This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft File: PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json) Hash identifier: D+buu7LXgkMSE2NFMf4vpSvkOTHH5UWTsrR5/IDhW6g= Subject key identifier: AF:41:97:62:35:25:E7:A1:17:B1:61:AB:7F:D4:E3:E6:A8:1C:AE:14 Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97 Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997 Certificate serial: 019BFEE607970D5759185B1DD2EB8CB1452B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft Manifest number: 17F7 Signing time: Tue 27 Jan 2026 10:00:46 +0000 Manifest this update: Tue 27 Jan 2026 10:00:46 +0000 Manifest next update: Wed 28 Jan 2026 10:00:46 +0000 Files and hashes: 1: 3Y2bsvd6Ko2TakhACGAC13OxWgg.roa (hash: hop+YCd6wtmHiz87UpYcHYekpewszM4DMDY6Yajc55g=) 2: DEt4Y-_VZKpKHUQGndzBwGKa-hI.roa (hash: Pn+dJyctNTmeoTcdBPCYjrOipk+Ikj5vYjRfpzr/AfY=) 3: Fd0my4VD8yFhFNY23xVFQ5bNE7o.roa (hash: Xq0TLzzFqkURQ7QOU8lzKIy+PNOHeKXumeKowKwhe0E=) 4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: 2rX0mZkxcs7RRMQQ3m816NcmkUez/WM18JeA8fVaxbc=) 5: XfL7J3_lKAhMT6FV_AAy67CADLI.roa (hash: Cja0K8hb1CFlq8SDbTIyn6C1tgY/4LTLk6lQT4K0o4Q=) 6: uekau7rSPung7Kbe6f858ZuB0t8.roa (hash: M2Y/E4DYJ0oSGWPcmXmrI0IqZMHXZ+8X2D2MD5VVJU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:e6:07:97:0d:57:59:18:5b:1d:d2:eb:8c:b1:45:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997 Validity Not Before: Jan 27 10:00:46 2026 GMT Not After : Jan 28 10:00:46 2026 GMT Subject: CN=af4197623525e7a117b161ab7fd4e3e6a81cae14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:83:96:f7:0e:ef:ac:5a:d3:2d:b4:7d:25: 4c:6b:6f:d6:48:07:8f:b6:9a:6b:4e:fa:05:69:78: 94:7f:05:ae:dc:ac:a9:f0:db:c0:fd:74:d2:a8:9a: bf:72:95:98:d2:8d:78:59:9f:cf:52:15:02:a3:64: 1f:14:ab:8b:65:0f:15:5f:e9:cc:88:c7:a1:71:05: 01:09:1a:4e:ee:6b:d0:e2:11:92:7b:80:72:c6:8f: 8c:10:df:3e:d2:34:54:14:44:5f:9b:fd:2e:7c:b7: 30:98:51:7a:25:48:32:7d:3e:4f:a4:86:29:b9:7a: 66:ee:f7:1b:01:27:e3:17:18:f2:12:56:ba:5f:bb: 87:93:ef:8b:f9:6f:ed:4a:71:9a:db:5f:92:8a:6a: 4b:51:d6:9d:5b:44:cc:74:77:e3:19:88:d9:10:c9: 97:82:ee:57:84:41:7f:a1:7e:ec:1a:5d:e5:d6:f7: 90:77:4b:9c:a3:43:d3:30:87:66:9f:f3:55:ec:46: 7b:5f:f9:b0:a7:83:bd:ce:2c:68:aa:c8:5d:ad:16: 3e:f9:ca:eb:70:ef:bc:c5:b9:20:34:5f:d2:8a:c9: ee:61:ff:a6:7a:9b:cd:3c:1f:5f:fe:07:dc:11:fb: fc:fe:50:e0:d4:a0:bd:b5:25:4b:68:ba:22:43:32: 15:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:41:97:62:35:25:E7:A1:17:B1:61:AB:7F:D4:E3:E6:A8:1C:AE:14 X509v3 Authority Key Identifier: keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:26:88:42:3a:ca:8f:2e:87:0a:4e:dd:dd:40:2b:7b:40:22: 08:98:70:2c:76:02:82:14:7c:fa:91:8c:9d:0c:90:58:26:a3: 14:4e:18:5c:73:65:04:b2:94:4e:ea:59:3c:91:21:f8:d3:d7: bf:7d:af:6a:89:f1:7e:a8:e5:13:81:bf:70:19:e6:ae:01:bf: ca:c6:86:d6:88:d1:3b:3b:ef:18:9d:e3:b8:66:6d:57:7b:ce: 80:e9:c1:17:d7:66:59:0c:fc:b3:1f:29:c4:10:94:2c:6e:4f: 00:eb:2a:84:fe:e3:70:7d:82:5b:3a:72:bd:1b:81:cd:c6:27: d1:a2:f7:8d:97:79:fc:c7:6e:dd:e1:85:20:76:b4:c6:6f:04: f1:ce:80:0e:f7:7a:fe:e0:f7:f5:b6:f7:56:96:b1:89:33:28: 3a:71:e7:22:a5:00:d9:b9:bb:6e:d8:e8:cb:1d:e6:1f:b3:a9: ff:73:2f:b4:5f:09:c5:ef:ff:12:ab:cc:6e:bf:a5:05:30:1f: c8:50:cb:1f:e0:48:91:a8:ad:b9:44:24:da:95:ba:5d:1c:0f: fe:14:10:82:6a:46:03:35:f5:1b:34:f5:21:3f:dd:de:f0:7a: 7c:23:37:95:87:46:dd:3e:e2:ec:0a:cd:99:37:54:2b:5f:e1: 70:47:30:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+5geXDVdZGFsd0uuMsUUrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjBjNzAwZDk4ZDc2YTljNjQwMTczODg5ZjkzNjdkYTlk ZTg5OTcwHhcNMjYwMTI3MTAwMDQ2WhcNMjYwMTI4MTAwMDQ2WjAzMTEwLwYDVQQD EyhhZjQxOTc2MjM1MjVlN2ExMTdiMTYxYWI3ZmQ0ZTNlNmE4MWNhZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKSDlvcO76xa0y20fSVMa2/WSAeP tpprTvoFaXiUfwWu3Kyp8NvA/XTSqJq/cpWY0o14WZ/PUhUCo2QfFKuLZQ8VX+nM iMehcQUBCRpO7mvQ4hGSe4Byxo+MEN8+0jRUFERfm/0ufLcwmFF6JUgyfT5PpIYp uXpm7vcbASfjFxjyEla6X7uHk++L+W/tSnGa21+SimpLUdadW0TMdHfjGYjZEMmX gu5XhEF/oX7sGl3l1veQd0uco0PTMIdmn/NV7EZ7X/mwp4O9zixoqshdrRY++crr cO+8xbkgNF/SisnuYf+mepvNPB9f/gfcEfv8/lDg1KC9tSVLaLoiQzIVLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9Bl2I1JeehF7Fhq3/U4+aoHK4UMB8GA1UdIwQY MBaAFD4gxwDZjXapxkAXOIn5Nn2p3omXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5Njgt ZTQ2ZDhkMTZhMTVmLzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5NjgtZTQ2ZDhkMTZhMTVm LzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyaIQjrK jy6HCk7d3UAre0AiCJhwLHYCghR8+pGMnQyQWCajFE4YXHNlBLKUTupZPJEh+NPX v32vaonxfqjlE4G/cBnmrgG/ysaG1ojROzvvGJ3juGZtV3vOgOnBF9dmWQz8sx8p xBCULG5PAOsqhP7jcH2CWzpyvRuBzcYn0aL3jZd5/Mdu3eGFIHa0xm8E8c6ADvd6 /uD39bb3VpaxiTMoOnHnIqUA2bm7btjoyx3mH7Op/3MvtF8Jxe//EqvMbr+lBTAf yFDLH+BIkaituUQk2pW6XRwP/hQQgmpGAzX1GzT1IT/d3vB6fCM3lYdG3T7i7ArN mTdUK1/hcEcwRQ== -----END CERTIFICATE-----Generated at Tue Jan 27 16:42:11 2026 by rpki-client