This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft File: PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json) Hash identifier: cd0iLI2VCg/LyNru6t8gpU77q/gM1TWaMwpI4YXFJJw= Subject key identifier: 75:50:A2:94:B1:04:7A:48:F9:AC:E8:08:09:7E:AD:38:25:CC:3F:7D Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c Certificate serial: 019AF31CD22F27BDE9E6F5BF42DD0C794AA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 10:02:23 +0000 Manifest this update: Sat 06 Dec 2025 10:02:23 +0000 Manifest next update: Sun 07 Dec 2025 10:02:23 +0000 Files and hashes: 1: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: 9PzdDALDh4WsFd4mr+Ha5TrV8YJL0kS3sWj+SMdnrbI=) 2: XgpSQjhhfxwk9vZfnDmQ4hugM38.roa (hash: 0VqbQTYbejzGPg6sOJbQNqmXP31XYN5qUoi8IUVN5jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d2:2f:27:bd:e9:e6:f5:bf:42:dd:0c:79:4a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c Validity Not Before: Dec 6 10:02:23 2025 GMT Not After : Dec 7 10:02:23 2025 GMT Subject: CN=7550a294b1047a48f9ace808097ead3825cc3f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8e:d2:de:83:52:6e:2e:3c:d5:dd:56:0d:5a: c3:ce:2a:c2:fc:d4:bf:04:74:df:2e:fe:d6:6c:0a: 97:66:2a:59:cd:34:84:c1:b0:d0:f1:bc:cb:2e:32: 29:55:e0:b1:dc:64:c1:32:1b:2b:ed:f8:83:02:fd: c5:2b:53:80:ad:53:f6:7e:a2:fe:97:a6:6b:fd:7b: 32:dd:d7:7f:47:22:39:c1:c5:b3:76:94:98:95:87: db:83:e3:4c:77:87:7b:58:46:f3:ec:1d:18:ca:4e: 70:3f:d0:95:ca:8a:24:73:39:79:80:7e:2c:85:0f: 2f:af:38:6d:5e:72:50:17:d6:cb:21:38:b1:d5:a8: 9b:d7:3c:cb:0d:7f:82:29:ef:84:cd:2e:2f:8d:ea: b4:fc:13:b8:84:ea:41:c9:82:03:52:61:e1:73:0e: 11:5f:f5:09:df:49:8d:64:50:8e:da:30:74:43:aa: 55:f4:a8:46:80:fa:b3:41:9c:06:bf:7d:0b:aa:55: c3:f1:cc:11:3f:5a:5d:bc:ae:8f:9b:ab:e9:06:8f: 55:7c:ed:73:65:a2:24:d4:3d:b7:e7:cb:a0:ac:54: ed:df:4c:1e:0d:f7:3c:48:77:0a:30:72:93:5e:d8: da:62:70:f3:b1:1b:7e:01:9f:61:b8:e3:e6:d9:d8: ca:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:50:A2:94:B1:04:7A:48:F9:AC:E8:08:09:7E:AD:38:25:CC:3F:7D X509v3 Authority Key Identifier: keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:58:7c:a6:a8:e6:b5:68:b8:ff:9d:6a:b8:62:98:ac:59:90: 06:07:5d:a5:fa:68:1d:d6:6c:40:fa:a6:6e:b9:67:d7:2b:c7: 80:c6:3d:9e:b9:dd:9e:d1:5c:06:d1:6b:95:db:90:cc:68:35: fd:f9:63:27:b9:1e:4f:5b:f5:e7:9c:97:e8:92:67:bc:71:e0: 1c:1b:cb:61:96:d2:cd:1a:a5:f6:0e:7f:07:a6:0f:1d:d5:4a: c0:5c:44:48:eb:90:ee:25:cb:c4:a4:ba:6f:c9:03:4e:12:aa: a8:6c:6a:c6:f9:e1:f3:c0:3e:5f:bd:80:9b:d7:c7:1b:d9:67: 13:21:02:f3:88:2f:c2:9f:07:8f:9e:8f:a1:02:4e:6d:e0:07: ad:28:b2:24:82:bb:5c:fd:00:61:af:db:a3:0e:14:1c:41:47: c7:93:3b:89:e6:8e:a9:18:40:9a:66:f3:61:b3:c6:78:c4:5b: d2:35:6e:f4:c1:a7:28:04:3a:6b:80:90:6e:80:1b:36:41:e8: 83:c8:cf:93:fb:33:1b:a2:20:9d:92:66:d5:95:fb:a9:d2:04: 5e:f4:2a:65:26:d6:61:d2:cd:8e:39:de:36:11:ec:63:01:78: d3:b4:08:09:ba:be:81:2e:a6:b3:fd:32:4b:bd:5b:d3:00:a0: 1b:59:af:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNIvJ73p5vW/Qt0MeUqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjODZlYzMyMWU3MmZkNDZjOThkY2MwY2Q3YzcwYmNhZDU1 N2Q1OWMwHhcNMjUxMjA2MTAwMjIzWhcNMjUxMjA3MTAwMjIzWjAzMTEwLwYDVQQD Eyg3NTUwYTI5NGIxMDQ3YTQ4ZjlhY2U4MDgwOTdlYWQzODI1Y2MzZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo7S3oNSbi481d1WDVrDzirC/NS/ BHTfLv7WbAqXZipZzTSEwbDQ8bzLLjIpVeCx3GTBMhsr7fiDAv3FK1OArVP2fqL+ l6Zr/Xsy3dd/RyI5wcWzdpSYlYfbg+NMd4d7WEbz7B0Yyk5wP9CVyookczl5gH4s hQ8vrzhtXnJQF9bLITix1aib1zzLDX+CKe+EzS4vjeq0/BO4hOpByYIDUmHhcw4R X/UJ30mNZFCO2jB0Q6pV9KhGgPqzQZwGv30LqlXD8cwRP1pdvK6Pm6vpBo9VfO1z ZaIk1D2358ugrFTt30weDfc8SHcKMHKTXtjaYnDzsRt+AZ9huOPm2djKCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVQopSxBHpI+azoCAl+rTglzD99MB8GA1UdIwQY MBaAFDyG7DIecv1GyY3MDNfHC8rVV9WcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81YzBmZDItNjc0My00NjgyLTk2N2It NWYxNWJlYWZhOWIxLzEvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81YzBmZDItNjc0My00NjgyLTk2N2ItNWYxNWJlYWZhOWIx LzEvUElic01oNXlfVWJKamN3TTE4Y0x5dFZYMVp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFh8pqjm tWi4/51quGKYrFmQBgddpfpoHdZsQPqmbrln1yvHgMY9nrndntFcBtFrlduQzGg1 /fljJ7keT1v155yX6JJnvHHgHBvLYZbSzRql9g5/B6YPHdVKwFxESOuQ7iXLxKS6 b8kDThKqqGxqxvnh88A+X72Am9fHG9lnEyEC84gvwp8Hj56PoQJObeAHrSiyJIK7 XP0AYa/bow4UHEFHx5M7ieaOqRhAmmbzYbPGeMRb0jVu9MGnKAQ6a4CQboAbNkHo g8jPk/szG6IgnZJm1ZX7qdIEXvQqZSbWYdLNjjneNhHsYwF407QICbq+gS6ms/0y S71b0wCgG1mvwA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:21:06 2025 by rpki-client