This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json) Hash identifier: dmLkJw7op1hDHP+9ZVOqyZC2Y/bnVchdVSEtoGa9pBA= Subject key identifier: 3A:DA:87:A2:C5:01:9A:76:D7:28:71:C5:D4:F8:55:A5:E3:5E:C3:ED Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b Certificate serial: 019C41D8621533D2DC94E1F8273351242EA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft Manifest number: 11B3 Signing time: Mon 09 Feb 2026 10:00:25 +0000 Manifest this update: Mon 09 Feb 2026 10:00:25 +0000 Manifest next update: Tue 10 Feb 2026 10:00:25 +0000 Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: qQPU+GyQlZj4IK8PxzXHM9Wu7oaJbaE96yaglawB41A=) 2: lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa (hash: XY5Vcv+RR5CpckRK8/VMlpNGWq4j8wxQj8pmKCvhpds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:62:15:33:d2:dc:94:e1:f8:27:33:51:24:2e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b Validity Not Before: Feb 9 10:00:25 2026 GMT Not After : Feb 10 10:00:25 2026 GMT Subject: CN=3ada87a2c5019a76d72871c5d4f855a5e35ec3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:69:04:3b:d4:87:0c:c6:7a:de:77:75:a4:31: dc:76:4f:2a:c5:ea:3b:d8:df:88:77:b8:01:e9:54: c1:b2:91:09:8a:27:e9:d4:d0:07:3d:2d:46:52:08: ab:06:5e:39:5d:eb:21:d6:85:89:e3:c5:bf:83:b9: 4d:73:60:6f:b8:fd:6f:93:26:46:47:b3:ed:bd:ce: 5e:5c:92:ed:7b:ef:93:87:1a:23:3c:2d:ba:f5:71: d1:e3:54:89:57:5c:2a:2b:6c:9a:bf:9b:6a:1e:e0: 74:14:da:99:1f:51:85:77:f5:c4:6b:ff:6c:0c:05: fd:f2:24:7d:f3:4b:ef:d3:26:83:ee:8a:71:b4:1f: 32:ef:bf:19:c9:0a:46:c9:c5:42:a3:5c:26:51:ea: de:39:37:97:eb:4e:b9:78:95:2b:f7:81:28:be:37: 37:a4:f0:81:cb:5c:f0:9c:fd:ba:3f:08:9d:61:d4: aa:bb:93:02:0a:ea:97:ef:51:e4:63:47:cb:41:ef: b8:85:63:1f:7c:cb:99:2d:65:f3:18:d8:69:db:a5: 88:9e:bf:66:f8:89:23:ab:d4:57:51:81:83:7d:05: 51:38:b2:5b:b2:58:93:5c:fa:2e:96:fa:45:27:e8: ec:60:80:4b:a5:85:27:6e:3f:2a:27:79:06:a0:78: 23:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DA:87:A2:C5:01:9A:76:D7:28:71:C5:D4:F8:55:A5:E3:5E:C3:ED X509v3 Authority Key Identifier: keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:90:cc:86:d7:00:d3:5d:a1:e0:da:82:dc:1b:ba:b9:ea:96: 9e:0a:5e:0c:7e:10:0a:01:a2:37:e2:57:12:5f:06:49:e8:b9: 27:23:44:1e:c9:7c:ac:ec:79:43:ee:bb:bc:49:6e:90:92:03: a4:cd:fc:c0:9a:da:f2:c5:86:1a:eb:86:15:c6:e9:8e:86:1f: 7b:97:93:a2:36:2c:4c:bd:eb:d8:00:80:cd:ba:d8:16:a0:53: 7a:56:ff:68:1a:48:af:28:f0:dc:f2:1b:1f:53:31:e6:5a:1e: 82:73:bc:a2:ac:c7:43:68:c0:20:0b:20:b1:09:69:7b:2f:68: 05:fc:f4:13:2a:62:44:fd:f2:8d:19:44:cf:8e:5d:a8:b8:1d: 97:5f:6c:ff:73:8f:48:be:a1:cb:3c:83:f1:00:63:77:40:40: a4:23:b0:32:67:a7:3a:c4:88:f3:7c:70:f3:07:42:99:ad:7d: 6a:f4:9b:8a:2e:cd:c5:8d:81:e0:ba:33:97:f6:34:ce:e1:5a: 49:ee:89:cc:af:85:42:ff:1d:2c:77:1a:5a:b4:8a:1d:68:6f: 2b:6e:98:88:90:bc:f3:6d:0d:d4:e1:50:68:c7:5b:f6:0c:0f: bb:f4:7a:e5:42:55:73:ad:35:cf:5d:e2:59:26:25:95:61:e7: b9:df:a0:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2GIVM9LclOH4JzNRJC6pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi ZmNiNWIwHhcNMjYwMjA5MTAwMDI1WhcNMjYwMjEwMTAwMDI1WjAzMTEwLwYDVQQD EygzYWRhODdhMmM1MDE5YTc2ZDcyODcxYzVkNGY4NTVhNWUzNWVjM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWkEO9SHDMZ63nd1pDHcdk8qxeo7 2N+Id7gB6VTBspEJiifp1NAHPS1GUgirBl45Xesh1oWJ48W/g7lNc2BvuP1vkyZG R7Ptvc5eXJLte++ThxojPC269XHR41SJV1wqK2yav5tqHuB0FNqZH1GFd/XEa/9s DAX98iR980vv0yaD7opxtB8y778ZyQpGycVCo1wmUereOTeX6065eJUr94Eovjc3 pPCBy1zwnP26PwidYdSqu5MCCuqX71HkY0fLQe+4hWMffMuZLWXzGNhp26WInr9m +Ikjq9RXUYGDfQVROLJbsliTXPoulvpFJ+jsYIBLpYUnbj8qJ3kGoHgjPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrah6LFAZp21yhxxdT4VaXjXsPtMB8GA1UdIwQY MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpDMhtcA 012h4NqC3Bu6ueqWngpeDH4QCgGiN+JXEl8GSei5JyNEHsl8rOx5Q+67vElukJID pM38wJra8sWGGuuGFcbpjoYfe5eTojYsTL3r2ACAzbrYFqBTelb/aBpIryjw3PIb H1Mx5loegnO8oqzHQ2jAIAsgsQlpey9oBfz0EypiRP3yjRlEz45dqLgdl19s/3OP SL6hyzyD8QBjd0BApCOwMmenOsSI83xw8wdCma19avSbii7NxY2B4Lozl/Y0zuFa Se6JzK+FQv8dLHcaWrSKHWhvK26YiJC8820N1OFQaMdb9gwPu/R65UJVc601z13i WSYllWHnud+grw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:21 2026 by rpki-client