This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft (raw, json) Hash identifier: F7XsmzpvuxKXZx27QxskA92GSTvnAEtdvrGeeiLpdlI= Subject key identifier: 50:98:2C:A8:BE:AC:36:8A:FC:00:41:59:1B:C9:B0:72:22:E4:63:F2 Authority key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62 Certificate issuer: /CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62 Certificate serial: 019C43C6DC7C18EE62C1543E483F506980BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft Manifest number: 1485 Signing time: Mon 09 Feb 2026 19:00:31 +0000 Manifest this update: Mon 09 Feb 2026 19:00:31 +0000 Manifest next update: Tue 10 Feb 2026 19:00:31 +0000 Files and hashes: 1: msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl (hash: Ni+sFjSEQidmZbCMC33W3j2rK+80OmU32UvLaZfDSRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:dc:7c:18:ee:62:c1:54:3e:48:3f:50:69:80:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62 Validity Not Before: Feb 9 19:00:31 2026 GMT Not After : Feb 10 19:00:31 2026 GMT Subject: CN=50982ca8beac368afc0041591bc9b07222e463f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:14:39:bb:fc:83:3d:24:3c:af:08:9e:70: 44:32:88:01:76:0e:b4:d1:f3:cf:94:bb:68:ab:55: 3c:b2:63:34:53:00:21:fe:ba:67:f4:a3:68:5b:70: bd:41:d1:a4:70:db:b2:cc:0a:89:21:49:c2:13:5e: 96:39:57:73:e3:69:74:49:d7:fd:ae:12:55:1d:15: 40:8d:23:ab:cb:6a:4c:aa:6d:ea:cb:3e:ec:96:75: 72:b9:38:b9:62:3c:96:b8:0e:c5:ea:3f:f3:2f:69: 7b:1a:13:2f:71:a0:12:00:43:78:7b:33:75:26:fd: c1:bd:8f:c3:e0:6c:79:c6:bd:01:63:6b:e9:2c:82: e1:ce:b7:e1:ce:ce:33:5b:88:f3:68:63:de:27:92: 09:44:f8:75:0f:7d:e9:87:ec:26:ee:62:17:85:d6: 3e:b4:82:07:01:20:bd:27:db:d0:9d:27:4b:3d:e4: d7:16:4b:a0:70:05:70:fe:e1:4c:5d:19:78:47:9c: 41:b3:25:57:38:2b:61:52:35:76:a0:1b:23:ca:aa: e4:a3:72:40:0a:13:33:a0:81:17:40:2f:37:a9:63: 30:d8:7c:83:7e:43:cf:5e:a7:77:bc:06:e1:67:69: 4f:67:79:bd:48:d3:b6:dd:53:c7:29:ac:f8:c1:d5: 8e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:98:2C:A8:BE:AC:36:8A:FC:00:41:59:1B:C9:B0:72:22:E4:63:F2 X509v3 Authority Key Identifier: keyid:9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e7:21:c9:d8:c6:d2:bc:2c:ff:2a:d1:f2:3b:a9:e4:c7:1f: cc:5e:b3:47:fc:4f:7a:81:41:23:43:30:21:46:ce:1f:20:dd: 79:52:f1:11:c1:cd:26:39:5e:84:25:e1:1e:9e:51:bb:da:3e: 92:eb:90:53:3d:0d:32:bc:b8:d9:9d:78:b9:f9:48:a4:f7:fb: 6a:e2:f1:00:71:20:9e:06:58:95:0c:9f:90:74:35:f5:f6:eb: d0:ef:00:3b:d1:96:8b:90:07:c2:af:25:f6:e7:64:8c:15:75: a9:b3:fb:ad:45:a5:c2:f3:52:6b:17:55:75:e1:dc:bd:c2:21: 58:2d:0b:b2:9a:9a:9f:8a:fa:7e:66:4e:80:0c:38:c4:c2:06: 85:17:dc:26:f9:c0:e7:30:eb:63:1f:4f:5c:89:35:de:89:35: 33:9b:a5:26:e3:d5:07:31:5e:40:9b:f3:22:7f:01:e4:a3:24: d7:41:60:c6:b2:86:5f:a6:b8:72:ff:d9:2d:48:cd:8e:63:79: 0e:70:b1:a0:9f:46:2c:d6:c7:a5:36:af:ce:f0:06:c8:d9:50: a6:ce:87:98:35:b0:b2:23:1a:ce:e9:7f:74:ce:b7:46:27:95: 2d:1b:d6:20:49:c8:c1:30:fc:d9:9c:48:f1:79:27:38:1b:ab: 94:78:00:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxtx8GO5iwVQ+SD9QaYC/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYzBkMTFhMzdkYTM1ZGJlMmY3ZjZiOTYxOWU1NTcyNjM0 ZTFmNjIwHhcNMjYwMjA5MTkwMDMxWhcNMjYwMjEwMTkwMDMxWjAzMTEwLwYDVQQD Eyg1MDk4MmNhOGJlYWMzNjhhZmMwMDQxNTkxYmM5YjA3MjIyZTQ2M2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs4UObv8gz0kPK8InnBEMogBdg60 0fPPlLtoq1U8smM0UwAh/rpn9KNoW3C9QdGkcNuyzAqJIUnCE16WOVdz42l0Sdf9 rhJVHRVAjSOry2pMqm3qyz7slnVyuTi5YjyWuA7F6j/zL2l7GhMvcaASAEN4ezN1 Jv3BvY/D4Gx5xr0BY2vpLILhzrfhzs4zW4jzaGPeJ5IJRPh1D33ph+wm7mIXhdY+ tIIHASC9J9vQnSdLPeTXFkugcAVw/uFMXRl4R5xBsyVXOCthUjV2oBsjyqrko3JA ChMzoIEXQC83qWMw2HyDfkPPXqd3vAbhZ2lPZ3m9SNO23VPHKaz4wdWO6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCYLKi+rDaK/ABBWRvJsHIi5GPyMB8GA1UdIwQY MBaAFJrA0Ro32jXb4vf2uWGeVXJjTh9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXNEUkdqZmFOZHZpOV9hNVlaNVZjbU5PSDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mODcxNDAtYmMyYy00ZjNmLTgzZmQt YTNkNDU1ZDM0ODA5LzEvbXNEUkdqZmFOZHZpOV9hNVlaNVZjbU5PSDJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mODcxNDAtYmMyYy00ZjNmLTgzZmQtYTNkNDU1ZDM0ODA5 LzEvbXNEUkdqZmFOZHZpOV9hNVlaNVZjbU5PSDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGechydjG 0rws/yrR8jup5McfzF6zR/xPeoFBI0MwIUbOHyDdeVLxEcHNJjlehCXhHp5Ru9o+ kuuQUz0NMry42Z14uflIpPf7auLxAHEgngZYlQyfkHQ19fbr0O8AO9GWi5AHwq8l 9udkjBV1qbP7rUWlwvNSaxdVdeHcvcIhWC0Lspqan4r6fmZOgAw4xMIGhRfcJvnA 5zDrYx9PXIk13ok1M5ulJuPVBzFeQJvzIn8B5KMk10FgxrKGX6a4cv/ZLUjNjmN5 DnCxoJ9GLNbHpTavzvAGyNlQps6HmDWwsiMazul/dM63RieVLRvWIEnIwTD82ZxI 8XknOBurlHgAIQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:45 2026 by rpki-client