This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft File: PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json) Hash identifier: ILjBDOFkkzo2tGZZ40w81Ji2SdyHgfOWAV9m/T8aliE= Subject key identifier: 17:18:8F:26:AC:48:92:65:45:4E:41:5F:D3:63:58:A8:D7:1A:56:A1 Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Certificate serial: 019BF4D0C2A1E520B580C40DE6D6B1B39ABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft Manifest number: 056B Signing time: Sun 25 Jan 2026 11:01:20 +0000 Manifest this update: Sun 25 Jan 2026 11:01:20 +0000 Manifest next update: Mon 26 Jan 2026 11:01:20 +0000 Files and hashes: 1: 83T4vy6w6s-NbeBOg3NKn516tgI.roa (hash: sjPUQm6Zny+WJ2MxBOvr0gIX9HwjXltWJjMRmGQhU5Q=) 2: HXtw_REMuYJU-uoqytyoK089wJo.roa (hash: y0auMTcaijuymINcdrlEwiSn0wKl15siQmyezHbX9Mk=) 3: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: q9KgZrMdEG7fjet+x+oye9JjsfoYIZu0BQWCZliQau4=) 4: Z07tktorOBcHfE3hsn2N89eRrmM.roa (hash: 7mXHoHwif1lVmpqWPvn8rNFkNTwiLeFAHtrPjsutn9A=) 5: v_6hfKyRVIjeJvA7Hn7c_7uLcEI.roa (hash: AjN5pZH9Vkd0aFs/22Tncp1jiELMZjwI4H52yGKSq88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:c2:a1:e5:20:b5:80:c4:0d:e6:d6:b1:b3:9a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Validity Not Before: Jan 25 11:01:20 2026 GMT Not After : Jan 26 11:01:20 2026 GMT Subject: CN=17188f26ac489265454e415fd36358a8d71a56a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:48:12:95:fd:57:6b:a3:e2:5e:5a:3b:6b:60: 51:05:3d:33:e5:4a:10:91:0c:58:ce:e4:58:43:67: d7:64:8a:c8:6a:98:58:0c:f8:c2:a4:66:65:6c:fb: 8a:67:18:f3:3e:43:67:79:c4:7f:f8:2d:a6:d7:86: 09:89:f8:fa:16:cc:2b:52:2e:fe:fa:4f:96:c4:ad: 88:0a:af:71:df:37:e5:04:bd:8d:f0:9d:20:ea:61: 8c:52:f4:b0:38:21:4f:5d:a7:e7:cf:84:2c:c4:8c: 7e:31:b8:ed:12:72:99:7c:5b:46:28:75:f9:fb:e3: 54:14:8f:3f:3a:3e:6d:26:c8:84:71:62:5a:dc:f9: eb:d1:fc:a8:cd:2d:7c:c5:c2:36:93:8d:1c:be:08: e5:47:c6:ee:cd:0d:c5:75:7e:f5:12:de:4a:e8:cd: 12:ea:00:88:94:d3:c8:e8:3e:ce:15:dc:24:d5:f6: cc:46:61:65:f6:95:55:ca:26:fa:40:5a:b6:82:d8: 6f:f2:34:8b:26:38:f8:9c:0e:4f:5a:7a:5d:b7:a8: 0a:f8:5b:13:91:5d:95:ec:4c:82:9f:68:d0:98:cd: 56:d3:dd:78:f6:d5:0d:b2:40:b5:28:dd:29:d9:07: 80:a7:7a:8c:4f:e3:fc:0e:a8:0a:2b:bc:72:0f:2d: 9e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:18:8F:26:AC:48:92:65:45:4E:41:5F:D3:63:58:A8:D7:1A:56:A1 X509v3 Authority Key Identifier: keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:77:23:55:1b:89:6a:21:03:8f:84:2c:56:ad:f5:b1:8d:af: 94:35:83:b6:bc:cc:e1:08:3f:35:79:75:ba:45:2b:c7:4b:ad: a0:51:19:d7:6b:43:48:8e:c2:b8:c4:6a:62:87:a8:4c:2a:6b: c0:49:cd:42:f3:7d:9d:09:17:a2:df:2e:2e:45:c7:04:c2:e7: e4:e7:ae:6e:ea:b0:f5:e8:fe:90:c9:bf:8f:6a:94:fa:e6:91: 3a:b5:f2:65:65:52:28:49:1b:8c:d3:da:ff:db:ce:b0:49:ff: eb:cb:e9:22:0a:52:01:b4:96:ca:91:b9:6a:bc:13:80:3f:1a: fb:a7:f4:e5:ab:a8:ac:3b:48:5f:7e:94:1c:04:5e:8a:24:12: 85:92:92:88:d7:de:0b:4b:4d:cd:b1:e2:4e:61:55:e0:11:5e: 43:b7:f0:d3:28:d3:97:1e:f8:0f:0b:9a:6f:82:8e:f3:2a:64: e8:42:b9:ba:47:db:11:4f:4d:6a:16:b6:63:0b:82:c8:05:e1: ff:b4:9d:d3:0f:cd:96:7f:1a:36:78:e3:0b:6f:76:cb:1c:da: e9:d8:c3:a6:1c:a8:b7:d8:8c:f1:6b:6d:00:65:e1:1c:b4:d7: 53:81:ad:ce:40:bf:8d:e1:e6:62:64:1e:3a:32:9a:58:64:36: 3d:ce:5d:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00MKh5SC1gMQN5taxs5q6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjVhYjY5ODVmNzljYTlkZTA2ZTk4ZThiOWRhMjQ1ZDg1 NTlhYjYwHhcNMjYwMTI1MTEwMTIwWhcNMjYwMTI2MTEwMTIwWjAzMTEwLwYDVQQD EygxNzE4OGYyNmFjNDg5MjY1NDU0ZTQxNWZkMzYzNThhOGQ3MWE1NmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UgSlf1Xa6PiXlo7a2BRBT0z5UoQ kQxYzuRYQ2fXZIrIaphYDPjCpGZlbPuKZxjzPkNnecR/+C2m14YJifj6FswrUi7+ +k+WxK2ICq9x3zflBL2N8J0g6mGMUvSwOCFPXafnz4QsxIx+MbjtEnKZfFtGKHX5 ++NUFI8/Oj5tJsiEcWJa3Pnr0fyozS18xcI2k40cvgjlR8buzQ3FdX71Et5K6M0S 6gCIlNPI6D7OFdwk1fbMRmFl9pVVyib6QFq2gthv8jSLJjj4nA5PWnpdt6gK+FsT kV2V7EyCn2jQmM1W09149tUNskC1KN0p2QeAp3qMT+P8DqgKK7xyDy2eVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcYjyasSJJlRU5BX9NjWKjXGlahMB8GA1UdIwQY MBaAFD4lq2mF95yp3gbpjoudokXYVZq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAt YjE5YWQ1NDU1YmZkLzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAtYjE5YWQ1NDU1YmZk LzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABncjVRuJ aiEDj4QsVq31sY2vlDWDtrzM4Qg/NXl1ukUrx0utoFEZ12tDSI7CuMRqYoeoTCpr wEnNQvN9nQkXot8uLkXHBMLn5Oeubuqw9ej+kMm/j2qU+uaROrXyZWVSKEkbjNPa /9vOsEn/68vpIgpSAbSWypG5arwTgD8a+6f05auorDtIX36UHAReiiQShZKSiNfe C0tNzbHiTmFV4BFeQ7fw0yjTlx74Dwuab4KO8ypk6EK5ukfbEU9Naha2YwuCyAXh /7Sd0w/Nln8aNnjjC292yxza6djDphyot9iM8WttAGXhHLTXU4GtzkC/jeHmYmQe OjKaWGQ2Pc5d1Q== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:23 2026 by rpki-client