This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json) Hash identifier: S4a8/2Jo2n5F54WEZCeM9dtmr+Ng17PT4A3vDX8xy6s= Subject key identifier: EF:66:0C:37:1C:0B:14:D8:8C:CA:C0:5B:B8:B8:4D:71:DA:57:E1:4C Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f Certificate serial: 019C427D9D3454CAC99C31476C4F858F11CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft Manifest number: 031E Signing time: Mon 09 Feb 2026 13:00:54 +0000 Manifest this update: Mon 09 Feb 2026 13:00:54 +0000 Manifest next update: Tue 10 Feb 2026 13:00:54 +0000 Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: lNacua+i+l/e2xA6E0WFM5kJ35rKUNDv1FDiR2NWe9Y=) 2: NZcLGrLahjEtjP7fLNWfO9mZoLE.roa (hash: zL4AvdmqKuWo9f0HM/Qoz6/mOwYwWcYK23qO3ml73Nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:9d:34:54:ca:c9:9c:31:47:6c:4f:85:8f:11:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f Validity Not Before: Feb 9 13:00:54 2026 GMT Not After : Feb 10 13:00:54 2026 GMT Subject: CN=ef660c371c0b14d88ccac05bb8b84d71da57e14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:38:ec:4a:70:dc:2a:30:7e:be:53:ec:55:11: be:1f:21:53:fe:5c:03:b3:97:73:6d:27:ad:cc:0c: 91:fe:87:6b:1f:35:e4:6d:35:a3:27:a4:20:45:d3: a8:dc:08:a7:70:0b:24:b0:35:6e:23:51:c4:1a:93: 79:2b:81:66:18:96:1f:51:bf:98:c1:87:1c:ef:52: 72:86:f3:df:ae:35:7e:40:ff:dd:c5:80:d2:ea:44: b7:38:bf:56:f9:8e:f8:1e:2a:f8:02:5b:d0:ba:4d: de:6a:a2:93:51:25:40:26:ac:64:6c:c4:7a:d8:a5: 37:68:a8:32:ec:e8:cb:1e:34:90:1a:00:0a:8f:7c: cd:cd:fb:07:a0:60:f4:73:99:dc:2a:5a:18:8a:fb: 42:49:c2:fa:20:5e:15:17:4a:67:c0:ff:3d:30:e7: 9c:17:5e:f0:5f:af:e3:92:dc:09:5e:2f:aa:36:31: 7b:35:2b:ec:29:eb:91:a7:66:84:dd:f0:ab:bd:87: 03:0d:02:f1:d8:48:b8:84:25:d2:f6:e6:76:19:9c: 83:17:51:e6:2c:c2:59:9b:19:ca:b3:b0:55:c6:0f: 00:5c:e5:53:1a:88:34:71:a5:c5:17:bd:17:d6:c1: 21:cc:8f:a5:29:d2:c3:6f:9d:8e:82:b2:28:d2:76: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:66:0C:37:1C:0B:14:D8:8C:CA:C0:5B:B8:B8:4D:71:DA:57:E1:4C X509v3 Authority Key Identifier: keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1b:c5:58:7a:53:38:e8:4c:6b:11:fa:2f:e2:56:2b:38:70: 5d:f5:22:0c:57:5b:35:8e:16:ba:14:3b:48:b9:0a:21:bb:54: 41:b1:49:19:10:74:0c:c4:29:a4:f3:cf:9f:b8:22:3d:1b:92: 1f:c9:8c:10:e0:cf:55:1f:40:2c:87:6c:ed:52:e7:f6:9b:a6: e8:2a:fe:fa:0e:a9:7a:cb:d6:76:ed:87:1f:67:15:68:c0:19: 45:aa:cc:6f:cc:5d:dc:ba:88:5f:8c:a2:fb:5a:41:88:da:a6: 6d:87:00:0b:3c:9e:8f:dc:22:58:4e:25:c6:a4:38:46:5e:b0: bd:1b:99:2b:ef:8d:a1:8e:1e:5d:31:37:fd:98:61:c1:71:88: 6d:da:46:83:7f:26:88:83:0f:07:d9:89:96:20:0b:45:4d:f6: 27:74:80:aa:6e:d6:87:0e:80:89:a0:1a:6b:bd:09:a6:2b:cf: 4c:50:b8:20:10:17:c2:ee:19:41:63:d9:8d:c8:b5:01:90:69: 3c:41:62:b7:b2:55:bf:01:fc:4e:60:ef:24:e7:b1:8f:e0:52: 6c:b8:0a:53:15:50:08:15:b1:0e:74:d4:4e:98:49:a2:f3:dc: 13:27:b2:f7:81:97:71:d3:db:cb:60:f4:b8:db:53:73:ae:10: 66:88:ca:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfZ00VMrJnDFHbE+FjxHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjM5OWIxMjkwY2Q0MTlhNzhiZDJmYjMxMWUzYmM3ZGY5 ZjVmMWYwHhcNMjYwMjA5MTMwMDU0WhcNMjYwMjEwMTMwMDU0WjAzMTEwLwYDVQQD EyhlZjY2MGMzNzFjMGIxNGQ4OGNjYWMwNWJiOGI4NGQ3MWRhNTdlMTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDjsSnDcKjB+vlPsVRG+HyFT/lwD s5dzbSetzAyR/odrHzXkbTWjJ6QgRdOo3AincAsksDVuI1HEGpN5K4FmGJYfUb+Y wYcc71JyhvPfrjV+QP/dxYDS6kS3OL9W+Y74Hir4AlvQuk3eaqKTUSVAJqxkbMR6 2KU3aKgy7OjLHjSQGgAKj3zNzfsHoGD0c5ncKloYivtCScL6IF4VF0pnwP89MOec F17wX6/jktwJXi+qNjF7NSvsKeuRp2aE3fCrvYcDDQLx2Ei4hCXS9uZ2GZyDF1Hm LMJZmxnKs7BVxg8AXOVTGog0caXFF70X1sEhzI+lKdLDb52OgrIo0nZb/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9mDDccCxTYjMrAW7i4TXHaV+FMMB8GA1UdIwQY MBaAFDEjmbEpDNQZp4vS+zEeO8ffn18fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzY0OTktOTE0My00ODc3LTlkZmYt Mjg4NDEwMzc3NmM4LzEvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NzY0OTktOTE0My00ODc3LTlkZmYtMjg4NDEwMzc3NmM4 LzEvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShvFWHpT OOhMaxH6L+JWKzhwXfUiDFdbNY4WuhQ7SLkKIbtUQbFJGRB0DMQppPPPn7giPRuS H8mMEODPVR9ALIds7VLn9pum6Cr++g6pesvWdu2HH2cVaMAZRarMb8xd3LqIX4yi +1pBiNqmbYcACzyej9wiWE4lxqQ4Rl6wvRuZK++NoY4eXTE3/ZhhwXGIbdpGg38m iIMPB9mJliALRU32J3SAqm7Whw6AiaAaa70JpivPTFC4IBAXwu4ZQWPZjci1AZBp PEFit7JVvwH8TmDvJOexj+BSbLgKUxVQCBWxDnTUTphJovPcEyey94GXcdPby2D0 uNtTc64QZojKDw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:27 2026 by rpki-client