This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
File: MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json)
Hash identifier: llFlhbZTBCY4jSQYk5SOHNaVyIC5LLrQXaXasSeLrAQ=
Subject key identifier: 3C:0A:4A:30:6A:13:BF:75:E7:C4:9D:28:65:10:BA:6F:80:D8:FC:D4
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial: 019C420F908350795DB1DD1DBB306BB962AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 11:00:42 +0000
Manifest this update: Mon 09 Feb 2026 11:00:42 +0000
Manifest next update: Tue 10 Feb 2026 11:00:42 +0000
Files and hashes: 1: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: TMr/IFc3w3kDzHAFQEagQdUZXNtGaREgz+OmApts7W8=)
2: dkCET2TsQcDN0c2dtertiEUqhPc.roa (hash: UbBALHBb0UI7Hqy8fBR1ma0BVv2xaYRMtaFsCVJRBPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:90:83:50:79:5d:b1:dd:1d:bb:30:6b:b9:62:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
Validity
Not Before: Feb 9 11:00:42 2026 GMT
Not After : Feb 10 11:00:42 2026 GMT
Subject: CN=3c0a4a306a13bf75e7c49d286510ba6f80d8fcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:76:aa:82:35:10:49:5a:4a:45:ed:e7:82:
ea:66:d6:dd:97:21:99:01:95:c9:73:6f:84:91:6b:
77:7c:0f:5a:96:89:57:a2:dc:62:ce:d4:fe:78:d0:
46:f2:84:db:ee:90:da:b5:32:4f:f0:13:b8:f2:0f:
82:44:a6:1f:d1:cd:46:97:92:06:9f:9d:1f:b9:6a:
3d:85:aa:1f:fa:c7:77:3a:63:9b:66:ac:12:a1:7e:
4f:c1:0f:9e:d5:02:7e:9b:75:9e:8b:7c:ca:41:19:
b9:e1:a4:b8:54:5a:7d:fb:e5:41:c0:81:49:64:cb:
48:a4:0c:55:1d:f9:77:2a:0b:51:c4:9a:9f:e7:8f:
cd:b8:26:06:32:9b:53:c1:96:bf:e6:89:bd:29:4e:
02:ad:68:95:55:d5:90:5a:26:57:08:a2:bd:63:45:
2d:ab:e9:d9:de:7e:db:d4:51:b2:b2:d1:98:eb:53:
22:db:89:25:ab:18:d4:97:82:b6:4f:cc:14:96:1e:
63:02:43:0f:54:a9:53:36:7c:e1:82:8d:ed:82:8e:
33:2d:a9:33:86:5d:5b:3f:59:a2:37:21:99:20:22:
c1:04:d8:c1:15:89:d0:4b:5f:28:fd:29:a6:ed:7f:
e7:e5:f9:d7:f6:f2:96:43:5b:bf:fe:18:7f:f1:1e:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0A:4A:30:6A:13:BF:75:E7:C4:9D:28:65:10:BA:6F:80:D8:FC:D4
X509v3 Authority Key Identifier:
keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:89:af:4b:54:0e:05:f1:ec:5b:37:a4:95:0f:5e:47:6d:c3:
e7:21:0a:08:df:92:e8:bf:d9:39:dd:0b:9e:c7:3c:72:e1:05:
40:a6:7d:2c:01:6e:6b:5c:f6:4a:70:7a:11:b8:5c:24:9f:90:
77:42:66:07:5e:01:0c:28:0f:b6:08:a5:1f:c8:25:a1:92:87:
d5:66:5c:14:1e:40:02:28:97:80:5c:05:3c:04:4c:9b:0b:18:
58:df:4e:44:87:85:ce:2d:21:37:e1:8a:aa:2c:cb:43:a5:fc:
cd:3e:26:f5:51:73:4f:b9:d0:78:a6:ab:eb:2b:d4:58:a8:40:
c4:cc:17:c4:2c:c4:f6:82:b7:97:bf:ae:9a:e2:78:1b:31:a5:
7a:2c:bb:09:6b:68:3d:b8:68:59:ca:66:a7:6e:f3:d3:79:9e:
8e:9b:46:a3:e9:57:62:05:fe:a6:e7:88:cf:83:01:d9:97:c8:
49:d2:a6:47:92:69:24:f7:ec:74:cd:31:7b:a2:89:fa:11:19:
1f:70:79:e4:65:8f:8c:b2:88:09:9a:ac:6f:85:1d:d9:c1:ec:
1d:10:f2:62:0a:b7:fd:2d:63:4d:b9:b3:69:06:92:08:58:aa:
83:eb:65:2c:aa:76:0f:67:c5:b7:d1:be:29:f9:13:4b:b4:c1:
8a:86:f0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:36 2026 by rpki-client