This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft File: mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft (raw, json) Hash identifier: hB8A0rgCC6fqKPuc5ElnG9uQAQT5ogh09Msz5ZW0q+0= Subject key identifier: 14:91:6C:A5:3D:4A:8E:B0:A5:50:3F:18:5F:66:93:83:85:A4:1E:E0 Authority key identifier: 99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31 Certificate issuer: /CN=9928b812e2e9f472eec7d233f604af263e850f31 Certificate serial: 019C41348C60A9D217BA90017E818D96649F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft Manifest number: 0D47 Signing time: Mon 09 Feb 2026 07:01:28 +0000 Manifest this update: Mon 09 Feb 2026 07:01:28 +0000 Manifest next update: Tue 10 Feb 2026 07:01:28 +0000 Files and hashes: 1: mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl (hash: BqpCUiHOrgSvfMOJWbO5G6iRMwmFs0AGFhPmXAaS1EI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:8c:60:a9:d2:17:ba:90:01:7e:81:8d:96:64:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9928b812e2e9f472eec7d233f604af263e850f31 Validity Not Before: Feb 9 07:01:28 2026 GMT Not After : Feb 10 07:01:28 2026 GMT Subject: CN=14916ca53d4a8eb0a5503f185f66938385a41ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8b:ba:45:72:26:0a:f9:d0:70:7c:96:f1:ec: 1d:e1:ee:66:3c:35:bd:4b:f9:88:d5:39:12:b2:30: a4:11:e8:36:15:86:cd:84:e2:4d:5f:8a:7d:d5:30: 34:9a:5f:cf:bd:cd:8e:98:0c:f5:86:86:76:da:04: 09:11:88:bf:75:52:94:38:9e:11:18:48:c6:6a:a2: 54:b3:a1:5d:92:2c:22:ad:4c:33:30:88:23:7d:cf: a8:60:ad:9c:df:21:ac:c5:52:fa:d2:c9:2f:10:5b: e6:ee:a5:fb:62:e4:28:78:26:63:1f:cb:2b:94:61: 95:cd:9d:fb:1c:1a:8a:e9:84:a9:cd:43:fc:8c:cf: 21:8e:ca:48:79:99:bb:64:09:4a:38:e9:e8:0e:ca: a4:75:53:db:11:e3:62:70:e0:6e:f9:72:c7:f7:cd: 5a:6f:23:8d:45:fe:fc:73:ae:09:d4:1c:3d:0e:1c: 5d:37:c4:8e:f9:b3:25:47:aa:b5:58:ae:02:15:57: 2f:09:92:c2:d4:e8:6b:0a:51:30:ef:d0:a8:22:ee: 8e:86:63:5d:65:b4:70:a8:a3:6d:ad:d5:19:85:22: 87:c3:27:d6:66:b2:fe:f2:e0:a4:87:9b:f9:6a:cd: a7:7e:7e:6b:c4:fc:af:88:96:bd:8c:35:c3:20:78: e3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:91:6C:A5:3D:4A:8E:B0:A5:50:3F:18:5F:66:93:83:85:A4:1E:E0 X509v3 Authority Key Identifier: keyid:99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:72:48:81:5e:42:0d:0f:d7:00:46:b3:93:ff:f1:76:57:70: 4f:31:ae:5b:eb:20:a4:f6:aa:5a:b8:c0:b6:ec:49:36:d6:70: bc:f1:4f:6b:76:0c:2b:21:76:63:9d:dd:f8:77:e0:30:13:54: e0:45:30:2f:51:45:b2:f4:19:fe:19:d8:36:01:17:81:01:87: 5d:9d:bb:6f:d3:81:97:e2:f7:39:4a:01:72:4b:5d:99:c1:19: 9a:ce:e3:87:38:14:2a:8e:56:d5:ab:f3:bd:f9:51:d9:87:e0: 63:ec:63:b3:24:b0:eb:6f:0d:13:91:1b:16:c8:c1:1f:da:f6: 10:38:c0:26:3d:c4:fb:5a:5b:f2:f5:d1:a2:7b:77:52:8d:82: e2:aa:74:c9:0b:05:9b:ca:b9:25:c1:dc:92:2d:d3:55:be:e1: 06:3e:c4:b4:13:0b:5b:cb:c6:83:81:20:3c:55:cf:0b:bd:99: 16:c9:8d:76:31:1c:4b:83:32:df:51:63:ca:d9:2e:6a:4c:0e: ed:be:2d:33:3e:cf:fa:29:b3:e2:29:fa:da:67:4c:fe:32:fb: e5:ae:07:11:8e:7a:60:2c:85:27:39:d7:2a:96:d9:87:c4:37: 58:bb:8b:7c:10:dd:67:9a:cf:b5:7a:65:22:8a:8b:2f:37:13: 42:83:64:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNIxgqdIXupABfoGNlmSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MjhiODEyZTJlOWY0NzJlZWM3ZDIzM2Y2MDRhZjI2M2U4 NTBmMzEwHhcNMjYwMjA5MDcwMTI4WhcNMjYwMjEwMDcwMTI4WjAzMTEwLwYDVQQD EygxNDkxNmNhNTNkNGE4ZWIwYTU1MDNmMTg1ZjY2OTM4Mzg1YTQxZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Iu6RXImCvnQcHyW8ewd4e5mPDW9 S/mI1TkSsjCkEeg2FYbNhOJNX4p91TA0ml/Pvc2OmAz1hoZ22gQJEYi/dVKUOJ4R GEjGaqJUs6FdkiwirUwzMIgjfc+oYK2c3yGsxVL60skvEFvm7qX7YuQoeCZjH8sr lGGVzZ37HBqK6YSpzUP8jM8hjspIeZm7ZAlKOOnoDsqkdVPbEeNicOBu+XLH981a byONRf78c64J1Bw9DhxdN8SO+bMlR6q1WK4CFVcvCZLC1OhrClEw79CoIu6OhmNd ZbRwqKNtrdUZhSKHwyfWZrL+8uCkh5v5as2nfn5rxPyviJa9jDXDIHjj9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSRbKU9So6wpVA/GF9mk4OFpB7gMB8GA1UdIwQY MBaAFJkouBLi6fRy7sfSM/YEryY+hQ8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVNpNEV1THA5SEx1eDlJejlnU3ZKajZGRHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8yZDk5MjktNGVmZi00Nzk4LWE1Mzgt YzAxOGJkN2VkNDgwLzEvbVNpNEV1THA5SEx1eDlJejlnU3ZKajZGRHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8yZDk5MjktNGVmZi00Nzk4LWE1MzgtYzAxOGJkN2VkNDgw LzEvbVNpNEV1THA5SEx1eDlJejlnU3ZKajZGRHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3JIgV5C DQ/XAEazk//xdldwTzGuW+sgpPaqWrjAtuxJNtZwvPFPa3YMKyF2Y53d+HfgMBNU 4EUwL1FFsvQZ/hnYNgEXgQGHXZ27b9OBl+L3OUoBcktdmcEZms7jhzgUKo5W1avz vflR2YfgY+xjsySw628NE5EbFsjBH9r2EDjAJj3E+1pb8vXRont3Uo2C4qp0yQsF m8q5JcHcki3TVb7hBj7EtBMLW8vGg4EgPFXPC72ZFsmNdjEcS4My31FjytkuakwO 7b4tMz7P+imz4in62mdM/jL75a4HEY56YCyFJznXKpbZh8Q3WLuLfBDdZ5rPtXpl IoqLLzcTQoNk4w== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:31 2026 by rpki-client