This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft File: pi-5_THCxgq9oU4LPJKomGaCnY4.mft (raw, json) Hash identifier: DphVSY+/qho0P8fx8B+EuRd+aqXH+I4HtVwtMyLyrA4= Subject key identifier: 3F:E2:9B:B6:3C:29:E7:15:E5:6A:09:7D:63:9F:CC:92:3F:43:D9:7E Authority key identifier: A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E Certificate issuer: /CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e Certificate serial: 019AF2097C34CCA2C351235541853390EE6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft Manifest number: 0E81 Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: ZIKQeQoBMcgJAAR9TP75a76cDn0.roa (hash: mC8mJajWFAnAfTbKX+aRBKG3/mLcH0XDCCRpUt2qu64=) 2: pi-5_THCxgq9oU4LPJKomGaCnY4.crl (hash: dh2O/SPl0bdX28Fy4AdmEfXK7eEAm1Vdkj8aZeWQ/oA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7c:34:cc:a2:c3:51:23:55:41:85:33:90:ee:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=3fe29bb63c29e715e56a097d639fcc923f43d97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bc:d5:ee:0c:5b:61:0f:2b:35:70:bc:4e:6b: c7:ac:62:62:ba:42:13:3f:1c:00:70:64:90:6b:61: 2f:e1:6a:b7:f6:2f:3c:ee:b4:60:ac:d0:44:12:6f: 6e:a2:a7:0e:f7:a3:f2:3d:e2:19:f8:a9:8c:dc:7c: 74:5e:75:fc:c2:fb:0d:41:78:9a:1e:bc:72:e4:f0: 4f:f8:d0:92:1f:e2:07:0a:29:e7:f8:a5:2f:47:fe: e1:da:12:2f:ad:78:c3:ff:bf:e4:c4:6a:ee:cb:10: 14:4c:a1:5d:32:37:3b:9c:83:61:fe:a8:b7:16:43: 99:ce:de:da:0c:f7:a3:aa:59:e9:4f:b6:0f:fe:55: 0e:a0:49:77:57:88:eb:18:3a:3d:85:7e:ca:84:69: e2:f7:77:61:af:03:54:3d:e2:b3:62:cd:dd:a0:e0: a0:2c:09:41:7b:67:11:12:45:65:c0:da:48:b8:cd: 91:99:4b:47:d6:91:ff:31:c6:c6:6f:e4:68:45:96: d5:4d:6c:6d:28:d2:f2:45:1c:3f:7d:a3:84:f6:e4: 1b:14:91:07:f9:c4:d4:75:8f:f8:ec:cf:f9:82:05: bd:7f:0d:7d:7c:d7:87:10:c8:9b:b9:01:04:c6:89: 56:11:cf:38:f8:c0:51:4a:b1:28:ef:8d:56:83:3e: 05:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E2:9B:B6:3C:29:E7:15:E5:6A:09:7D:63:9F:CC:92:3F:43:D9:7E X509v3 Authority Key Identifier: keyid:A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:8b:d0:2e:8c:f8:98:a2:ea:3d:f8:3f:8b:15:30:d2:b9:b2: bf:bf:6a:7e:8a:b8:a2:58:c1:ef:34:0d:b1:ce:bb:64:70:ad: 81:fa:8d:ce:f0:0f:01:4b:77:78:7b:58:d1:d1:8c:76:32:50: c0:36:a2:ea:05:cd:d6:9c:c5:69:7b:06:28:a5:82:6f:11:27: fc:b8:dd:28:7f:26:3b:d7:58:a7:1e:d8:bc:39:e5:89:1d:89: 14:62:fd:4c:ec:aa:fa:a4:2c:6d:d2:be:83:6a:40:95:34:87: 54:b1:27:6a:9d:f8:16:da:07:16:48:ba:90:3e:83:d5:89:20: ff:aa:aa:da:a8:5d:3a:ce:e2:13:1d:a2:84:82:81:f2:45:1d: 72:6e:42:0d:78:6b:8f:b8:6d:61:5c:fe:04:ae:0d:d6:ec:98: 7a:59:27:a4:ba:04:29:d0:f4:6e:bc:3f:13:96:a2:da:bb:09: a9:04:68:b2:ea:35:bb:db:1d:7b:a4:45:fe:7c:3e:c9:e0:e7: 6e:07:2d:f2:19:56:6d:89:63:00:c7:41:e0:df:71:a5:7d:8d: b7:2b:34:63:6e:dd:e4:43:7a:6a:b0:2d:e5:a2:ef:ce:57:75: 04:8a:ea:81:fc:a6:c2:bb:8a:1b:fe:ac:3b:f3:66:78:51:fc: f3:ec:78:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXw0zKLDUSNVQYUzkO5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MmZiOWZkMzFjMmM2MGFiZGExNGUwYjNjOTJhODk4NjY4 MjlkOGUwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD EygzZmUyOWJiNjNjMjllNzE1ZTU2YTA5N2Q2MzlmY2M5MjNmNDNkOTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7zV7gxbYQ8rNXC8TmvHrGJiukIT PxwAcGSQa2Ev4Wq39i887rRgrNBEEm9uoqcO96PyPeIZ+KmM3Hx0XnX8wvsNQXia Hrxy5PBP+NCSH+IHCinn+KUvR/7h2hIvrXjD/7/kxGruyxAUTKFdMjc7nINh/qi3 FkOZzt7aDPejqlnpT7YP/lUOoEl3V4jrGDo9hX7KhGni93dhrwNUPeKzYs3doOCg LAlBe2cREkVlwNpIuM2RmUtH1pH/McbGb+RoRZbVTWxtKNLyRRw/faOE9uQbFJEH +cTUdY/47M/5ggW9fw19fNeHEMibuQEExolWEc84+MBRSrEo741Wgz4FvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/im7Y8KecV5WoJfWOfzJI/Q9l+MB8GA1UdIwQY MBaAFKYvuf0xwsYKvaFOCzySqJhmgp2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lMDUxZmYtY2UyNS00ZDZjLTgzZmQt MWFiYjhlMjdiNGQxLzEvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9lMDUxZmYtY2UyNS00ZDZjLTgzZmQtMWFiYjhlMjdiNGQx LzEvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYvQLoz4 mKLqPfg/ixUw0rmyv79qfoq4oljB7zQNsc67ZHCtgfqNzvAPAUt3eHtY0dGMdjJQ wDai6gXN1pzFaXsGKKWCbxEn/LjdKH8mO9dYpx7YvDnliR2JFGL9TOyq+qQsbdK+ g2pAlTSHVLEnap34FtoHFki6kD6D1Ykg/6qq2qhdOs7iEx2ihIKB8kUdcm5CDXhr j7htYVz+BK4N1uyYelknpLoEKdD0brw/E5ai2rsJqQRosuo1u9sde6RF/nw+yeDn bgct8hlWbYljAMdB4N9xpX2Ntys0Y27d5EN6arAt5aLvzld1BIrqgfymwruKG/6s O/NmeFH88+x4jA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:16:31 2025 by rpki-client