This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft File: PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json) Hash identifier: U8pmyyf9TD5ObRZJfHXFTcArXqWAQmRcsy7sUEQ7Ymo= Subject key identifier: 6F:AC:4C:75:73:18:77:F8:69:70:F6:16:6D:3F:3B:75:3C:43:C1:F4 Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97 Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997 Certificate serial: 019B104A2ED7B548B0196527D0B29CA1FB8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft Manifest number: 177B Signing time: Fri 12 Dec 2025 02:00:55 +0000 Manifest this update: Fri 12 Dec 2025 02:00:55 +0000 Manifest next update: Sat 13 Dec 2025 02:00:55 +0000 Files and hashes: 1: 8HB6gBMH1OXCC4HSHxjMBJPAXNM.roa (hash: 6HXyg8j0+e0B50uY00MrE32ixPRXRhbFhui9gW2K51g=) 2: Kc-64DdvpDRYpryEgWVmiZAxLb4.roa (hash: fJnE6S6w3zcsSEIUNp19rp72G3CDdr3kfBB8oEmZDtA=) 3: O10H_NXAAD1i_gphnWNg3Wq_zvU.roa (hash: S3bnGRkcKICV24Gqt4GllsXulmARfu6sriFJ2/wRC7Y=) 4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: AUbZJWoBIFP0Q/XljTeuoAOrcP7bJO0gU+Pdi/ATReo=) 5: cQXeCTJ_DMy-0IxgEi53vyjoG5Y.roa (hash: EAhkoKbmTNBh8iUu/nLDdEtJhvyuoftcxxuasAKUFqo=) 6: dqzUrFY323Ep8f9_EznYPf-FHbk.roa (hash: tHn5PdWDaptFE9kcckqjz78Qa974P1HY2yrHA0Adm4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:2e:d7:b5:48:b0:19:65:27:d0:b2:9c:a1:fb:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997 Validity Not Before: Dec 12 02:00:55 2025 GMT Not After : Dec 13 02:00:55 2025 GMT Subject: CN=6fac4c75731877f86970f6166d3f3b753c43c1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:e8:ba:d4:eb:b9:dc:36:a1:c8:43:83:06: 23:0f:6f:39:8f:8f:b0:8a:5f:a8:00:4b:7f:47:0c: 58:d3:53:a4:a4:66:df:5d:6b:3e:b7:88:e0:7d:ed: c7:4f:e2:dc:45:79:0d:af:1f:b9:f3:dd:53:fe:d7: b7:9e:aa:7f:fc:a8:dd:49:ca:e7:8a:fc:98:f6:13: 88:8b:9f:02:d9:56:d5:c8:a5:c1:9b:5a:f8:e6:26: 03:2a:37:70:8e:97:7a:4a:24:6e:ce:ae:fa:6f:bc: c6:d1:ec:0a:0c:89:a3:4a:8d:2d:8b:f1:4b:26:53: d1:eb:d0:70:6c:4a:37:22:cf:dd:3f:a1:4d:fd:ac: 20:b6:56:a8:12:d5:55:14:b4:25:44:7d:94:92:42: 24:d8:98:18:be:bb:cc:31:cb:54:00:f6:08:89:14: 83:3c:b2:5a:14:73:25:3c:3d:6d:c6:97:c9:46:c3: a6:9e:40:c6:fb:06:f1:9d:2b:10:03:14:73:f1:31: f4:0b:33:07:91:06:d6:8f:c2:99:ee:a0:7f:f8:56: ae:86:ce:10:b4:4c:f3:01:a3:3d:1d:eb:ec:bf:74: 9e:81:01:1a:68:cc:1c:47:10:d1:50:00:bf:02:44: 12:20:95:66:11:b6:1f:3b:cb:4d:40:a2:f2:a3:ba: 71:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AC:4C:75:73:18:77:F8:69:70:F6:16:6D:3F:3B:75:3C:43:C1:F4 X509v3 Authority Key Identifier: keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:50:51:35:d6:91:97:79:ca:6c:f1:c7:83:f5:89:02:35:99: 82:ba:a0:ee:af:25:49:6e:1d:93:57:81:1d:1f:05:17:fb:f7: 91:ab:16:da:fc:6d:8c:83:0d:b0:07:61:76:25:8a:7b:6a:7f: 7c:ce:9b:81:64:37:c7:bd:57:0d:eb:7c:ed:49:b6:95:e7:9e: 68:24:c7:44:2a:6b:ef:cd:a3:11:26:38:0e:2c:b7:2f:58:db: b2:10:ed:25:49:2d:7a:c0:5a:33:49:42:7d:e4:17:d7:05:1f: 59:b9:f3:d7:25:9e:5e:75:cd:0c:ac:dc:b7:52:1b:89:d3:99: 5a:49:9f:ea:13:30:3e:11:f0:f5:a0:00:0e:81:b1:45:6f:7e: f3:0c:31:cd:8d:5d:fb:24:72:fe:63:aa:20:1f:2c:0d:9d:f7: 90:fe:3e:c1:a5:31:69:b7:9b:53:d7:54:c5:c8:bf:09:20:b2: 5b:0a:77:33:1b:f8:31:fb:78:cb:14:bf:11:c4:ed:e6:6f:8e: de:94:39:ef:76:85:b7:13:f7:3d:b2:76:67:07:d5:d0:50:da: 54:4e:7b:e6:77:86:c6:04:82:9f:fa:48:20:46:38:e1:ae:7b: 3c:62:d2:60:91:ef:2b:a2:67:85:55:9b:19:97:c0:64:6d:e1: fd:0a:3d:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSi7XtUiwGWUn0LKcofuPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjBjNzAwZDk4ZDc2YTljNjQwMTczODg5ZjkzNjdkYTlk ZTg5OTcwHhcNMjUxMjEyMDIwMDU1WhcNMjUxMjEzMDIwMDU1WjAzMTEwLwYDVQQD Eyg2ZmFjNGM3NTczMTg3N2Y4Njk3MGY2MTY2ZDNmM2I3NTNjNDNjMWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/joutTrudw2ochDgwYjD285j4+w il+oAEt/RwxY01OkpGbfXWs+t4jgfe3HT+LcRXkNrx+5891T/te3nqp//KjdScrn ivyY9hOIi58C2VbVyKXBm1r45iYDKjdwjpd6SiRuzq76b7zG0ewKDImjSo0ti/FL JlPR69BwbEo3Is/dP6FN/awgtlaoEtVVFLQlRH2UkkIk2JgYvrvMMctUAPYIiRSD PLJaFHMlPD1txpfJRsOmnkDG+wbxnSsQAxRz8TH0CzMHkQbWj8KZ7qB/+Fauhs4Q tEzzAaM9Hevsv3SegQEaaMwcRxDRUAC/AkQSIJVmEbYfO8tNQKLyo7px6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+sTHVzGHf4aXD2Fm0/O3U8Q8H0MB8GA1UdIwQY MBaAFD4gxwDZjXapxkAXOIn5Nn2p3omXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5Njgt ZTQ2ZDhkMTZhMTVmLzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5NjgtZTQ2ZDhkMTZhMTVm LzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFBRNdaR l3nKbPHHg/WJAjWZgrqg7q8lSW4dk1eBHR8FF/v3kasW2vxtjIMNsAdhdiWKe2p/ fM6bgWQ3x71XDet87Um2leeeaCTHRCpr782jESY4Diy3L1jbshDtJUktesBaM0lC feQX1wUfWbnz1yWeXnXNDKzct1IbidOZWkmf6hMwPhHw9aAADoGxRW9+8wwxzY1d +yRy/mOqIB8sDZ33kP4+waUxabebU9dUxci/CSCyWwp3Mxv4Mft4yxS/EcTt5m+O 3pQ573aFtxP3PbJ2ZwfV0FDaVE575neGxgSCn/pIIEY44a57PGLSYJHvK6JnhVWb GZfAZG3h/Qo9/Q== -----END CERTIFICATE-----Generated at Fri Dec 12 06:32:53 2025 by rpki-client