This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json) Hash identifier: up3p5NObv9u9052HQRE8y/fK110bjAcoC0hIIEO8/m0= Subject key identifier: FF:C2:9C:DD:6F:4B:0A:DB:AA:29:43:70:1C:4C:8C:AB:4F:68:F2:E0 Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b Certificate serial: 019BF68844EFE31EDECE33BA64F2C933C5B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft Manifest number: 118C Signing time: Sun 25 Jan 2026 19:01:23 +0000 Manifest this update: Sun 25 Jan 2026 19:01:23 +0000 Manifest next update: Mon 26 Jan 2026 19:01:23 +0000 Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: G2xvYI/b7folVzGGQ/GfaMxI4kvHW8sy8c+fWbFPrUY=) 2: lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa (hash: XY5Vcv+RR5CpckRK8/VMlpNGWq4j8wxQj8pmKCvhpds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:44:ef:e3:1e:de:ce:33:ba:64:f2:c9:33:c5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b Validity Not Before: Jan 25 19:01:23 2026 GMT Not After : Jan 26 19:01:23 2026 GMT Subject: CN=ffc29cdd6f4b0adbaa2943701c4c8cab4f68f2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:17:64:cd:ad:08:1d:53:14:ad:07:5b:6d:36: a2:40:26:ec:4d:eb:77:d6:ba:db:56:94:e4:97:9a: e0:d7:39:94:ae:a7:53:ac:c8:80:a7:0e:ad:7c:02: 81:b9:69:17:bd:94:3e:b9:2c:8b:41:53:3c:92:0b: 1c:21:ac:c8:50:9a:e8:af:88:c0:12:37:6f:a0:60: 40:d4:b4:2c:28:90:0a:0b:a0:97:b1:5c:27:78:67: 76:dc:65:a4:28:30:fa:4b:63:0c:bb:e3:a9:ea:32: 44:24:99:ba:b6:09:ec:2c:1a:0d:f0:e6:6f:f5:d3: 9e:47:8a:e7:ee:2b:eb:43:e5:0a:89:52:be:ef:88: 8f:fc:b9:b2:50:b4:06:49:7a:b3:d6:fc:a0:91:15: 4c:c5:0b:77:51:34:a5:1e:94:43:97:7b:16:1e:74: ef:06:55:db:9a:db:36:26:af:46:9d:3a:2f:3a:ba: b4:af:d7:28:0c:c7:16:74:36:14:db:ba:19:11:28: 0b:7c:8c:95:d4:c5:72:97:02:5b:e1:fa:2e:d5:03: aa:1d:41:a8:85:08:ca:84:b5:cf:0b:07:fe:c8:2a: d4:16:f3:e4:a4:9b:f3:85:43:45:31:94:10:a9:5d: 70:c9:e5:87:f7:04:33:32:4c:f1:6b:b1:bc:71:94: 82:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C2:9C:DD:6F:4B:0A:DB:AA:29:43:70:1C:4C:8C:AB:4F:68:F2:E0 X509v3 Authority Key Identifier: keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:94:aa:d6:5a:b7:1a:7a:f5:83:d5:c5:93:6e:5c:47:05:2d: 4c:f9:e6:7f:33:4b:71:9e:15:83:41:58:a2:0e:c1:66:35:20: a1:8a:9a:e1:5a:bd:06:80:96:3b:8c:54:87:ec:62:bb:81:85: 3c:98:9e:38:6a:1c:5f:db:2b:29:37:b6:b2:53:40:a6:de:03: 00:9d:18:d7:4b:93:77:17:b1:a5:8e:b9:d8:f6:3c:05:9f:99: d7:67:36:2a:a9:49:e9:2d:0d:84:c5:33:72:b1:cc:ff:43:31: 3d:3a:8d:96:ac:90:0b:46:85:45:55:d8:6e:03:85:31:27:f9: 9f:b0:f3:80:27:dc:2a:92:62:ca:dd:d2:b4:39:bc:8f:14:b6: da:82:53:a8:4e:b3:c6:38:43:eb:40:b7:ec:53:be:97:b1:be: 35:56:67:bf:52:c6:36:7a:7e:6b:12:32:73:b1:2e:4c:62:45: df:f3:9f:5a:dd:0e:1d:1e:9e:1a:3d:b0:d2:ff:e5:5f:86:1b: 9d:0a:12:e1:a1:54:9b:f7:55:d4:dc:5e:c0:28:a2:9f:24:3a: f8:cf:31:67:42:d5:8b:d6:5e:7a:af:27:65:0f:75:d7:21:6a: c9:fa:4f:99:8f:d4:a9:02:30:95:3e:a2:0b:bc:63:b2:84:1f: 35:89:74:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iETv4x7ezjO6ZPLJM8W5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi ZmNiNWIwHhcNMjYwMTI1MTkwMTIzWhcNMjYwMTI2MTkwMTIzWjAzMTEwLwYDVQQD EyhmZmMyOWNkZDZmNGIwYWRiYWEyOTQzNzAxYzRjOGNhYjRmNjhmMmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rdkza0IHVMUrQdbbTaiQCbsTet3 1rrbVpTkl5rg1zmUrqdTrMiApw6tfAKBuWkXvZQ+uSyLQVM8kgscIazIUJror4jA EjdvoGBA1LQsKJAKC6CXsVwneGd23GWkKDD6S2MMu+Op6jJEJJm6tgnsLBoN8OZv 9dOeR4rn7ivrQ+UKiVK+74iP/LmyULQGSXqz1vygkRVMxQt3UTSlHpRDl3sWHnTv BlXbmts2Jq9GnTovOrq0r9coDMcWdDYU27oZESgLfIyV1MVylwJb4fou1QOqHUGo hQjKhLXPCwf+yCrUFvPkpJvzhUNFMZQQqV1wyeWH9wQzMkzxa7G8cZSCXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/CnN1vSwrbqilDcBxMjKtPaPLgMB8GA1UdIwQY MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpSq1lq3 Gnr1g9XFk25cRwUtTPnmfzNLcZ4Vg0FYog7BZjUgoYqa4Vq9BoCWO4xUh+xiu4GF PJieOGocX9srKTe2slNApt4DAJ0Y10uTdxexpY652PY8BZ+Z12c2KqlJ6S0NhMUz crHM/0MxPTqNlqyQC0aFRVXYbgOFMSf5n7DzgCfcKpJiyt3StDm8jxS22oJTqE6z xjhD60C37FO+l7G+NVZnv1LGNnp+axIyc7EuTGJF3/OfWt0OHR6eGj2w0v/lX4Yb nQoS4aFUm/dV1NxewCiinyQ6+M8xZ0LVi9Zeeq8nZQ911yFqyfpPmY/UqQIwlT6i C7xjsoQfNYl01g== -----END CERTIFICATE-----Generated at Mon Jan 26 01:20:11 2026 by rpki-client