This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json) Hash identifier: SGSBkVw6EvX5TT1MB3ZFMlwCRwAIcEMdH4GNM4uRhgc= Subject key identifier: C9:DB:77:E9:7D:DF:AD:AB:A7:EA:94:CB:90:24:23:E9:A2:08:98:64 Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Certificate serial: 019AF35273F189C9C1105B36A79C48096514 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft Manifest number: 10E3 Signing time: Sat 06 Dec 2025 11:00:58 +0000 Manifest this update: Sat 06 Dec 2025 11:00:58 +0000 Manifest next update: Sun 07 Dec 2025 11:00:58 +0000 Files and hashes: 1: 5W1H_E66w8rreTv-sH39ih7Q9Kc.roa (hash: ds103SAEhzJEdHJkH+426YBLHIwGf7CU7ARmWBMf450=) 2: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: izhCOQogW+QFkYE3oMnuyJno3DY7Cdctia3SJAL9iLU=) 3: Tsid8gfkYRwmSvUBez-ZQcWUur8.roa (hash: msvAp4jHrZw21tVBTpGpRqFg3CGocyYoBz7jW2toIuQ=) 4: VnPSleeMHT-jEDZJvcj7wswo-uc.roa (hash: J8mE9CeDpgMjScDrMhJ4WgvJMldlEykT+vy+lBJjBdk=) 5: VyJNQqph-KXg7u6RUzzJN3rupCA.roa (hash: LooQO9Bq7ra/KCVGLYawPG8pRB8eBgj1f03IAunPvdE=) 6: Xy7X7Y7n1dwT-JcABr_7kk_W05o.roa (hash: AQ2x/CDJ1G+4qJ9b94DvcRRy4bmdLPUtpu6pmkV+OCs=) 7: _mV-RGY-pv2pFTbkkb6uI5Oje_I.roa (hash: p4eENjI/cwmo6qgfAyd3PHUV1z0BYeTGomC/74ioJaI=) 8: b-VhFar5Bob8wl8OUu2ZPN9DNEQ.roa (hash: tvCO5UR2+v1lg6StGj4o6eWVSuPQeXT3DDeXMyH7vLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:73:f1:89:c9:c1:10:5b:36:a7:9c:48:09:65:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Validity Not Before: Dec 6 11:00:58 2025 GMT Not After : Dec 7 11:00:58 2025 GMT Subject: CN=c9db77e97ddfadaba7ea94cb902423e9a2089864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:94:4d:f1:61:d1:2b:6d:15:72:a0:bd:d2:8a: d1:98:4f:9c:8a:d1:05:24:8f:92:81:b3:da:ce:68: 27:15:92:36:62:9b:bc:7a:eb:75:c5:ae:49:7f:92: 72:8c:c6:aa:8a:5e:72:98:72:cf:e6:8c:03:73:bd: 19:1c:e4:28:d1:7a:95:23:e0:1b:db:09:35:62:d5: 5e:cd:04:50:be:10:7c:b7:56:0f:8b:9f:ef:75:fe: 79:29:ed:39:bf:96:b5:3d:7f:77:96:ff:ef:57:17: 58:88:b9:e3:03:e9:a4:3c:3c:d0:dd:b0:56:5c:6b: 27:09:3a:51:6e:f3:16:9c:6f:ac:f5:11:2f:19:e3: a1:1f:cb:86:e9:0c:19:33:5a:2e:56:47:36:42:44: cd:eb:5b:09:33:42:98:42:ff:f8:9f:6c:8c:95:af: 89:46:bd:af:53:da:18:ce:b5:c6:53:00:d4:31:2c: 27:df:a6:f9:ff:b3:77:ba:bc:e2:f5:58:a3:27:7c: 23:59:9a:8e:6e:cc:d6:88:5f:63:69:90:b8:da:6c: 33:66:84:1b:b4:34:4d:ea:4f:1a:43:63:de:8e:4a: bc:75:ea:5a:08:c2:f4:28:51:ec:f0:f1:61:5d:84: 16:5d:5c:b6:1d:51:08:8b:06:3e:d9:84:63:42:28: 2f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DB:77:E9:7D:DF:AD:AB:A7:EA:94:CB:90:24:23:E9:A2:08:98:64 X509v3 Authority Key Identifier: keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7f:71:11:ad:98:18:71:93:b3:d4:04:a9:2e:e4:c7:6d:5e: d7:0e:a0:42:87:be:70:b1:47:c6:b5:16:2d:fa:df:fb:7b:94: 75:a2:6c:ab:69:14:c6:91:ad:91:ec:8f:f9:67:e8:c3:f8:85: f7:78:fa:27:49:99:20:b5:8f:0d:01:8d:93:59:20:4b:0f:43: b3:76:42:a6:a5:9e:59:5e:25:ff:30:f3:c9:b3:97:3b:66:64: 1d:0a:fd:5a:15:b3:95:c0:21:61:8e:e8:52:b7:42:1f:b5:65: fd:9b:91:14:05:30:ee:35:70:ec:cb:a4:ae:5e:02:1c:ce:23: 84:2e:c4:64:7e:c0:10:40:41:de:d6:99:2a:1b:d0:fe:c3:b3: 36:cc:8d:48:03:42:07:7c:df:19:dc:bc:89:06:6b:e7:96:61: d6:49:65:86:d2:13:99:b4:78:db:c7:ad:18:ac:98:78:ac:0b: b2:e1:c9:ab:8e:29:ec:0a:98:a4:1d:38:a5:7e:dd:ac:7d:1a: ff:d9:62:f6:e4:d9:90:c3:8c:bf:85:64:28:75:23:72:4a:1a: 86:82:85:b0:5c:55:cf:b1:10:3d:e2:b5:1c:18:6c:bc:d0:be: f7:ae:62:e1:6b:6a:ac:5e:28:c6:72:40:23:82:5c:4c:82:40: 4a:9a:c8:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnPxicnBEFs2p5xICWUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5 Y2UzM2EwHhcNMjUxMjA2MTEwMDU4WhcNMjUxMjA3MTEwMDU4WjAzMTEwLwYDVQQD EyhjOWRiNzdlOTdkZGZhZGFiYTdlYTk0Y2I5MDI0MjNlOWEyMDg5ODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupRN8WHRK20VcqC90orRmE+citEF JI+SgbPazmgnFZI2Ypu8eut1xa5Jf5JyjMaqil5ymHLP5owDc70ZHOQo0XqVI+Ab 2wk1YtVezQRQvhB8t1YPi5/vdf55Ke05v5a1PX93lv/vVxdYiLnjA+mkPDzQ3bBW XGsnCTpRbvMWnG+s9REvGeOhH8uG6QwZM1ouVkc2QkTN61sJM0KYQv/4n2yMla+J Rr2vU9oYzrXGUwDUMSwn36b5/7N3urzi9VijJ3wjWZqObszWiF9jaZC42mwzZoQb tDRN6k8aQ2Pejkq8depaCML0KFHs8PFhXYQWXVy2HVEIiwY+2YRjQigvIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnbd+l9362rp+qUy5AkI+miCJhkMB8GA1UdIwQY MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt NjJiZTUzNDI1Njc2LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2 LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlX9xEa2Y GHGTs9QEqS7kx21e1w6gQoe+cLFHxrUWLfrf+3uUdaJsq2kUxpGtkeyP+Wfow/iF 93j6J0mZILWPDQGNk1kgSw9Ds3ZCpqWeWV4l/zDzybOXO2ZkHQr9WhWzlcAhYY7o UrdCH7Vl/ZuRFAUw7jVw7Mukrl4CHM4jhC7EZH7AEEBB3taZKhvQ/sOzNsyNSANC B3zfGdy8iQZr55Zh1kllhtITmbR428etGKyYeKwLsuHJq44p7AqYpB04pX7drH0a /9li9uTZkMOMv4VkKHUjckoahoKFsFxVz7EQPeK1HBhsvNC+965i4WtqrF4oxnJA I4JcTIJASprIrg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:17:27 2025 by rpki-client