This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json) Hash identifier: vAvufznNJzCyv+W+ISas1RStV+/fr1hn7jZpG9vFW1I= Subject key identifier: 09:D4:C1:EB:87:66:C1:78:79:19:E2:0A:E5:EF:E4:81:DB:DA:D9:7B Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44 Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44 Certificate serial: 019B299C03B7E810B5C917A7CA76342B7622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft Manifest number: B8 Signing time: Wed 17 Dec 2025 00:00:48 +0000 Manifest this update: Wed 17 Dec 2025 00:00:48 +0000 Manifest next update: Thu 18 Dec 2025 00:00:48 +0000 Files and hashes: 1: 7alJhVEJ8xj6IpTwu6Ih8OhjFkA.roa (hash: 7jCnG6JINMEyq9hp7eyBgT5bk5thbVgVLLuXRq467tI=) 2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: ZqjtV/pUXl/OeSCLGqoJ45jtsdNpFd/Z0p786Cxhan4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:9c:03:b7:e8:10:b5:c9:17:a7:ca:76:34:2b:76:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44 Validity Not Before: Dec 17 00:00:48 2025 GMT Not After : Dec 18 00:00:48 2025 GMT Subject: CN=09d4c1eb8766c1787919e20ae5efe481dbdad97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:82:9a:12:c5:68:7b:db:e8:74:80:17:9b:e7: e8:c2:a7:e9:15:c7:1e:d0:00:9e:73:98:7c:7c:10: fb:f5:78:55:dc:c3:e2:ef:70:83:a8:6b:27:87:6d: c0:9d:78:9e:92:26:aa:44:11:a3:99:46:0e:40:a5: 3f:bb:68:3b:6d:ac:f5:89:b5:48:06:6a:0e:9e:6b: e8:28:61:d7:70:53:d4:64:e4:3a:3f:af:fe:20:1e: 14:93:8f:d1:85:4d:80:10:3d:19:87:aa:46:64:08: 4a:41:b5:a7:09:57:c9:d0:35:23:15:d7:3b:ff:b6: 31:0d:9f:1b:c1:c7:73:87:10:fb:93:9c:a4:51:78: 13:a0:01:59:d4:5b:7f:87:7a:b2:fb:33:7d:a6:fc: dd:3d:dd:2a:c9:f0:6b:48:18:29:d6:eb:f2:38:86: 16:e6:af:48:80:12:68:83:77:82:58:c2:2b:55:f9: 91:f2:f4:2e:b8:8d:3e:6d:8d:be:0a:38:7a:2f:84: 3a:65:5b:57:b9:54:e3:8c:84:8a:c0:9e:dd:5b:f8: f5:48:30:a6:07:e4:88:f3:e5:c2:99:cf:66:85:4a: 54:69:fb:e4:9c:a6:8a:b0:87:07:b3:36:d5:ab:84: 25:df:a4:09:0d:b7:b1:bf:38:20:12:45:ed:da:00: fb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D4:C1:EB:87:66:C1:78:79:19:E2:0A:E5:EF:E4:81:DB:DA:D9:7B X509v3 Authority Key Identifier: keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:6f:2e:85:f2:e5:12:fd:ef:28:e6:09:26:96:4c:a5:6a:48: 70:21:09:e1:5a:0b:0d:7b:cd:36:86:92:03:36:e3:3c:23:97: d2:e4:7d:3a:73:7e:c2:77:ab:5b:fd:01:dc:f2:d2:7c:8c:61: 20:0c:35:8c:81:3b:1b:99:06:72:a9:19:e7:a1:70:2d:02:55: c7:39:7b:ac:18:bc:b1:83:c9:83:71:fa:8f:02:7e:3f:57:ce: ce:04:1d:97:93:22:94:36:13:76:df:64:56:b9:5f:16:a3:c3: a8:94:fa:63:91:b5:f4:46:68:74:5f:28:d3:a0:83:c7:2c:77: 16:3a:bb:30:92:84:c4:e5:91:70:e4:f6:ad:64:bc:66:5a:2e: 7b:24:79:8f:fd:4e:91:c6:fd:9a:6f:70:83:ba:95:25:d5:0a: 5a:80:cb:68:e6:68:d1:15:4b:73:61:78:a0:e9:ec:cf:c9:05: 9e:e6:5f:57:eb:03:88:5b:0a:2e:29:2f:9d:8c:d8:f9:4e:a9: b5:ac:a6:80:52:5e:7e:5c:d1:df:84:9d:47:5f:a0:ff:4c:2f: 26:35:d7:6c:51:59:a9:5a:25:71:51:58:06:1a:39:24:f6:73: cf:e8:c8:9f:24:6e:41:39:b2:57:63:b0:03:90:33:6c:06:71: 02:3c:f5:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspnAO36BC1yRenynY0K3YiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGEwNDk4ZWMzYjRlYjQ0ZjRkZjI1NDFhZTM5MTgwYWJi NjVmNDQwHhcNMjUxMjE3MDAwMDQ4WhcNMjUxMjE4MDAwMDQ4WjAzMTEwLwYDVQQD EygwOWQ0YzFlYjg3NjZjMTc4NzkxOWUyMGFlNWVmZTQ4MWRiZGFkOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YKaEsVoe9vodIAXm+fowqfpFcce 0ACec5h8fBD79XhV3MPi73CDqGsnh23AnXiekiaqRBGjmUYOQKU/u2g7baz1ibVI BmoOnmvoKGHXcFPUZOQ6P6/+IB4Uk4/RhU2AED0Zh6pGZAhKQbWnCVfJ0DUjFdc7 /7YxDZ8bwcdzhxD7k5ykUXgToAFZ1Ft/h3qy+zN9pvzdPd0qyfBrSBgp1uvyOIYW 5q9IgBJog3eCWMIrVfmR8vQuuI0+bY2+Cjh6L4Q6ZVtXuVTjjISKwJ7dW/j1SDCm B+SI8+XCmc9mhUpUafvknKaKsIcHszbVq4Ql36QJDbexvzggEkXt2gD7JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnUweuHZsF4eRniCuXv5IHb2tl7MB8GA1UdIwQY MBaAFDyKBJjsO060T03yVBrjkYCrtl9EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wMmY2M2UtNGVhMi00M2FjLWFiZDUt MGRhYjIzMTI5MDJhLzEvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wMmY2M2UtNGVhMi00M2FjLWFiZDUtMGRhYjIzMTI5MDJh LzEvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAym8uhfLl Ev3vKOYJJpZMpWpIcCEJ4VoLDXvNNoaSAzbjPCOX0uR9OnN+wnerW/0B3PLSfIxh IAw1jIE7G5kGcqkZ56FwLQJVxzl7rBi8sYPJg3H6jwJ+P1fOzgQdl5MilDYTdt9k VrlfFqPDqJT6Y5G19EZodF8o06CDxyx3Fjq7MJKExOWRcOT2rWS8ZloueyR5j/1O kcb9mm9wg7qVJdUKWoDLaOZo0RVLc2F4oOnsz8kFnuZfV+sDiFsKLikvnYzY+U6p taymgFJeflzR34SdR1+g/0wvJjXXbFFZqVolcVFYBho5JPZzz+jInyRuQTmyV2Ow A5AzbAZxAjz1og== -----END CERTIFICATE-----Generated at Wed Dec 17 07:39:44 2025 by rpki-client