This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft File: PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json) Hash identifier: iBUFWa+g8laqQMdRqSZ5FpLieHgRfjjrV7wyCJ/GcDg= Subject key identifier: B0:64:1F:3E:48:73:F0:9A:F7:EC:93:51:87:94:96:55:B3:EA:0B:12 Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2 Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2 Certificate serial: 019B51BC0C897C9EFE4E6F029ADD97C7BAC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft Manifest number: 1110 Signing time: Wed 24 Dec 2025 19:00:36 +0000 Manifest this update: Wed 24 Dec 2025 19:00:36 +0000 Manifest next update: Thu 25 Dec 2025 19:00:36 +0000 Files and hashes: 1: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: GNHO7CY/L3Nl6WXZTjb/VIyue4gfsWslJnjXjUcPzcw=) 2: lFB-3tPNMg7_ita4wpHXyFs1Wtg.roa (hash: 2vQA+DCbD+mwH0gGh6uSgSbBtdD3lkqqjcblNuRAAAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:0c:89:7c:9e:fe:4e:6f:02:9a:dd:97:c7:ba:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2 Validity Not Before: Dec 24 19:00:36 2025 GMT Not After : Dec 25 19:00:36 2025 GMT Subject: CN=b0641f3e4873f09af7ec935187949655b3ea0b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:de:48:d4:4e:c0:71:95:46:fe:7d:d1:42: d3:cf:24:43:f6:fc:d4:27:b6:65:8d:e2:90:1f:ee: 5a:6c:df:46:ec:a1:37:db:1e:33:97:83:a4:b6:a5: 24:4d:e6:d0:ae:66:49:65:b0:84:5f:84:51:5e:ec: b6:53:ad:c3:b0:2b:32:ed:93:5d:7a:5b:e6:1b:ec: f6:c7:8a:82:e3:e1:d4:23:40:47:2e:df:88:53:11: 05:ef:6c:68:5d:0a:ee:f3:43:f6:e6:5b:8f:af:45: 7f:52:e3:3e:2a:0c:77:22:8d:42:e8:97:af:03:89: a1:08:2c:ba:9a:ee:53:e0:7a:2e:83:12:92:55:df: 7f:e4:ad:41:d5:96:3f:85:da:98:fd:f1:40:69:1e: f5:2b:19:d5:93:07:98:0d:cb:21:c9:93:52:e1:ab: ba:08:f5:5a:2f:ed:db:12:5b:e4:51:96:c9:f2:b5: e0:a5:ae:6e:5f:dd:61:4d:0f:3a:30:66:02:5e:46: 19:df:b7:7e:3d:32:4a:a2:a9:30:11:b2:fa:3c:19: 44:b8:ad:ff:8f:3a:9a:93:43:cf:9a:0b:c7:c7:bb: cc:9a:ea:9e:94:5f:3a:be:c7:72:88:af:91:ed:64: 12:91:e5:f8:20:69:0c:ef:a6:17:80:23:92:8b:39: 5d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:64:1F:3E:48:73:F0:9A:F7:EC:93:51:87:94:96:55:B3:EA:0B:12 X509v3 Authority Key Identifier: keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:9d:cc:67:8a:45:5a:7a:9f:23:7d:1a:d5:55:f5:ed:a4:c9: 8b:c7:f2:a6:73:06:36:5f:55:36:99:30:b6:57:f1:e4:d8:7c: 20:57:a4:04:1e:cb:06:35:ef:47:dd:ba:c5:ea:e5:dc:eb:f5: dc:e8:d5:e2:12:42:21:51:7b:58:35:89:e3:d2:70:3b:6e:22: fa:09:49:e4:ce:35:25:9d:ad:31:4d:2d:da:69:95:6a:0f:5b: b1:37:8d:3b:e6:75:ce:e1:2d:5e:4b:0c:47:58:83:3b:3e:57: b9:c3:03:35:dd:77:45:91:6b:6c:ea:e2:a0:51:9b:ed:f1:0d: c7:42:88:a2:4b:6a:a6:35:e3:7d:e5:02:b8:4b:06:b5:a2:34: dc:af:db:58:17:8c:9c:4b:2e:12:15:ba:82:50:27:8f:14:6a: a7:8b:91:2f:30:71:db:b5:1f:c5:b1:e2:db:69:85:05:97:9f: e2:c9:69:01:5a:54:4f:f9:95:ee:96:e2:e6:04:76:42:80:fc: f8:32:25:dc:fb:a7:b8:b8:0f:cc:80:e1:28:ec:62:c6:62:46: 09:08:b8:78:70:be:1e:05:3b:33:1d:2a:af:42:32:82:87:1f: 63:4a:74:60:66:bf:d3:ca:6a:76:45:58:ae:78:c8:66:da:fd: c3:6b:f3:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvAyJfJ7+Tm8Cmt2Xx7rFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGRmZTEwOWRlODMxZDMyZmQ3OGE1OGNjNWMxZDE0OWE0 NTUzZDIwHhcNMjUxMjI0MTkwMDM2WhcNMjUxMjI1MTkwMDM2WjAzMTEwLwYDVQQD EyhiMDY0MWYzZTQ4NzNmMDlhZjdlYzkzNTE4Nzk0OTY1NWIzZWEwYjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSzeSNROwHGVRv590ULTzyRD9vzU J7ZljeKQH+5abN9G7KE32x4zl4OktqUkTebQrmZJZbCEX4RRXuy2U63DsCsy7ZNd elvmG+z2x4qC4+HUI0BHLt+IUxEF72xoXQru80P25luPr0V/UuM+Kgx3Io1C6Jev A4mhCCy6mu5T4HougxKSVd9/5K1B1ZY/hdqY/fFAaR71KxnVkweYDcshyZNS4au6 CPVaL+3bElvkUZbJ8rXgpa5uX91hTQ86MGYCXkYZ37d+PTJKoqkwEbL6PBlEuK3/ jzqak0PPmgvHx7vMmuqelF86vsdyiK+R7WQSkeX4IGkM76YXgCOSizldjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBkHz5Ic/Ca9+yTUYeUllWz6gsSMB8GA1UdIwQY MBaAFDyN/hCd6DHTL9eKWMxcHRSaRVPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNTc5NjktZWE1Zi00NTE4LTkyZTEt NTNhMDY4MGY5NzEwLzEvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNTc5NjktZWE1Zi00NTE4LTkyZTEtNTNhMDY4MGY5NzEw LzEvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw53MZ4pF WnqfI30a1VX17aTJi8fypnMGNl9VNpkwtlfx5Nh8IFekBB7LBjXvR926xerl3Ov1 3OjV4hJCIVF7WDWJ49JwO24i+glJ5M41JZ2tMU0t2mmVag9bsTeNO+Z1zuEtXksM R1iDOz5XucMDNd13RZFrbOrioFGb7fENx0KIoktqpjXjfeUCuEsGtaI03K/bWBeM nEsuEhW6glAnjxRqp4uRLzBx27UfxbHi22mFBZef4slpAVpUT/mV7pbi5gR2QoD8 +DIl3PunuLgPzIDhKOxixmJGCQi4eHC+HgU7Mx0qr0IygocfY0p0YGa/08pqdkVY rnjIZtr9w2vz5Q== -----END CERTIFICATE-----Generated at Wed Dec 24 23:27:43 2025 by rpki-client