This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft File: PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json) Hash identifier: YqXZEhqSIsv3bIVP1SASCDgaOln4blUrKMPCKrxIMYk= Subject key identifier: 75:49:7A:90:D6:65:F3:4E:22:A0:3F:5B:6A:74:1A:AD:77:C5:27:B7 Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Certificate serial: 019B066C90007FE8B416873D7FAA20850BA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft Manifest number: 04EF Signing time: Wed 10 Dec 2025 04:02:16 +0000 Manifest this update: Wed 10 Dec 2025 04:02:16 +0000 Manifest next update: Thu 11 Dec 2025 04:02:16 +0000 Files and hashes: 1: 2UhYLcd2j-KdAauqxCqQQx52q2U.roa (hash: MFZ2OT0V1ZDMTvLmKJXIXyij1pz5j8dbnfqUGRmXftA=) 2: 89aLf4Xx_e2XnMyRZVIyRG0BizY.roa (hash: 2L9+HLihim1QwX2POr2PXkk92jLE2cxLeMFCnETsOnc=) 3: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: 5mJOvSF9aMfFoujo4QM7DxCGWsZy+FCuyfcDRlpdG60=) 4: UOFRq0QjO6LafqX1sBCbk2kEM3A.roa (hash: QZheATXKq3EbyRelx+ry8csen44AxAPqz729UWJVvQY=) 5: pwdlb--yOjorbcCQL2QR9oUUpWI.roa (hash: 1klYczNt5J1n/8K98SAjHgNfDm84PABZ1H0MBugMFMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6c:90:00:7f:e8:b4:16:87:3d:7f:aa:20:85:0b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Validity Not Before: Dec 10 04:02:16 2025 GMT Not After : Dec 11 04:02:16 2025 GMT Subject: CN=75497a90d665f34e22a03f5b6a741aad77c527b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d6:83:49:76:b7:2a:67:39:2f:25:e8:bc:fe: d9:d4:db:5d:66:bb:dc:2f:18:bd:43:da:b8:30:47: 4d:7b:f9:f7:c3:e7:15:47:e3:58:30:c8:b8:79:9c: e6:6b:f3:f7:2f:02:86:50:0f:73:62:00:a2:57:3b: a4:47:e2:80:0f:24:6f:1b:db:93:a5:a8:3c:d3:08: 56:5b:2a:ab:0f:2d:aa:e3:83:a7:b5:f4:d8:71:e1: 5d:21:18:df:14:8a:a6:bb:91:92:44:a7:88:96:06: cf:ac:ec:74:68:d6:d7:ce:b5:dd:bb:66:13:a2:17: 67:db:01:2a:87:b1:73:32:f0:22:7c:15:83:31:4b: d0:e3:19:3c:69:4d:13:90:87:69:c3:9c:b5:0d:e4: b6:6f:15:fc:47:17:a8:30:3f:15:d9:4e:bd:57:5c: 9f:83:91:69:d5:99:e2:0c:53:bc:dd:d2:20:2f:b0: 51:35:86:e4:a2:58:03:9d:fe:fe:89:81:26:46:bb: e5:0c:0c:f2:1d:22:96:9c:b5:35:b2:46:54:67:88: a9:04:3c:bd:08:5c:81:0e:1b:92:6e:24:49:82:e3: 3f:58:7d:6e:b1:6d:d7:a4:7c:e9:26:de:fc:1d:ce: 62:48:5f:0c:54:e0:95:65:13:21:0b:f8:b5:49:37: a3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:49:7A:90:D6:65:F3:4E:22:A0:3F:5B:6A:74:1A:AD:77:C5:27:B7 X509v3 Authority Key Identifier: keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:cd:21:55:c2:08:7d:98:a0:a5:8d:f5:34:87:6a:cb:e9:e2: c8:a1:b3:8e:a4:67:39:c2:c7:19:d5:97:6e:3d:ed:c4:98:1a: 8e:4b:8c:f5:7f:58:cc:82:1c:b1:4d:bb:54:8b:fa:8d:21:1d: 52:56:be:50:fd:1e:6a:90:0e:4e:c8:4f:bf:06:6f:d5:dd:00: 78:ff:29:e7:f5:ab:a4:6d:90:ca:5c:c9:3e:93:35:fd:bd:b1: ab:c4:47:b2:23:65:58:3c:4e:fe:a0:3a:0a:b6:b2:5b:82:c6: 06:01:da:f5:5d:8c:24:9e:74:9b:e1:03:2d:b3:74:52:f4:33: d7:44:c0:18:df:aa:63:d3:01:7b:9f:9c:30:87:78:ab:84:33: 96:2d:10:4c:88:de:fd:96:6c:0d:4b:48:43:48:6b:c9:d4:e8: e0:c4:35:67:d8:cf:a9:1a:bf:9d:59:67:5f:24:fc:a0:74:41: b7:76:8e:e6:f3:bd:41:13:0a:d8:75:d1:0d:c8:8b:2d:c4:59: cd:6d:36:00:7f:6c:cd:70:30:ef:20:ef:dd:92:ee:f7:49:06: e1:d0:95:46:66:3d:45:6d:3c:d5:63:97:80:3c:83:3d:48:1e: 7f:53:a4:d8:04:05:8b:69:0e:3e:52:76:4f:82:3b:89:14:ac: 2f:d5:3f:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGbJAAf+i0Foc9f6oghQulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjVhYjY5ODVmNzljYTlkZTA2ZTk4ZThiOWRhMjQ1ZDg1 NTlhYjYwHhcNMjUxMjEwMDQwMjE2WhcNMjUxMjExMDQwMjE2WjAzMTEwLwYDVQQD Eyg3NTQ5N2E5MGQ2NjVmMzRlMjJhMDNmNWI2YTc0MWFhZDc3YzUyN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9aDSXa3Kmc5LyXovP7Z1NtdZrvc Lxi9Q9q4MEdNe/n3w+cVR+NYMMi4eZzma/P3LwKGUA9zYgCiVzukR+KADyRvG9uT pag80whWWyqrDy2q44OntfTYceFdIRjfFIqmu5GSRKeIlgbPrOx0aNbXzrXdu2YT ohdn2wEqh7FzMvAifBWDMUvQ4xk8aU0TkIdpw5y1DeS2bxX8RxeoMD8V2U69V1yf g5Fp1ZniDFO83dIgL7BRNYbkolgDnf7+iYEmRrvlDAzyHSKWnLU1skZUZ4ipBDy9 CFyBDhuSbiRJguM/WH1usW3XpHzpJt78Hc5iSF8MVOCVZRMhC/i1STej5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVJepDWZfNOIqA/W2p0Gq13xSe3MB8GA1UdIwQY MBaAFD4lq2mF95yp3gbpjoudokXYVZq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAt YjE5YWQ1NDU1YmZkLzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAtYjE5YWQ1NDU1YmZk LzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAks0hVcII fZigpY31NIdqy+niyKGzjqRnOcLHGdWXbj3txJgajkuM9X9YzIIcsU27VIv6jSEd Ula+UP0eapAOTshPvwZv1d0AeP8p5/WrpG2QylzJPpM1/b2xq8RHsiNlWDxO/qA6 CrayW4LGBgHa9V2MJJ50m+EDLbN0UvQz10TAGN+qY9MBe5+cMId4q4Qzli0QTIje /ZZsDUtIQ0hrydTo4MQ1Z9jPqRq/nVlnXyT8oHRBt3aO5vO9QRMK2HXRDciLLcRZ zW02AH9szXAw7yDv3ZLu90kG4dCVRmY9RW081WOXgDyDPUgef1Ok2AQFi2kOPlJ2 T4I7iRSsL9U/ag== -----END CERTIFICATE-----Generated at Wed Dec 10 11:36:14 2025 by rpki-client