This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft File: PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json) Hash identifier: EfFy0qjzW3hy9qLw294Q/6kyUzfUi1hq8gpik/rVNsk= Subject key identifier: 3A:F4:06:BC:59:44:F9:E3:DC:B6:D7:4A:C7:7F:A8:DD:66:13:BF:6A Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Certificate serial: 019AF12ECA4D1D58B4C7FF0F756C0D4CF98D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft Manifest number: 04E4 Signing time: Sat 06 Dec 2025 01:02:46 +0000 Manifest this update: Sat 06 Dec 2025 01:02:46 +0000 Manifest next update: Sun 07 Dec 2025 01:02:46 +0000 Files and hashes: 1: 2UhYLcd2j-KdAauqxCqQQx52q2U.roa (hash: MFZ2OT0V1ZDMTvLmKJXIXyij1pz5j8dbnfqUGRmXftA=) 2: 89aLf4Xx_e2XnMyRZVIyRG0BizY.roa (hash: 2L9+HLihim1QwX2POr2PXkk92jLE2cxLeMFCnETsOnc=) 3: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: I0nqmpii+nrKW+iNQIaqoemmXD46pCI1W2heenu3IMM=) 4: UOFRq0QjO6LafqX1sBCbk2kEM3A.roa (hash: QZheATXKq3EbyRelx+ry8csen44AxAPqz729UWJVvQY=) 5: pwdlb--yOjorbcCQL2QR9oUUpWI.roa (hash: 1klYczNt5J1n/8K98SAjHgNfDm84PABZ1H0MBugMFMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ca:4d:1d:58:b4:c7:ff:0f:75:6c:0d:4c:f9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Validity Not Before: Dec 6 01:02:46 2025 GMT Not After : Dec 7 01:02:46 2025 GMT Subject: CN=3af406bc5944f9e3dcb6d74ac77fa8dd6613bf6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:61:db:58:08:f4:09:50:0d:be:88:85:b4: bb:af:35:fd:14:57:1d:ca:b4:7f:14:78:33:8a:63: 84:8e:0a:e8:02:53:d8:2f:2e:9e:92:cb:be:a0:4f: a2:a8:b8:9c:22:51:d7:21:09:a4:b0:47:3e:d2:e4: f3:19:ec:1c:8b:a8:07:6e:da:c2:14:54:26:11:38: ba:65:4e:2b:7b:e7:36:7a:33:e9:23:5b:86:49:2a: e8:4f:80:99:8e:95:c8:04:f4:44:2f:67:d7:dc:06: 06:b7:07:6e:f1:f2:a0:b2:2d:29:f7:05:b0:ee:89: 24:15:0e:72:68:98:a5:80:59:2c:63:a6:c4:60:d8: fd:f9:88:8e:a3:29:5d:dc:11:ef:09:17:ac:df:37: ac:b9:2d:f6:0c:f8:14:98:ae:b8:00:c1:53:8f:59: 82:5f:8d:67:e6:8e:00:7b:4b:bb:ca:8a:5b:33:89: b3:ad:02:26:68:72:71:a1:87:b9:54:44:c3:05:ed: 3e:e0:ca:df:a0:c7:c4:42:d1:0c:19:a4:25:05:f9: 20:1d:55:a5:b8:9d:ce:cc:c4:ce:a7:a5:30:b6:84: 77:86:c3:bc:4e:b0:46:bf:b3:3a:23:f8:7d:d0:a2: 2a:9f:a6:34:62:f1:92:55:9d:48:ba:b3:29:b2:2a: 36:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F4:06:BC:59:44:F9:E3:DC:B6:D7:4A:C7:7F:A8:DD:66:13:BF:6A X509v3 Authority Key Identifier: keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3e:c8:b8:68:8c:57:31:20:da:d3:25:f0:bf:15:8e:50:93: 0b:80:3c:23:34:b0:7b:03:69:62:0e:8d:99:48:a4:c2:ff:0b: ad:72:5b:ce:ad:25:af:98:6e:10:4a:41:90:0b:35:cf:b3:95: 5f:0b:26:08:8a:dc:58:5b:a4:b0:42:c4:31:70:99:27:71:32: 9a:0e:e5:2e:d8:db:82:c5:e5:63:bd:71:45:fc:e5:89:1b:0c: 60:43:1f:f5:f7:4d:05:8d:46:8b:da:0a:d8:27:f0:77:f7:bc: 83:aa:36:24:39:30:1c:b7:bf:8b:4c:17:cc:f5:e7:2c:cb:ca: 90:42:8d:a8:2c:fc:c2:b6:7f:5a:7a:d4:0c:e9:f2:71:45:80: 77:a6:a5:da:99:37:27:cb:9b:62:09:0e:84:b8:76:7d:34:fc: 17:40:7f:d0:62:9f:b3:c4:2a:d3:2c:4c:21:38:95:74:0d:0b: c0:cb:a3:7c:3c:1f:2d:9b:29:68:95:98:98:b2:3e:f6:ff:a3: 55:36:21:ec:63:9d:09:32:83:bf:e7:9b:65:d2:53:fc:ae:2e: ab:df:b4:7d:53:a9:21:70:3f:56:9c:52:1a:84:50:3e:94:51: 59:40:8c:e7:99:b2:fb:63:6e:cb:bd:03:04:3c:5f:72:d9:94: 15:0e:c5:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLspNHVi0x/8PdWwNTPmNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjVhYjY5ODVmNzljYTlkZTA2ZTk4ZThiOWRhMjQ1ZDg1 NTlhYjYwHhcNMjUxMjA2MDEwMjQ2WhcNMjUxMjA3MDEwMjQ2WjAzMTEwLwYDVQQD EygzYWY0MDZiYzU5NDRmOWUzZGNiNmQ3NGFjNzdmYThkZDY2MTNiZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp81h21gI9AlQDb6IhbS7rzX9FFcd yrR/FHgzimOEjgroAlPYLy6eksu+oE+iqLicIlHXIQmksEc+0uTzGewci6gHbtrC FFQmETi6ZU4re+c2ejPpI1uGSSroT4CZjpXIBPREL2fX3AYGtwdu8fKgsi0p9wWw 7okkFQ5yaJilgFksY6bEYNj9+YiOoyld3BHvCRes3zesuS32DPgUmK64AMFTj1mC X41n5o4Ae0u7yopbM4mzrQImaHJxoYe5VETDBe0+4MrfoMfEQtEMGaQlBfkgHVWl uJ3OzMTOp6UwtoR3hsO8TrBGv7M6I/h90KIqn6Y0YvGSVZ1IurMpsio22wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDr0BrxZRPnj3LbXSsd/qN1mE79qMB8GA1UdIwQY MBaAFD4lq2mF95yp3gbpjoudokXYVZq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAt YjE5YWQ1NDU1YmZkLzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAtYjE5YWQ1NDU1YmZk LzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAET7IuGiM VzEg2tMl8L8VjlCTC4A8IzSwewNpYg6NmUikwv8LrXJbzq0lr5huEEpBkAs1z7OV XwsmCIrcWFuksELEMXCZJ3Eymg7lLtjbgsXlY71xRfzliRsMYEMf9fdNBY1Gi9oK 2Cfwd/e8g6o2JDkwHLe/i0wXzPXnLMvKkEKNqCz8wrZ/WnrUDOnycUWAd6al2pk3 J8ubYgkOhLh2fTT8F0B/0GKfs8Qq0yxMITiVdA0LwMujfDwfLZspaJWYmLI+9v+j VTYh7GOdCTKDv+ebZdJT/K4uq9+0fVOpIXA/VpxSGoRQPpRRWUCM55my+2Nuy70D BDxfctmUFQ7FMg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:22 2025 by rpki-client