This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json) Hash identifier: GiR+uzNEpGG9NMfpt2/1Xelhneu7/9KoA4aCe2TpB6I= Subject key identifier: F3:93:F1:CB:BD:CF:37:9D:10:93:4D:D0:46:A7:EF:90:E4:7C:78:89 Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44 Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44 Certificate serial: 019AF57798A291F76A7B95DC662621294939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft Manifest number: 9D Signing time: Sat 06 Dec 2025 21:00:46 +0000 Manifest this update: Sat 06 Dec 2025 21:00:46 +0000 Manifest next update: Sun 07 Dec 2025 21:00:46 +0000 Files and hashes: 1: 7alJhVEJ8xj6IpTwu6Ih8OhjFkA.roa (hash: 7jCnG6JINMEyq9hp7eyBgT5bk5thbVgVLLuXRq467tI=) 2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: L4Zkzxt8i2qbLySFgCm7R2mqhWDqGSRCToRkR3geIQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:98:a2:91:f7:6a:7b:95:dc:66:26:21:29:49:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44 Validity Not Before: Dec 6 21:00:46 2025 GMT Not After : Dec 7 21:00:46 2025 GMT Subject: CN=f393f1cbbdcf379d10934dd046a7ef90e47c7889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2f:84:de:3c:e9:c2:01:83:5e:22:e1:68:b5: 71:59:25:8d:3a:8f:1d:3b:4a:4b:f2:06:cb:04:e6: 23:b8:2e:45:d3:e3:d6:38:e4:c3:0b:c0:e8:a8:5e: 7f:54:cf:37:58:cd:ff:af:91:ef:05:15:57:8e:f6: ba:d1:43:b5:e2:c3:14:c8:51:17:74:25:33:ef:cb: 4f:0d:60:63:1c:a1:ea:19:61:de:ad:f9:3e:a2:e3: 8d:3c:0e:22:2b:e7:da:d6:10:18:e7:81:fd:da:11: ce:a2:2a:3e:5e:c1:30:c2:57:f8:5f:1f:ad:50:78: de:d6:2b:ac:7f:20:71:8b:06:5f:07:43:bd:b0:ae: b7:1d:cc:6e:54:eb:22:8e:e2:5b:69:f8:c5:2a:6d: c5:1d:7d:3f:c9:e5:5e:01:3c:1c:3b:9a:1a:5d:b0: ea:01:f7:80:d6:8f:5e:e1:7a:61:ef:a8:29:1d:9a: 69:42:70:77:41:97:5b:cd:c2:85:3a:6e:84:6d:ba: c6:4b:a1:3a:85:ab:9e:3d:a7:8b:94:af:a9:6f:7e: cb:7e:fb:03:04:4e:e5:07:07:57:db:9e:c6:d1:ba: 34:fa:3f:58:d8:71:fc:b6:3e:cc:fb:a7:90:e1:a6: 9a:d6:99:02:be:41:64:b9:21:5a:d2:86:bd:db:9a: 4a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:93:F1:CB:BD:CF:37:9D:10:93:4D:D0:46:A7:EF:90:E4:7C:78:89 X509v3 Authority Key Identifier: keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ad:a4:aa:75:b9:e8:ea:a6:55:a0:79:c4:d1:4c:72:ed:87: 72:8e:41:a1:3a:3f:d4:bd:70:15:1c:b9:8a:72:4d:29:6c:09: 11:63:8f:25:29:97:f0:55:03:2b:af:53:8f:dd:2c:80:52:a9: 50:bd:40:84:89:13:d5:8d:e7:ef:2a:f9:8e:c3:d8:4a:07:50: e2:a2:cf:1f:91:e8:26:58:c9:6d:c8:30:cb:ef:d9:85:0a:2d: 29:37:0b:44:fe:05:cf:f1:37:16:ad:84:af:46:0b:7c:31:cf: 60:7c:18:70:72:51:fc:13:94:e9:fd:fe:cf:63:d6:61:88:d8: af:b1:fd:3f:eb:f7:17:16:5c:ae:89:89:65:fa:38:79:4d:68: 55:ea:0e:98:ae:cf:ac:be:58:f2:8a:d2:8f:ed:e9:70:ac:d7: c5:04:aa:bd:ff:f3:91:63:28:3f:f5:83:a2:21:94:6a:7b:14: 2b:b6:13:be:3f:a4:63:fe:b6:23:e5:1e:c4:10:50:c3:48:52: 68:a2:7c:65:73:07:0d:87:75:ab:b0:de:29:e8:6b:a5:df:01: fa:5f:77:a3:4e:b2:e2:e3:57:2f:6e:40:2f:28:c3:a9:ba:c6: e1:bc:5e:6f:d1:dc:7c:84:56:92:9b:a9:63:d8:b5:47:a9:ae: fb:00:bb:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d5iikfdqe5XcZiYhKUk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGEwNDk4ZWMzYjRlYjQ0ZjRkZjI1NDFhZTM5MTgwYWJi NjVmNDQwHhcNMjUxMjA2MjEwMDQ2WhcNMjUxMjA3MjEwMDQ2WjAzMTEwLwYDVQQD EyhmMzkzZjFjYmJkY2YzNzlkMTA5MzRkZDA0NmE3ZWY5MGU0N2M3ODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC+E3jzpwgGDXiLhaLVxWSWNOo8d O0pL8gbLBOYjuC5F0+PWOOTDC8DoqF5/VM83WM3/r5HvBRVXjva60UO14sMUyFEX dCUz78tPDWBjHKHqGWHerfk+ouONPA4iK+fa1hAY54H92hHOoio+XsEwwlf4Xx+t UHje1iusfyBxiwZfB0O9sK63HcxuVOsijuJbafjFKm3FHX0/yeVeATwcO5oaXbDq AfeA1o9e4Xph76gpHZppQnB3QZdbzcKFOm6EbbrGS6E6hauePaeLlK+pb37LfvsD BE7lBwdX257G0bo0+j9Y2HH8tj7M+6eQ4aaa1pkCvkFkuSFa0oa925pKdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOT8cu9zzedEJNN0Ean75DkfHiJMB8GA1UdIwQY MBaAFDyKBJjsO060T03yVBrjkYCrtl9EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wMmY2M2UtNGVhMi00M2FjLWFiZDUt MGRhYjIzMTI5MDJhLzEvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wMmY2M2UtNGVhMi00M2FjLWFiZDUtMGRhYjIzMTI5MDJh LzEvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEK2kqnW5 6OqmVaB5xNFMcu2Hco5BoTo/1L1wFRy5inJNKWwJEWOPJSmX8FUDK69Tj90sgFKp UL1AhIkT1Y3n7yr5jsPYSgdQ4qLPH5HoJljJbcgwy+/ZhQotKTcLRP4Fz/E3Fq2E r0YLfDHPYHwYcHJR/BOU6f3+z2PWYYjYr7H9P+v3FxZcromJZfo4eU1oVeoOmK7P rL5Y8orSj+3pcKzXxQSqvf/zkWMoP/WDoiGUansUK7YTvj+kY/62I+UexBBQw0hS aKJ8ZXMHDYd1q7DeKehrpd8B+l93o06y4uNXL25ALyjDqbrG4bxeb9HcfIRWkpup Y9i1R6mu+wC7Hw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:15:28 2025 by rpki-client