This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
File: pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json)
Hash identifier: 8t+NJez2kFBsV1qE2PD+1/6AxdZ8BF9i317sFuaF35g=
Subject key identifier: 81:F8:2B:B8:30:53:AC:13:42:48:B7:07:8F:E8:2C:DE:31:1D:4B:4C
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Certificate issuer: /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial: 019BF72CB488D49ABC291A8F9034F23C63F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
Manifest number: 0CA6
Signing time: Sun 25 Jan 2026 22:01:00 +0000
Manifest this update: Sun 25 Jan 2026 22:01:00 +0000
Manifest next update: Mon 26 Jan 2026 22:01:00 +0000
Files and hashes: 1: 8hDvXAFXtwTiaPxitWHApgLE65k.roa (hash: EiRwFtmOo1DVVx7O1xctBpgvgnvAfczha5+H5oxZvkk=)
2: FrgtLDHlGMWP7-Ol00IvZZoBesM.roa (hash: T567K72LlQfx3PglnXUfayy6bFn0FIimheQaqSUapwY=)
3: PIBAi-NbloODmSiDeKc6jb9ihv4.roa (hash: R3IFcDR+URbSvkybKJ/Sj9TwLvQjyr3A69qpjrCDlEE=)
4: ga1BrMjD7wY_QoN5ExMTad0kou0.roa (hash: /2/Lg7lZekU4p6NvtnYYz9mRfacgER7O7n79Ibm5W4s=)
5: lplNqf06vua3DkgbqqhwRpQX5y4.roa (hash: yaa0RKonl28mWEtrN2B7tlLyBAqCTM4woPMQSkOo7wE=)
6: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: 9XFK2iTCifiYURP/sqxQzjF0esRT99KmtQHLxpwcbzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2c:b4:88:d4:9a:bc:29:1a:8f:90:34:f2:3c:63:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Validity
Not Before: Jan 25 22:01:00 2026 GMT
Not After : Jan 26 22:01:00 2026 GMT
Subject: CN=81f82bb83053ac134248b7078fe82cde311d4b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:20:17:1a:af:c9:79:b1:4b:eb:f7:f6:cc:
f9:c8:f8:b2:27:ab:72:dc:b8:fc:00:44:38:1b:65:
1f:3e:2f:97:0d:fe:8a:87:8c:a8:97:2f:3b:fb:f2:
29:98:eb:27:f3:eb:a2:1b:67:07:da:5e:69:40:c7:
bb:69:93:5d:9c:b0:4b:ff:05:75:d4:61:19:93:1a:
86:b8:99:94:f4:59:88:b0:d8:ce:03:df:d5:6d:ef:
2c:d9:65:98:dd:94:95:5b:5f:17:75:0b:5f:f0:9a:
0e:c6:a4:a5:ab:25:4a:4f:dd:71:00:cf:83:d2:44:
c1:f1:33:f2:7d:0c:00:da:a2:51:3c:d3:99:94:da:
f8:3d:b3:bb:46:ab:91:9d:5b:fc:1d:1c:11:a3:29:
97:0f:0e:26:3c:64:16:e9:3c:8c:6b:23:bb:3e:43:
e9:70:5c:a1:8d:5f:6e:bd:71:35:c2:c2:7c:45:dd:
04:0b:d2:ef:bc:23:74:4a:be:d3:d7:fc:02:4b:30:
f9:ae:a3:0d:d0:97:50:84:33:5b:2d:1b:9d:49:81:
43:57:4a:94:15:1a:ab:18:90:b4:24:23:4c:3c:fa:
a6:f3:1f:4c:48:00:d5:01:50:94:27:ae:db:32:fd:
23:35:62:18:65:7f:c7:e8:1c:c9:5a:d6:2d:37:ce:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F8:2B:B8:30:53:AC:13:42:48:B7:07:8F:E8:2C:DE:31:1D:4B:4C
X509v3 Authority Key Identifier:
keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f6:3f:69:d1:7d:b0:f0:c1:19:89:59:2d:e6:7a:8e:a6:ca:
1f:0e:f4:15:32:0a:1d:ec:00:93:76:bd:5e:4a:2d:64:e0:58:
cb:8a:30:df:bf:ca:c8:3f:00:80:27:c7:b1:ac:b4:5d:c1:ab:
6b:d1:ba:4c:d8:c4:69:95:13:01:47:5b:54:05:54:75:da:8c:
64:3a:89:7e:29:b5:35:70:bc:42:36:ec:3d:ec:e2:dd:12:a2:
c4:47:d8:55:5e:b7:e2:74:1a:71:6d:70:af:93:37:05:8b:5e:
1c:10:6d:e5:c9:fe:90:22:69:71:91:ea:80:71:81:48:5d:0f:
84:05:c2:e2:65:28:b5:7c:70:98:c6:e6:ce:60:26:8c:65:d0:
52:80:ab:2c:b9:c8:3c:6a:13:f8:af:4b:d3:b9:90:e4:c2:be:
96:54:87:93:af:f8:7c:c9:29:6a:1c:bb:ee:ea:09:ea:6f:97:
08:7a:39:8f:d4:bb:48:a5:f0:6c:33:f1:73:07:b3:33:6b:60:
af:d8:59:e6:23:80:d0:a0:07:e0:31:65:9c:25:a3:22:bb:7f:
89:9a:7e:f3:d6:8a:71:58:36:99:10:e3:18:85:69:2e:8d:26:
fc:71:36:bd:a8:a3:b3:ee:83:cf:da:e4:1e:e7:9d:c6:68:9a:
f3:96:aa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:04 2026 by rpki-client