This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft File: 2IUFXXA5jPDHLM6sXlga1A8gPvw.mft (raw, json) Hash identifier: Lo7xagVKstz6wdzyZUG22fpembhLJPlRCBczKyi4kUY= Subject key identifier: 25:A3:76:D8:43:D9:38:F2:65:1B:16:F4:49:3D:5D:19:31:14:21:E2 Authority key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC Certificate issuer: /CN=d885055d70398cf0c72cceac5e581ad40f203efc Certificate serial: 019BB328748232158401814C1A810908DCEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft Manifest number: 0F8F Signing time: Mon 12 Jan 2026 17:02:11 +0000 Manifest this update: Mon 12 Jan 2026 17:02:11 +0000 Manifest next update: Tue 13 Jan 2026 17:02:11 +0000 Files and hashes: 1: 2IUFXXA5jPDHLM6sXlga1A8gPvw.crl (hash: JfRrGL+K4kAjsjWodf7xHuuyhDeR7e6adUWqjSkrr7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:28:74:82:32:15:84:01:81:4c:1a:81:09:08:dc:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d885055d70398cf0c72cceac5e581ad40f203efc Validity Not Before: Jan 12 17:02:11 2026 GMT Not After : Jan 13 17:02:11 2026 GMT Subject: CN=25a376d843d938f2651b16f4493d5d19311421e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f6:86:c3:74:a8:02:ea:ea:f9:e8:8b:33:5d: ab:db:48:de:2b:a6:e2:4a:39:0e:2a:bd:ba:ce:47: 5c:9e:52:3a:f7:2e:24:ad:96:0e:d8:1f:f2:30:23: fe:9b:62:e6:cb:de:b5:de:44:af:c9:8c:72:da:52: b8:12:2f:e8:ce:bf:40:0c:00:b0:89:fc:3d:e9:dc: b2:f1:2a:f6:13:01:c2:d6:c4:23:ae:10:7a:4b:48: 2c:1d:d0:4d:e7:11:ea:a5:ae:2e:f2:82:ed:02:41: 6c:5c:49:4c:c7:9f:b8:b7:86:ac:f8:23:da:b1:10: 58:c9:a2:f2:eb:d2:d0:f6:c8:3a:57:9f:2c:77:27: 52:00:c4:e5:9d:60:45:7f:7d:27:bd:4b:77:75:ac: 8f:f9:9e:e2:2a:49:62:17:77:0a:ea:87:87:0f:4f: 22:f1:b9:ef:94:8d:90:b9:dd:f3:75:27:5d:9d:4a: 28:51:cf:7e:b6:a0:99:ba:c9:07:5a:5d:e8:11:a6: fa:2b:d7:2d:d9:1d:4f:75:7f:22:b1:3d:a3:fa:09: 94:cc:b4:dc:94:28:7f:8b:7e:ac:34:fc:ba:4c:23: 99:7f:e3:73:bd:8f:18:ca:54:60:ce:32:90:1d:d4: 94:d7:9b:5b:a4:3d:03:af:7e:12:be:9d:d4:eb:be: 47:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A3:76:D8:43:D9:38:F2:65:1B:16:F4:49:3D:5D:19:31:14:21:E2 X509v3 Authority Key Identifier: keyid:D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ec:5d:65:f9:17:86:fe:de:52:91:6a:ae:33:a0:f4:e6:6e: cd:3f:1a:f1:a9:bc:bc:41:bb:6f:6e:42:a2:6c:02:e4:08:70: 71:d5:12:b4:b0:8a:5a:c6:e0:56:80:6a:b6:06:38:87:80:e4: 19:bb:3e:f5:84:93:da:2a:34:78:d0:d6:85:c3:4c:4e:e2:79: a0:df:66:f5:2a:7d:17:39:25:1f:1c:7d:04:6c:45:1e:bc:34: d9:3d:00:d3:7f:69:7a:d6:d4:4b:59:1a:87:74:0c:2c:10:6f: bd:2b:e0:dd:f4:fd:d5:8c:e9:95:54:70:68:1e:fc:10:79:fa: 8b:9d:b4:ab:04:4c:27:31:d6:78:cd:bb:a8:cb:c3:69:de:3e: 8c:08:93:0f:fe:4f:52:98:91:93:e3:c8:c2:6d:53:3f:dc:6d: 4d:80:6b:51:54:22:7a:12:a2:20:69:8f:fb:39:e1:60:ee:1a: b5:17:b2:2d:43:8a:59:3e:3d:16:bd:16:46:47:83:0e:05:86: bc:49:8f:2f:0f:f6:20:07:af:65:2d:9b:ba:e9:30:e7:b2:f2: fe:32:5d:b4:86:a7:77:16:18:de:08:9c:0a:54:e9:58:eb:34: 29:25:35:3f:e3:28:44:d9:54:45:30:ce:af:5c:d5:52:9b:20: 0b:d0:f3:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzKHSCMhWEAYFMGoEJCNzuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ODUwNTVkNzAzOThjZjBjNzJjY2VhYzVlNTgxYWQ0MGYy MDNlZmMwHhcNMjYwMTEyMTcwMjExWhcNMjYwMTEzMTcwMjExWjAzMTEwLwYDVQQD EygyNWEzNzZkODQzZDkzOGYyNjUxYjE2ZjQ0OTNkNWQxOTMxMTQyMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/aGw3SoAurq+eiLM12r20jeK6bi SjkOKr26zkdcnlI69y4krZYO2B/yMCP+m2Lmy9613kSvyYxy2lK4Ei/ozr9ADACw ifw96dyy8Sr2EwHC1sQjrhB6S0gsHdBN5xHqpa4u8oLtAkFsXElMx5+4t4as+CPa sRBYyaLy69LQ9sg6V58sdydSAMTlnWBFf30nvUt3dayP+Z7iKkliF3cK6oeHD08i 8bnvlI2Qud3zdSddnUooUc9+tqCZuskHWl3oEab6K9ct2R1PdX8isT2j+gmUzLTc lCh/i36sNPy6TCOZf+NzvY8YylRgzjKQHdSU15tbpD0Dr34Svp3U675HwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWjdthD2TjyZRsW9Ek9XRkxFCHiMB8GA1UdIwQY MBaAFNiFBV1wOYzwxyzOrF5YGtQPID78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMklVRlhYQTVqUERITE02c1hsZ2ExQThnUHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84MmFmMjgtYjYzNC00NjNhLWI2YmUt MWNhM2M2N2YxNTA2LzEvMklVRlhYQTVqUERITE02c1hsZ2ExQThnUHZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84MmFmMjgtYjYzNC00NjNhLWI2YmUtMWNhM2M2N2YxNTA2 LzEvMklVRlhYQTVqUERITE02c1hsZ2ExQThnUHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtexdZfkX hv7eUpFqrjOg9OZuzT8a8am8vEG7b25ComwC5AhwcdUStLCKWsbgVoBqtgY4h4Dk Gbs+9YST2io0eNDWhcNMTuJ5oN9m9Sp9FzklHxx9BGxFHrw02T0A039petbUS1ka h3QMLBBvvSvg3fT91YzplVRwaB78EHn6i520qwRMJzHWeM27qMvDad4+jAiTD/5P UpiRk+PIwm1TP9xtTYBrUVQiehKiIGmP+znhYO4atReyLUOKWT49Fr0WRkeDDgWG vEmPLw/2IAevZS2buukw57Ly/jJdtIandxYY3gicClTpWOs0KSU1P+MoRNlURTDO r1zVUpsgC9Dz8g== -----END CERTIFICATE-----Generated at Mon Jan 12 22:45:21 2026 by rpki-client