This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft File: pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json) Hash identifier: gfTcopPKK4YpN1ygmOq9w3myrO2Xr1bYIjL8nNQ9hrI= Subject key identifier: E3:EC:8D:1E:8F:CA:45:4A:F8:FC:EE:E6:08:C4:94:80:1B:69:32:0D Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC Certificate issuer: /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc Certificate serial: 019BF53E81AC3E274DA38718F4722F639F74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft Manifest number: 0CA5 Signing time: Sun 25 Jan 2026 13:01:12 +0000 Manifest this update: Sun 25 Jan 2026 13:01:12 +0000 Manifest next update: Mon 26 Jan 2026 13:01:12 +0000 Files and hashes: 1: 8hDvXAFXtwTiaPxitWHApgLE65k.roa (hash: EiRwFtmOo1DVVx7O1xctBpgvgnvAfczha5+H5oxZvkk=) 2: FrgtLDHlGMWP7-Ol00IvZZoBesM.roa (hash: T567K72LlQfx3PglnXUfayy6bFn0FIimheQaqSUapwY=) 3: PIBAi-NbloODmSiDeKc6jb9ihv4.roa (hash: R3IFcDR+URbSvkybKJ/Sj9TwLvQjyr3A69qpjrCDlEE=) 4: ga1BrMjD7wY_QoN5ExMTad0kou0.roa (hash: /2/Lg7lZekU4p6NvtnYYz9mRfacgER7O7n79Ibm5W4s=) 5: lplNqf06vua3DkgbqqhwRpQX5y4.roa (hash: yaa0RKonl28mWEtrN2B7tlLyBAqCTM4woPMQSkOo7wE=) 6: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: Gr3QyssO+HZTM2V9dcnjO0P1cNM5gGCX6XSuw3ibpls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:81:ac:3e:27:4d:a3:87:18:f4:72:2f:63:9f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc Validity Not Before: Jan 25 13:01:12 2026 GMT Not After : Jan 26 13:01:12 2026 GMT Subject: CN=e3ec8d1e8fca454af8fceee608c494801b69320d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e6:84:02:cb:07:c1:59:3a:1a:9e:fb:6b:2b: d2:e3:6a:f6:5f:ae:38:81:3a:b0:6b:84:3d:d5:32: bb:ea:e2:7a:74:4a:46:39:f0:4c:ea:4f:36:22:9c: 49:45:b9:78:fe:7b:a8:2d:6a:14:87:a1:8f:b1:2c: b6:32:f3:a3:3c:54:c2:23:f1:08:40:6e:9d:ee:74: a0:22:df:b1:a1:4b:2d:53:83:dc:96:63:17:7d:fe: 35:81:42:d9:d9:47:6e:b6:c2:6a:14:ba:4d:b2:47: d5:ba:ce:35:c8:0b:7a:a6:88:72:a8:53:6c:73:9f: de:d7:4c:15:8d:f1:58:36:21:70:b1:69:9b:3d:bc: f8:37:f0:5d:e4:4b:f5:5e:e4:94:77:d7:25:b6:d1: 4b:4b:a5:1a:6f:ff:c3:59:e3:85:64:7c:a3:d9:7f: 3e:ec:19:50:95:30:63:c4:f6:0b:ac:e7:e7:e5:27: 48:15:06:93:56:2c:12:15:96:6c:ac:5c:48:93:6b: 97:65:28:e3:b9:6a:f1:4d:1b:02:6a:33:03:6a:98: 80:6a:05:69:33:20:44:a1:8e:13:c3:2b:20:9c:91: 24:71:2b:94:fc:36:10:2b:f6:53:4a:2c:b0:da:3e: ec:27:65:29:9f:d2:b9:0c:1f:a4:e3:d0:c8:06:0c: d3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EC:8D:1E:8F:CA:45:4A:F8:FC:EE:E6:08:C4:94:80:1B:69:32:0D X509v3 Authority Key Identifier: keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f3:46:05:77:41:ed:05:7e:60:34:9b:90:91:f1:4e:27:ba: 16:fb:ff:f9:c9:16:96:d5:09:89:81:ab:a2:e0:a2:26:c3:0b: a5:07:f1:14:13:fa:0b:ca:7d:ff:cb:60:f9:9a:d6:97:61:53: e0:25:79:73:39:40:59:33:4e:4f:cd:2a:65:48:7b:24:af:ad: 49:94:20:c1:6a:49:54:e6:b9:a8:e6:72:24:c0:88:87:fc:f4: 3f:8b:ba:17:a2:ca:07:03:9d:2b:61:2f:3a:51:cd:f9:74:8f: f4:0b:57:a7:05:57:26:13:9b:61:d6:4f:4a:47:48:f6:b6:90: 1b:0c:3b:a0:54:83:9f:3f:a1:3e:e0:ef:99:7e:5a:86:44:a0: a4:07:2f:e8:df:62:b2:88:c7:70:20:12:09:7b:cb:c9:ac:99: fb:44:29:70:63:58:6b:96:ae:a5:47:27:3c:ee:45:bd:6a:18: 63:d0:d9:da:4b:60:ad:85:e6:99:3b:79:ad:37:65:e0:c4:a5: c9:82:0c:50:89:ed:6b:24:e8:66:2c:36:dd:58:81:1d:53:9d: 7f:9d:43:94:4f:17:eb:a6:9e:e9:1f:50:47:e5:f2:9f:51:b1: b2:d2:73:93:04:1a:e3:02:71:2d:ce:67:b7:e9:04:45:bd:5f: 2b:38:09:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PoGsPidNo4cY9HIvY590MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MmYyZDNjMjY5ZDkzNTIyNzY5MGIyOGI3ZmJkZDk1M2Ux ZTllZGMwHhcNMjYwMTI1MTMwMTEyWhcNMjYwMTI2MTMwMTEyWjAzMTEwLwYDVQQD EyhlM2VjOGQxZThmY2E0NTRhZjhmY2VlZTYwOGM0OTQ4MDFiNjkzMjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+aEAssHwVk6Gp77ayvS42r2X644 gTqwa4Q91TK76uJ6dEpGOfBM6k82IpxJRbl4/nuoLWoUh6GPsSy2MvOjPFTCI/EI QG6d7nSgIt+xoUstU4PclmMXff41gULZ2UdutsJqFLpNskfVus41yAt6pohyqFNs c5/e10wVjfFYNiFwsWmbPbz4N/Bd5Ev1XuSUd9clttFLS6Uab//DWeOFZHyj2X8+ 7BlQlTBjxPYLrOfn5SdIFQaTViwSFZZsrFxIk2uXZSjjuWrxTRsCajMDapiAagVp MyBEoY4TwysgnJEkcSuU/DYQK/ZTSiyw2j7sJ2Upn9K5DB+k49DIBgzTgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPsjR6PykVK+Pzu5gjElIAbaTINMB8GA1UdIwQY MBaAFKYvLTwmnZNSJ2kLKLf73ZU+Hp7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMt MTAwZWVkODEyYzQwLzEvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMtMTAwZWVkODEyYzQw LzEvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvNGBXdB 7QV+YDSbkJHxTie6Fvv/+ckWltUJiYGrouCiJsMLpQfxFBP6C8p9/8tg+ZrWl2FT 4CV5czlAWTNOT80qZUh7JK+tSZQgwWpJVOa5qOZyJMCIh/z0P4u6F6LKBwOdK2Ev OlHN+XSP9AtXpwVXJhObYdZPSkdI9raQGww7oFSDnz+hPuDvmX5ahkSgpAcv6N9i sojHcCASCXvLyayZ+0QpcGNYa5aupUcnPO5FvWoYY9DZ2ktgrYXmmTt5rTdl4MSl yYIMUIntayToZiw23ViBHVOdf51DlE8X66ae6R9QR+Xyn1GxstJzkwQa4wJxLc5n t+kERb1fKzgJRw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:11:16 2026 by rpki-client