This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json) Hash identifier: xlb6zt5OJ41FkBnahYzBPBrIvoAoU9E7Ycsu6qrm9j4= Subject key identifier: EF:14:16:CA:13:FE:66:49:BB:C7:FE:F4:20:A2:A0:BA:4F:20:F6:FF Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc Certificate serial: 019C42EB15F266D6E9E3258701FA918C1FCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft Manifest number: 0F57 Signing time: Mon 09 Feb 2026 15:00:28 +0000 Manifest this update: Mon 09 Feb 2026 15:00:28 +0000 Manifest next update: Tue 10 Feb 2026 15:00:28 +0000 Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: Y5c4uxoX5K632+EY6gHgKXyS67qezvmUUE7YXmYBlBU=) 2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:15:f2:66:d6:e9:e3:25:87:01:fa:91:8c:1f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc Validity Not Before: Feb 9 15:00:28 2026 GMT Not After : Feb 10 15:00:28 2026 GMT Subject: CN=ef1416ca13fe6649bbc7fef420a2a0ba4f20f6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:9c:84:5c:12:4d:7a:0b:f3:ee:ce:a5:f4: ea:c8:2f:2c:eb:dc:ee:83:37:86:c4:3a:6a:e9:63: 0e:39:bb:5e:01:b3:ff:10:b6:3e:42:e2:24:44:ba: 7b:76:e0:58:89:9f:f9:2f:5a:b8:9d:7e:a8:6a:a3: 7c:e2:be:c8:80:86:c8:32:81:a9:6c:c9:7a:ee:7b: 09:6c:1e:35:39:fe:d2:69:b4:43:a5:de:90:09:d3: be:26:f9:a8:6c:3c:cc:a4:76:bf:66:f0:33:bb:b7: 81:fe:81:1f:42:20:7f:e1:84:1c:f7:2a:42:ea:86: 81:64:59:26:3c:03:6a:75:1e:bf:72:c6:ef:fc:7b: 53:ff:2a:be:63:eb:bb:cf:f9:a2:c0:3b:6d:d7:bd: bf:ba:bf:2e:3b:f9:eb:7e:c8:3d:b0:4c:d6:d6:d3: a7:83:1b:85:5d:c7:d7:29:99:00:11:41:e6:7d:13: c6:84:07:bd:e8:fb:b5:5d:d9:d8:ca:17:86:eb:de: 3e:d2:65:a1:06:83:4f:5f:10:98:94:1b:8e:71:0c: 65:ab:ec:d7:78:03:50:8e:f6:5c:ae:f2:a0:77:03: 6f:3d:02:cc:54:17:c6:ef:f8:3e:a9:d4:bf:8b:54: 01:5e:de:0c:32:75:b2:72:ce:2a:b1:55:3a:f4:a3: 6c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:14:16:CA:13:FE:66:49:BB:C7:FE:F4:20:A2:A0:BA:4F:20:F6:FF X509v3 Authority Key Identifier: keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:fe:59:8b:ba:0e:cc:67:18:9d:5e:87:f7:86:f5:31:ee:c7: 3b:c7:18:f4:9c:0d:32:1e:64:e8:6f:2d:b4:77:3d:a7:49:f6: d3:f6:bd:0f:f8:3c:15:ae:dc:65:af:7e:95:3f:6c:c1:de:c6: 8d:6c:7c:51:bc:d6:9e:fb:fe:6b:04:fe:11:02:06:9e:61:cf: 47:31:f1:dd:71:bc:76:de:82:3a:9e:a3:3a:45:c1:a0:05:96: c0:99:b9:ed:e1:7a:dc:b0:f4:aa:7b:27:8f:c7:a4:1b:ba:1e: 49:3c:5b:13:4f:e0:e6:e9:44:53:63:d6:5b:38:8b:5d:69:9b: f2:aa:50:90:b2:48:fb:cd:a1:1e:ca:aa:73:6e:f2:a6:d0:2e: f7:bf:d8:0e:7a:65:a0:fe:ed:54:31:c5:9d:44:9c:ae:58:27: d2:f5:56:f9:fa:cb:d5:28:98:f6:22:3b:a7:b7:1e:37:16:21: c0:84:c2:87:cc:c8:54:8b:09:37:91:d0:d2:dd:2c:34:0f:6a: 08:d1:4d:22:05:77:ef:21:04:ab:da:bd:6a:f2:df:20:f2:f6: 7e:1f:ed:56:1e:bb:0a:99:4b:e3:28:3d:5f:27:d3:b6:77:5e: cd:67:86:64:eb:48:fd:0b:57:0c:83:a7:a3:c0:c4:01:6e:08: 04:51:91:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6xXyZtbp4yWHAfqRjB/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZmY3MWYyYjFhOGQ2MmFmNDQ2YTkyYmEyYmRlYTMzZjli NjlkZGMwHhcNMjYwMjA5MTUwMDI4WhcNMjYwMjEwMTUwMDI4WjAzMTEwLwYDVQQD EyhlZjE0MTZjYTEzZmU2NjQ5YmJjN2ZlZjQyMGEyYTBiYTRmMjBmNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncKchFwSTXoL8+7OpfTqyC8s69zu gzeGxDpq6WMOObteAbP/ELY+QuIkRLp7duBYiZ/5L1q4nX6oaqN84r7IgIbIMoGp bMl67nsJbB41Of7SabRDpd6QCdO+JvmobDzMpHa/ZvAzu7eB/oEfQiB/4YQc9ypC 6oaBZFkmPANqdR6/csbv/HtT/yq+Y+u7z/miwDtt172/ur8uO/nrfsg9sEzW1tOn gxuFXcfXKZkAEUHmfRPGhAe96Pu1XdnYyheG694+0mWhBoNPXxCYlBuOcQxlq+zX eANQjvZcrvKgdwNvPQLMVBfG7/g+qdS/i1QBXt4MMnWycs4qsVU69KNsHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8UFsoT/mZJu8f+9CCioLpPIPb/MB8GA1UdIwQY MBaAFNj/cfKxqNYq9EapK6K96jP5tp3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmIt M2I3NWE1NjdmNzNhLzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmItM2I3NWE1NjdmNzNh LzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeP5Zi7oO zGcYnV6H94b1Me7HO8cY9JwNMh5k6G8ttHc9p0n20/a9D/g8Fa7cZa9+lT9swd7G jWx8UbzWnvv+awT+EQIGnmHPRzHx3XG8dt6COp6jOkXBoAWWwJm57eF63LD0qnsn j8ekG7oeSTxbE0/g5ulEU2PWWziLXWmb8qpQkLJI+82hHsqqc27yptAu97/YDnpl oP7tVDHFnUScrlgn0vVW+frL1SiY9iI7p7ceNxYhwITCh8zIVIsJN5HQ0t0sNA9q CNFNIgV37yEEq9q9avLfIPL2fh/tVh67CplL4yg9XyfTtndezWeGZOtI/QtXDIOn o8DEAW4IBFGRQA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:56 2026 by rpki-client