This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json) Hash identifier: BXtKc7trxhuJ+bhfX5niuUw4GylFKFhn8UDZX7gUuqQ= Subject key identifier: 2B:7B:88:47:9F:D8:2A:AD:57:16:B3:29:DE:F4:2E:B4:96:11:36:52 Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44 Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44 Certificate serial: 019BF46334ADBDB74FA3C5EC9D097DE002C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft Manifest number: 0122 Signing time: Sun 25 Jan 2026 09:01:40 +0000 Manifest this update: Sun 25 Jan 2026 09:01:40 +0000 Manifest next update: Mon 26 Jan 2026 09:01:40 +0000 Files and hashes: 1: LbAsbZP8pKdcgYfmiIDyAGQBKho.roa (hash: 7+EfPR+EVPJJ8yuh3DwijyIrg0LTXffAnGr7QnFnXFE=) 2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: DWzPlShs0+7DNqhaLkoI4GEfg9LRxNjwL4+b+EGk/Z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:34:ad:bd:b7:4f:a3:c5:ec:9d:09:7d:e0:02:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44 Validity Not Before: Jan 25 09:01:40 2026 GMT Not After : Jan 26 09:01:40 2026 GMT Subject: CN=2b7b88479fd82aad5716b329def42eb496113652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:c4:c8:63:62:8d:1f:fd:48:7f:be:bc:5a: cc:df:fd:77:77:4a:7a:dd:1a:f3:e5:a8:12:7b:dd: 8e:8f:64:71:71:5b:f3:22:22:85:59:71:7d:e8:9d: 8f:3e:13:ac:61:51:85:1d:cc:8e:ce:45:3c:3d:68: 28:3a:75:bc:9d:af:1a:ea:a8:cd:25:00:09:92:d1: f6:b5:7c:05:03:37:ff:46:ce:a0:5a:f7:48:cf:92: da:bd:fb:84:59:f2:9c:e3:59:f7:23:47:66:70:ce: c3:4b:58:85:fd:5c:b0:3f:4a:5a:c5:98:e9:60:c9: 1a:02:bf:08:0a:34:b8:7a:9d:ea:4e:53:4f:ce:7e: 67:e0:ec:c6:ae:28:9c:9e:d4:d2:b7:56:55:93:c4: 7e:d2:65:2f:36:59:3e:91:81:43:d1:e0:7a:78:c0: d4:47:6b:33:ce:3b:cb:ce:3f:3b:0d:b8:9b:13:09: 97:3c:a8:4b:af:47:b4:9a:0b:57:b4:91:98:f2:91: af:69:b3:5d:46:d9:a0:d3:c5:7d:5d:50:e8:0f:42: d1:54:f0:ed:84:fc:fb:fa:52:f4:a8:39:b0:95:1f: 18:16:22:63:26:c1:4e:eb:0d:08:bf:9e:83:c0:97: 68:60:fb:83:70:6e:b4:c5:fe:98:50:bf:84:ed:e8: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7B:88:47:9F:D8:2A:AD:57:16:B3:29:DE:F4:2E:B4:96:11:36:52 X509v3 Authority Key Identifier: keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:04:24:d4:72:ac:c4:85:e4:36:20:b8:63:04:2e:ed:43:57: 76:b4:7e:31:18:54:3b:2d:fa:8f:f6:be:cb:5a:12:cd:f8:a9: 36:4d:e5:4c:58:22:fc:e8:16:cf:f5:1f:eb:37:05:a6:c0:a4: 1a:60:72:73:ca:d3:ae:d5:89:b9:72:f5:73:ef:49:ec:05:4f: eb:d7:49:53:9b:e1:de:a9:02:11:df:bd:b9:8b:af:43:00:fe: a4:50:5f:97:8d:02:7b:d5:0a:cb:22:29:3a:c8:34:b3:81:26: 3d:31:36:1d:87:84:5e:b3:2b:05:71:be:c2:0a:fc:db:7d:39: 7b:75:3d:57:f4:83:dc:af:bb:6e:d8:a0:bd:58:d3:6b:b0:fa: 41:4e:5e:c7:1d:ed:15:af:3c:44:3f:3d:e4:3d:e0:40:0b:a8: 61:12:a6:2d:1b:c0:85:3e:1c:01:6e:00:26:3b:f6:ce:1b:55: c8:9d:4e:6d:2f:f1:f6:72:63:ed:d3:29:ef:c9:99:41:38:af: 5c:1e:02:3a:0a:c4:20:6a:aa:ef:a5:a2:bc:59:80:6c:99:a9: 8c:0e:87:c9:0f:96:90:19:6b:d3:5a:80:47:df:8a:02:4c:ca: ea:7e:09:c1:86:57:be:14:8d:2b:68:bf:f1:cd:c9:d7:0d:81: 27:ea:47:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YzStvbdPo8XsnQl94ALJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGEwNDk4ZWMzYjRlYjQ0ZjRkZjI1NDFhZTM5MTgwYWJi NjVmNDQwHhcNMjYwMTI1MDkwMTQwWhcNMjYwMTI2MDkwMTQwWjAzMTEwLwYDVQQD EygyYjdiODg0NzlmZDgyYWFkNTcxNmIzMjlkZWY0MmViNDk2MTEzNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgXEyGNijR/9SH++vFrM3/13d0p6 3Rrz5agSe92Oj2RxcVvzIiKFWXF96J2PPhOsYVGFHcyOzkU8PWgoOnW8na8a6qjN JQAJktH2tXwFAzf/Rs6gWvdIz5LavfuEWfKc41n3I0dmcM7DS1iF/VywP0paxZjp YMkaAr8ICjS4ep3qTlNPzn5n4OzGriicntTSt1ZVk8R+0mUvNlk+kYFD0eB6eMDU R2szzjvLzj87DbibEwmXPKhLr0e0mgtXtJGY8pGvabNdRtmg08V9XVDoD0LRVPDt hPz7+lL0qDmwlR8YFiJjJsFO6w0Iv56DwJdoYPuDcG60xf6YUL+E7eg3fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCt7iEef2CqtVxazKd70LrSWETZSMB8GA1UdIwQY MBaAFDyKBJjsO060T03yVBrjkYCrtl9EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wMmY2M2UtNGVhMi00M2FjLWFiZDUt MGRhYjIzMTI5MDJhLzEvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wMmY2M2UtNGVhMi00M2FjLWFiZDUtMGRhYjIzMTI5MDJh LzEvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgQk1HKs xIXkNiC4YwQu7UNXdrR+MRhUOy36j/a+y1oSzfipNk3lTFgi/OgWz/Uf6zcFpsCk GmByc8rTrtWJuXL1c+9J7AVP69dJU5vh3qkCEd+9uYuvQwD+pFBfl40Ce9UKyyIp Osg0s4EmPTE2HYeEXrMrBXG+wgr82305e3U9V/SD3K+7btigvVjTa7D6QU5exx3t Fa88RD895D3gQAuoYRKmLRvAhT4cAW4AJjv2zhtVyJ1ObS/x9nJj7dMp78mZQTiv XB4COgrEIGqq76WivFmAbJmpjA6HyQ+WkBlr01qAR9+KAkzK6n4JwYZXvhSNK2i/ 8c3J1w2BJ+pH8w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:45 2026 by rpki-client