This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json) Hash identifier: OBatigApwkLb7PeCiPPUn6TajkEH80JAgjPCsEVI+Ns= Subject key identifier: 62:8A:69:F4:D0:2C:95:53:9B:AF:59:22:FF:CB:2F:64:83:C3:32:3E Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70 Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370 Certificate serial: 019BF6F565D74DDD47E7165578BE6E1D3A24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft Manifest number: 0508 Signing time: Sun 25 Jan 2026 21:00:36 +0000 Manifest this update: Sun 25 Jan 2026 21:00:36 +0000 Manifest next update: Mon 26 Jan 2026 21:00:36 +0000 Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: cNmd3NCvgjrC1z9BkI+r/jP7Wvo63qCsnuNFFtK4p0w=) 2: W5h40v2bXEhJayS-SrtWJ-dPHXw.roa (hash: LQ5DbqMUDr5m+PTN5GWPQfen5hG3kMiMA8hJXE+cg/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:65:d7:4d:dd:47:e7:16:55:78:be:6e:1d:3a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370 Validity Not Before: Jan 25 21:00:36 2026 GMT Not After : Jan 26 21:00:36 2026 GMT Subject: CN=628a69f4d02c95539baf5922ffcb2f6483c3323e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:37:c9:e4:78:8b:25:5c:c8:6f:1b:5e:75: 75:54:19:71:82:11:bf:56:a2:95:dd:b8:6d:1b:19: 20:81:c8:f5:ae:cc:58:4c:bc:56:03:15:70:98:2e: 3a:01:c3:c0:09:a0:8d:35:6b:98:d6:06:80:06:a2: 62:1f:4c:5a:ea:64:32:1d:0a:05:0d:d7:cb:ac:7c: a3:cd:78:63:af:93:e7:9d:b8:77:79:df:0a:52:d7: 6f:58:dc:1e:78:47:7e:5d:be:55:1b:b8:98:14:1a: ed:e5:16:31:88:5f:93:d5:db:ea:5a:1f:39:6b:8c: c3:b2:46:d5:95:01:55:f0:02:63:14:18:11:b4:d1: e8:60:41:1e:52:3c:9d:5a:da:59:09:e2:fa:d6:7a: 22:7d:34:be:cf:b3:84:de:0e:5e:e3:09:2f:6c:66: f5:2c:91:7f:58:45:fa:28:07:25:a5:46:c8:cb:94: c2:d2:73:f0:f9:1b:79:f2:bc:a3:3b:2a:af:21:cd: b2:03:2d:4d:29:6a:e8:e4:c3:03:6b:22:b7:53:31: 4a:7b:25:b1:95:50:86:23:07:e5:c0:3d:93:33:01: 91:a4:4c:05:66:73:2c:c2:26:9d:5a:af:aa:9c:75: 98:fb:59:4e:6f:80:dd:5f:37:e0:89:6e:51:2c:98: 71:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8A:69:F4:D0:2C:95:53:9B:AF:59:22:FF:CB:2F:64:83:C3:32:3E X509v3 Authority Key Identifier: keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:d2:6e:3a:a6:d2:a6:8e:5c:ad:dd:93:6e:c2:6b:34:5d:31: 4a:91:03:8b:60:0a:18:40:65:4d:dc:1b:58:6b:ed:4d:08:79: 7b:ea:b4:8e:26:a3:1c:3b:bf:d7:89:c8:fa:a1:8e:64:36:de: 48:b8:c5:8f:53:a1:15:b4:2e:b3:0b:0d:e0:6f:9a:54:78:20: 37:fc:8c:43:70:61:2b:83:16:32:1c:9f:6d:08:d3:33:fe:86: e9:5f:94:cb:03:a2:16:11:3b:76:ec:36:46:fa:2c:37:21:a5: b8:93:66:b4:5f:85:95:ea:9c:34:b1:76:81:f6:a3:02:70:dc: 0e:cf:22:6f:b7:b4:d5:e4:3e:b9:5f:c9:44:04:a0:0e:88:7c: 7c:41:e9:bf:a0:ac:3c:3b:3b:95:b1:b8:09:95:9f:2e:75:23: 3e:b6:0c:c0:80:2a:87:bb:3b:44:26:b7:15:2d:54:27:04:f4: 50:e6:e8:9d:3a:4d:d6:94:52:1e:69:02:b3:98:f0:17:f4:5c: 6e:90:43:ad:1b:b2:42:3a:0e:69:de:c5:cf:7c:d6:32:c6:ed: f7:ad:f3:c6:75:ae:06:07:95:97:87:26:81:50:67:14:0a:06: cb:24:e9:92:f2:ea:08:07:25:38:51:3a:49:f7:84:08:73:00: 79:5c:46:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29WXXTd1H5xZVeL5uHTokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYTEyZWQ2M2E0ODRjMDNkNGMzYzI3MWNiMmVmZjA1NTNl MTIzNzAwHhcNMjYwMTI1MjEwMDM2WhcNMjYwMTI2MjEwMDM2WjAzMTEwLwYDVQQD Eyg2MjhhNjlmNGQwMmM5NTUzOWJhZjU5MjJmZmNiMmY2NDgzYzMzMjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnag3yeR4iyVcyG8bXnV1VBlxghG/ VqKV3bhtGxkggcj1rsxYTLxWAxVwmC46AcPACaCNNWuY1gaABqJiH0xa6mQyHQoF DdfLrHyjzXhjr5Pnnbh3ed8KUtdvWNweeEd+Xb5VG7iYFBrt5RYxiF+T1dvqWh85 a4zDskbVlQFV8AJjFBgRtNHoYEEeUjydWtpZCeL61noifTS+z7OE3g5e4wkvbGb1 LJF/WEX6KAclpUbIy5TC0nPw+Rt58ryjOyqvIc2yAy1NKWro5MMDayK3UzFKeyWx lVCGIwflwD2TMwGRpEwFZnMswiadWq+qnHWY+1lOb4DdXzfgiW5RLJhxHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKKafTQLJVTm69ZIv/LL2SDwzI+MB8GA1UdIwQY MBaAFNqhLtY6SEwD1MPCccsu/wVT4SNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kYTM3NGYtZDY5NC00NWUyLTk0ZTIt OTFhMDAzNGE5ODllLzEvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9kYTM3NGYtZDY5NC00NWUyLTk0ZTItOTFhMDAzNGE5ODll LzEvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdJuOqbS po5crd2TbsJrNF0xSpEDi2AKGEBlTdwbWGvtTQh5e+q0jiajHDu/14nI+qGOZDbe SLjFj1OhFbQuswsN4G+aVHggN/yMQ3BhK4MWMhyfbQjTM/6G6V+UywOiFhE7duw2 RvosNyGluJNmtF+FleqcNLF2gfajAnDcDs8ib7e01eQ+uV/JRASgDoh8fEHpv6Cs PDs7lbG4CZWfLnUjPrYMwIAqh7s7RCa3FS1UJwT0UObonTpN1pRSHmkCs5jwF/Rc bpBDrRuyQjoOad7Fz3zWMsbt963zxnWuBgeVl4cmgVBnFAoGyyTpkvLqCAclOFE6 SfeECHMAeVxGIg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:17 2026 by rpki-client