This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft File: pIqHxF2XIEZJBbamsJM_fDlRGS0.mft (raw, json) Hash identifier: CMNjPCzc45xligg+wrLGCs/4bgbuK+nXj9TW05rE8BU= Subject key identifier: F2:9F:39:70:BB:86:76:D3:1B:C9:39:0A:3E:9D:E0:E6:62:16:66:D0 Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D Certificate issuer: /CN=a48a87c45d9720464905b6a6b0933f7c3951192d Certificate serial: 019AF0BF20B405F7443A02C1830F6CD79456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 23:00:48 +0000 Manifest this update: Fri 05 Dec 2025 23:00:48 +0000 Manifest next update: Sat 06 Dec 2025 23:00:48 +0000 Files and hashes: 1: 3slyfZXxVcWO-rhXLBn1z60ShoQ.roa (hash: aD+13qB77l1eWjcaYEDaoeBPF19MIy6v6JQPzBT88zc=) 2: pIqHxF2XIEZJBbamsJM_fDlRGS0.crl (hash: Gm8asDk8aU1VMVsZZkcEebnrj57ZmgMLT4E7dFZsR5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:20:b4:05:f7:44:3a:02:c1:83:0f:6c:d7:94:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d Validity Not Before: Dec 5 23:00:48 2025 GMT Not After : Dec 6 23:00:48 2025 GMT Subject: CN=f29f3970bb8676d31bc9390a3e9de0e6621666d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:ed:c1:9e:eb:0c:29:9c:98:f1:83:fa:83: 45:0d:ed:b6:6c:27:58:3a:e6:1e:be:bb:6b:5d:10: 70:44:63:0e:4f:5a:18:50:e2:65:c3:08:19:7b:09: b2:00:66:ee:9f:10:7d:14:59:d7:13:8b:ca:3d:3a: de:dc:d1:e7:36:d6:0d:58:13:35:ca:d6:28:59:27: 24:16:0c:52:f1:1f:46:b2:a5:b5:b4:fa:14:96:8a: c1:f6:6d:d5:be:a3:e9:e1:2c:4b:3e:cb:2b:a5:26: ce:99:d1:77:6b:75:2e:44:36:c0:6f:8e:41:36:2a: cc:86:95:a0:87:7f:9e:8e:a8:f5:01:62:8b:02:02: 7a:fb:26:cb:06:fd:b6:88:b5:a3:59:19:74:96:d9: 5f:f5:81:51:27:a3:0d:de:a6:dd:ab:e0:a4:97:d0: ed:c4:8a:b3:9a:3b:14:5b:6a:38:b9:66:6b:15:c4: 08:b9:7f:90:11:4f:3b:91:e2:e4:cb:7b:ad:12:5f: 69:5d:bd:34:83:13:26:c3:e1:7b:22:01:01:7c:c7: b3:93:91:ab:a4:a0:2a:57:33:89:0a:78:ce:31:e0: a4:d4:2c:fb:e2:65:08:75:7d:e3:ec:33:2d:50:4d: dc:92:a4:b0:99:1d:8a:da:c7:15:17:fe:2c:92:7e: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9F:39:70:BB:86:76:D3:1B:C9:39:0A:3E:9D:E0:E6:62:16:66:D0 X509v3 Authority Key Identifier: keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:af:e2:cd:b3:b2:85:d5:e6:4c:c8:82:0a:ed:10:f2:4d:28: e8:bd:70:99:0b:43:a9:d4:1c:9a:6d:fa:c1:06:90:6e:ea:c4: 2b:29:09:63:4d:2c:06:35:66:cd:8e:d8:af:92:fe:c0:a9:d9: b2:99:f5:78:b3:c1:51:62:13:a4:df:e7:b1:82:c5:14:71:17: 48:c5:3a:01:ad:17:93:64:ec:5e:88:6b:21:f4:29:db:a9:69: b4:6b:f1:73:cb:5c:17:23:7a:d2:94:5c:4c:d1:16:64:0a:03: a1:08:96:ca:b6:a6:82:4e:69:e6:c8:12:47:2a:4f:9c:85:68: 36:5c:69:b4:2a:b8:c9:a9:5d:05:cd:6f:2a:4c:e8:d2:06:b6: 7b:f9:bb:9d:ea:bd:a1:75:5c:9d:41:f8:52:cd:03:20:4b:e7: fc:b8:9d:3f:a8:bf:75:88:f1:90:c0:b3:94:65:73:7e:f7:3e: 80:40:52:19:1c:54:88:64:27:d1:cc:5e:b7:b3:94:85:4f:23: 26:b8:1d:1e:b6:84:6d:74:5f:76:35:39:93:02:20:81:3b:b8: bd:ee:e7:c2:3f:34:72:93:57:ba:26:69:69:6b:5d:a2:66:7b: 5c:45:7b:e5:55:49:cb:a7:de:db:ad:34:7e:dc:6e:8e:e2:bb: 47:a0:7b:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyC0BfdEOgLBgw9s15RWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OGE4N2M0NWQ5NzIwNDY0OTA1YjZhNmIwOTMzZjdjMzk1 MTE5MmQwHhcNMjUxMjA1MjMwMDQ4WhcNMjUxMjA2MjMwMDQ4WjAzMTEwLwYDVQQD EyhmMjlmMzk3MGJiODY3NmQzMWJjOTM5MGEzZTlkZTBlNjYyMTY2NmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqztwZ7rDCmcmPGD+oNFDe22bCdY OuYevrtrXRBwRGMOT1oYUOJlwwgZewmyAGbunxB9FFnXE4vKPTre3NHnNtYNWBM1 ytYoWSckFgxS8R9GsqW1tPoUlorB9m3VvqPp4SxLPssrpSbOmdF3a3UuRDbAb45B NirMhpWgh3+ejqj1AWKLAgJ6+ybLBv22iLWjWRl0ltlf9YFRJ6MN3qbdq+Ckl9Dt xIqzmjsUW2o4uWZrFcQIuX+QEU87keLky3utEl9pXb00gxMmw+F7IgEBfMezk5Gr pKAqVzOJCnjOMeCk1Cz74mUIdX3j7DMtUE3ckqSwmR2K2scVF/4skn4t5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKfOXC7hnbTG8k5Cj6d4OZiFmbQMB8GA1UdIwQY MBaAFKSKh8RdlyBGSQW2prCTP3w5URktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcElxSHhGMlhJRVpKQmJhbXNKTV9mRGxSR1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83YTlmMGMtNTg4OC00ZmQ4LWJkOTAt NjgzMzg0YjE5ZWEzLzEvcElxSHhGMlhJRVpKQmJhbXNKTV9mRGxSR1MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi83YTlmMGMtNTg4OC00ZmQ4LWJkOTAtNjgzMzg0YjE5ZWEz LzEvcElxSHhGMlhJRVpKQmJhbXNKTV9mRGxSR1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6/izbOy hdXmTMiCCu0Q8k0o6L1wmQtDqdQcmm36wQaQburEKykJY00sBjVmzY7Yr5L+wKnZ spn1eLPBUWITpN/nsYLFFHEXSMU6Aa0Xk2TsXohrIfQp26lptGvxc8tcFyN60pRc TNEWZAoDoQiWyramgk5p5sgSRypPnIVoNlxptCq4yaldBc1vKkzo0ga2e/m7neq9 oXVcnUH4Us0DIEvn/LidP6i/dYjxkMCzlGVzfvc+gEBSGRxUiGQn0cxet7OUhU8j JrgdHraEbXRfdjU5kwIggTu4ve7nwj80cpNXuiZpaWtdomZ7XEV75VVJy6fe2600 ftxujuK7R6B7Gw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:53 2025 by rpki-client