This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json) Hash identifier: j20w0gIPSJsGAsZF4J2t0foIrd4ajCgGDJBVWYgq/9k= Subject key identifier: 47:83:91:A8:CF:6A:A0:52:CB:97:89:C3:5E:7D:3C:47:CE:E9:13:10 Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4 Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4 Certificate serial: 019B3F4876E01068E5726296F5B7D182B208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft Manifest number: 092E Signing time: Sun 21 Dec 2025 05:01:12 +0000 Manifest this update: Sun 21 Dec 2025 05:01:12 +0000 Manifest next update: Mon 22 Dec 2025 05:01:12 +0000 Files and hashes: 1: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: lLZdYwV6h/5ap8rkNU/lk6+luPi/W1HMaQ3cAUNe0C0=) 2: cIvicQwvTTI6J8NGKDerxCkfUpQ.roa (hash: KRBjaA428X4oNlaq/pV1Uncb9bEVRkbIjJIh/xlTHjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:76:e0:10:68:e5:72:62:96:f5:b7:d1:82:b2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4 Validity Not Before: Dec 21 05:01:12 2025 GMT Not After : Dec 22 05:01:12 2025 GMT Subject: CN=478391a8cf6aa052cb9789c35e7d3c47cee91310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:8e:66:78:12:10:c4:b7:44:33:7b:52:c4: 60:44:01:6b:78:bd:fa:e6:ce:3e:e4:7d:48:f3:f8: d4:2e:0b:31:5c:2e:67:93:33:e7:17:54:c2:45:b3: 14:a0:92:6e:63:68:59:cb:d0:ca:87:61:a8:f5:3c: 01:ad:a0:a9:02:a7:16:86:4d:f2:e7:db:ad:dc:9a: 2e:1a:27:b9:6d:f7:43:96:fd:e3:d2:5d:f9:9f:7a: 61:0c:2e:06:84:19:29:6e:6f:80:8b:57:95:b1:e9: 0c:55:30:90:97:a7:67:15:fc:a1:84:b6:ad:30:7f: 0a:1f:de:c3:1d:32:c3:99:15:b8:2c:1b:0b:ab:b9: d9:5d:84:9a:5b:ba:ae:f7:72:72:0c:96:30:3e:ab: 0a:c7:f8:9b:40:bc:49:01:fd:58:36:c4:4f:a2:c7: 95:20:bb:eb:94:43:64:d7:3e:f7:61:c7:86:06:11: 07:ca:9d:e1:79:7c:bd:e2:e7:b6:84:03:ff:0b:c2: 79:61:57:af:8b:a0:8f:47:aa:a8:5f:e4:f8:c4:da: 7e:0d:77:77:52:fe:50:82:f8:b5:11:5d:42:b4:b8: 01:8e:1a:2e:f3:20:0e:45:4f:87:07:ba:3b:a9:8b: f7:88:fc:dc:10:b1:6e:11:66:1f:1b:ee:69:24:f4: 5a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:83:91:A8:CF:6A:A0:52:CB:97:89:C3:5E:7D:3C:47:CE:E9:13:10 X509v3 Authority Key Identifier: keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a5:84:18:ec:bf:85:37:a4:f1:48:b9:2d:22:ff:36:9a:f9: 1d:ba:75:95:7c:1a:ab:c4:e8:03:cd:c9:3a:b9:9d:63:b3:a5: ed:72:da:5b:bd:59:d8:24:3b:34:e5:7e:d1:17:17:76:e5:1a: c3:9d:2f:71:9b:bf:2e:1e:c9:3e:74:c3:50:23:0b:f2:ee:80: a3:f0:06:27:65:3a:fd:79:42:4e:a3:ac:b8:1d:c8:2f:6e:6c: 89:6b:6c:cd:6e:a1:6a:7d:be:a2:16:69:e3:58:e2:20:9a:21: 4a:7e:16:b6:c8:0d:c6:fa:48:a9:e4:5f:5c:a8:94:bf:b6:aa: 7f:20:6e:ca:1c:fd:ee:f3:55:f3:7e:f5:89:30:0f:2f:7c:4e: 51:21:bf:3c:2b:9e:57:fd:65:8f:0b:b4:dd:50:c6:df:02:8b: 4f:33:1f:80:5d:82:01:c0:f8:7b:0f:b4:99:8d:2e:3e:3f:00: 31:06:83:2d:30:30:9d:d0:0a:9b:97:e4:43:60:3a:f1:96:94: da:34:56:cd:fc:5b:6f:bd:1e:20:0d:f2:3e:8e:b6:11:2a:98: 68:63:c5:21:11:1a:ee:d3:27:7d:ba:ae:d0:e8:b0:d3:96:d0: dc:7f:74:e3:82:8f:93:3f:3e:87:99:4c:94:4f:be:5e:e7:1d: ef:05:dc:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SHbgEGjlcmKW9bfRgrIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjODU5ZWQ2OTNjZTNkZTA1OWNhYTBhMGMxZTQyNDVjNWU5 ZTM3ZTQwHhcNMjUxMjIxMDUwMTEyWhcNMjUxMjIyMDUwMTEyWjAzMTEwLwYDVQQD Eyg0NzgzOTFhOGNmNmFhMDUyY2I5Nzg5YzM1ZTdkM2M0N2NlZTkxMzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ6OZngSEMS3RDN7UsRgRAFreL36 5s4+5H1I8/jULgsxXC5nkzPnF1TCRbMUoJJuY2hZy9DKh2Go9TwBraCpAqcWhk3y 59ut3JouGie5bfdDlv3j0l35n3phDC4GhBkpbm+Ai1eVsekMVTCQl6dnFfyhhLat MH8KH97DHTLDmRW4LBsLq7nZXYSaW7qu93JyDJYwPqsKx/ibQLxJAf1YNsRPoseV ILvrlENk1z73YceGBhEHyp3heXy94ue2hAP/C8J5YVevi6CPR6qoX+T4xNp+DXd3 Uv5Qgvi1EV1CtLgBjhou8yAORU+HB7o7qYv3iPzcELFuEWYfG+5pJPRaUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeDkajPaqBSy5eJw159PEfO6RMQMB8GA1UdIwQY MBaAFDyFntaTzj3gWcqgoMHkJFxenjfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mZDkwNTQtNzc4ZC00MTNkLTllOTUt NTUxMWRhYTcyNzc4LzEvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mZDkwNTQtNzc4ZC00MTNkLTllOTUtNTUxMWRhYTcyNzc4 LzEvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqWEGOy/ hTek8Ui5LSL/Npr5Hbp1lXwaq8ToA83JOrmdY7Ol7XLaW71Z2CQ7NOV+0RcXduUa w50vcZu/Lh7JPnTDUCML8u6Ao/AGJ2U6/XlCTqOsuB3IL25siWtszW6han2+ohZp 41jiIJohSn4WtsgNxvpIqeRfXKiUv7aqfyBuyhz97vNV8371iTAPL3xOUSG/PCue V/1ljwu03VDG3wKLTzMfgF2CAcD4ew+0mY0uPj8AMQaDLTAwndAKm5fkQ2A68ZaU 2jRWzfxbb70eIA3yPo62ESqYaGPFIREa7tMnfbqu0Oiw05bQ3H9044KPkz8+h5lM lE++Xucd7wXc0Q== -----END CERTIFICATE-----Generated at Sun Dec 21 09:55:33 2025 by rpki-client