This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json) Hash identifier: LJaQFcZvjoyVCkNPoZUH/xkpBjTNu5jbxrOkuGeisEY= Subject key identifier: CC:52:32:2E:07:35:ED:A9:E1:7E:40:75:3D:30:65:41:9A:D2:73:95 Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d Certificate serial: 019BF6BF0705D986F1E587EF30E11426F2CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft Manifest number: 0286 Signing time: Sun 25 Jan 2026 20:01:12 +0000 Manifest this update: Sun 25 Jan 2026 20:01:12 +0000 Manifest next update: Mon 26 Jan 2026 20:01:12 +0000 Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: horbx8hGeUxPdUDYpQraVUy/ThY/QI8UlxUalgD/DuQ=) 2: Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa (hash: 9jt19Pmi5Pq9O2NgyYR6RNuRjtmVOOQv0b/3LhJW/n8=) 3: R5Ny2GNWyvWN4eVgxscGnQpmsec.roa (hash: yuz8CGjGv+WQ63pJgwYXIvJqRS9943OTx1hb3hcTZKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:07:05:d9:86:f1:e5:87:ef:30:e1:14:26:f2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d Validity Not Before: Jan 25 20:01:12 2026 GMT Not After : Jan 26 20:01:12 2026 GMT Subject: CN=cc52322e0735eda9e17e40753d3065419ad27395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:a2:50:ac:85:ec:7b:78:01:e3:a1:84:4e: 23:f1:21:6c:c6:a0:0b:81:ce:44:c1:52:72:fa:15: 3b:19:97:01:90:e4:a8:d7:c0:4f:f1:6c:89:8a:c1: 13:12:e6:1d:f8:09:64:1f:be:6c:cb:6f:8d:41:e5: 0d:19:a1:a1:49:1c:07:94:3c:f5:97:0d:fa:98:19: 06:d8:a0:6c:c6:e1:7c:dc:96:82:0b:d4:d9:56:45: 20:cc:0e:db:f5:ef:c7:40:c6:d6:43:4b:a4:4b:d1: 6b:4e:41:50:e9:87:ad:b9:f5:6c:b0:ba:3d:cf:77: db:04:ca:e4:13:a7:83:bf:41:5d:f0:02:2f:d0:70: de:d9:62:9f:48:5b:90:5c:56:64:3b:3d:27:d2:bc: ed:12:68:9e:78:8f:0e:d8:90:5b:38:0f:08:62:a3: ce:37:34:6d:83:a1:0d:02:a8:cf:1c:af:ca:c9:c2: 3e:d1:7e:db:97:04:6f:f2:6a:7e:61:87:f6:c3:86: a7:e5:dd:d2:ce:6b:75:77:0d:c0:d4:5c:94:63:72: 8c:33:74:2c:cc:fc:2a:5f:f3:1b:23:da:31:f2:1d: 66:fe:f2:31:50:fa:63:1e:37:b9:e7:23:5e:89:2c: eb:c1:59:c8:0e:c1:0a:b9:6f:be:5c:e9:c4:57:62: 0b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:52:32:2E:07:35:ED:A9:E1:7E:40:75:3D:30:65:41:9A:D2:73:95 X509v3 Authority Key Identifier: keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:4c:1b:12:dc:eb:b2:43:45:9f:05:ac:1f:b7:35:50:f6:fb: 71:52:bb:5c:d3:a8:e0:92:e4:6b:6e:36:81:3d:68:1d:27:37: 15:ce:f8:60:b2:30:3f:cb:70:b3:f7:7f:8a:b1:f4:2f:82:d5: 50:12:34:bb:e7:1e:f1:d4:74:1c:1f:b5:8f:cf:67:34:1d:95: a6:5f:8c:92:b3:98:a9:14:33:f9:8d:40:9e:1c:a2:be:ec:24: 9d:80:80:cb:1a:ba:87:19:7c:c5:0d:2a:2b:8c:32:27:61:a7: b9:bf:2e:1a:1b:3e:63:03:65:bf:42:1a:73:c7:57:85:47:a1: 74:47:5f:5e:2d:44:00:f8:8f:1f:10:3d:d2:8e:70:80:f3:58: 65:37:dd:d5:2b:c0:25:01:c2:cb:45:cd:b6:69:69:b5:90:2c: bf:99:69:7f:88:ef:f6:db:7c:dc:51:56:98:ea:69:dc:e3:33: b4:46:d4:be:2c:94:3f:3b:94:7a:15:ba:b7:6b:4d:13:6c:9b: ef:ec:ba:d8:49:2f:25:1b:a0:0c:c6:47:1b:de:39:aa:94:e6: 78:c2:af:5d:dd:da:60:39:7a:41:f2:a1:92:76:1e:bf:d1:5c: 72:02:82:e8:cc:54:6a:ef:69:43:aa:4f:e6:a8:f9:c7:21:d4: 67:9a:5e:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vwcF2Ybx5YfvMOEUJvLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMGE5ZTcxYWQ1ZDU2NDIzM2E5NDRkMWY0Nzk4NTE4ZDE4 MzFmN2QwHhcNMjYwMTI1MjAwMTEyWhcNMjYwMTI2MjAwMTEyWjAzMTEwLwYDVQQD EyhjYzUyMzIyZTA3MzVlZGE5ZTE3ZTQwNzUzZDMwNjU0MTlhZDI3Mzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQWiUKyF7Ht4AeOhhE4j8SFsxqAL gc5EwVJy+hU7GZcBkOSo18BP8WyJisETEuYd+AlkH75sy2+NQeUNGaGhSRwHlDz1 lw36mBkG2KBsxuF83JaCC9TZVkUgzA7b9e/HQMbWQ0ukS9FrTkFQ6YetufVssLo9 z3fbBMrkE6eDv0Fd8AIv0HDe2WKfSFuQXFZkOz0n0rztEmieeI8O2JBbOA8IYqPO NzRtg6ENAqjPHK/KycI+0X7blwRv8mp+YYf2w4an5d3Szmt1dw3A1FyUY3KMM3Qs zPwqX/MbI9ox8h1m/vIxUPpjHje55yNeiSzrwVnIDsEKuW++XOnEV2ILmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxSMi4HNe2p4X5AdT0wZUGa0nOVMB8GA1UdIwQY MBaAFNoKnnGtXVZCM6lE0fR5hRjRgx99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWIt YTM3YjNmMzIxNzAzLzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWItYTM3YjNmMzIxNzAz LzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUwbEtzr skNFnwWsH7c1UPb7cVK7XNOo4JLka242gT1oHSc3Fc74YLIwP8tws/d/irH0L4LV UBI0u+ce8dR0HB+1j89nNB2Vpl+MkrOYqRQz+Y1AnhyivuwknYCAyxq6hxl8xQ0q K4wyJ2Gnub8uGhs+YwNlv0Iac8dXhUehdEdfXi1EAPiPHxA90o5wgPNYZTfd1SvA JQHCy0XNtmlptZAsv5lpf4jv9tt83FFWmOpp3OMztEbUviyUPzuUehW6t2tNE2yb 7+y62EkvJRugDMZHG945qpTmeMKvXd3aYDl6QfKhknYev9FccgKC6MxUau9pQ6pP 5qj5xyHUZ5pejw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:58 2026 by rpki-client