This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft File: 2GeflcqbZWt8oiG-brJPleMosBA.mft (raw, json) Hash identifier: MBVu0AiTCeZP/2/lvs2/MdNhPcBEA10MBdFtuP7/JsE= Subject key identifier: 74:65:1E:B6:1B:E6:ED:F5:AD:A7:DC:E0:2F:D2:C7:5C:03:72:48:EA Authority key identifier: D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10 Certificate issuer: /CN=d8679f95ca9b656b7ca221be6eb24f95e328b010 Certificate serial: 019BF6BF639EA3E35C92C5BBFAD97688A15A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft Manifest number: 0E Signing time: Sun 25 Jan 2026 20:01:36 +0000 Manifest this update: Sun 25 Jan 2026 20:01:36 +0000 Manifest next update: Mon 26 Jan 2026 20:01:36 +0000 Files and hashes: 1: 2GeflcqbZWt8oiG-brJPleMosBA.crl (hash: 1E27PAGzFT1VficGtToAj9c2dCtxNaUQuFj8JQ5FTaU=) 2: P-cBT9GtfwAV2Rbt0kBltwGf42I.roa (hash: sRPFuUPV4/Yh7kICP3uHlk73kVCyDpzxlUWN6hEeTyw=) 3: cfrZnlPG5kV-B-LGvN_WIWHqS4w.roa (hash: PVHP4t1Ul4PgCzLB7W22P/P4WDxT70HX4ueJqp6VpmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:63:9e:a3:e3:5c:92:c5:bb:fa:d9:76:88:a1:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8679f95ca9b656b7ca221be6eb24f95e328b010 Validity Not Before: Jan 25 20:01:36 2026 GMT Not After : Jan 26 20:01:36 2026 GMT Subject: CN=74651eb61be6edf5ada7dce02fd2c75c037248ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:67:83:07:ad:a6:ad:df:5c:7e:69:d1:92:97: f8:f4:40:f0:a9:cd:11:5b:d7:71:81:ad:b6:ee:9b: 59:75:a8:18:bf:a3:33:63:96:fa:12:9e:8d:df:4e: 64:f5:43:18:e9:bf:0f:ef:81:3e:0d:61:95:a5:92: b2:88:5e:46:e3:38:d4:01:be:f6:94:c1:51:a2:c1: af:e6:59:c8:af:30:54:de:f2:c3:a0:68:c7:f3:bf: 2e:60:8e:fe:eb:99:a8:0c:0e:fb:16:d9:ea:b6:22: 2f:e7:1e:0e:3d:0a:80:73:52:fb:66:a6:73:4a:cc: bd:63:66:9e:c2:fa:02:b3:42:12:7e:7f:54:ca:6a: bd:13:67:81:6f:5d:9d:82:41:28:84:b0:f6:bf:f1: f8:51:2f:bd:9c:6a:19:a1:1a:a3:60:10:0b:18:82: 48:4b:c8:9f:bc:40:94:97:07:f5:eb:3f:be:b3:f3: 2b:d2:ef:87:30:6c:b7:2c:29:fb:ab:e0:f6:28:c2: 0f:d1:7d:60:6d:91:39:36:3d:11:89:d1:a4:c1:71: 5f:00:88:8c:2d:75:c5:60:67:26:c6:11:b7:48:ae: f4:50:51:ce:83:3b:af:a6:d9:8e:67:96:36:c7:34: bb:08:cf:cd:f6:74:11:20:68:bd:26:4d:f9:73:45: 45:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:65:1E:B6:1B:E6:ED:F5:AD:A7:DC:E0:2F:D2:C7:5C:03:72:48:EA X509v3 Authority Key Identifier: keyid:D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b8:d1:6d:31:1c:a3:9b:51:91:fc:eb:52:c1:49:01:f6:2a: f9:2a:92:41:50:41:be:ac:7a:29:c7:f5:00:c4:35:33:6d:74: 03:26:d2:0f:da:00:3c:bb:f4:c9:8b:2b:19:67:fd:6c:6c:77: 12:ed:06:cd:3b:ca:4e:83:77:c9:39:02:97:87:fb:55:ef:97: 3c:c3:59:9c:7d:b7:53:28:d3:1d:77:5e:84:ea:91:a6:56:73: 52:32:64:ab:bd:ae:a5:0f:5f:e6:3e:e6:7c:a7:e1:1f:71:21: 84:b6:29:04:02:e3:fe:57:ff:9b:71:0a:0e:8e:26:ef:d8:9b: 3c:f8:db:64:21:fc:74:96:16:de:e0:c4:b9:51:b9:c2:4a:65: 55:7f:bc:69:c6:de:9b:38:2d:32:d8:17:50:7e:52:55:a3:40: 98:f9:ab:bd:0d:11:d5:1a:07:64:01:c7:e6:e4:a7:db:f3:dd: c8:35:26:40:d9:1c:25:a8:21:f8:de:cf:51:ea:8c:ff:f7:bc: 3f:73:97:85:11:45:5b:44:79:fc:80:55:cf:6a:82:ce:81:12: d4:8a:81:8e:0e:c0:d4:3c:75:f5:61:79:50:ce:64:05:69:13: b9:bd:9c:3d:81:16:7a:5a:11:7a:02:3f:c2:e7:e2:16:ec:2c: 62:97:e1:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v2Oeo+NcksW7+tl2iKFaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4Njc5Zjk1Y2E5YjY1NmI3Y2EyMjFiZTZlYjI0Zjk1ZTMy OGIwMTAwHhcNMjYwMTI1MjAwMTM2WhcNMjYwMTI2MjAwMTM2WjAzMTEwLwYDVQQD Eyg3NDY1MWViNjFiZTZlZGY1YWRhN2RjZTAyZmQyYzc1YzAzNzI0OGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmeDB62mrd9cfmnRkpf49EDwqc0R W9dxga227ptZdagYv6MzY5b6Ep6N305k9UMY6b8P74E+DWGVpZKyiF5G4zjUAb72 lMFRosGv5lnIrzBU3vLDoGjH878uYI7+65moDA77FtnqtiIv5x4OPQqAc1L7ZqZz Ssy9Y2aewvoCs0ISfn9Uymq9E2eBb12dgkEohLD2v/H4US+9nGoZoRqjYBALGIJI S8ifvECUlwf16z++s/Mr0u+HMGy3LCn7q+D2KMIP0X1gbZE5Nj0RidGkwXFfAIiM LXXFYGcmxhG3SK70UFHOgzuvptmOZ5Y2xzS7CM/N9nQRIGi9Jk35c0VFCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRlHrYb5u31rafc4C/Sx1wDckjqMB8GA1UdIwQY MBaAFNhnn5XKm2VrfKIhvm6yT5XjKLAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkdlZmxjcWJaV3Q4b2lHLWJySlBsZU1vc0JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzct ZTUyMjlhZDUyMTRlLzEvMkdlZmxjcWJaV3Q4b2lHLWJySlBsZU1vc0JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzctZTUyMjlhZDUyMTRl LzEvMkdlZmxjcWJaV3Q4b2lHLWJySlBsZU1vc0JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrjRbTEc o5tRkfzrUsFJAfYq+SqSQVBBvqx6Kcf1AMQ1M210AybSD9oAPLv0yYsrGWf9bGx3 Eu0GzTvKToN3yTkCl4f7Ve+XPMNZnH23UyjTHXdehOqRplZzUjJkq72upQ9f5j7m fKfhH3EhhLYpBALj/lf/m3EKDo4m79ibPPjbZCH8dJYW3uDEuVG5wkplVX+8acbe mzgtMtgXUH5SVaNAmPmrvQ0R1RoHZAHH5uSn2/PdyDUmQNkcJagh+N7PUeqM//e8 P3OXhRFFW0R5/IBVz2qCzoES1IqBjg7A1Dx19WF5UM5kBWkTub2cPYEWeloRegI/ wufiFuwsYpfhOQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:36 2026 by rpki-client