This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json) Hash identifier: uIen/cg/yLa0wuaudJ9kfXNMeuvUS9tZUygN6UQY2Hk= Subject key identifier: CF:CE:22:7D:71:95:B2:B7:E5:91:32:B8:07:A2:DC:17:69:01:E6:06 Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b Certificate serial: 019BF2749C568610A1BF758F7841CE879D18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft Manifest number: 0A35 Signing time: Sun 25 Jan 2026 00:01:27 +0000 Manifest this update: Sun 25 Jan 2026 00:01:27 +0000 Manifest next update: Mon 26 Jan 2026 00:01:27 +0000 Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: TkMepcbV774PTQXP081mG+cwBFlmr8OBma5uwmWjFoM=) 2: d2St0IuqAQY3CJ7fhkugSTKW_7g.roa (hash: Dy+8wfeJNHpJN4BkHVBW1ZF1+KeLsec0xtu4JQ1x7+g=) 3: ilVq-nmREmsF_IogBLSMFfK48ko.roa (hash: cbgnf31haY9YqLo/bu+j3+xEzS5pgdYiJl6FAmr/CjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:9c:56:86:10:a1:bf:75:8f:78:41:ce:87:9d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b Validity Not Before: Jan 25 00:01:27 2026 GMT Not After : Jan 26 00:01:27 2026 GMT Subject: CN=cfce227d7195b2b7e59132b807a2dc176901e606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:0d:c0:da:5b:d3:f7:fe:22:67:46:4d:99: b0:d9:49:55:43:4b:76:0c:a4:10:46:8f:de:08:11: c8:80:4c:b8:3a:19:b0:b0:d6:4f:e3:bd:4f:4d:10: af:5a:c4:30:2d:1c:9a:8e:fd:df:df:52:d7:3f:d4: c2:2d:27:6a:a2:ca:99:bb:48:ee:0f:04:88:c2:35: b5:c2:f9:86:69:9c:71:b3:f0:03:cc:98:c5:c4:01: a9:bf:7c:17:5c:33:fb:68:32:2f:46:db:f8:a1:42: e7:ce:41:f6:73:b0:0f:c2:a6:f4:c9:03:7a:ae:2b: 23:2a:58:a1:1e:79:ee:3b:9e:74:77:79:8c:e1:44: 2d:0b:6e:2c:07:ed:51:43:f6:59:8f:ae:1e:8c:11: 4c:ad:48:59:15:88:34:25:4d:fd:87:a1:41:70:33: 75:78:e1:73:b9:53:2b:08:ff:a6:67:77:18:70:21: d3:33:24:59:8d:55:44:78:ac:00:ed:eb:63:69:b0: 10:55:41:32:7e:15:36:25:11:f5:f9:40:a4:71:56: 8c:51:6b:56:5a:1d:a1:a5:97:eb:52:69:55:0d:15: 08:ec:11:90:26:89:21:73:dc:c3:0e:a4:18:f1:1b: b0:86:3f:03:f8:b0:55:e3:5a:7e:66:c2:e8:1e:0e: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CE:22:7D:71:95:B2:B7:E5:91:32:B8:07:A2:DC:17:69:01:E6:06 X509v3 Authority Key Identifier: keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3c:43:a1:e7:6c:0c:7b:99:15:e4:78:6e:42:ae:1e:31:d4: 88:11:b0:3e:fc:0f:d6:ae:11:c7:f0:c4:93:48:50:3e:b6:29: 6c:cf:37:4a:e7:89:02:3f:98:a8:e9:b8:f8:d7:38:0e:af:42: 4f:57:50:52:fd:a3:03:65:cf:44:77:d7:e5:d9:65:0f:3f:65: 0c:2d:07:0a:50:24:4b:c8:97:7f:b2:09:33:0a:0f:2a:98:ff: bd:4b:9a:e9:28:ef:88:51:82:72:a5:7f:a1:79:63:43:8b:22: 20:27:9a:93:85:cd:85:e6:24:f5:23:a2:ce:98:f9:0c:13:13: ac:ca:98:ed:95:29:75:16:58:fe:64:03:29:91:95:5e:59:d7: 77:ff:57:66:c0:3f:35:d4:04:22:bb:2f:cf:92:de:c3:ac:4f: 35:3b:7a:e7:29:d7:b9:6e:96:07:87:45:3a:b9:8f:fa:78:ac: ab:ff:8a:e8:8e:fa:ab:88:38:30:b5:6d:77:66:02:c0:a6:c7: 64:23:e2:2f:4a:d1:5d:56:73:da:9e:fd:45:05:cf:55:81:63: 46:7c:9d:66:65:70:81:24:b2:ac:c1:35:ea:bc:7a:44:3c:30: ad:a4:59:15:cf:42:e3:cf:7c:02:72:45:08:c6:e3:2f:6f:51: 82:03:0c:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydJxWhhChv3WPeEHOh50YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZjIwMGUyZDM4NjgzYTdjYjFjZTVjYWJiZWUzNGMwNjg4 MzRhMGIwHhcNMjYwMTI1MDAwMTI3WhcNMjYwMTI2MDAwMTI3WjAzMTEwLwYDVQQD EyhjZmNlMjI3ZDcxOTViMmI3ZTU5MTMyYjgwN2EyZGMxNzY5MDFlNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkwNwNpb0/f+ImdGTZmw2UlVQ0t2 DKQQRo/eCBHIgEy4OhmwsNZP471PTRCvWsQwLRyajv3f31LXP9TCLSdqosqZu0ju DwSIwjW1wvmGaZxxs/ADzJjFxAGpv3wXXDP7aDIvRtv4oULnzkH2c7APwqb0yQN6 risjKlihHnnuO550d3mM4UQtC24sB+1RQ/ZZj64ejBFMrUhZFYg0JU39h6FBcDN1 eOFzuVMrCP+mZ3cYcCHTMyRZjVVEeKwA7etjabAQVUEyfhU2JRH1+UCkcVaMUWtW Wh2hpZfrUmlVDRUI7BGQJokhc9zDDqQY8Ruwhj8D+LBV41p+ZsLoHg6HdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/OIn1xlbK35ZEyuAei3BdpAeYGMB8GA1UdIwQY MBaAFNnyAOLThoOnyxzlyrvuNMBog0oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEt MDljOGZlNzI0Y2Q3LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEtMDljOGZlNzI0Y2Q3 LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTxDoeds DHuZFeR4bkKuHjHUiBGwPvwP1q4Rx/DEk0hQPrYpbM83SueJAj+YqOm4+Nc4Dq9C T1dQUv2jA2XPRHfX5dllDz9lDC0HClAkS8iXf7IJMwoPKpj/vUua6SjviFGCcqV/ oXljQ4siICeak4XNheYk9SOizpj5DBMTrMqY7ZUpdRZY/mQDKZGVXlnXd/9XZsA/ NdQEIrsvz5Lew6xPNTt65ynXuW6WB4dFOrmP+nisq/+K6I76q4g4MLVtd2YCwKbH ZCPiL0rRXVZz2p79RQXPVYFjRnydZmVwgSSyrME16rx6RDwwraRZFc9C4898AnJF CMbjL29RggMMtA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:09:45 2026 by rpki-client