This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft File: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json) Hash identifier: mXdbIbeBfmQeKRIkuZcLm3sbi0ONBggqVy7ZplROAqw= Subject key identifier: 1D:48:2C:4E:1F:F5:2A:0C:21:3B:96:0C:2A:FB:0C:AB:6D:FD:CE:53 Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09 Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09 Certificate serial: 019BF9523B0DFD1911DFAADB04BE8496F6CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 08:01:14 +0000 Manifest this update: Mon 26 Jan 2026 08:01:14 +0000 Manifest next update: Tue 27 Jan 2026 08:01:14 +0000 Files and hashes: 1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: nkGNy1pDvjR2xzEaw/hqaH5sk7IiIk9WTUQtklRBeJc=) 2: ffYBPHr80VYEZ9nh35N1GnYUaq0.roa (hash: eJAJO7UVqMGX5rHA6v1I/gJpbdqT70QsYP5GPkz+BRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:3b:0d:fd:19:11:df:aa:db:04:be:84:96:f6:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09 Validity Not Before: Jan 26 08:01:14 2026 GMT Not After : Jan 27 08:01:14 2026 GMT Subject: CN=1d482c4e1ff52a0c213b960c2afb0cab6dfdce53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d8:e8:a5:7b:ef:83:bb:89:77:da:ea:c9:e3: bb:31:28:2a:5f:15:43:e5:36:14:c3:c6:0d:b3:24: 8d:94:50:8a:9b:83:5f:e0:f5:62:9c:12:d7:93:0e: 76:04:62:26:e4:22:b8:53:0f:63:7e:9b:c0:a8:ec: 99:cc:37:ec:6c:ce:b6:58:e1:6a:a3:fd:7a:26:17: 55:30:d3:fe:d2:8c:78:4b:f3:27:50:5a:40:9f:bb: a0:87:e6:67:c3:c9:66:9d:71:47:99:3d:fc:84:d2: 24:75:94:55:94:9f:c4:f3:33:18:ce:77:59:25:29: be:e4:11:d0:4c:58:22:a9:60:c3:60:2f:6c:e0:4b: eb:e2:26:2d:98:75:5a:f4:ec:e0:14:1c:af:be:56: 4b:11:a3:90:f6:c4:b8:c1:f6:cc:6f:15:a2:6d:78: 19:f5:08:47:68:4a:6d:cb:fe:97:9b:68:1b:f9:1e: 4b:4e:44:a0:77:b2:7b:00:49:4b:f8:e1:45:ac:1b: 7e:4e:12:01:73:dc:ff:36:07:7f:96:0d:a4:5d:90: 08:f3:e1:a5:4e:e2:e6:bd:a5:c9:a9:07:6f:20:9a: 7a:a8:93:59:ca:4e:7f:61:7c:4c:78:d2:9e:89:e6: 59:62:b5:1d:b3:a3:2f:6f:75:92:97:b2:18:64:6a: 31:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:48:2C:4E:1F:F5:2A:0C:21:3B:96:0C:2A:FB:0C:AB:6D:FD:CE:53 X509v3 Authority Key Identifier: keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e5:50:90:6d:22:c4:64:e4:77:9e:30:4f:74:7f:cd:49:7f: 0e:81:d0:89:f7:c5:d5:27:35:92:37:38:dc:16:54:e8:b5:c4: d4:5e:a1:31:a1:2b:43:d3:38:3c:2b:96:c7:1e:0d:7a:e1:6c: b4:b6:88:7d:9b:e5:29:42:37:aa:9b:e1:5e:56:20:73:90:31: fd:97:5b:22:97:a0:6b:d5:50:9e:b2:18:68:f6:d6:cb:b1:18: 44:30:26:a0:9a:96:70:4b:9c:24:38:57:77:fb:e9:35:c7:d2: dc:89:a6:f2:ef:79:75:e4:bf:d4:cd:bc:9a:4d:61:47:c6:78: 21:03:68:ba:ab:d2:54:2b:37:8d:da:2b:27:47:82:04:30:ce: 4a:9f:f9:45:25:01:1b:77:c7:45:be:55:aa:82:e0:c4:3b:d3: 13:69:15:1e:6b:b4:6f:2f:13:7a:a8:70:05:0f:0f:89:7c:3d: 81:28:49:28:2a:27:7b:0e:77:93:1d:5f:48:f8:ff:ad:51:d0: 15:f7:43:ab:3c:c1:25:87:3d:92:fe:4b:6d:97:5d:f3:7e:a2: 81:de:b3:cf:43:53:37:29:16:2c:e5:dd:09:e9:ea:cc:ea:b6: b5:97:66:71:58:d4:f1:fb:be:14:c9:cc:69:d1:5b:31:52:1a: ef:48:34:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UjsN/RkR36rbBL6ElvbNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MGQyNjgxNTE0YWVmZWU5ZDNjODZlMWVhZTM1NzM2Yzg0 ZDFjMDkwHhcNMjYwMTI2MDgwMTE0WhcNMjYwMTI3MDgwMTE0WjAzMTEwLwYDVQQD EygxZDQ4MmM0ZTFmZjUyYTBjMjEzYjk2MGMyYWZiMGNhYjZkZmRjZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNjopXvvg7uJd9rqyeO7MSgqXxVD 5TYUw8YNsySNlFCKm4Nf4PVinBLXkw52BGIm5CK4Uw9jfpvAqOyZzDfsbM62WOFq o/16JhdVMNP+0ox4S/MnUFpAn7ugh+Znw8lmnXFHmT38hNIkdZRVlJ/E8zMYzndZ JSm+5BHQTFgiqWDDYC9s4Evr4iYtmHVa9OzgFByvvlZLEaOQ9sS4wfbMbxWibXgZ 9QhHaEpty/6Xm2gb+R5LTkSgd7J7AElL+OFFrBt+ThIBc9z/Ngd/lg2kXZAI8+Gl TuLmvaXJqQdvIJp6qJNZyk5/YXxMeNKeieZZYrUds6Mvb3WSl7IYZGoxKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1ILE4f9SoMITuWDCr7DKtt/c5TMB8GA1UdIwQY MBaAFNkNJoFRSu/unTyG4erjVzbITRwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlEwbWdWRks3LTZkUEliaDZ1TlhOc2hOSEFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lMGQ5NTYtN2I4Ny00ZWRkLWI5NDQt MWQwZjI5YjRiOTdmLzEvMlEwbWdWRks3LTZkUEliaDZ1TlhOc2hOSEFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9lMGQ5NTYtN2I4Ny00ZWRkLWI5NDQtMWQwZjI5YjRiOTdm LzEvMlEwbWdWRks3LTZkUEliaDZ1TlhOc2hOSEFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeVQkG0i xGTkd54wT3R/zUl/DoHQiffF1Sc1kjc43BZU6LXE1F6hMaErQ9M4PCuWxx4NeuFs tLaIfZvlKUI3qpvhXlYgc5Ax/ZdbIpega9VQnrIYaPbWy7EYRDAmoJqWcEucJDhX d/vpNcfS3Imm8u95deS/1M28mk1hR8Z4IQNouqvSVCs3jdorJ0eCBDDOSp/5RSUB G3fHRb5VqoLgxDvTE2kVHmu0by8TeqhwBQ8PiXw9gShJKConew53kx1fSPj/rVHQ FfdDqzzBJYc9kv5LbZdd836igd6zz0NTNykWLOXdCenqzOq2tZdmcVjU8fu+FMnM adFbMVIa70g05g== -----END CERTIFICATE-----Generated at Mon Jan 26 13:08:47 2026 by rpki-client