This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft File: PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json) Hash identifier: r1Ob2h4woMsVire5RDCN71y+MAGS7cNEHr0a68rb7aI= Subject key identifier: DE:D2:FE:8E:FF:F1:CB:43:C6:B1:1B:93:42:EB:C0:F3:F0:66:65:80 Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97 Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997 Certificate serial: 019AF352158C3A2D5FFC663E7A6C85C582FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 11:00:34 +0000 Manifest this update: Sat 06 Dec 2025 11:00:34 +0000 Manifest next update: Sun 07 Dec 2025 11:00:34 +0000 Files and hashes: 1: 8HB6gBMH1OXCC4HSHxjMBJPAXNM.roa (hash: 6HXyg8j0+e0B50uY00MrE32ixPRXRhbFhui9gW2K51g=) 2: Kc-64DdvpDRYpryEgWVmiZAxLb4.roa (hash: fJnE6S6w3zcsSEIUNp19rp72G3CDdr3kfBB8oEmZDtA=) 3: O10H_NXAAD1i_gphnWNg3Wq_zvU.roa (hash: S3bnGRkcKICV24Gqt4GllsXulmARfu6sriFJ2/wRC7Y=) 4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: u317y91zLkZpCnYReDugFruVVLDbJSDY9z4xQJsPKxk=) 5: cQXeCTJ_DMy-0IxgEi53vyjoG5Y.roa (hash: EAhkoKbmTNBh8iUu/nLDdEtJhvyuoftcxxuasAKUFqo=) 6: dqzUrFY323Ep8f9_EznYPf-FHbk.roa (hash: tHn5PdWDaptFE9kcckqjz78Qa974P1HY2yrHA0Adm4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:15:8c:3a:2d:5f:fc:66:3e:7a:6c:85:c5:82:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997 Validity Not Before: Dec 6 11:00:34 2025 GMT Not After : Dec 7 11:00:34 2025 GMT Subject: CN=ded2fe8efff1cb43c6b11b9342ebc0f3f0666580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7b:cb:9c:7d:26:31:10:81:44:b4:2e:82:37: 49:c3:7d:fb:47:39:7f:e9:79:3d:ad:a1:0e:84:81: ea:38:68:71:e0:90:53:86:30:df:19:74:40:20:9c: 3e:41:8b:bb:86:66:b1:90:e9:80:e4:34:61:4e:54: 71:48:f0:de:05:1f:f6:2c:8e:54:e9:59:7c:a6:ed: c5:ff:ab:cc:ed:01:ab:60:ea:00:09:53:44:3e:d4: c9:15:f6:fd:8d:85:7a:30:cd:e1:bb:02:32:df:15: c6:4a:0e:da:78:43:7f:19:0b:7a:ec:a3:7a:6d:5a: 3d:27:c1:02:57:9a:aa:80:68:35:ad:81:c6:50:11: a5:39:39:7d:7e:2c:fb:75:0e:2c:8f:38:2c:da:0c: 21:76:b8:22:d2:cc:a1:ee:c3:f8:9e:39:bf:1b:f3: 22:08:33:13:46:b7:60:28:09:0c:31:50:0e:a7:d2: c2:3d:1a:de:c1:8b:4b:3c:04:28:bf:85:97:30:53: 56:dc:59:3d:5a:1a:8f:dd:2b:e9:46:f9:99:57:93: a8:e5:06:4e:de:cd:a5:f6:03:a1:9e:57:df:d2:51: 71:d8:48:a3:92:47:7f:a5:58:8c:1a:7a:b6:8c:e0: bb:89:1b:73:92:2a:60:5b:e7:e0:5a:85:a3:a9:87: 3a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D2:FE:8E:FF:F1:CB:43:C6:B1:1B:93:42:EB:C0:F3:F0:66:65:80 X509v3 Authority Key Identifier: keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:4d:e2:f0:37:64:b7:81:2b:3b:48:9c:1c:18:2c:fb:f5:29: 15:22:54:74:c3:45:f2:8d:19:15:ae:48:1d:01:74:8f:d2:db: ab:8a:5f:48:94:b5:fb:80:5e:d4:4c:41:48:eb:d5:ee:85:6b: 39:cb:62:b5:20:f0:84:d1:1a:81:c4:5d:2d:d6:a6:10:b0:00: 1f:a6:52:d1:22:83:af:8d:76:88:71:0e:f9:90:05:7e:f4:2e: 09:ba:33:8b:f1:9f:1d:7b:f4:2a:3f:9b:bc:dd:ac:97:98:95: 84:01:bf:00:65:cd:ff:b6:17:e9:27:5e:7c:af:3d:b7:6c:18: 8d:4a:64:24:a8:fc:1d:57:5a:b5:60:1a:ea:9a:70:f0:51:00: d9:4f:73:52:d5:5d:68:7e:a4:ae:62:51:35:28:4b:8f:0f:8d: 01:54:12:da:91:70:5f:95:79:94:9e:8c:23:3e:3d:2e:c4:97: ed:56:ed:e6:d7:92:7c:1d:af:93:42:d0:cf:03:70:93:33:5f: 1c:7a:1c:5f:d4:59:8a:af:05:1a:94:24:9a:e9:07:04:71:69: ab:db:a9:2e:63:d8:f3:f6:94:a9:7b:13:0a:9e:ec:17:b0:29: 45:ce:f8:a3:8d:82:32:12:4e:e9:e1:18:8c:4d:d6:e3:5e:04: 23:ec:5f:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUhWMOi1f/GY+emyFxYL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjBjNzAwZDk4ZDc2YTljNjQwMTczODg5ZjkzNjdkYTlk ZTg5OTcwHhcNMjUxMjA2MTEwMDM0WhcNMjUxMjA3MTEwMDM0WjAzMTEwLwYDVQQD EyhkZWQyZmU4ZWZmZjFjYjQzYzZiMTFiOTM0MmViYzBmM2YwNjY2NTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03vLnH0mMRCBRLQugjdJw337Rzl/ 6Xk9raEOhIHqOGhx4JBThjDfGXRAIJw+QYu7hmaxkOmA5DRhTlRxSPDeBR/2LI5U 6Vl8pu3F/6vM7QGrYOoACVNEPtTJFfb9jYV6MM3huwIy3xXGSg7aeEN/GQt67KN6 bVo9J8ECV5qqgGg1rYHGUBGlOTl9fiz7dQ4sjzgs2gwhdrgi0syh7sP4njm/G/Mi CDMTRrdgKAkMMVAOp9LCPRrewYtLPAQov4WXMFNW3Fk9WhqP3SvpRvmZV5Oo5QZO 3s2l9gOhnlff0lFx2Eijkkd/pViMGnq2jOC7iRtzkipgW+fgWoWjqYc6JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7S/o7/8ctDxrEbk0LrwPPwZmWAMB8GA1UdIwQY MBaAFD4gxwDZjXapxkAXOIn5Nn2p3omXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5Njgt ZTQ2ZDhkMTZhMTVmLzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5NjgtZTQ2ZDhkMTZhMTVm LzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhE3i8Ddk t4ErO0icHBgs+/UpFSJUdMNF8o0ZFa5IHQF0j9Lbq4pfSJS1+4Be1ExBSOvV7oVr OctitSDwhNEagcRdLdamELAAH6ZS0SKDr412iHEO+ZAFfvQuCbozi/GfHXv0Kj+b vN2sl5iVhAG/AGXN/7YX6SdefK89t2wYjUpkJKj8HVdatWAa6ppw8FEA2U9zUtVd aH6krmJRNShLjw+NAVQS2pFwX5V5lJ6MIz49LsSX7Vbt5teSfB2vk0LQzwNwkzNf HHocX9RZiq8FGpQkmukHBHFpq9upLmPY8/aUqXsTCp7sF7ApRc74o42CMhJO6eEY jE3W414EI+xfxA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:41:28 2025 by rpki-client