This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft File: 2URo88w_OG8m5igbf6iww7sjagY.mft (raw, json) Hash identifier: IhS0Lm+WtRPBtNUVAYj9HBwoLLX2lZGxtnlT/bQE0iA= Subject key identifier: 93:4E:51:CF:9E:D2:59:49:C8:3D:C3:77:F4:EE:2A:4B:CA:82:D5:2E Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Certificate serial: 019BF3F5017C14B97351EB866ECB2F46557D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft Manifest number: 020E Signing time: Sun 25 Jan 2026 07:01:18 +0000 Manifest this update: Sun 25 Jan 2026 07:01:18 +0000 Manifest next update: Mon 26 Jan 2026 07:01:18 +0000 Files and hashes: 1: 1-aksmhBlMep_IIdkdunb9VKOWr4.roa (hash: JbBTN/177xHpuFisCBpeMseyxj5dy7+ddb7ULq70+9c=) 2: 2URo88w_OG8m5igbf6iww7sjagY.crl (hash: csXXcfY52SuDtGDk9Fl/DfV7+PP0K9HkXDn1SVnnxQQ=) 3: 2W8UbuMzJ_4l0XXqp2MoqWfFXpo.roa (hash: IF9NGoEJ576DjGe0oh23BNnEV/9sdYpBnLiKAR1szr4=) 4: 9iYZwkxjUcEsFbxajgfKUAHpwqo.roa (hash: rOHD67cBggUdYXdaTP7eNFtk7CLJ5e+wg+hEmP7cS0A=) 5: GqB4ft9MdLfFT6O-79FvIfbX6mA.roa (hash: tl2PhT7Se6lXYjqeH5WhdtVk1xP0yZCmrUvC7sMF7bY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:01:7c:14:b9:73:51:eb:86:6e:cb:2f:46:55:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Validity Not Before: Jan 25 07:01:18 2026 GMT Not After : Jan 26 07:01:18 2026 GMT Subject: CN=934e51cf9ed25949c83dc377f4ee2a4bca82d52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:7a:f9:d5:8a:8f:81:4e:2d:ec:27:5f:d4: 47:76:7e:85:19:a5:b6:25:7e:9f:92:55:39:96:fd: d2:e5:00:6e:00:e2:ed:69:8f:4c:9c:14:f7:3e:a3: da:47:7d:1d:15:4f:69:15:09:fe:d4:63:fb:4a:67: 63:59:ba:3c:60:2f:17:d6:79:69:df:d4:8b:f5:c7: 0d:a8:fa:ad:6a:a6:6e:90:d1:9b:cb:a5:9b:e7:1b: 02:5e:53:8a:04:24:51:e6:67:a9:61:08:c1:88:1f: 63:bb:05:b6:c0:d5:06:0b:14:59:de:0c:42:c7:19: c3:fb:c7:b6:37:11:1a:b2:6a:73:5d:77:ea:83:fb: 9d:ef:ed:11:ca:1f:92:88:d3:c1:f1:be:e9:18:dc: e8:bc:46:25:9a:71:51:39:64:2f:7c:c9:4e:e3:fa: 8c:11:53:ac:2a:36:17:be:d8:91:c6:8f:ed:6c:05: e0:25:d9:8f:ad:71:2c:d8:37:dd:3d:bf:a2:c8:52: fa:62:05:3b:f2:4c:94:76:da:79:4e:04:e4:a5:d6: 82:e2:13:ca:25:d2:aa:eb:ff:38:04:28:37:7d:f3: 2b:33:da:af:e9:31:3f:1b:99:90:58:bf:d4:5e:9b: 10:72:8e:13:97:c9:37:87:b0:5c:63:6d:b9:22:11: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4E:51:CF:9E:D2:59:49:C8:3D:C3:77:F4:EE:2A:4B:CA:82:D5:2E X509v3 Authority Key Identifier: keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a7:58:00:fb:3f:c1:8d:a1:b1:45:a0:e3:0a:2a:89:fa:27: a1:6c:23:56:eb:af:7d:e3:50:45:18:6e:62:88:da:a3:03:6b: 30:a9:66:3b:e0:75:27:85:70:8b:e4:11:85:a8:87:62:83:86: 65:0f:a6:67:06:e1:ed:23:ce:17:f5:db:31:65:b4:9a:95:58: ff:b1:20:3e:4d:db:c3:23:ec:1c:76:2a:e3:1e:d2:5a:10:ce: 2b:52:86:ae:94:34:aa:c9:2a:f7:b1:33:43:42:5e:d0:77:bb: 53:eb:fc:3a:6d:2e:68:0c:af:21:7c:43:f1:45:ce:11:7f:0d: f5:9b:14:df:85:cf:90:38:1c:83:bf:4f:46:d6:e4:60:9e:2a: e3:e1:18:d5:79:55:cf:1c:da:4a:cc:5f:09:30:88:4d:8f:3e: 99:d2:e5:05:a3:ad:0c:bf:15:90:78:30:11:04:67:6e:a7:43: 61:23:ff:21:57:6f:b4:d5:96:be:a3:19:ae:a0:be:20:9d:3a: 5c:b6:49:9f:35:e6:ba:46:45:49:a9:a6:dd:f4:c8:dd:4a:98: 83:88:33:c5:3f:18:a1:2f:09:72:82:83:ad:e8:c5:aa:30:bf: cb:96:89:b2:0e:81:9e:a9:74:be:ba:1a:4d:b1:38:53:0f:df: d6:6e:d9:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9QF8FLlzUeuGbssvRlV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDQ2OGYzY2MzZjM4NmYyNmU2MjgxYjdmYThiMGMzYmIy MzZhMDYwHhcNMjYwMTI1MDcwMTE4WhcNMjYwMTI2MDcwMTE4WjAzMTEwLwYDVQQD Eyg5MzRlNTFjZjllZDI1OTQ5YzgzZGMzNzdmNGVlMmE0YmNhODJkNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb56+dWKj4FOLewnX9RHdn6FGaW2 JX6fklU5lv3S5QBuAOLtaY9MnBT3PqPaR30dFU9pFQn+1GP7SmdjWbo8YC8X1nlp 39SL9ccNqPqtaqZukNGby6Wb5xsCXlOKBCRR5mepYQjBiB9juwW2wNUGCxRZ3gxC xxnD+8e2NxEasmpzXXfqg/ud7+0Ryh+SiNPB8b7pGNzovEYlmnFROWQvfMlO4/qM EVOsKjYXvtiRxo/tbAXgJdmPrXEs2DfdPb+iyFL6YgU78kyUdtp5TgTkpdaC4hPK JdKq6/84BCg3ffMrM9qv6TE/G5mQWL/UXpsQco4Tl8k3h7BcY225IhGDlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNOUc+e0llJyD3Dd/TuKkvKgtUuMB8GA1UdIwQY MBaAFNlEaPPMPzhvJuYoG3+osMO7I2oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2Qt NzZmYTUxNWI0YjZlLzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2QtNzZmYTUxNWI0YjZl LzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqdYAPs/ wY2hsUWg4woqifonoWwjVuuvfeNQRRhuYojaowNrMKlmO+B1J4Vwi+QRhaiHYoOG ZQ+mZwbh7SPOF/XbMWW0mpVY/7EgPk3bwyPsHHYq4x7SWhDOK1KGrpQ0qskq97Ez Q0Je0He7U+v8Om0uaAyvIXxD8UXOEX8N9ZsU34XPkDgcg79PRtbkYJ4q4+EY1XlV zxzaSsxfCTCITY8+mdLlBaOtDL8VkHgwEQRnbqdDYSP/IVdvtNWWvqMZrqC+IJ06 XLZJnzXmukZFSamm3fTI3UqYg4gzxT8YoS8JcoKDrejFqjC/y5aJsg6Bnql0vroa TbE4Uw/f1m7ZZw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:42:53 2026 by rpki-client