This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft File: PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json) Hash identifier: cpHVkaeIOhAwqhZmkJAVVOIyjxztNXvPK/5mnvJF5ic= Subject key identifier: 50:2F:FA:9E:1A:A8:2E:5C:47:A3:59:F9:E3:66:E5:32:3F:62:C2:BF Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97 Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997 Certificate serial: 019BF53E0DC65DDA353D3A746E25A2D3AF1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft Manifest number: 17F2 Signing time: Sun 25 Jan 2026 13:00:43 +0000 Manifest this update: Sun 25 Jan 2026 13:00:43 +0000 Manifest next update: Mon 26 Jan 2026 13:00:43 +0000 Files and hashes: 1: 3Y2bsvd6Ko2TakhACGAC13OxWgg.roa (hash: hop+YCd6wtmHiz87UpYcHYekpewszM4DMDY6Yajc55g=) 2: DEt4Y-_VZKpKHUQGndzBwGKa-hI.roa (hash: Pn+dJyctNTmeoTcdBPCYjrOipk+Ikj5vYjRfpzr/AfY=) 3: Fd0my4VD8yFhFNY23xVFQ5bNE7o.roa (hash: Xq0TLzzFqkURQ7QOU8lzKIy+PNOHeKXumeKowKwhe0E=) 4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: rGmUdiGe/swWdLOA98hloRFQwy/MFOBhM2LmZdfOSdk=) 5: XfL7J3_lKAhMT6FV_AAy67CADLI.roa (hash: Cja0K8hb1CFlq8SDbTIyn6C1tgY/4LTLk6lQT4K0o4Q=) 6: uekau7rSPung7Kbe6f858ZuB0t8.roa (hash: M2Y/E4DYJ0oSGWPcmXmrI0IqZMHXZ+8X2D2MD5VVJU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:0d:c6:5d:da:35:3d:3a:74:6e:25:a2:d3:af:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997 Validity Not Before: Jan 25 13:00:43 2026 GMT Not After : Jan 26 13:00:43 2026 GMT Subject: CN=502ffa9e1aa82e5c47a359f9e366e5323f62c2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:2f:31:f1:a4:42:34:35:6d:5f:0e:fe:0f: 4d:14:c2:10:be:22:1c:4c:1a:0c:0f:75:dc:cb:6d: fa:43:99:86:31:5d:9c:ff:e8:b2:5f:6b:f5:b3:ee: 1e:a4:84:f8:6f:28:ba:ce:dc:cc:51:a3:c7:29:c6: a4:b8:b3:5b:25:47:b9:bb:dd:b7:25:6a:d3:a7:3c: 07:37:84:31:59:c6:7c:14:e4:e2:f0:ad:15:50:3e: 16:5b:57:9d:0b:ec:6d:22:ed:09:5c:49:30:9f:65: 82:3e:35:4a:f0:58:8d:5e:8e:9c:44:84:69:de:a3: cf:26:8d:a0:5c:51:df:10:fe:df:fc:44:a4:96:91: 22:e5:35:32:a4:86:31:90:30:2a:01:1b:17:07:f8: 59:89:9f:06:4c:b8:8e:2c:d0:ac:be:56:a4:86:ff: 3d:1a:ea:05:c9:8e:5f:32:84:c0:20:51:93:c2:67: c3:7a:af:c7:b6:8f:65:b8:bc:6d:04:50:67:8d:3e: 75:55:a6:64:c0:d6:7c:19:9e:d4:b6:4b:cb:32:9c: 24:be:70:d7:04:ab:c7:4a:97:d1:5b:c3:8a:b3:ad: d9:82:88:d6:b5:23:11:c7:9f:f8:67:bc:9a:bf:41: ce:bc:39:e0:3d:ff:e0:e1:39:3f:ea:3f:35:a0:a8: 07:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2F:FA:9E:1A:A8:2E:5C:47:A3:59:F9:E3:66:E5:32:3F:62:C2:BF X509v3 Authority Key Identifier: keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4e:83:26:61:95:6c:96:2f:70:28:12:4a:f2:70:f7:90:c4: cf:e3:7c:0b:5f:55:00:9c:f3:19:35:45:62:84:fa:72:7b:7e: cc:51:5b:96:0d:c5:87:53:39:bf:e2:a7:eb:5f:3b:d4:b7:fb: 4e:8e:1c:0c:06:c2:24:6c:cc:fd:3f:73:81:01:dd:49:52:a4: c1:2c:52:02:4e:6d:28:ba:41:da:c7:27:69:01:f2:66:b7:ce: 56:42:3e:82:11:d2:09:4c:aa:44:40:be:5b:5c:1c:e2:ed:5f: 40:13:7f:a1:65:08:01:c9:0c:a8:60:9d:9f:37:a3:37:df:c2: fc:1e:ce:ab:00:92:1c:b5:8a:2a:0f:21:03:d3:1b:d3:20:f5: e1:8a:f4:a4:ae:7d:40:66:aa:c1:01:50:c1:7a:67:a8:9f:01: a1:a1:d7:70:0d:82:0e:31:0b:48:d1:e7:31:64:c4:d3:54:5a: 92:9f:80:e0:6e:77:d5:66:07:41:db:4d:b9:b5:14:7a:d2:47: c1:a5:62:77:22:e5:c7:2b:72:40:75:c6:7d:7c:ea:c9:98:d4: f6:cc:bf:e7:86:7b:59:6c:65:c5:ba:19:81:9a:76:c6:57:8e: a7:39:72:27:34:cc:c0:5f:3f:d7:d5:3e:13:a7:86:8a:99:30: 76:a9:ec:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pg3GXdo1PTp0biWi068cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjBjNzAwZDk4ZDc2YTljNjQwMTczODg5ZjkzNjdkYTlk ZTg5OTcwHhcNMjYwMTI1MTMwMDQzWhcNMjYwMTI2MTMwMDQzWjAzMTEwLwYDVQQD Eyg1MDJmZmE5ZTFhYTgyZTVjNDdhMzU5ZjllMzY2ZTUzMjNmNjJjMmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJcvMfGkQjQ1bV8O/g9NFMIQviIc TBoMD3Xcy236Q5mGMV2c/+iyX2v1s+4epIT4byi6ztzMUaPHKcakuLNbJUe5u923 JWrTpzwHN4QxWcZ8FOTi8K0VUD4WW1edC+xtIu0JXEkwn2WCPjVK8FiNXo6cRIRp 3qPPJo2gXFHfEP7f/ESklpEi5TUypIYxkDAqARsXB/hZiZ8GTLiOLNCsvlakhv89 GuoFyY5fMoTAIFGTwmfDeq/Hto9luLxtBFBnjT51VaZkwNZ8GZ7UtkvLMpwkvnDX BKvHSpfRW8OKs63ZgojWtSMRx5/4Z7yav0HOvDngPf/g4Tk/6j81oKgHPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAv+p4aqC5cR6NZ+eNm5TI/YsK/MB8GA1UdIwQY MBaAFD4gxwDZjXapxkAXOIn5Nn2p3omXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5Njgt ZTQ2ZDhkMTZhMTVmLzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5NjgtZTQ2ZDhkMTZhMTVm LzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAME6DJmGV bJYvcCgSSvJw95DEz+N8C19VAJzzGTVFYoT6cnt+zFFblg3Fh1M5v+Kn61871Lf7 To4cDAbCJGzM/T9zgQHdSVKkwSxSAk5tKLpB2scnaQHyZrfOVkI+ghHSCUyqREC+ W1wc4u1fQBN/oWUIAckMqGCdnzejN9/C/B7OqwCSHLWKKg8hA9Mb0yD14Yr0pK59 QGaqwQFQwXpnqJ8BoaHXcA2CDjELSNHnMWTE01Rakp+A4G531WYHQdtNubUUetJH waVidyLlxytyQHXGfXzqyZjU9sy/54Z7WWxlxboZgZp2xleOpzlyJzTMwF8/19U+ E6eGipkwdqnsZg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:55 2026 by rpki-client