This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft File: pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json) Hash identifier: 9gkzNk6Uao1uz/ePvLytLgVGQt+WxZ2YTI9eNc/6q8U= Subject key identifier: 14:C5:93:47:AA:48:0A:6B:0B:F4:76:A2:55:24:F7:8B:2F:59:8D:11 Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC Certificate issuer: /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc Certificate serial: 019B0EC96BA70E29037D7198B49CA387EF6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft Manifest number: 0C2D Signing time: Thu 11 Dec 2025 19:00:39 +0000 Manifest this update: Thu 11 Dec 2025 19:00:39 +0000 Manifest next update: Fri 12 Dec 2025 19:00:39 +0000 Files and hashes: 1: 2bwoacVhn9Ey8-WA6HPqgOWaS3w.roa (hash: +4RKvBlDgq1ptS9Kf/qX9i6nHjxZCbfdf3DtkVyJdE4=) 2: OFc0yBZFy4Wa20RcLrHQGW0n8Z0.roa (hash: TB30ZCImx4FabUXsP6FrJ/8xR1ebGEeWXJhQyL3afw0=) 3: gBycawi1ika7Vj_3TGa6n8ZyOcc.roa (hash: eGdxhHwT3weYIz4n0K5fQnn/ZNevVWIphIjoit3SpJE=) 4: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: aeGUuiVBLUnobbFf7nHgxvCE1UXsIJC7htnyYZM0xgU=) 5: thsewX5m5QEbqC1hk05OepLePSE.roa (hash: Qec8TVM/3O2FwTtHE6+SXRB/S0VWZFEK7seQA4WOq3A=) 6: uZ5GJPrp9SFd4Iq3FGcL7RdiaHc.roa (hash: qgD6SLmZc9P0p+V20mf5ZvuX3cLkvcDCzUTLrsNawj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:6b:a7:0e:29:03:7d:71:98:b4:9c:a3:87:ef:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc Validity Not Before: Dec 11 19:00:39 2025 GMT Not After : Dec 12 19:00:39 2025 GMT Subject: CN=14c59347aa480a6b0bf476a25524f78b2f598d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:83:9f:0b:53:b3:58:e4:46:6b:ef:34:03:6c: 73:4b:a2:a9:e5:b7:61:01:a1:72:b0:1d:28:5c:30: 89:c7:94:d7:4b:01:34:f5:48:ac:69:fd:0d:56:fa: 9c:85:30:ee:be:ad:ef:c3:b1:64:54:df:38:74:a0: 3e:d2:01:11:12:79:f4:bf:de:9a:2b:71:f5:f2:bc: 64:32:dc:cd:44:07:a2:a8:43:04:cb:5e:3c:74:d2: db:11:a7:bc:fc:ba:c6:67:47:86:75:52:9d:cb:b9: 61:59:ce:00:c5:e0:fc:f5:fa:31:45:9a:92:54:d5: 88:9a:29:fb:28:7d:a8:9b:24:a7:7b:2b:b6:c4:86: 4b:65:52:ba:d9:d9:50:e9:82:eb:2d:c9:31:a3:3a: 06:52:63:48:53:73:6e:c5:9a:cf:c0:72:4d:56:82: f5:8b:8b:9f:b4:f0:7a:ce:e1:f2:1a:ee:fb:17:c6: 30:2a:f7:04:5c:c7:a3:a8:b4:1b:17:d8:9d:c4:02: 40:ba:11:a0:bc:59:a9:23:4d:b2:41:ed:a0:cb:6b: d6:20:6b:3d:a0:0f:c0:e5:4f:c5:20:a9:88:e6:b5: 22:3a:fe:ab:47:ef:2b:cd:c7:88:36:1a:e8:35:4f: 17:9a:d2:f0:0f:43:ba:98:49:47:0b:5e:2d:8f:92: ba:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C5:93:47:AA:48:0A:6B:0B:F4:76:A2:55:24:F7:8B:2F:59:8D:11 X509v3 Authority Key Identifier: keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4f:0b:58:f9:80:7f:a8:1a:f0:46:2e:5c:62:b6:59:49:a9: 44:50:d3:33:b7:80:b2:c0:2a:cc:b5:b3:15:a0:55:58:53:80: b7:c8:95:b8:4d:b3:a7:72:62:e9:af:e2:06:28:36:87:e2:2c: 22:d1:a1:f6:93:61:dd:40:2b:9a:2d:07:1c:9d:be:37:91:d9: a9:da:b8:3a:97:63:33:79:13:df:60:13:09:09:42:e1:4a:8e: c3:ee:38:ca:7a:d6:d4:85:11:0f:67:31:8d:37:a1:ed:2f:75: 88:dc:33:4a:df:69:2b:df:d5:11:41:58:ae:1e:7d:58:ed:ef: fc:84:09:a4:82:86:f0:07:d9:ae:ae:85:30:a6:3a:53:af:03: 18:98:55:ad:48:5d:7d:6a:fa:99:22:f4:6d:5b:3b:38:d4:5b: 38:ad:d6:36:33:06:b9:28:6d:8c:9c:e3:a2:0d:6b:ec:85:76: 5e:df:93:bc:e8:06:ca:d0:2a:35:3e:24:40:24:a5:93:07:dd: 69:ea:74:4e:60:ab:00:0a:da:fb:8f:3f:60:9e:d9:f3:ab:38: aa:39:a2:30:4b:4c:a7:1c:61:15:cb:f3:99:2b:e1:fc:5f:b7: 01:c3:d1:6e:b0:93:32:d7:21:2b:cd:70:af:5a:69:91:bf:d8: 65:b5:43:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyWunDikDfXGYtJyjh+9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MmYyZDNjMjY5ZDkzNTIyNzY5MGIyOGI3ZmJkZDk1M2Ux ZTllZGMwHhcNMjUxMjExMTkwMDM5WhcNMjUxMjEyMTkwMDM5WjAzMTEwLwYDVQQD EygxNGM1OTM0N2FhNDgwYTZiMGJmNDc2YTI1NTI0Zjc4YjJmNTk4ZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooOfC1OzWORGa+80A2xzS6Kp5bdh AaFysB0oXDCJx5TXSwE09Uisaf0NVvqchTDuvq3vw7FkVN84dKA+0gEREnn0v96a K3H18rxkMtzNRAeiqEMEy148dNLbEae8/LrGZ0eGdVKdy7lhWc4AxeD89foxRZqS VNWImin7KH2omySneyu2xIZLZVK62dlQ6YLrLckxozoGUmNIU3NuxZrPwHJNVoL1 i4uftPB6zuHyGu77F8YwKvcEXMejqLQbF9idxAJAuhGgvFmpI02yQe2gy2vWIGs9 oA/A5U/FIKmI5rUiOv6rR+8rzceINhroNU8XmtLwD0O6mElHC14tj5K6pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTFk0eqSAprC/R2olUk94svWY0RMB8GA1UdIwQY MBaAFKYvLTwmnZNSJ2kLKLf73ZU+Hp7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMt MTAwZWVkODEyYzQwLzEvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMtMTAwZWVkODEyYzQw LzEvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUk8LWPmA f6ga8EYuXGK2WUmpRFDTM7eAssAqzLWzFaBVWFOAt8iVuE2zp3Ji6a/iBig2h+Is ItGh9pNh3UArmi0HHJ2+N5HZqdq4OpdjM3kT32ATCQlC4UqOw+44ynrW1IURD2cx jTeh7S91iNwzSt9pK9/VEUFYrh59WO3v/IQJpIKG8AfZrq6FMKY6U68DGJhVrUhd fWr6mSL0bVs7ONRbOK3WNjMGuShtjJzjog1r7IV2Xt+TvOgGytAqNT4kQCSlkwfd aep0TmCrAAra+48/YJ7Z86s4qjmiMEtMpxxhFcvzmSvh/F+3AcPRbrCTMtchK81w r1ppkb/YZbVDxQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:01 2025 by rpki-client