2f:41:e2:51:43:5f:11:42:72:66: 3a:9f:d6:07:95:ed:27:b7:b8:52:c8:b7:02:65:88: 27:f6:9a:cd:cc:dd:d2:04:ae:23:5b:c0:37:5a:df: cd:60:1b:3a:76:bf:3a:64:c3:f9:1b:55:4d:bb:a2: 00:55:e0:38:9f:0e:73:cc:28:25:5d:ac:40:0a:31: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B7:57:DE:BE:57:7F:87:42:93:17:E8:F7:20:7B:7B:1F:02:C7:7C X509v3 Authority Key Identifier: keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e7:d7:bf:50:01:fe:cd:7b:18:bf:6d:67:7b:fd:e6:c5:68: 44:37:aa:fe:08:f0:98:65:29:d3:ec:f8:48:19:6c:41:ca:05: 38:56:88:6f:c8:b1:67:5a:2d:1c:2c:c6:6f:19:98:72:19:56: 7a:00:40:4c:0a:cc:81:8d:59:54:95:ee:d4:c5:c2:23:f8:d4: 07:9f:27:d8:3d:3b:2a:c3:6a:ef:4f:9e:ee:f9:d1:eb:4e:d8: 55:ae:dc:e1:4d:3c:d5:99:44:40:12:7a:23:9a:66:e2:7d:8d: 88:dc:4c:e4:01:6f:42:15:22:52:14:e1:dc:e9:2f:d3:9c:08: 16:7c:7e:95:b8:6d:4c:b1:dd:31:27:30:78:9c:cb:82:95:fe: 67:4c:ee:8d:78:79:30:0f:0c:7a:35:d6:0d:c8:71:d0:ec:ae: 23:3c:bc:63:0f:ef:c7:93:ca:e9:0b:b4:77:40:87:f4:64:a9: fa:bf:f4:01:fc:b8:d8:58:3c:fc:6f:70:28:eb:94:48:67:a8: 9a:f7:8e:97:df:2d:00:32:65:b1:81:ba:d2:e5:91:71:b6:5e: bf:b7:4b:31:f9:f7:a2:94:e0:66:ee:02:2b:9a:03:b7:2a:80: 86:46:ff:9b:e4:ee:d9:45:ea:23:89:2c:ee:f7:ec:ee:cf:7b: 14:85:0e:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZujD9XtlITnaHBr5SXth+vOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MjZjYTVkNTNjMWI1MzA4ZTJjOWM3OTFjNjMwYTBmMjIz Mzc5NDMwHhcNMjYwMTA5MTQwMTIyWhcNMjYwMTEwMTQwMTIyWjAzMTEwLwYDVQQD EyhiM2I3NTdkZWJlNTc3Zjg3NDI5MzE3ZThmNzIwN2I3YjFmMDJjNzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jGvknel1gTGr1IUCFrDI5dcywkp dUW7Q9DXEFU1wFJCzYCiP03+321NzGyCHXWRRxP8DfleZbnMkVKystshB2Kv9Nsl 18EwzeAWSOs8wz+gO3sXSrs/Xe4AGVKtDrRYXDX4vPoHPZyxx70WhUcEJUpXWThK lOnCKfH5d2oS6ybgGZU0EnLZNguHzIP1rMI4gQvMcG0C0e737519hppfPXrcJQsR V1yDbL1JVDKBhizsgsaS2CqiLS9B4lFDXxFCcmY6n9YHle0nt7hSyLcCZYgn9prN zN3SBK4jW8A3Wt/NYBs6dr86ZMP5G1VNu6IAVeA4nw5zzCglXaxACjESNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLO3V96+V3+HQpMX6Pcge3sfAsd8MB8GA1UdIwQY MBaAFNgmyl1TwbUwjiyceRxjCg8iM3lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGIt NThkMmVlOTgyODc5LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGItNThkMmVlOTgyODc5 LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+fXv1AB /s17GL9tZ3v95sVoRDeq/gjwmGUp0+z4SBlsQcoFOFaIb8ixZ1otHCzGbxmYchlW egBATArMgY1ZVJXu1MXCI/jUB58n2D07KsNq70+e7vnR607YVa7c4U081ZlEQBJ6 I5pm4n2NiNxM5AFvQhUiUhTh3Okv05wIFnx+lbhtTLHdMScweJzLgpX+Z0zujXh5 MA8MejXWDchx0OyuIzy8Yw/vx5PK6Qu0d0CH9GSp+r/0Afy42Fg8/G9wKOuUSGeo mveOl98tADJlsYG60uWRcbZev7dLMfn3opTgZu4CK5oDtyqAhkb/m+Tu2UXqI4ks 7vfs7s97FIUO7g== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:58 2026 by rpki-client