This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json) Hash identifier: lM9UP4FXtjbRSWUE6X2nBWOXYrj6gy2qRhNbbjNMpJc= Subject key identifier: EC:D8:BB:D7:6D:88:6D:7E:A4:AE:20:81:CA:E6:86:A9:17:EE:9D:03 Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Certificate serial: 019B31C3504C08F4F7B7E9033F78BB48A2B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft Manifest number: 1792 Signing time: Thu 18 Dec 2025 14:00:42 +0000 Manifest this update: Thu 18 Dec 2025 14:00:42 +0000 Manifest next update: Fri 19 Dec 2025 14:00:42 +0000 Files and hashes: 1: 3y2t9Y4w34qiFBdy_Ek4JJUO21Q.roa (hash: /TZVDNQyK0D1wC867uTU8KAEMW8e+Zi9YcbvlB1rMAE=) 2: EmNqWHZHvcbARh8MqUG6nxXKDnk.roa (hash: qFrAZp7TQYaT2zIiJ3kN/K/RUigkO6TizDHq1yApShI=) 3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: jz4Dw7UUfv4ZZgtpPqalbQMPoS2X+CZ2WWDLbfF4Z5E=) 4: k0j78iVx37wwO7bDjCAVoyijDeU.roa (hash: x4YCjAIVRyxgn0vQG0zlSLFCcDO0MbVYoCzpTeJPa0I=) 5: oLh3yoxxKDPJ0rI4fFfhHDN8zHc.roa (hash: gc86IVswZ2auip9vASDEdi6AXEh5d/2Jw9bjMy6Pwd8=) 6: oqQMhQCTnCvqpL4FDtvR2ocumgk.roa (hash: 9N1juEbb6Fp6BQG9Mi2KAk0Vy7P2TkUjOEW3w+qZU1s=) 7: u7jBF_TQnJz9mTpZhXYq5nggn8c.roa (hash: wreTMB6pW+vrdjrRc+OCyHOCrMzU/JZ3/7CTFhlab7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:50:4c:08:f4:f7:b7:e9:03:3f:78:bb:48:a2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Validity Not Before: Dec 18 14:00:42 2025 GMT Not After : Dec 19 14:00:42 2025 GMT Subject: CN=ecd8bbd76d886d7ea4ae2081cae686a917ee9d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:20:19:3c:04:6a:a5:70:c1:f1:d1:9c:5f: d1:1c:0e:3a:40:ce:18:a8:f8:5e:ef:f9:9b:31:c7: 6d:26:0f:3c:d3:5e:2c:d7:16:ec:1e:45:50:0f:81: 69:42:4b:93:f8:7e:82:cb:ae:a1:23:d5:fa:86:83: 9e:0e:61:6f:85:a4:99:94:39:91:65:cb:e8:bb:16: cc:4b:5a:ab:27:62:6a:bc:2f:48:2d:f7:64:f6:b8: d0:34:10:fe:a9:a8:e0:98:a0:a3:df:39:94:c1:29: 14:82:76:62:c2:28:07:76:81:42:9f:65:cc:59:8d: a5:4a:d4:cb:4a:55:78:c5:3e:f5:54:c4:41:ab:01: 3e:20:3d:70:32:b9:b5:e6:86:64:e5:87:5d:1c:ac: 48:9f:23:b8:35:eb:dd:b3:2f:62:6c:33:29:f7:d2: 9f:ce:ca:31:4a:a4:1e:68:9c:d0:ff:a7:3e:8a:c2: 1d:b2:8b:93:8f:fa:7f:71:e1:2c:c9:d3:51:fa:4d: 38:71:7b:c4:7f:1a:70:0c:58:31:5f:0f:62:56:49: a8:6e:aa:75:60:5a:3b:c0:a8:91:81:72:c8:e7:94: 73:5b:9a:f2:12:32:e2:39:ae:64:ec:da:61:ee:8e: 1b:73:9b:e8:7f:21:cd:42:13:05:14:86:53:ce:31: 5f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D8:BB:D7:6D:88:6D:7E:A4:AE:20:81:CA:E6:86:A9:17:EE:9D:03 X509v3 Authority Key Identifier: keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:6e:b4:91:34:2e:fa:f8:1a:da:e9:ff:01:fd:bc:02:2f:f1: 1f:5a:da:51:d1:da:68:72:73:cd:6e:88:3d:4a:44:f1:96:d1: 92:1f:7f:cb:83:50:cf:95:e9:e0:ee:1d:0b:e9:46:82:8b:28: ae:5d:62:27:80:60:a4:2b:48:0f:af:1d:7b:5e:b2:88:ca:86: da:22:cf:1a:a0:32:23:05:f7:24:a5:e2:09:ca:c4:92:a1:68: 68:7b:d8:1c:48:5a:08:4c:30:7f:b8:51:32:a5:6e:d8:30:32: 42:e9:97:47:d3:c5:31:8e:c0:ff:98:59:fd:18:6e:84:5b:9b: ea:66:93:0a:80:8c:be:6b:4c:97:80:fd:44:6e:99:71:4e:17: f7:bc:35:2d:a1:e4:4a:fc:b3:68:3b:fa:6f:9b:dd:b9:90:ff: 9c:15:d9:cf:cc:43:fa:3d:a8:9c:75:6a:71:26:90:8d:c8:75: 35:94:91:68:35:d4:a3:04:18:45:e8:8e:28:2c:fc:1e:fa:fd: f4:33:2f:aa:1f:83:04:10:9a:86:18:c7:b3:17:41:f9:f4:67: d8:d2:0a:39:07:42:f2:8c:ad:5f:76:ca:2e:97:cd:e9:ec:c4: 4d:01:d7:ab:2d:8a:8b:59:76:d6:fe:03:87:bd:88:ee:23:1b: cf:fe:eb:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw1BMCPT3t+kDP3i7SKKzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjRjN2VjZmEzN2QyNDg3MTUyZmI5YmJiYWI1MGJlNzlk ZTI2MTkwHhcNMjUxMjE4MTQwMDQyWhcNMjUxMjE5MTQwMDQyWjAzMTEwLwYDVQQD EyhlY2Q4YmJkNzZkODg2ZDdlYTRhZTIwODFjYWU2ODZhOTE3ZWU5ZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3MgGTwEaqVwwfHRnF/RHA46QM4Y qPhe7/mbMcdtJg88014s1xbsHkVQD4FpQkuT+H6Cy66hI9X6hoOeDmFvhaSZlDmR ZcvouxbMS1qrJ2JqvC9ILfdk9rjQNBD+qajgmKCj3zmUwSkUgnZiwigHdoFCn2XM WY2lStTLSlV4xT71VMRBqwE+ID1wMrm15oZk5YddHKxInyO4Nevdsy9ibDMp99Kf zsoxSqQeaJzQ/6c+isIdsouTj/p/ceEsydNR+k04cXvEfxpwDFgxXw9iVkmobqp1 YFo7wKiRgXLI55RzW5ryEjLiOa5k7Nph7o4bc5vofyHNQhMFFIZTzjFfOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzYu9dtiG1+pK4ggcrmhqkX7p0DMB8GA1UdIwQY MBaAFD4kx+z6N9JIcVL7m7urUL553iYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMt NDkzZDc3NGFhMWZmLzEvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMtNDkzZDc3NGFhMWZm LzEvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVW60kTQu +vga2un/Af28Ai/xH1raUdHaaHJzzW6IPUpE8ZbRkh9/y4NQz5Xp4O4dC+lGgoso rl1iJ4BgpCtID68de16yiMqG2iLPGqAyIwX3JKXiCcrEkqFoaHvYHEhaCEwwf7hR MqVu2DAyQumXR9PFMY7A/5hZ/RhuhFub6maTCoCMvmtMl4D9RG6ZcU4X97w1LaHk SvyzaDv6b5vduZD/nBXZz8xD+j2onHVqcSaQjch1NZSRaDXUowQYReiOKCz8Hvr9 9DMvqh+DBBCahhjHsxdB+fRn2NIKOQdC8oytX3bKLpfN6ezETQHXqy2Ki1l21v4D h72I7iMbz/7rRA== -----END CERTIFICATE-----Generated at Thu Dec 18 19:09:32 2025 by rpki-client