This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json) Hash identifier: dddLeh6SnibxPwm+97EeSJUDl1LLcTnPzXCj0Kp5axw= Subject key identifier: 11:F0:46:EB:E7:FF:B2:5D:A6:E8:F5:99:C8:0C:DD:1F:2B:C5:BA:00 Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f Certificate serial: 019BF53EE37FFCC916EC0BD950FE7449A955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft Manifest number: 02F6 Signing time: Sun 25 Jan 2026 13:01:37 +0000 Manifest this update: Sun 25 Jan 2026 13:01:37 +0000 Manifest next update: Mon 26 Jan 2026 13:01:37 +0000 Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: 7TpuhcppQE8q7NuzzdK+sH1co43/pHBGUaecKMNKSbU=) 2: NZcLGrLahjEtjP7fLNWfO9mZoLE.roa (hash: zL4AvdmqKuWo9f0HM/Qoz6/mOwYwWcYK23qO3ml73Nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:e3:7f:fc:c9:16:ec:0b:d9:50:fe:74:49:a9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f Validity Not Before: Jan 25 13:01:37 2026 GMT Not After : Jan 26 13:01:37 2026 GMT Subject: CN=11f046ebe7ffb25da6e8f599c80cdd1f2bc5ba00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a1:1f:87:13:b8:e8:47:87:f3:49:7d:e3:64: 6f:3d:a0:73:83:ec:f6:10:71:6e:b5:ec:13:f8:0a: f2:21:57:d4:ed:06:c4:bc:59:5e:9c:d2:14:9f:d1: d9:a2:79:48:7f:b6:db:05:f2:31:d5:6f:37:64:73: 2a:f9:91:a8:b8:0a:72:f4:ad:eb:6c:4a:17:73:30: e4:ff:44:b9:f5:6a:48:2e:bb:05:02:e6:11:f1:04: 85:11:41:71:2e:8d:a2:ab:7d:01:ad:4c:cf:08:fd: 8d:67:1e:6b:75:e5:40:57:c3:84:e7:86:71:06:4a: 65:d5:4b:8d:86:07:e5:bf:46:bc:5e:de:a9:b4:a8: 9f:53:e7:37:22:e2:d5:67:d1:21:08:d0:28:76:68: 29:1a:69:a7:e9:78:4b:10:7f:50:8c:8c:dd:de:df: 9b:c5:13:3e:57:90:c8:36:1f:c3:ff:b0:4c:fb:70: 2d:79:48:74:0a:4e:44:06:4f:20:8b:a8:6a:43:12: da:6f:b5:3e:e5:7b:a7:aa:a4:ad:53:3c:35:55:74: 9d:0d:90:67:47:8d:a8:65:ec:1d:75:f6:61:ec:32: 74:a2:94:51:3e:67:fe:0f:31:79:e5:4e:bf:f8:26: 1b:5b:88:3b:a2:06:65:e7:c8:01:b2:c2:f9:53:9e: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F0:46:EB:E7:FF:B2:5D:A6:E8:F5:99:C8:0C:DD:1F:2B:C5:BA:00 X509v3 Authority Key Identifier: keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:62:19:7b:6f:e3:9d:f4:23:0d:24:d9:af:a7:67:4d:42:51: b6:56:28:d1:7e:e6:7b:34:06:f7:48:ab:c7:15:bf:5b:20:54: 86:11:50:92:9d:6e:26:82:a2:a8:43:6c:ed:38:73:43:4e:50: 1f:e3:9f:c5:de:29:33:a4:10:2d:11:1f:d8:01:6b:5f:65:e7: b8:5a:87:35:35:f3:44:76:a7:f9:df:23:ad:84:f1:24:e4:b5: 31:ae:02:c9:e8:d5:3b:09:1f:ef:b8:07:3e:5e:ba:2d:a9:7f: a0:8f:41:ed:27:18:98:07:d9:c3:28:bd:f9:6c:1d:e8:43:c9: 12:eb:50:e0:55:8c:50:3a:7e:8a:a7:cd:4f:1a:0c:a8:eb:44: 9c:8f:9f:5b:2e:e4:b3:5c:48:ed:c1:0e:1c:b7:50:bc:61:91: 53:f1:31:6e:a4:ff:ce:02:3c:9d:6f:b1:ca:6a:2d:d4:7c:21: 98:d4:a2:b3:09:58:43:7e:aa:e6:12:86:a0:8c:6a:d6:46:12: 4b:8b:6c:e5:4d:45:2e:69:cc:ed:76:2e:1c:78:d0:e1:0d:f6: 0f:70:54:69:c0:cc:54:d8:56:92:7c:b3:cb:17:16:b6:d5:6c: 4f:d3:23:ad:10:54:ea:13:c3:05:67:b3:79:29:b0:4c:35:d7: 3b:2b:2b:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PuN//MkW7AvZUP50SalVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjM5OWIxMjkwY2Q0MTlhNzhiZDJmYjMxMWUzYmM3ZGY5 ZjVmMWYwHhcNMjYwMTI1MTMwMTM3WhcNMjYwMTI2MTMwMTM3WjAzMTEwLwYDVQQD EygxMWYwNDZlYmU3ZmZiMjVkYTZlOGY1OTljODBjZGQxZjJiYzViYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6EfhxO46EeH80l942RvPaBzg+z2 EHFutewT+AryIVfU7QbEvFlenNIUn9HZonlIf7bbBfIx1W83ZHMq+ZGouApy9K3r bEoXczDk/0S59WpILrsFAuYR8QSFEUFxLo2iq30BrUzPCP2NZx5rdeVAV8OE54Zx Bkpl1UuNhgflv0a8Xt6ptKifU+c3IuLVZ9EhCNAodmgpGmmn6XhLEH9QjIzd3t+b xRM+V5DINh/D/7BM+3AteUh0Ck5EBk8gi6hqQxLab7U+5XunqqStUzw1VXSdDZBn R42oZewddfZh7DJ0opRRPmf+DzF55U6/+CYbW4g7ogZl58gBssL5U56BwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHwRuvn/7Jdpuj1mcgM3R8rxboAMB8GA1UdIwQY MBaAFDEjmbEpDNQZp4vS+zEeO8ffn18fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzY0OTktOTE0My00ODc3LTlkZmYt Mjg4NDEwMzc3NmM4LzEvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NzY0OTktOTE0My00ODc3LTlkZmYtMjg4NDEwMzc3NmM4 LzEvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWIZe2/j nfQjDSTZr6dnTUJRtlYo0X7mezQG90irxxW/WyBUhhFQkp1uJoKiqENs7ThzQ05Q H+Ofxd4pM6QQLREf2AFrX2XnuFqHNTXzRHan+d8jrYTxJOS1Ma4CyejVOwkf77gH Pl66Lal/oI9B7ScYmAfZwyi9+Wwd6EPJEutQ4FWMUDp+iqfNTxoMqOtEnI+fWy7k s1xI7cEOHLdQvGGRU/ExbqT/zgI8nW+xymot1HwhmNSiswlYQ36q5hKGoIxq1kYS S4ts5U1FLmnM7XYuHHjQ4Q32D3BUacDMVNhWknyzyxcWttVsT9MjrRBU6hPDBWez eSmwTDXXOysrwQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:34 2026 by rpki-client