This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft File: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json) Hash identifier: Phl9L2kxxk3xHhtCh5adOZxYC6kCmE4PT0dRJhWNGNI= Subject key identifier: EA:99:73:85:2A:F6:02:97:4A:80:4D:45:94:08:B1:0C:E9:8B:51:EA Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Certificate serial: 019BD8B48B10061FC5FF3ACFC8E60B7115BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft Manifest number: 17DC Signing time: Tue 20 Jan 2026 00:01:09 +0000 Manifest this update: Tue 20 Jan 2026 00:01:09 +0000 Manifest next update: Wed 21 Jan 2026 00:01:09 +0000 Files and hashes: 1: 2UPTAgiJvUFj9KxwMHk_neJV1Ts.roa (hash: chaCLnBUf8VW3Cyy0U4Y2DmReJ/YoQuLRxfoEk9G/Zs=) 2: 5r35RdY0vy4lh3WOV010F9-QFXw.roa (hash: G+I8XeYNJKZwLdV9Hm/0m91ziGrBNMHkmj6EJpZj11c=) 3: CIsoBMnJ1HH2_kjCOniPyHt_zdo.roa (hash: rIsVKuNDzl7s31Uqv2wlQw7E8fHntXl7uQadNq2LiGk=) 4: LU_rRpVG0rNU5sbORgmoor-WG8E.roa (hash: v6SXttNOyzn7P8hwnB7Tofa/4Bnu7wdokfdtafR2ixc=) 5: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: KD0tUQ5k8NIy5XWIF6eUNJucARYt6BVjzV1/AHDHqgM=) 6: SP8ZFm--93L34rMKDZHfL8Eh_ro.roa (hash: cp6DWhPPeKxvKEzaDsnvDh3dMYI9vYEIXkFKulFhNyA=) 7: aZAulIKVvXbN8omq0JhX_jGTQpQ.roa (hash: a1Ep0d4JmHuZC92VG94ayoNuXL+o7ITThTyrhPBbaU4=) 8: exjfT9uAFU7f_gIJUid1TXJtR8A.roa (hash: 4rc5j3Of5lWDlFZbenegwws4HWNu69CTDYEmMKe9DAY=) 9: rcsE8T3loa9paQtOZYTdGqYZZdQ.roa (hash: aTqIKXOe4lJEG0nzJ4iYV8aOwdLjU0r2z02TUxqz12s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:b4:8b:10:06:1f:c5:ff:3a:cf:c8:e6:0b:71:15:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Validity Not Before: Jan 20 00:01:09 2026 GMT Not After : Jan 21 00:01:09 2026 GMT Subject: CN=ea9973852af602974a804d459408b10ce98b51ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:95:70:dd:b7:53:c2:a2:51:ab:43:5c:08: 37:c3:ca:c9:65:79:05:01:6b:81:30:9b:f1:17:5e: c8:e6:67:b9:69:c6:2e:92:67:28:29:e1:83:c6:01: ce:47:8e:ea:b0:ab:11:5b:6b:10:75:c1:96:da:e6: f0:98:b9:4b:8e:2c:d8:e5:77:8e:09:ca:f6:00:ba: e1:69:d7:27:90:3e:18:88:ec:00:e3:9f:54:d1:0f: fc:6f:d1:7f:e2:3a:77:ca:b8:31:37:cd:2e:8a:5a: bd:0c:81:12:7d:49:53:2a:a7:eb:8d:cd:70:05:41: 5a:97:8e:da:6c:ba:ba:56:9f:4f:0a:07:01:55:43: 21:c1:35:41:22:1d:6a:9c:a9:58:a2:f3:f5:d7:b5: b3:5f:ee:6c:fd:09:3f:76:06:8e:f6:68:24:f2:90: 96:04:bb:c2:1e:69:37:25:96:e4:33:73:12:06:f7: 12:6a:74:18:ca:87:f5:09:cd:53:22:cb:aa:cf:32: b7:0b:67:3d:18:47:bb:75:4b:f9:2f:b1:ed:42:3b: 64:1a:e4:11:56:49:0c:b4:9b:e8:9e:f7:81:b9:72: eb:b5:6a:e1:b9:1d:b6:0e:fc:41:09:b9:0b:2c:8d: 3a:87:a2:47:ce:06:72:bc:49:3f:4f:91:d6:b8:71: 27:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:99:73:85:2A:F6:02:97:4A:80:4D:45:94:08:B1:0C:E9:8B:51:EA X509v3 Authority Key Identifier: keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:06:a2:cf:4d:44:6d:c5:47:04:bf:4e:97:f0:fe:76:36:24: 10:a8:48:4f:1c:da:c7:50:e9:88:04:00:a1:4e:f5:5c:22:fc: eb:d3:b7:59:44:6c:58:7b:12:75:f8:8f:3e:1f:a6:f2:55:92: 39:a1:c1:17:3c:eb:7c:3c:03:70:3f:90:9c:a8:5c:9d:0c:f7: 9c:e3:fd:de:8f:d4:95:a1:07:88:cf:04:bc:a0:d2:90:9f:f2: c7:9c:f3:00:24:d0:71:9a:29:50:7d:2a:05:e0:d7:27:26:89: 42:c1:69:5d:b0:e3:b2:6e:95:5f:cf:8f:7d:44:ee:fe:38:1b: f1:08:32:dc:b0:d2:66:f4:54:2a:ac:cb:10:b9:59:be:22:d0: 43:2c:f7:1c:53:34:3e:4a:e0:49:a6:69:1c:a0:89:7c:09:e3: 5c:2b:45:7d:e5:2a:79:18:f2:3c:cb:52:29:37:27:b5:62:61: 4d:28:68:b4:69:3d:fd:80:53:0f:53:cd:5b:ce:af:68:01:f6: 21:e1:92:6d:6b:f0:b5:4c:85:70:29:d9:2c:94:50:e1:a8:42: fa:fe:91:ba:d1:aa:5a:6e:4f:d8:58:a1:b4:dd:ee:fd:9d:1d: b6:6b:a3:de:77:3c:5e:59:27:4e:7b:c1:21:ab:cc:93:93:8c: e3:40:1f:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYtIsQBh/F/zrPyOYLcRW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGIyNGE3NDBmMmU2MTYzMjA1MGFkYzE0NmMxZWU2YTNl Njg2YzUwHhcNMjYwMTIwMDAwMTA5WhcNMjYwMTIxMDAwMTA5WjAzMTEwLwYDVQQD EyhlYTk5NzM4NTJhZjYwMjk3NGE4MDRkNDU5NDA4YjEwY2U5OGI1MWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5iVcN23U8KiUatDXAg3w8rJZXkF AWuBMJvxF17I5me5acYukmcoKeGDxgHOR47qsKsRW2sQdcGW2ubwmLlLjizY5XeO Ccr2ALrhadcnkD4YiOwA459U0Q/8b9F/4jp3yrgxN80uilq9DIESfUlTKqfrjc1w BUFal47abLq6Vp9PCgcBVUMhwTVBIh1qnKlYovP117WzX+5s/Qk/dgaO9mgk8pCW BLvCHmk3JZbkM3MSBvcSanQYyof1Cc1TIsuqzzK3C2c9GEe7dUv5L7HtQjtkGuQR VkkMtJvonveBuXLrtWrhuR22DvxBCbkLLI06h6JHzgZyvEk/T5HWuHEnawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqZc4Uq9gKXSoBNRZQIsQzpi1HqMB8GA1UdIwQY MBaAFDILJKdA8uYWMgUK3BRsHuaj5obFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYt OTQ5MTRmNWRkYjNjLzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYtOTQ5MTRmNWRkYjNj LzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwaiz01E bcVHBL9Ol/D+djYkEKhITxzax1DpiAQAoU71XCL869O3WURsWHsSdfiPPh+m8lWS OaHBFzzrfDwDcD+QnKhcnQz3nOP93o/UlaEHiM8EvKDSkJ/yx5zzACTQcZopUH0q BeDXJyaJQsFpXbDjsm6VX8+PfUTu/jgb8Qgy3LDSZvRUKqzLELlZviLQQyz3HFM0 PkrgSaZpHKCJfAnjXCtFfeUqeRjyPMtSKTcntWJhTShotGk9/YBTD1PNW86vaAH2 IeGSbWvwtUyFcCnZLJRQ4ahC+v6RutGqWm5P2FihtN3u/Z0dtmuj3nc8XlknTnvB IavMk5OM40AfBg== -----END CERTIFICATE-----Generated at Tue Jan 20 07:36:50 2026 by rpki-client