This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft File: PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json) Hash identifier: iZWXxBBHK8GgOlVjVk2TPLnMiIQESeYgnBc0aq+AgZk= Subject key identifier: 75:B6:E6:EE:2A:82:C1:F2:88:89:B9:22:13:E0:38:E0:8F:4A:42:DD Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97 Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997 Certificate serial: 019B2D419F7CAAAF41C409DF6979D4730BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft Manifest number: 178A Signing time: Wed 17 Dec 2025 17:00:33 +0000 Manifest this update: Wed 17 Dec 2025 17:00:33 +0000 Manifest next update: Thu 18 Dec 2025 17:00:33 +0000 Files and hashes: 1: 8HB6gBMH1OXCC4HSHxjMBJPAXNM.roa (hash: 6HXyg8j0+e0B50uY00MrE32ixPRXRhbFhui9gW2K51g=) 2: Kc-64DdvpDRYpryEgWVmiZAxLb4.roa (hash: fJnE6S6w3zcsSEIUNp19rp72G3CDdr3kfBB8oEmZDtA=) 3: O10H_NXAAD1i_gphnWNg3Wq_zvU.roa (hash: S3bnGRkcKICV24Gqt4GllsXulmARfu6sriFJ2/wRC7Y=) 4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: /x2lfBc5OrrN29w4WlX1ZMJZGniQ2eiB8ltzwOP/pL8=) 5: cQXeCTJ_DMy-0IxgEi53vyjoG5Y.roa (hash: EAhkoKbmTNBh8iUu/nLDdEtJhvyuoftcxxuasAKUFqo=) 6: dqzUrFY323Ep8f9_EznYPf-FHbk.roa (hash: tHn5PdWDaptFE9kcckqjz78Qa974P1HY2yrHA0Adm4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:41:9f:7c:aa:af:41:c4:09:df:69:79:d4:73:0b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997 Validity Not Before: Dec 17 17:00:33 2025 GMT Not After : Dec 18 17:00:33 2025 GMT Subject: CN=75b6e6ee2a82c1f28889b92213e038e08f4a42dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8d:06:7a:dc:19:86:76:5e:44:02:7c:7a:27: 19:7c:27:bf:86:97:31:52:1d:48:83:ad:c2:54:97: 72:1e:4d:f3:e5:6e:23:1b:de:90:74:d5:20:c5:a1: b5:ad:4f:aa:7d:40:36:42:7c:8a:02:f7:ca:e8:3c: 84:25:3f:41:b9:8e:c2:f9:85:bf:92:7c:37:28:ac: 03:fb:7b:b3:f7:fa:a9:e4:f9:2d:62:59:99:44:f9: 0a:2f:a5:95:bb:6d:b9:dc:9a:4d:b8:85:1e:bf:3d: c2:91:4d:59:f1:20:4b:1c:68:72:b3:1d:c8:56:8c: 36:c6:53:3e:fb:dc:e4:e1:8e:99:f2:88:7d:42:bc: d8:b0:71:c3:ca:60:c7:2d:89:07:ca:34:86:41:be: e6:1d:1d:7a:a9:62:6a:11:40:5a:9b:a7:48:c1:96: f0:b6:87:2f:54:a5:e3:04:2b:64:13:74:83:5c:a7: b0:9d:ba:9f:68:93:92:24:1b:bf:60:58:53:66:8a: a4:b9:50:4d:6e:12:b0:a0:20:d6:6c:a0:cb:e3:97: 50:2a:f7:73:5e:0f:54:ec:9f:5b:d0:43:a9:8d:91: f6:dc:6a:c8:ec:42:01:6d:8d:1a:d4:7a:d5:c7:3b: 38:52:db:c9:a3:70:ed:23:83:d4:1e:52:9d:1e:c0: 9b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B6:E6:EE:2A:82:C1:F2:88:89:B9:22:13:E0:38:E0:8F:4A:42:DD X509v3 Authority Key Identifier: keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:02:e1:e8:88:b4:1a:2c:26:4c:99:0e:4f:1c:e6:fa:31:8a: 44:f1:69:29:2b:68:5d:4e:33:d1:b8:06:75:25:ae:f7:24:c7: 83:57:89:f0:3b:4b:dd:3c:90:74:a2:19:b5:51:1f:d5:71:a3: c1:e7:e3:91:8c:22:ed:9e:26:b8:87:df:ab:c9:b7:e4:46:b5: 35:37:c4:9a:d6:66:b0:46:cb:2c:62:6f:66:f3:a3:22:11:ab: f7:17:cd:c9:57:5e:0f:3d:7f:f2:61:b5:0f:f4:0d:62:30:6d: b8:69:06:fc:5a:4e:ee:bf:5d:9b:9b:8d:35:55:33:50:f2:c9: 33:df:d2:25:ac:8c:f5:7c:22:27:76:21:b2:c4:8a:88:ea:fc: 09:19:96:b4:9a:16:40:63:d1:17:82:9c:59:8f:e3:45:9f:92: d4:b7:a3:f2:3e:1f:fb:be:28:97:8b:6f:a6:c8:06:0e:29:fb: e5:96:81:cc:9e:26:63:04:26:ba:74:82:a9:f1:91:f2:d1:2a: f2:4d:0c:29:53:5b:6f:50:3f:4a:d9:35:04:0f:a6:d4:d3:69: a9:ae:7d:0c:c2:d2:8e:d4:70:91:de:2d:49:a5:ac:77:7e:7c: 9b:ac:26:20:d2:a8:27:05:67:d2:c7:f2:a2:a2:23:39:8a:6e: 5a:a7:cf:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQZ98qq9BxAnfaXnUcwv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjBjNzAwZDk4ZDc2YTljNjQwMTczODg5ZjkzNjdkYTlk ZTg5OTcwHhcNMjUxMjE3MTcwMDMzWhcNMjUxMjE4MTcwMDMzWjAzMTEwLwYDVQQD Eyg3NWI2ZTZlZTJhODJjMWYyODg4OWI5MjIxM2UwMzhlMDhmNGE0MmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY0GetwZhnZeRAJ8eicZfCe/hpcx Uh1Ig63CVJdyHk3z5W4jG96QdNUgxaG1rU+qfUA2QnyKAvfK6DyEJT9BuY7C+YW/ knw3KKwD+3uz9/qp5PktYlmZRPkKL6WVu2253JpNuIUevz3CkU1Z8SBLHGhysx3I Vow2xlM++9zk4Y6Z8oh9QrzYsHHDymDHLYkHyjSGQb7mHR16qWJqEUBam6dIwZbw tocvVKXjBCtkE3SDXKewnbqfaJOSJBu/YFhTZoqkuVBNbhKwoCDWbKDL45dQKvdz Xg9U7J9b0EOpjZH23GrI7EIBbY0a1HrVxzs4UtvJo3DtI4PUHlKdHsCbSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHW25u4qgsHyiIm5IhPgOOCPSkLdMB8GA1UdIwQY MBaAFD4gxwDZjXapxkAXOIn5Nn2p3omXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5Njgt ZTQ2ZDhkMTZhMTVmLzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5NjgtZTQ2ZDhkMTZhMTVm LzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQLh6Ii0 GiwmTJkOTxzm+jGKRPFpKStoXU4z0bgGdSWu9yTHg1eJ8DtL3TyQdKIZtVEf1XGj wefjkYwi7Z4muIffq8m35Ea1NTfEmtZmsEbLLGJvZvOjIhGr9xfNyVdeDz1/8mG1 D/QNYjBtuGkG/FpO7r9dm5uNNVUzUPLJM9/SJayM9XwiJ3YhssSKiOr8CRmWtJoW QGPRF4KcWY/jRZ+S1Lej8j4f+74ol4tvpsgGDin75ZaBzJ4mYwQmunSCqfGR8tEq 8k0MKVNbb1A/Stk1BA+m1NNpqa59DMLSjtRwkd4tSaWsd358m6wmINKoJwVn0sfy oqIjOYpuWqfPIA== -----END CERTIFICATE-----Generated at Wed Dec 17 22:02:47 2025 by rpki-client