This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json) Hash identifier: 2+wNcwZDfPePWxzuGrT+frqYQKb65IOnJFYkgX/cCIk= Subject key identifier: B6:75:B2:E1:72:9B:02:DD:51:1F:37:9E:4C:B2:5F:DE:AF:98:EF:B1 Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4 Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4 Certificate serial: 019C010B8B622D7B31961E363B6A1E02501B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft Manifest number: 0993 Signing time: Tue 27 Jan 2026 20:00:59 +0000 Manifest this update: Tue 27 Jan 2026 20:00:59 +0000 Manifest next update: Wed 28 Jan 2026 20:00:59 +0000 Files and hashes: 1: 6s7VJQ13Euo-HJYqzPD9JI6QUXk.roa (hash: c+rLw+JU62jWbBeFYHNNvYoEQUH8aS1cBJs7Rsqiv5Y=) 2: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: 8UhOPNLySWXumT1cn20BDpR1fZYyt7+LhSbzXOgnwYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:01:0b:8b:62:2d:7b:31:96:1e:36:3b:6a:1e:02:50:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4 Validity Not Before: Jan 27 20:00:59 2026 GMT Not After : Jan 28 20:00:59 2026 GMT Subject: CN=b675b2e1729b02dd511f379e4cb25fdeaf98efb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:25:d3:ae:fa:4f:ab:67:35:2a:b0:cd:d7: cb:09:4a:0e:0d:98:3a:0a:7c:ef:3c:35:15:25:6d: bf:47:a9:b6:e3:c4:ca:c7:3d:84:17:c8:48:67:12: 77:81:d6:a4:e4:c2:f0:7f:f6:f3:3e:07:0b:5e:04: 7e:42:85:36:01:c1:9a:82:dd:16:99:86:2f:c1:31: 35:59:d3:e2:7f:6b:a8:58:c2:88:02:51:d3:51:0b: b3:e0:28:1b:cb:e5:7a:97:a4:d2:7e:98:8f:b6:44: f7:9c:cc:7e:75:6f:9c:5c:99:4b:2e:ca:78:52:04: eb:6a:bf:02:dc:ae:2c:a8:ec:8e:67:46:27:e6:d3: ba:6a:ce:6f:78:f5:4f:03:70:5c:60:00:0d:35:e7: 7e:c9:0f:70:a3:39:ad:9e:12:c4:7b:41:1e:24:ac: a1:86:76:69:69:8e:1f:54:9e:14:cd:b6:b7:bc:97: 3d:41:1f:66:8c:1b:f8:ee:4d:54:28:25:ca:84:f1: 56:e1:0d:9f:a9:0a:d5:d5:56:43:fd:20:19:af:29: a1:c9:2e:8d:eb:f2:be:94:5e:05:8e:e0:58:5a:be: 8a:c1:8f:32:90:19:cc:2a:48:31:2c:40:e1:94:be: ea:3c:c2:65:9a:41:f2:14:fb:30:5b:b8:66:f1:73: a6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:75:B2:E1:72:9B:02:DD:51:1F:37:9E:4C:B2:5F:DE:AF:98:EF:B1 X509v3 Authority Key Identifier: keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:06:3e:5a:00:db:fb:e2:f8:be:3e:98:fe:d3:4b:ed:3a:a3: 49:27:ec:2c:a4:22:83:08:c0:54:04:ee:cf:39:fd:ef:7c:ef: 28:9c:e8:4e:d0:f6:96:ac:d2:08:2d:19:3b:75:df:a8:f9:41: 96:4c:76:16:2e:c6:4c:52:dc:51:7f:86:a2:d3:d6:a5:98:d4: 0c:67:c2:33:aa:1e:16:0f:25:b2:2b:d5:ea:37:b1:da:7d:78: d2:bd:a3:67:75:e9:88:29:30:ba:25:84:f5:f9:43:94:e7:49: b8:a0:34:9b:fb:e7:f0:e7:46:5f:e1:df:c5:d3:5e:a3:41:fd: 5a:ee:2a:1a:a2:7f:db:0a:88:15:1c:57:4e:d0:d5:bf:7a:80: 38:f8:62:79:3f:71:77:08:c9:db:98:c9:e7:4e:ad:01:93:8a: 5f:cd:d8:e3:4f:09:c7:c4:ed:a2:90:f8:e5:7c:d6:de:ba:84: 82:d2:12:18:2a:2b:96:d7:98:34:06:0c:51:b1:89:72:46:37: ab:53:6a:a1:67:6e:79:db:e4:10:50:5c:ae:a2:dc:ab:09:b4: c1:5e:d4:67:fb:41:b3:96:87:11:93:36:d0:cc:d7:27:2b:82: 2c:c2:bc:ef:c5:58:f7:86:13:9f:66:92:13:db:fd:f0:4d:b6: f9:83:30:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwBC4tiLXsxlh42O2oeAlAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjODU5ZWQ2OTNjZTNkZTA1OWNhYTBhMGMxZTQyNDVjNWU5 ZTM3ZTQwHhcNMjYwMTI3MjAwMDU5WhcNMjYwMTI4MjAwMDU5WjAzMTEwLwYDVQQD EyhiNjc1YjJlMTcyOWIwMmRkNTExZjM3OWU0Y2IyNWZkZWFmOThlZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCcl0676T6tnNSqwzdfLCUoODZg6 CnzvPDUVJW2/R6m248TKxz2EF8hIZxJ3gdak5MLwf/bzPgcLXgR+QoU2AcGagt0W mYYvwTE1WdPif2uoWMKIAlHTUQuz4Cgby+V6l6TSfpiPtkT3nMx+dW+cXJlLLsp4 UgTrar8C3K4sqOyOZ0Yn5tO6as5vePVPA3BcYAANNed+yQ9wozmtnhLEe0EeJKyh hnZpaY4fVJ4Uzba3vJc9QR9mjBv47k1UKCXKhPFW4Q2fqQrV1VZD/SAZrymhyS6N 6/K+lF4FjuBYWr6KwY8ykBnMKkgxLEDhlL7qPMJlmkHyFPswW7hm8XOmkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZ1suFymwLdUR83nkyyX96vmO+xMB8GA1UdIwQY MBaAFDyFntaTzj3gWcqgoMHkJFxenjfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mZDkwNTQtNzc4ZC00MTNkLTllOTUt NTUxMWRhYTcyNzc4LzEvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mZDkwNTQtNzc4ZC00MTNkLTllOTUtNTUxMWRhYTcyNzc4 LzEvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgY+WgDb ++L4vj6Y/tNL7TqjSSfsLKQigwjAVATuzzn973zvKJzoTtD2lqzSCC0ZO3XfqPlB lkx2Fi7GTFLcUX+GotPWpZjUDGfCM6oeFg8lsivV6jex2n140r2jZ3XpiCkwuiWE 9flDlOdJuKA0m/vn8OdGX+HfxdNeo0H9Wu4qGqJ/2wqIFRxXTtDVv3qAOPhieT9x dwjJ25jJ506tAZOKX83Y408Jx8TtopD45XzW3rqEgtISGCorlteYNAYMUbGJckY3 q1NqoWduedvkEFBcrqLcqwm0wV7UZ/tBs5aHEZM20MzXJyuCLMK878VY94YTn2aS E9v98E22+YMwrA== -----END CERTIFICATE-----Generated at Tue Jan 27 23:17:33 2026 by rpki-client