This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft File: 1-msoRBterQGEZTXq8gv9B1LgdkU.mft (raw, json) Hash identifier: HVRzkc4sTSqZX2KTQXCx+eijtpiezQn+DU011t64PN4= Subject key identifier: 47:99:58:E5:1C:FD:BB:94:A5:6B:CB:05:70:BE:BB:25:08:E9:D5:64 Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45 Certificate issuer: /CN=fa6b28441b5ead01846535eaf20bfd0752e07645 Certificate serial: 019BFB09031C270F37CE03715B9CE31A3935 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft Manifest number: 0131 Signing time: Mon 26 Jan 2026 16:00:30 +0000 Manifest this update: Mon 26 Jan 2026 16:00:30 +0000 Manifest next update: Tue 27 Jan 2026 16:00:30 +0000 Files and hashes: 1: 1-msoRBterQGEZTXq8gv9B1LgdkU.crl (hash: JvETH4wMHadNMnRqgfZYmbRaM2VjSZkDqEMc0MtvCBw=) 2: 2798bsS-ftRBFC8OmYwDYZazwYQ.roa (hash: YEsqHt1g8/MDYthWrn0j31l+d4G+HJ7yjiXjTwZ5WJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:03:1c:27:0f:37:ce:03:71:5b:9c:e3:1a:39:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645 Validity Not Before: Jan 26 16:00:30 2026 GMT Not After : Jan 27 16:00:30 2026 GMT Subject: CN=479958e51cfdbb94a56bcb0570bebb2508e9d564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:33:b5:34:28:b5:93:32:b2:ff:45:f0:d6: 9a:4b:38:ce:58:cb:8c:38:df:3c:65:39:3f:ab:85: 0a:76:16:f0:7d:ec:87:7f:18:bf:71:cd:7d:2e:70: 1f:c2:10:f7:56:e5:31:ed:04:1d:c3:a2:cf:1e:a0: cd:f7:a7:85:3d:80:8c:59:e7:e6:b7:25:d5:30:63: 2b:f8:3b:d3:7f:4c:d8:24:d7:30:23:16:7f:56:a5: 9a:2d:9a:e3:77:0c:12:1d:2d:3f:6b:36:04:12:21: 41:7e:8a:90:1c:15:97:c3:9a:7c:20:03:61:66:d9: de:1c:a6:fe:48:6c:1b:60:ef:be:cd:bf:3f:93:64: e0:e0:69:27:c6:08:5d:91:6b:66:f6:7b:45:5b:0b: 41:be:85:92:a8:d2:69:08:88:b0:d5:d0:d3:47:db: 40:fd:70:d4:f9:8c:fb:42:0f:62:39:cf:ab:f3:c9: 8b:7f:d8:73:38:ab:3b:e6:46:eb:55:e4:5c:fe:90: 93:43:48:ac:32:a3:76:03:ab:a8:59:4e:cb:68:70: 1d:9a:cb:5c:fc:fb:c1:eb:9a:ee:be:30:e0:3a:d2: 4f:1c:a5:91:ca:b3:57:b1:24:0f:55:35:01:8e:c3: 47:06:d0:87:1c:61:98:b9:ca:87:47:ec:4a:25:8a: da:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:99:58:E5:1C:FD:BB:94:A5:6B:CB:05:70:BE:BB:25:08:E9:D5:64 X509v3 Authority Key Identifier: keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e6:51:36:da:e5:19:0f:13:05:a4:a3:ec:63:d5:47:2b:4f: da:ec:50:f3:7a:bb:56:e0:78:a4:0b:e9:98:c9:c9:31:cd:ca: a2:58:4c:13:2b:85:41:7d:6f:f6:fe:85:85:b0:a3:f5:f7:e0: b5:ba:8f:a7:5a:1e:3c:22:ad:04:3a:e2:66:09:92:bd:10:09: 84:41:1d:1d:e4:7b:0d:ad:04:46:ae:4f:6e:fd:60:92:9c:55: 03:78:b0:1f:03:85:12:ba:6a:51:49:b4:50:ab:40:b5:31:2f: 6f:4b:60:af:91:e6:41:fc:9f:1e:ea:90:b8:ed:53:c9:96:0c: 5b:dd:45:8c:f8:f8:2b:fe:5a:aa:2d:50:af:2d:67:2a:8d:a7: 9b:bf:bd:d7:e3:73:ec:4f:b9:66:1c:00:d9:cf:12:19:92:ee: 18:11:18:74:1c:92:8c:3e:9f:e2:3c:04:89:71:f4:1f:ab:83: 1a:b8:63:82:e6:88:0a:2b:bd:1a:79:d3:d0:b4:4f:58:19:24: 68:f5:ea:95:37:87:00:75:00:f4:9e:3c:bc:ef:7f:d8:3c:b5: 97:b6:d3:47:d5:a6:ae:65:c2:09:5b:fa:94:4e:0c:ac:0e:29: 58:b5:25:10:41:8b:e0:27:ba:86:2f:e2:ab:83:f8:6a:03:23: 05:ab:a8:d6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv7CQMcJw83zgNxW5zjGjk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNmIyODQ0MWI1ZWFkMDE4NDY1MzVlYWYyMGJmZDA3NTJl MDc2NDUwHhcNMjYwMTI2MTYwMDMwWhcNMjYwMTI3MTYwMDMwWjAzMTEwLwYDVQQD Eyg0Nzk5NThlNTFjZmRiYjk0YTU2YmNiMDU3MGJlYmIyNTA4ZTlkNTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jcztTQotZMysv9F8NaaSzjOWMuM ON88ZTk/q4UKdhbwfeyHfxi/cc19LnAfwhD3VuUx7QQdw6LPHqDN96eFPYCMWefm tyXVMGMr+DvTf0zYJNcwIxZ/VqWaLZrjdwwSHS0/azYEEiFBfoqQHBWXw5p8IANh ZtneHKb+SGwbYO++zb8/k2Tg4GknxghdkWtm9ntFWwtBvoWSqNJpCIiw1dDTR9tA /XDU+Yz7Qg9iOc+r88mLf9hzOKs75kbrVeRc/pCTQ0isMqN2A6uoWU7LaHAdmstc /PvB65ruvjDgOtJPHKWRyrNXsSQPVTUBjsNHBtCHHGGYucqHR+xKJYrazwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEeZWOUc/buUpWvLBXC+uyUI6dVkMB8GA1UdIwQY MBaAFPprKEQbXq0BhGU16vIL/QdS4HZFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tc29SQnRlclFHRVpUWHE4Z3Y5QjFMZ2RrVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvYmRkMjU2LTJmNTktNDMxYi1iNjUz LWNhZTY3OGIyZjIxZS8xLzEtbXNvUkJ0ZXJRR0VaVFhxOGd2OUIxTGdka1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ4L2JkZDI1Ni0yZjU5LTQzMWItYjY1My1jYWU2NzhiMmYy MWUvMS8xLW1zb1JCdGVyUUdFWlRYcThndjlCMUxnZGtVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+ZR NtrlGQ8TBaSj7GPVRytP2uxQ83q7VuB4pAvpmMnJMc3KolhMEyuFQX1v9v6FhbCj 9ffgtbqPp1oePCKtBDriZgmSvRAJhEEdHeR7Da0ERq5Pbv1gkpxVA3iwHwOFErpq UUm0UKtAtTEvb0tgr5HmQfyfHuqQuO1TyZYMW91FjPj4K/5aqi1Qry1nKo2nm7+9 1+Nz7E+5ZhwA2c8SGZLuGBEYdBySjD6f4jwEiXH0H6uDGrhjguaICiu9GnnT0LRP WBkkaPXqlTeHAHUA9J48vO9/2Dy1l7bTR9WmrmXCCVv6lE4MrA4pWLUlEEGL4Ce6 hi/iq4P4agMjBauo1g== -----END CERTIFICATE-----Generated at Mon Jan 26 18:14:25 2026 by rpki-client