This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft File: Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft (raw, json) Hash identifier: CitDJNBejEmd4KjXrkQv8LBtFYuDtuxQEA8m2dKKCqM= Subject key identifier: DB:C5:79:CF:0C:BD:24:DA:27:61:CB:36:05:A2:4D:EC:20:59:CC:2F Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F Certificate issuer: /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f Certificate serial: 019AF61C34194BC5D306C0BF2ECD54D2E46E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft Manifest number: 1161 Signing time: Sun 07 Dec 2025 00:00:34 +0000 Manifest this update: Sun 07 Dec 2025 00:00:34 +0000 Manifest next update: Mon 08 Dec 2025 00:00:34 +0000 Files and hashes: 1: 3jkyEgeUwHuLrsjz6T_ObqcY74c.roa (hash: JoJ/5W4dG3D9w6kILiihWs6cJdsEqCFWaxmLM7gkMSI=) 2: 5BBAqb-ZPpAIYao4Vwv4C7kYHp8.roa (hash: zeVZxVXoVg6CA4xU6hMT88LFhpR/jzGOghHaqJNZWX0=) 3: Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl (hash: W9e1Wl0sz0SUZftcZDoTpHJ1RyB6tZ7c8yNCD590t3I=) 4: c_VdOA86HAho8DyTOmnwSwlTlAk.roa (hash: 850TFYirePJY29VuqkCG/JWWe8g21qbj4etquhKOEz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:34:19:4b:c5:d3:06:c0:bf:2e:cd:54:d2:e4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f Validity Not Before: Dec 7 00:00:34 2025 GMT Not After : Dec 8 00:00:34 2025 GMT Subject: CN=dbc579cf0cbd24da2761cb3605a24dec2059cc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:88:00:cd:a0:c1:db:ce:96:62:e5:d5:22: 13:aa:96:43:84:a1:c9:df:19:f8:5f:4e:10:12:a8: e4:fa:ca:fc:6e:66:78:e5:0a:42:1d:9b:75:0d:1d: 3c:50:e1:64:46:d1:7c:11:a2:08:a3:c9:cc:1e:02: 80:d2:34:d6:18:b1:30:0e:78:7c:9a:62:93:b8:11: 34:83:d1:63:24:43:fa:c8:a6:53:a0:c5:db:75:34: 0b:25:50:ec:45:1b:b1:7d:27:61:de:7e:ac:d7:af: d2:12:2b:c7:e8:6a:41:01:51:7c:2b:b8:63:f4:db: 8b:74:2a:5c:24:56:d8:ee:9a:25:50:28:0a:4f:2c: ed:58:ed:e3:f6:42:b7:96:7f:93:2e:25:d8:b6:e2: 03:6a:8b:da:f1:62:46:29:57:db:61:5c:8f:ef:98: 89:b9:c2:5d:e5:d8:7a:6e:78:35:d7:0e:e7:80:03: 96:34:ba:fa:14:60:82:a9:c0:ba:7a:f2:42:5a:06: ac:e8:d0:4c:e2:8b:9b:83:b8:58:a4:85:54:86:92: 12:88:7e:11:52:8b:19:e1:d1:bb:96:fc:60:86:0d: f3:65:e7:15:16:5a:a8:1e:bd:0f:2d:f7:a8:82:ef: e3:c5:52:87:a3:94:c6:15:a4:93:c1:67:2b:ff:55: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C5:79:CF:0C:BD:24:DA:27:61:CB:36:05:A2:4D:EC:20:59:CC:2F X509v3 Authority Key Identifier: keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3b:27:06:c2:c2:ab:67:25:56:45:58:ef:a7:bc:f3:d1:c0: a3:2a:c0:20:9b:8c:c3:82:bd:26:cd:eb:74:63:c1:f9:05:76: 5d:53:7d:71:85:b3:aa:ca:a7:14:fc:42:66:ff:65:c2:57:4d: 7b:fc:db:18:06:24:7e:12:bb:6f:52:60:88:31:0f:e1:2d:d0: 8c:14:79:ea:15:aa:14:1f:ed:32:56:cd:16:02:43:f8:ff:d8: 1e:ae:cd:76:e4:c2:d9:2f:ea:4c:ba:4b:7e:83:0d:ed:76:98: cd:d2:f9:d1:a0:a6:79:06:b8:f0:2b:aa:5f:5a:9c:59:f2:94: 78:9f:58:91:74:97:de:c3:33:b3:d3:e4:fa:45:09:40:c7:b1: 38:d9:1d:18:d1:7a:95:c8:92:75:01:8d:69:b8:19:ed:f7:e3: f3:2f:d9:8f:14:f8:86:41:69:36:fe:05:6e:f5:5c:a3:d8:8c: 61:bf:09:90:fb:48:f7:84:46:82:36:15:40:38:2d:7b:a7:32: d0:8f:39:79:bc:77:ba:1c:f6:2e:42:fe:53:57:c9:8c:45:72: 56:8c:01:5c:c7:7e:53:3c:90:78:fd:aa:dc:da:81:f8:8a:e7: 42:ab:a0:89:54:fc:fc:69:ec:91:c7:eb:31:4b:ae:e7:90:8f: df:2c:3b:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HDQZS8XTBsC/Ls1U0uRuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMmJiZjM0NmViZDRhYTBiNzZlMTBjNTgzMjFhZDMzZDcy ZDUxOWYwHhcNMjUxMjA3MDAwMDM0WhcNMjUxMjA4MDAwMDM0WjAzMTEwLwYDVQQD EyhkYmM1NzljZjBjYmQyNGRhMjc2MWNiMzYwNWEyNGRlYzIwNTljYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5+IAM2gwdvOlmLl1SITqpZDhKHJ 3xn4X04QEqjk+sr8bmZ45QpCHZt1DR08UOFkRtF8EaIIo8nMHgKA0jTWGLEwDnh8 mmKTuBE0g9FjJEP6yKZToMXbdTQLJVDsRRuxfSdh3n6s16/SEivH6GpBAVF8K7hj 9NuLdCpcJFbY7polUCgKTyztWO3j9kK3ln+TLiXYtuIDaova8WJGKVfbYVyP75iJ ucJd5dh6bng11w7ngAOWNLr6FGCCqcC6evJCWgas6NBM4oubg7hYpIVUhpISiH4R UosZ4dG7lvxghg3zZecVFlqoHr0PLfeogu/jxVKHo5TGFaSTwWcr/1VqFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvFec8MvSTaJ2HLNgWiTewgWcwvMB8GA1UdIwQY MBaAFD4rvzRuvUqgt24QxYMhrTPXLVGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iYzUxY2ItZGUwYy00ODgxLWIwYjEt MWFhMjc3ZGYzNzY5LzEvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iYzUxY2ItZGUwYy00ODgxLWIwYjEtMWFhMjc3ZGYzNzY5 LzEvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDsnBsLC q2clVkVY76e889HAoyrAIJuMw4K9Js3rdGPB+QV2XVN9cYWzqsqnFPxCZv9lwldN e/zbGAYkfhK7b1JgiDEP4S3QjBR56hWqFB/tMlbNFgJD+P/YHq7NduTC2S/qTLpL foMN7XaYzdL50aCmeQa48CuqX1qcWfKUeJ9YkXSX3sMzs9Pk+kUJQMexONkdGNF6 lciSdQGNabgZ7ffj8y/ZjxT4hkFpNv4FbvVco9iMYb8JkPtI94RGgjYVQDgte6cy 0I85ebx3uhz2LkL+U1fJjEVyVowBXMd+UzyQeP2q3NqB+IrnQqugiVT8/Gnskcfr MUuu55CP3yw7jg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:55 2025 by rpki-client