This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json) Hash identifier: lE1v0PBF5D9363g3WO16bUpa7nHUIXd1WQzTT5u7ysU= Subject key identifier: D1:0A:82:B0:82:5A:1E:A1:58:4B:A6:3F:FE:EF:7A:34:5B:23:A1:2D Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Certificate serial: 019B38D8567F2CD1C3A41A807F87CA7BCEAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft Manifest number: 1107 Signing time: Fri 19 Dec 2025 23:01:00 +0000 Manifest this update: Fri 19 Dec 2025 23:01:00 +0000 Manifest next update: Sat 20 Dec 2025 23:01:00 +0000 Files and hashes: 1: 5W1H_E66w8rreTv-sH39ih7Q9Kc.roa (hash: ds103SAEhzJEdHJkH+426YBLHIwGf7CU7ARmWBMf450=) 2: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: JIbqSV7W8DMr5E7/cCEvAfeT+IxtPsvo7xP1k9p8KlM=) 3: Tsid8gfkYRwmSvUBez-ZQcWUur8.roa (hash: msvAp4jHrZw21tVBTpGpRqFg3CGocyYoBz7jW2toIuQ=) 4: VnPSleeMHT-jEDZJvcj7wswo-uc.roa (hash: J8mE9CeDpgMjScDrMhJ4WgvJMldlEykT+vy+lBJjBdk=) 5: VyJNQqph-KXg7u6RUzzJN3rupCA.roa (hash: LooQO9Bq7ra/KCVGLYawPG8pRB8eBgj1f03IAunPvdE=) 6: Xy7X7Y7n1dwT-JcABr_7kk_W05o.roa (hash: AQ2x/CDJ1G+4qJ9b94DvcRRy4bmdLPUtpu6pmkV+OCs=) 7: _mV-RGY-pv2pFTbkkb6uI5Oje_I.roa (hash: p4eENjI/cwmo6qgfAyd3PHUV1z0BYeTGomC/74ioJaI=) 8: b-VhFar5Bob8wl8OUu2ZPN9DNEQ.roa (hash: tvCO5UR2+v1lg6StGj4o6eWVSuPQeXT3DDeXMyH7vLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:56:7f:2c:d1:c3:a4:1a:80:7f:87:ca:7b:ce:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Validity Not Before: Dec 19 23:01:00 2025 GMT Not After : Dec 20 23:01:00 2025 GMT Subject: CN=d10a82b0825a1ea1584ba63ffeef7a345b23a12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:95:0d:dc:fe:ed:15:b1:af:aa:81:dc:f0: 72:10:8b:ca:56:48:56:99:17:29:6d:5b:6b:f4:61: dd:27:73:20:d7:a3:83:61:4b:ff:d9:30:f6:6a:99: 98:d1:f3:87:df:9f:9c:18:f1:af:8e:16:43:6e:de: 3f:7f:a6:8f:ec:85:69:13:85:eb:87:f8:71:e2:e9: 6a:ba:98:b4:89:f6:a2:7f:c4:a3:92:ba:9c:93:46: c7:da:fe:b5:9f:03:39:23:d5:d2:53:e9:02:30:67: ca:82:b6:52:ef:09:b5:57:b8:09:69:5e:8e:89:4d: 08:c5:6a:53:be:f0:80:be:ea:2e:c0:ba:ca:7e:d4: f2:cf:f6:27:d1:eb:39:bb:12:5e:0c:2d:79:08:be: ec:8d:b3:20:26:e2:bc:f4:53:a4:3e:06:b8:8d:72: e0:fd:e1:ab:42:a4:ce:99:07:99:5f:3b:e5:0a:6e: 1b:49:9f:6d:cf:02:7a:b6:74:91:24:e5:60:01:52: 14:36:07:99:9b:b9:ad:8d:f8:9b:31:6b:6d:1d:f6: a4:ef:fe:8f:61:f1:65:c2:3e:33:b1:f1:10:ba:6c: a5:b2:4d:0f:ff:8b:c5:c8:0c:d6:74:33:59:8a:af: 30:b1:ab:19:3e:8f:52:65:8c:28:38:b5:b6:de:da: d3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0A:82:B0:82:5A:1E:A1:58:4B:A6:3F:FE:EF:7A:34:5B:23:A1:2D X509v3 Authority Key Identifier: keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ba:83:fc:17:73:2f:0c:59:dc:b2:20:5f:32:a5:08:c7:61: c6:bf:22:8c:cf:af:09:cc:8e:78:57:1e:1e:c9:f9:f9:b6:db: c4:e2:ab:73:68:aa:89:26:55:6b:fa:37:c6:74:d0:ae:db:5a: 61:c3:3c:68:3c:b6:8a:a5:87:ac:98:a3:1a:8c:c6:5e:db:2b: f6:80:85:00:e8:13:e2:98:b2:b2:db:ec:23:a6:2a:fa:86:50: 29:0c:61:6d:0b:c1:dd:bf:9c:48:cd:8b:e8:46:44:54:69:78: 2d:3e:73:bd:0c:95:19:df:8a:bb:78:5a:68:e3:22:92:4a:9a: 0f:0b:4b:87:e0:e7:59:e6:29:0e:02:c0:90:3e:fd:17:c9:87: 78:e4:d3:47:c9:06:eb:a5:3e:b2:34:68:76:fb:45:34:2d:67: 0f:89:01:d8:cb:9c:e8:6c:49:dc:86:53:79:35:d3:36:7a:09: 3a:01:00:f7:f2:b5:65:a7:8e:27:17:3e:2e:50:70:e4:d2:97: 62:6c:91:56:5e:0d:f4:c3:55:58:07:bf:bd:57:24:83:b2:00: 5a:aa:1a:e7:93:e6:2b:34:bd:03:5e:d0:01:ee:17:35:c2:0b: 95:6a:71:13:66:51:fb:e4:12:d5:4d:81:bb:a0:e9:5d:64:ca: 2e:79:f9:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42FZ/LNHDpBqAf4fKe86rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5 Y2UzM2EwHhcNMjUxMjE5MjMwMTAwWhcNMjUxMjIwMjMwMTAwWjAzMTEwLwYDVQQD EyhkMTBhODJiMDgyNWExZWExNTg0YmE2M2ZmZWVmN2EzNDViMjNhMTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl6VDdz+7RWxr6qB3PByEIvKVkhW mRcpbVtr9GHdJ3Mg16ODYUv/2TD2apmY0fOH35+cGPGvjhZDbt4/f6aP7IVpE4Xr h/hx4ulqupi0ifaif8Sjkrqck0bH2v61nwM5I9XSU+kCMGfKgrZS7wm1V7gJaV6O iU0IxWpTvvCAvuouwLrKftTyz/Yn0es5uxJeDC15CL7sjbMgJuK89FOkPga4jXLg /eGrQqTOmQeZXzvlCm4bSZ9tzwJ6tnSRJOVgAVIUNgeZm7mtjfibMWttHfak7/6P YfFlwj4zsfEQumylsk0P/4vFyAzWdDNZiq8wsasZPo9SZYwoOLW23trTPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEKgrCCWh6hWEumP/7vejRbI6EtMB8GA1UdIwQY MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt NjJiZTUzNDI1Njc2LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2 LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbqD/Bdz LwxZ3LIgXzKlCMdhxr8ijM+vCcyOeFceHsn5+bbbxOKrc2iqiSZVa/o3xnTQrtta YcM8aDy2iqWHrJijGozGXtsr9oCFAOgT4piystvsI6Yq+oZQKQxhbQvB3b+cSM2L 6EZEVGl4LT5zvQyVGd+Ku3haaOMikkqaDwtLh+DnWeYpDgLAkD79F8mHeOTTR8kG 66U+sjRodvtFNC1nD4kB2Muc6GxJ3IZTeTXTNnoJOgEA9/K1ZaeOJxc+LlBw5NKX YmyRVl4N9MNVWAe/vVckg7IAWqoa55PmKzS9A17QAe4XNcILlWpxE2ZR++QS1U2B u6DpXWTKLnn5Fg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:36:01 2025 by rpki-client