This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json) Hash identifier: 78zJpehzYHVFvRLBMMeoI09aEFSKHrR33jwTzh70b1M= Subject key identifier: 3F:A5:E5:2D:CB:D1:E1:D6:80:C2:25:C3:FB:84:38:6F:07:E1:AD:5B Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87 Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987 Certificate serial: 019B39461B1DA20AC716FD56FACD6C4E49DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft Manifest number: 065B Signing time: Sat 20 Dec 2025 01:00:54 +0000 Manifest this update: Sat 20 Dec 2025 01:00:54 +0000 Manifest next update: Sun 21 Dec 2025 01:00:54 +0000 Files and hashes: 1: 2aIv5EFJCSs3iPuLEwGcOsjanoQ.roa (hash: rNsD7+Ehz0+ume5zSIU3z6oGfVe17YRXQCn2AWnXoqw=) 2: 3Z7L3_p0yn0EwtvhrBcb6RS6PAs.roa (hash: 4nmnsCr5dF+3f2AuaahP7K0weju+VIeFWLyhjXlOYao=) 3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: PfBnU7xEufd9B6ywSsUiVDEhdAVg/eKHqrCFIAm6+1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:1b:1d:a2:0a:c7:16:fd:56:fa:cd:6c:4e:49:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987 Validity Not Before: Dec 20 01:00:54 2025 GMT Not After : Dec 21 01:00:54 2025 GMT Subject: CN=3fa5e52dcbd1e1d680c225c3fb84386f07e1ad5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:bc:92:10:1f:90:2a:5b:f7:a3:0b:d8:d2: ad:12:71:bb:60:a4:fa:cd:75:33:6d:cf:2a:79:be: b0:71:f1:e6:35:0b:ba:d9:ac:05:ca:72:07:1b:e2: 02:b7:95:e1:5d:a5:a1:1a:42:40:9c:d1:46:67:0f: a1:f4:8e:4c:2c:28:1a:8f:e5:e2:11:f6:f5:9f:9e: 6d:9c:d2:c2:6e:b0:81:a0:37:30:31:6c:9d:bc:fb: 03:9a:31:98:a8:25:85:bc:09:ff:16:53:dc:0d:8d: be:28:ba:b8:bd:f6:41:34:09:2d:db:12:3e:12:37: 77:12:23:e0:75:18:b2:38:fe:78:67:28:a2:89:3b: 96:41:c9:b6:a7:ce:70:5a:72:66:3b:21:e4:a0:d5: b1:9e:20:b0:ef:56:fc:49:d4:6f:93:0b:d1:68:c4: f8:3c:c2:b8:c2:06:8d:05:84:64:61:2e:be:e9:e4: 5b:de:d9:3d:20:1b:5b:c3:fe:03:79:b7:b4:0f:8a: 81:36:06:2f:23:9b:27:5a:1f:12:0c:19:a3:e1:bb: fb:e0:0b:00:1b:12:ed:ed:12:53:48:a9:f1:50:37: d0:34:8e:26:c1:2c:87:0a:1f:6d:a4:a8:da:8c:09: 10:32:2e:1d:8c:dc:4a:3c:c9:0f:ff:d2:5e:8f:8b: e9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A5:E5:2D:CB:D1:E1:D6:80:C2:25:C3:FB:84:38:6F:07:E1:AD:5B X509v3 Authority Key Identifier: keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fd:99:57:35:03:d6:4f:d2:75:87:1a:a2:0b:9b:46:5a:d9: 40:a7:74:82:1c:96:bb:ae:b3:ca:8a:dd:27:dd:99:38:11:84: 47:ed:15:41:d4:fa:d6:59:6c:72:be:7d:74:be:a1:da:14:f2: 04:3a:c5:71:39:48:0a:45:13:8a:ab:c0:b1:ef:ff:59:d8:05: 12:b7:16:15:f1:29:cc:56:19:53:16:46:5b:73:32:10:28:43: fa:01:9e:55:55:c0:48:bc:70:cd:98:62:a7:12:2a:34:9f:8b: 6b:87:15:23:4f:97:18:46:8b:97:ec:90:fc:79:8a:43:1d:14: 19:c7:fe:03:8e:b0:e8:65:c2:84:ee:8d:65:33:d8:10:35:a6: 10:23:17:6d:73:83:2c:b3:ca:ae:69:10:1b:b7:23:46:23:e3: 43:14:a7:78:23:4f:00:4f:a9:57:da:43:a2:3a:b7:73:d3:2f: 93:1a:40:47:72:90:1f:b3:21:3a:31:aa:8c:70:f3:e5:a6:28: 6c:52:8c:41:6a:46:05:67:a7:07:7f:ed:87:6d:82:dc:3d:3e: 02:1b:bf:8c:1a:7e:33:1d:96:fd:f3:14:c2:54:4d:8a:35:6d: 7e:50:f9:73:4d:8d:58:1b:3a:51:44:7a:45:c4:af:72:5d:2b: 35:98:df:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RhsdogrHFv1W+s1sTknaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MjExODY0MTNiYmRmZGUyMGU1OTJmYmU1NTUzZGU3Zjk0 ZTU5ODcwHhcNMjUxMjIwMDEwMDU0WhcNMjUxMjIxMDEwMDU0WjAzMTEwLwYDVQQD EygzZmE1ZTUyZGNiZDFlMWQ2ODBjMjI1YzNmYjg0Mzg2ZjA3ZTFhZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwje8khAfkCpb96ML2NKtEnG7YKT6 zXUzbc8qeb6wcfHmNQu62awFynIHG+ICt5XhXaWhGkJAnNFGZw+h9I5MLCgaj+Xi Efb1n55tnNLCbrCBoDcwMWydvPsDmjGYqCWFvAn/FlPcDY2+KLq4vfZBNAkt2xI+ Ejd3EiPgdRiyOP54ZyiiiTuWQcm2p85wWnJmOyHkoNWxniCw71b8SdRvkwvRaMT4 PMK4wgaNBYRkYS6+6eRb3tk9IBtbw/4Debe0D4qBNgYvI5snWh8SDBmj4bv74AsA GxLt7RJTSKnxUDfQNI4mwSyHCh9tpKjajAkQMi4djNxKPMkP/9Jej4vp+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+l5S3L0eHWgMIlw/uEOG8H4a1bMB8GA1UdIwQY MBaAFKYhGGQTu9/eIOWS++VVPef5TlmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMzk2YWQtZGRhNy00NjAwLThmNjYt ZjU2Yzc3OWIxNDJmLzEvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8wMzk2YWQtZGRhNy00NjAwLThmNjYtZjU2Yzc3OWIxNDJm LzEvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnP2ZVzUD 1k/SdYcaogubRlrZQKd0ghyWu66zyordJ92ZOBGER+0VQdT61llscr59dL6h2hTy BDrFcTlICkUTiqvAse//WdgFErcWFfEpzFYZUxZGW3MyEChD+gGeVVXASLxwzZhi pxIqNJ+La4cVI0+XGEaLl+yQ/HmKQx0UGcf+A46w6GXChO6NZTPYEDWmECMXbXOD LLPKrmkQG7cjRiPjQxSneCNPAE+pV9pDojq3c9MvkxpAR3KQH7MhOjGqjHDz5aYo bFKMQWpGBWenB3/th22C3D0+Ahu/jBp+Mx2W/fMUwlRNijVtflD5c02NWBs6UUR6 RcSvcl0rNZjf5Q== -----END CERTIFICATE-----Generated at Sat Dec 20 06:04:09 2025 by rpki-client