This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json) Hash identifier: P1xXDEZk0K9frsntAxjE9M2VtNKxU+ecw5h9KEuvI8c= Subject key identifier: FF:5F:37:88:59:96:AB:3D:29:BF:C6:4F:B7:1F:8E:6B:1B:6B:F9:BE Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Certificate serial: 019AF3F772B37DA2C381A1B5712A8B85002B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft Manifest number: 1772 Signing time: Sat 06 Dec 2025 14:01:11 +0000 Manifest this update: Sat 06 Dec 2025 14:01:11 +0000 Manifest next update: Sun 07 Dec 2025 14:01:11 +0000 Files and hashes: 1: 3y2t9Y4w34qiFBdy_Ek4JJUO21Q.roa (hash: /TZVDNQyK0D1wC867uTU8KAEMW8e+Zi9YcbvlB1rMAE=) 2: EmNqWHZHvcbARh8MqUG6nxXKDnk.roa (hash: qFrAZp7TQYaT2zIiJ3kN/K/RUigkO6TizDHq1yApShI=) 3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: mtI6hVkt/8Qk1nGZfBN0R989IDOd8gX9oz1EKWreCzk=) 4: k0j78iVx37wwO7bDjCAVoyijDeU.roa (hash: x4YCjAIVRyxgn0vQG0zlSLFCcDO0MbVYoCzpTeJPa0I=) 5: oLh3yoxxKDPJ0rI4fFfhHDN8zHc.roa (hash: gc86IVswZ2auip9vASDEdi6AXEh5d/2Jw9bjMy6Pwd8=) 6: oqQMhQCTnCvqpL4FDtvR2ocumgk.roa (hash: 9N1juEbb6Fp6BQG9Mi2KAk0Vy7P2TkUjOEW3w+qZU1s=) 7: u7jBF_TQnJz9mTpZhXYq5nggn8c.roa (hash: wreTMB6pW+vrdjrRc+OCyHOCrMzU/JZ3/7CTFhlab7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:72:b3:7d:a2:c3:81:a1:b5:71:2a:8b:85:00:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Validity Not Before: Dec 6 14:01:11 2025 GMT Not After : Dec 7 14:01:11 2025 GMT Subject: CN=ff5f37885996ab3d29bfc64fb71f8e6b1b6bf9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:f7:3f:0a:0e:b5:62:6e:99:a3:19:d1:e0: cb:77:a0:bf:74:15:af:2c:e5:51:c1:b3:51:2b:1f: 5a:72:93:72:df:02:43:bb:23:25:fd:b1:7b:3f:9c: 7c:ab:18:72:8c:d2:64:82:45:3f:61:07:45:29:96: 69:57:14:bb:04:22:e8:41:7f:ee:72:1b:23:92:7d: 22:24:12:40:de:06:53:fb:80:91:a8:b8:7d:cb:da: 78:d2:9f:e1:cc:ca:bf:65:26:57:ab:df:b8:eb:b2: 3f:c5:e6:8a:08:6b:67:d3:2d:0d:55:0b:1a:1b:35: fa:c5:68:67:e0:a9:2c:8d:06:e0:e0:35:d1:66:49: 26:dc:db:e9:44:57:70:c6:fe:44:06:0c:1d:5d:fe: 73:ad:d9:a9:8e:6a:bd:e3:2f:ba:95:91:37:bb:67: 25:0f:74:f9:81:bd:ab:e0:f1:09:bc:12:09:62:53: 90:c9:1e:e5:21:6b:75:b5:41:0e:af:85:f2:54:d2: 3a:e1:67:e4:18:80:0c:c9:b1:51:8a:4e:4a:55:e7: 19:4a:e6:51:49:45:93:9a:3c:4f:cd:92:2b:28:29: 4c:10:45:b9:ea:78:27:7c:dd:cd:a8:51:c0:f0:8a: 48:1d:27:52:39:4b:62:1c:7d:02:71:be:70:9c:ad: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5F:37:88:59:96:AB:3D:29:BF:C6:4F:B7:1F:8E:6B:1B:6B:F9:BE X509v3 Authority Key Identifier: keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8b:ec:1e:12:74:4e:76:b6:71:6a:e0:f1:0e:7a:af:6e:73: 14:c1:64:b4:a9:17:31:aa:ce:78:b8:03:aa:9b:e9:35:ac:5a: dd:dd:fd:50:94:92:ac:05:c3:c8:1d:67:30:6c:d9:a5:b9:79: 73:e5:c2:97:f6:df:b7:76:52:cd:46:8d:d7:a7:bc:2d:77:59: 83:ed:72:5e:73:4a:65:34:3c:34:ee:9f:71:08:cb:6d:d6:01: 07:9b:9e:46:6f:49:89:26:5c:d4:62:01:48:eb:10:97:05:10: f8:b0:0d:c3:7d:d5:05:9b:60:f4:c1:97:71:40:82:37:00:dc: 61:8f:7b:91:7c:d8:dc:ac:69:50:17:24:08:c1:03:d2:e9:e9: f6:dc:03:0f:7c:40:01:e2:98:86:88:a7:e3:ca:80:17:ab:bb: 09:b9:58:24:39:58:92:bb:1a:61:12:c0:05:48:9f:17:cb:82: a2:25:eb:5e:8e:9a:25:7d:76:80:c4:1f:b2:9a:fa:91:2f:66: 9b:4b:f9:4a:3a:f5:f4:7d:85:5c:6f:46:75:ad:74:0f:42:18: 9b:70:72:53:43:1e:10:f4:bc:29:5c:4a:d2:50:b9:85:24:8f: 43:47:be:d0:4d:24:ae:8a:61:2c:61:bb:db:e8:cb:b3:3d:cd: f1:8d:d0:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz93KzfaLDgaG1cSqLhQArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjRjN2VjZmEzN2QyNDg3MTUyZmI5YmJiYWI1MGJlNzlk ZTI2MTkwHhcNMjUxMjA2MTQwMTExWhcNMjUxMjA3MTQwMTExWjAzMTEwLwYDVQQD EyhmZjVmMzc4ODU5OTZhYjNkMjliZmM2NGZiNzFmOGU2YjFiNmJmOWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcr3PwoOtWJumaMZ0eDLd6C/dBWv LOVRwbNRKx9acpNy3wJDuyMl/bF7P5x8qxhyjNJkgkU/YQdFKZZpVxS7BCLoQX/u chsjkn0iJBJA3gZT+4CRqLh9y9p40p/hzMq/ZSZXq9+467I/xeaKCGtn0y0NVQsa GzX6xWhn4KksjQbg4DXRZkkm3NvpRFdwxv5EBgwdXf5zrdmpjmq94y+6lZE3u2cl D3T5gb2r4PEJvBIJYlOQyR7lIWt1tUEOr4XyVNI64WfkGIAMybFRik5KVecZSuZR SUWTmjxPzZIrKClMEEW56ngnfN3NqFHA8IpIHSdSOUtiHH0Ccb5wnK0ByQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9fN4hZlqs9Kb/GT7cfjmsba/m+MB8GA1UdIwQY MBaAFD4kx+z6N9JIcVL7m7urUL553iYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMt NDkzZDc3NGFhMWZmLzEvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMtNDkzZDc3NGFhMWZm LzEvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHovsHhJ0 Tna2cWrg8Q56r25zFMFktKkXMarOeLgDqpvpNaxa3d39UJSSrAXDyB1nMGzZpbl5 c+XCl/bft3ZSzUaN16e8LXdZg+1yXnNKZTQ8NO6fcQjLbdYBB5ueRm9JiSZc1GIB SOsQlwUQ+LANw33VBZtg9MGXcUCCNwDcYY97kXzY3KxpUBckCMED0unp9twDD3xA AeKYhoin48qAF6u7CblYJDlYkrsaYRLABUifF8uCoiXrXo6aJX12gMQfspr6kS9m m0v5Sjr19H2FXG9Gda10D0IYm3ByU0MeEPS8KVxK0lC5hSSPQ0e+0E0krophLGG7 2+jLsz3N8Y3Qww== -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:34 2025 by rpki-client