This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json) Hash identifier: mKsTTtAaB3Lld10xu+H/50IEwMqlT7ObZqY3CmfY0vA= Subject key identifier: C9:27:53:9B:EC:F8:89:7B:B0:C4:59:10:D2:7E:64:33:43:2A:14:F2 Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20 Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520 Certificate serial: 019BF79A9A811F46550EC40AB1BCD20EAD7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft Manifest number: 04BC Signing time: Mon 26 Jan 2026 00:01:02 +0000 Manifest this update: Mon 26 Jan 2026 00:01:02 +0000 Manifest next update: Tue 27 Jan 2026 00:01:02 +0000 Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: Y8jL93HqXStgUPx6v2dXifHkV2vInNbCB8wzgE20lp0=) 2: _wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa (hash: xAETLQSOhALtmZdJmJO16llGLniZWhsZVgeHdBOnhYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:9a:81:1f:46:55:0e:c4:0a:b1:bc:d2:0e:ad:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520 Validity Not Before: Jan 26 00:01:02 2026 GMT Not After : Jan 27 00:01:02 2026 GMT Subject: CN=c927539becf8897bb0c45910d27e6433432a14f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:d2:42:d9:bf:9a:f3:44:48:c9:86:fd:b2: da:be:0d:2a:69:f4:53:dc:94:86:ae:93:e5:27:26: 3a:ba:ef:75:6b:fc:28:b5:96:85:33:e8:f4:36:12: 93:2c:8e:fb:d7:08:9b:6d:35:8c:42:97:0b:76:8c: d6:e7:a2:1a:a6:ff:7b:d0:84:81:30:bd:d6:9f:35: 58:3c:ad:7a:b1:4d:6b:ae:f5:ec:b5:38:90:96:9b: b5:15:c9:25:c5:ba:7c:7c:4f:ce:48:6d:82:2b:ab: 33:cd:2f:f2:8e:94:f2:ea:a9:6a:a3:5d:83:1c:e4: 8f:ec:ee:55:fb:ca:90:6b:42:38:a2:1c:17:1f:82: e1:e5:60:f4:d1:7d:71:e2:02:f7:63:4d:8a:70:d7: 60:89:9d:9b:83:de:31:fe:d3:95:06:81:be:2e:20: b0:ed:a1:6b:10:14:2f:8f:c4:36:a5:36:2b:97:97: d5:8e:b9:4e:dd:47:97:c1:4c:c6:70:e7:e2:a7:36: 1f:51:d9:7e:f1:0a:37:17:7c:6b:92:06:bb:d6:6d: 84:83:49:0f:7f:f2:7c:28:95:61:d2:7c:0d:dc:38: 2d:ee:59:d7:2d:21:7f:ef:9e:3d:dd:87:51:98:35: c2:b6:72:0a:12:70:9b:c0:f9:d8:22:ba:6f:a9:72: cb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:27:53:9B:EC:F8:89:7B:B0:C4:59:10:D2:7E:64:33:43:2A:14:F2 X509v3 Authority Key Identifier: keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5f:35:4b:6b:c1:d2:fa:f0:7a:9c:f6:d4:3b:f8:f5:40:54: e9:b3:41:72:68:37:ad:62:e1:1d:9b:e6:e7:21:77:39:7f:d8: d4:a7:a5:fe:61:aa:e3:a6:7a:55:19:67:3a:e5:b7:13:f1:38: 0c:a6:8a:f1:ef:16:f3:47:b3:2b:32:2a:d9:59:96:6d:e1:4d: 3c:6b:a8:27:59:29:c6:99:f1:14:c1:a5:1c:a0:f7:99:91:20: 84:2e:b4:1d:6f:ba:52:14:b1:67:59:3b:45:5e:ab:9d:66:04: 81:ee:b9:6f:27:1b:ab:8c:c1:94:e8:37:97:61:58:b7:be:41: 25:e3:a8:cc:78:f7:46:38:be:dc:31:1f:dc:b7:ba:92:39:76: aa:1e:be:eb:ff:71:6a:b4:52:4b:b5:f5:a5:1d:2c:21:5d:49: 48:50:cb:7f:de:00:7c:90:e8:ea:c1:5c:47:a7:4d:8d:0c:83: 5a:eb:5f:67:d8:88:5b:84:e1:cb:8f:f1:62:21:b2:ba:c6:9f: f8:a1:82:11:82:57:77:c0:42:c5:aa:9b:1b:b0:c2:e4:0f:fd: e0:77:7d:bc:4a:c8:31:28:ed:bf:87:0b:f6:10:82:46:7c:1c: 84:97:68:bf:4d:1b:4c:08:6b:ac:f0:3e:fe:4e:d8:30:b7:ee: 72:67:a1:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mpqBH0ZVDsQKsbzSDq1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGZlMmIxOWJkM2ViN2Y3MGE0ZWVkYWI2MTZiNTMyNTAw MTE1MjAwHhcNMjYwMTI2MDAwMTAyWhcNMjYwMTI3MDAwMTAyWjAzMTEwLwYDVQQD EyhjOTI3NTM5YmVjZjg4OTdiYjBjNDU5MTBkMjdlNjQzMzQzMmExNGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoTSQtm/mvNESMmG/bLavg0qafRT 3JSGrpPlJyY6uu91a/wotZaFM+j0NhKTLI771wibbTWMQpcLdozW56Iapv970ISB ML3WnzVYPK16sU1rrvXstTiQlpu1Fcklxbp8fE/OSG2CK6szzS/yjpTy6qlqo12D HOSP7O5V+8qQa0I4ohwXH4Lh5WD00X1x4gL3Y02KcNdgiZ2bg94x/tOVBoG+LiCw 7aFrEBQvj8Q2pTYrl5fVjrlO3UeXwUzGcOfipzYfUdl+8Qo3F3xrkga71m2Eg0kP f/J8KJVh0nwN3Dgt7lnXLSF/75493YdRmDXCtnIKEnCbwPnYIrpvqXLLWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMknU5vs+Il7sMRZENJ+ZDNDKhTyMB8GA1UdIwQY MBaAFDyP4rGb0+t/cKTu2rYWtTJQARUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lN2VkZDEtYzc5Zi00ODkwLWExNzUt MTJlNmE2ZWRkMTI0LzEvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lN2VkZDEtYzc5Zi00ODkwLWExNzUtMTJlNmE2ZWRkMTI0 LzEvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG181S2vB 0vrwepz21Dv49UBU6bNBcmg3rWLhHZvm5yF3OX/Y1Kel/mGq46Z6VRlnOuW3E/E4 DKaK8e8W80ezKzIq2VmWbeFNPGuoJ1kpxpnxFMGlHKD3mZEghC60HW+6UhSxZ1k7 RV6rnWYEge65bycbq4zBlOg3l2FYt75BJeOozHj3Rji+3DEf3Le6kjl2qh6+6/9x arRSS7X1pR0sIV1JSFDLf94AfJDo6sFcR6dNjQyDWutfZ9iIW4Thy4/xYiGyusaf +KGCEYJXd8BCxaqbG7DC5A/94Hd9vErIMSjtv4cL9hCCRnwchJdov00bTAhrrPA+ /k7YMLfucmehTA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:50 2026 by rpki-client