This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft File: mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft (raw, json) Hash identifier: iPNPZGS/WjlLhfPFFuXFtqOKFaMYnXKpxy1gXzUSKwk= Subject key identifier: 3E:C3:D1:7A:E5:19:11:68:93:7F:50:11:D3:D5:AE:79:7E:72:B2:41 Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB Certificate issuer: /CN=99252ff7f4dcf62234d22f86a1135b344923daab Certificate serial: 019C42EB18BFB5C0DD3ADD8A75BAB138D8BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft Manifest number: 0AC7 Signing time: Mon 09 Feb 2026 15:00:29 +0000 Manifest this update: Mon 09 Feb 2026 15:00:29 +0000 Manifest next update: Tue 10 Feb 2026 15:00:29 +0000 Files and hashes: 1: RQkXmpWajYBXor9So-wL840KNkQ.roa (hash: X3j2x3fF0ht1rXuyx9TYCfG+9AORrgkuoTZ6MublhHE=) 2: mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl (hash: hSb2xQWztjXqnpT/Xjd0UjvPM6jFaq2ebllKt7CK1WY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:18:bf:b5:c0:dd:3a:dd:8a:75:ba:b1:38:d8:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab Validity Not Before: Feb 9 15:00:29 2026 GMT Not After : Feb 10 15:00:29 2026 GMT Subject: CN=3ec3d17ae5191168937f5011d3d5ae797e72b241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:4a:21:fd:76:7b:02:3c:eb:03:4d:02:05: 59:12:f6:38:1f:b3:88:eb:ff:10:8c:7e:0a:d5:97: 9b:e2:e1:a6:00:c2:df:ec:0e:87:00:85:99:63:00: 3f:cc:fc:e8:08:26:a1:f8:9a:9a:54:00:1b:ec:29: af:5a:57:93:0d:d1:40:d1:a3:cc:a0:b8:54:a1:6e: e1:da:b1:65:bf:3a:de:f5:5d:c0:f9:72:5b:53:ad: d4:2f:50:67:70:4b:0a:bb:86:d8:ee:6a:d7:a9:7e: 7e:5d:f3:a6:e8:73:6a:c2:cc:da:ae:2d:db:b6:54: 9e:7d:5e:88:d5:af:2a:2d:9b:5c:e6:5e:54:5e:a1: a1:f2:2f:19:40:33:d3:8e:95:f5:ff:49:20:aa:51: b3:a3:09:48:ea:b8:2f:46:36:ea:6f:02:c0:4d:1a: f8:8b:a1:8a:5f:a0:b7:9d:48:b1:5e:c1:5c:02:7f: eb:b1:88:27:15:6f:8f:9b:24:6d:f1:be:15:ae:27: 74:3c:13:95:34:0b:00:8a:8c:18:8e:09:12:1f:42: 78:84:f6:a9:3f:cb:9c:a5:aa:d9:f5:0b:aa:7a:59: b8:f4:29:91:fe:d2:7e:ef:6a:f3:7d:0a:8b:61:5a: 06:c9:af:18:75:78:c7:7c:bb:7d:83:71:f4:27:d2: ea:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C3:D1:7A:E5:19:11:68:93:7F:50:11:D3:D5:AE:79:7E:72:B2:41 X509v3 Authority Key Identifier: keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:2c:63:c1:91:35:a5:88:db:06:1c:6f:9c:66:29:cc:98:18: f0:7a:80:45:3a:61:d8:0b:94:35:d5:c0:ca:e1:5a:f9:5a:88: cd:9c:73:61:5a:82:1d:ce:35:4f:86:5c:43:29:d0:9b:b0:54: ea:fa:6e:96:62:ea:38:a0:95:4e:b1:40:87:fa:63:90:4e:dc: 11:a9:93:6c:b1:dd:56:1a:46:93:2c:7d:ed:5d:f7:80:d0:fa: 96:2c:53:39:c6:01:d2:2a:3b:c4:09:22:05:86:7f:01:64:58: 2c:eb:0d:72:04:09:92:73:d7:28:1a:4f:b4:79:fe:10:59:51: c0:ad:16:35:37:c1:e6:92:f1:ad:0d:d6:bd:82:31:6e:c6:33: 7b:ad:ca:74:1a:1e:b8:b2:59:ad:1c:b0:e9:81:3c:23:37:b1: 0b:9a:e5:9e:9f:bc:4f:2f:db:b0:88:7a:99:7c:1e:13:d2:ce: 6f:df:f9:b6:ff:de:47:f0:6e:0f:ef:f6:0a:ab:c5:f6:47:2c: 09:0f:be:fd:4a:03:c6:13:90:a9:aa:e0:fa:da:29:57:58:ba: 0a:09:72:a6:59:00:02:ff:e5:85:d3:df:12:bf:ea:c0:f9:7f: da:97:e7:db:fb:5d:e2:62:36:55:1f:45:cc:5e:b3:e6:38:76: 9e:fa:35:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6xi/tcDdOt2KdbqxONi/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MjUyZmY3ZjRkY2Y2MjIzNGQyMmY4NmExMTM1YjM0NDky M2RhYWIwHhcNMjYwMjA5MTUwMDI5WhcNMjYwMjEwMTUwMDI5WjAzMTEwLwYDVQQD EygzZWMzZDE3YWU1MTkxMTY4OTM3ZjUwMTFkM2Q1YWU3OTdlNzJiMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqdKIf12ewI86wNNAgVZEvY4H7OI 6/8QjH4K1Zeb4uGmAMLf7A6HAIWZYwA/zPzoCCah+JqaVAAb7CmvWleTDdFA0aPM oLhUoW7h2rFlvzre9V3A+XJbU63UL1BncEsKu4bY7mrXqX5+XfOm6HNqwszari3b tlSefV6I1a8qLZtc5l5UXqGh8i8ZQDPTjpX1/0kgqlGzowlI6rgvRjbqbwLATRr4 i6GKX6C3nUixXsFcAn/rsYgnFW+PmyRt8b4Vrid0PBOVNAsAiowYjgkSH0J4hPap P8ucparZ9Quqelm49CmR/tJ+72rzfQqLYVoGya8YdXjHfLt9g3H0J9LqyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7D0XrlGRFok39QEdPVrnl+crJBMB8GA1UdIwQY MBaAFJklL/f03PYiNNIvhqETWzRJI9qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jOTIwZGEtMWRmOC00OTI3LTg4MzEt YWIwNjY0ZTYzZmI2LzEvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9jOTIwZGEtMWRmOC00OTI3LTg4MzEtYWIwNjY0ZTYzZmI2 LzEvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxSxjwZE1 pYjbBhxvnGYpzJgY8HqARTph2AuUNdXAyuFa+VqIzZxzYVqCHc41T4ZcQynQm7BU 6vpulmLqOKCVTrFAh/pjkE7cEamTbLHdVhpGkyx97V33gND6lixTOcYB0io7xAki BYZ/AWRYLOsNcgQJknPXKBpPtHn+EFlRwK0WNTfB5pLxrQ3WvYIxbsYze63KdBoe uLJZrRyw6YE8IzexC5rlnp+8Ty/bsIh6mXweE9LOb9/5tv/eR/BuD+/2CqvF9kcs CQ++/UoDxhOQqarg+topV1i6CglyplkAAv/lhdPfEr/qwPl/2pfn2/td4mI2VR9F zF6z5jh2nvo1AQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:27 2026 by rpki-client