This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft File: piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json) Hash identifier: 5U0A5E7L4h4X7kE/yf/qDJx6CSrXVDxmbmIhdImB8LA= Subject key identifier: 8F:AB:3A:6E:42:6E:78:7A:46:09:DE:E4:E5:74:27:FA:1F:2C:79:A0 Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8 Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8 Certificate serial: 019B2362F145D0AAB4F85E84AF4AF296CA92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft Manifest number: 0BBE Signing time: Mon 15 Dec 2025 19:00:45 +0000 Manifest this update: Mon 15 Dec 2025 19:00:45 +0000 Manifest next update: Tue 16 Dec 2025 19:00:45 +0000 Files and hashes: 1: BxgD-RrZabBuEEfFQkOR7JzPkYA.roa (hash: Dbgg4n4USIHYY1LVI9yt8KqtluJXraRBx7hK71/1AxU=) 2: _HboziFCCXY6Aftni-9e_QXHS7Y.roa (hash: 1Dtm7p4VO9zPNWsz+P/VL1I6c+v4X7GMgtJoAtf8pBU=) 3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: GZmBVIMSf4Vk81SLmhh/jY/Q8c/cR7PcFwUIaWhACuo=) 4: y3UMX5qqKpS7PayD_PFfS-9xYiA.roa (hash: 1x0+PMsy7NMRlTF0Iq4hoHsB7a+mNEhOddx/6ZAYPrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:62:f1:45:d0:aa:b4:f8:5e:84:af:4a:f2:96:ca:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8 Validity Not Before: Dec 15 19:00:45 2025 GMT Not After : Dec 16 19:00:45 2025 GMT Subject: CN=8fab3a6e426e787a4609dee4e57427fa1f2c79a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:b3:57:53:77:b8:20:ee:0a:ea:08:d3:b5: 06:ce:68:a0:9d:db:69:7f:72:0b:17:08:05:e9:31: 8e:de:86:ba:bf:cb:ce:52:29:85:8f:e1:62:9a:81: 22:62:3b:3f:d2:7b:89:ff:78:7d:d6:1f:7c:6c:78: 9c:f2:38:a7:59:b3:0b:27:de:00:f7:fb:80:85:c4: 32:a1:80:53:b3:54:1a:de:ef:dc:96:56:39:ce:c8: 2f:7d:17:b3:9d:b2:50:ab:01:0d:a0:26:24:79:43: b5:36:9f:33:4a:a6:ee:09:35:40:f9:73:8f:06:d6: f3:a0:41:bb:96:70:7e:14:ef:97:7c:18:1b:5b:24: 04:79:b9:4d:7c:c3:2e:86:ac:4b:4e:1d:74:ae:64: b8:8d:57:b8:af:c2:c5:9e:95:52:e8:d7:4b:ba:2d: 8c:06:67:5d:bd:37:37:05:a1:79:14:b0:69:c9:e6: ea:61:f1:34:45:00:37:f0:96:e4:1e:2a:77:52:11: d4:c1:6e:76:bc:34:0f:61:f1:f3:69:27:9b:c1:b6: 0a:61:7d:22:98:3d:3c:5c:e3:e1:ef:af:e0:23:0a: 48:e8:50:4e:ed:1a:9b:d5:d2:92:62:07:32:1e:3f: 35:9b:9c:61:8b:32:80:0c:4c:29:2e:b7:1d:da:ce: cc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AB:3A:6E:42:6E:78:7A:46:09:DE:E4:E5:74:27:FA:1F:2C:79:A0 X509v3 Authority Key Identifier: keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:bf:d7:3e:42:62:a3:65:f3:a4:23:3a:4a:97:04:3b:8c:8d: e5:41:b0:22:20:07:e4:b8:3f:31:a0:43:b2:be:20:06:ba:3c: 57:ee:cd:eb:20:52:ed:03:7b:99:d8:75:14:5a:e8:60:e0:23: 6f:64:60:43:4c:d2:61:2f:fd:3d:2c:fb:59:54:42:14:f5:2b: 12:5d:8d:ac:e1:5b:44:e2:d1:d7:3a:b1:f7:ec:79:6a:0f:65: 0d:4d:45:ba:b1:67:69:96:c2:59:87:e7:f0:2d:a2:c9:76:9f: 39:c5:e7:cf:35:a9:d6:20:ac:54:8e:ed:a3:8a:e1:3a:e5:ba: 05:01:4d:84:55:ab:a1:36:96:77:ea:ec:0f:ee:6a:b2:d1:e0: 03:9f:6b:97:fa:8d:b5:90:74:c4:25:ec:95:ef:2c:11:65:f4: b5:89:2d:eb:bc:88:a2:f3:77:c1:c0:67:50:7c:9f:3e:bf:db: ab:ac:1a:7d:50:77:d7:bf:2f:f5:72:76:18:30:14:e7:94:ed: 70:78:bb:b0:a2:1d:01:fa:a1:57:7a:86:f2:23:00:28:bb:42: db:5c:57:6a:ad:44:ea:d4:f9:4a:a6:8c:66:6f:7d:8c:a5:0c: 13:26:f1:2a:8a:86:24:e2:03:fd:a4:e2:61:75:45:ed:c6:42: 42:ea:74:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjYvFF0Kq0+F6Er0rylsqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MmE4YzdhMWY2YTRjOTQ5ZTAyN2I1MzY5ZDk3ZDc1NzZl MTQ3ZjgwHhcNMjUxMjE1MTkwMDQ1WhcNMjUxMjE2MTkwMDQ1WjAzMTEwLwYDVQQD Eyg4ZmFiM2E2ZTQyNmU3ODdhNDYwOWRlZTRlNTc0MjdmYTFmMmM3OWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywazV1N3uCDuCuoI07UGzmigndtp f3ILFwgF6TGO3oa6v8vOUimFj+FimoEiYjs/0nuJ/3h91h98bHic8jinWbMLJ94A 9/uAhcQyoYBTs1Qa3u/cllY5zsgvfReznbJQqwENoCYkeUO1Np8zSqbuCTVA+XOP BtbzoEG7lnB+FO+XfBgbWyQEeblNfMMuhqxLTh10rmS4jVe4r8LFnpVS6NdLui2M BmddvTc3BaF5FLBpyebqYfE0RQA38JbkHip3UhHUwW52vDQPYfHzaSebwbYKYX0i mD08XOPh76/gIwpI6FBO7Rqb1dKSYgcyHj81m5xhizKADEwpLrcd2s7MIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+rOm5Cbnh6Rgne5OV0J/ofLHmgMB8GA1UdIwQY MBaAFKYqjHofakyUngJ7U2nZfXV24Uf4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYt NThjODVkNDMzNmJjLzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYtNThjODVkNDMzNmJj LzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApr/XPkJi o2XzpCM6SpcEO4yN5UGwIiAH5Lg/MaBDsr4gBro8V+7N6yBS7QN7mdh1FFroYOAj b2RgQ0zSYS/9PSz7WVRCFPUrEl2NrOFbROLR1zqx9+x5ag9lDU1FurFnaZbCWYfn 8C2iyXafOcXnzzWp1iCsVI7to4rhOuW6BQFNhFWroTaWd+rsD+5qstHgA59rl/qN tZB0xCXsle8sEWX0tYkt67yIovN3wcBnUHyfPr/bq6wafVB3178v9XJ2GDAU55Tt cHi7sKIdAfqhV3qG8iMAKLtC21xXaq1E6tT5SqaMZm99jKUMEybxKoqGJOID/aTi YXVF7cZCQup0rA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:07:38 2025 by rpki-client