This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json) Hash identifier: dCdKeCfG2IoaFYEcA+isTrVwHR2XsKg+pdXonEE6jUk= Subject key identifier: D6:AF:90:39:7D:26:DB:BC:4D:D9:35:74:8F:18:AA:FF:F0:ED:7A:BB Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Certificate serial: 019B5C4053C0398514323CFA9D9B8BC8BBE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft Manifest number: 0554 Signing time: Fri 26 Dec 2025 20:01:18 +0000 Manifest this update: Fri 26 Dec 2025 20:01:18 +0000 Manifest next update: Sat 27 Dec 2025 20:01:18 +0000 Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: 7yx20arRxvx4YFCqpq6uDrEhryWHiKBeEMpfluIdDds=) 2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:40:53:c0:39:85:14:32:3c:fa:9d:9b:8b:c8:bb:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Validity Not Before: Dec 26 20:01:18 2025 GMT Not After : Dec 27 20:01:18 2025 GMT Subject: CN=d6af90397d26dbbc4dd935748f18aafff0ed7abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:da:65:2d:aa:f9:8c:fe:fb:06:30:8e:cc:bf: f5:2a:e3:07:0c:8c:82:de:6f:46:6c:9e:a4:f1:42: b9:1c:95:e1:6d:bb:6e:c6:2f:8b:4b:01:a0:3c:0c: 1e:f8:3b:64:95:d4:25:a6:83:97:22:73:20:56:c4: ea:53:8e:9d:96:f3:f1:f1:74:71:ae:73:46:5e:5a: 70:75:91:12:e9:c5:f3:ca:64:ec:0f:3a:ad:f8:35: 1c:a8:fa:74:0a:f9:7d:fd:4d:d9:ed:5a:50:14:84: b6:b6:c0:c1:64:da:c2:22:3d:d5:c8:7f:91:e9:9c: af:0f:36:2c:e9:61:da:01:c5:be:31:d5:9f:08:a1: 09:a9:a1:33:b9:4c:ba:f5:fd:63:32:e4:4d:d0:8c: dc:00:b3:30:a7:a9:30:f2:cc:d7:1a:23:c2:61:5d: 23:01:16:73:bb:62:9c:5d:77:c9:35:58:5c:82:d5: 0b:06:93:25:fb:d6:9c:a7:03:b0:bf:43:3f:94:ac: 2a:b1:0e:af:30:06:92:15:ef:03:78:ad:33:17:f8: 04:17:09:4d:cb:c1:55:76:6d:0e:15:02:1b:fb:b6: 55:a5:5f:fe:92:a1:4a:d3:af:b8:e7:cd:40:f9:fe: 0b:e3:2d:70:45:f4:98:83:ae:85:19:47:f0:7d:18: e3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AF:90:39:7D:26:DB:BC:4D:D9:35:74:8F:18:AA:FF:F0:ED:7A:BB X509v3 Authority Key Identifier: keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1e:84:20:1a:7b:a4:21:ca:f6:7e:f8:84:a1:cd:90:9c:97: 13:87:f6:9c:f9:41:11:d6:8c:9c:aa:7c:1a:34:6a:99:89:b6: 47:28:82:ad:80:80:55:1d:d5:ea:6a:27:52:72:13:b6:43:c0: 83:d4:ee:4b:78:c9:84:90:88:44:4e:40:8c:3e:33:94:65:70: c5:cd:bc:ba:12:72:df:18:af:84:13:d2:e1:3e:e0:32:e3:a5: 9b:4b:65:05:f5:e8:17:de:a4:a7:e5:73:44:51:35:fc:67:21: 26:e3:ac:32:c0:82:db:23:71:98:62:ec:e2:eb:fd:17:db:a5: a2:39:e9:0b:53:92:2e:53:79:19:99:a3:47:90:dd:d4:ff:37: 1b:2b:85:59:fa:d7:3b:3c:cc:fb:44:97:16:3e:d0:5f:d2:6e: a1:fa:97:0b:9c:72:e1:f6:de:10:23:31:b4:fa:42:a1:0c:97: 5e:95:d3:65:96:c7:ac:4a:d2:2b:85:0a:96:79:48:cc:8a:1a: 03:37:9b:bf:30:53:09:57:b9:de:68:7d:40:45:d0:e5:b1:44: 19:a4:8a:75:a4:f8:06:a7:82:91:6d:51:0d:44:a5:eb:dd:2f: 45:ee:6c:93:48:06:8b:fa:b8:df:9d:72:72:06:f2:26:e6:1a: f4:4b:3c:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcQFPAOYUUMjz6nZuLyLvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjODdmZWI0YWI5YTU3NzY1ZmMwYTY2NDU3MmMzNTAzMmU4 NjZhZDQwHhcNMjUxMjI2MjAwMTE4WhcNMjUxMjI3MjAwMTE4WjAzMTEwLwYDVQQD EyhkNmFmOTAzOTdkMjZkYmJjNGRkOTM1NzQ4ZjE4YWFmZmYwZWQ3YWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dplLar5jP77BjCOzL/1KuMHDIyC 3m9GbJ6k8UK5HJXhbbtuxi+LSwGgPAwe+DtkldQlpoOXInMgVsTqU46dlvPx8XRx rnNGXlpwdZES6cXzymTsDzqt+DUcqPp0Cvl9/U3Z7VpQFIS2tsDBZNrCIj3VyH+R 6ZyvDzYs6WHaAcW+MdWfCKEJqaEzuUy69f1jMuRN0IzcALMwp6kw8szXGiPCYV0j ARZzu2KcXXfJNVhcgtULBpMl+9acpwOwv0M/lKwqsQ6vMAaSFe8DeK0zF/gEFwlN y8FVdm0OFQIb+7ZVpV/+kqFK06+4581A+f4L4y1wRfSYg66FGUfwfRjjEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNavkDl9Jtu8Tdk1dI8Yqv/w7Xq7MB8GA1UdIwQY MBaAFDyH/rSrmld2X8CmZFcsNQMuhmrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQt NDhmYjAwZmM5N2I2LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQtNDhmYjAwZmM5N2I2 LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhh6EIBp7 pCHK9n74hKHNkJyXE4f2nPlBEdaMnKp8GjRqmYm2RyiCrYCAVR3V6monUnITtkPA g9TuS3jJhJCIRE5AjD4zlGVwxc28uhJy3xivhBPS4T7gMuOlm0tlBfXoF96kp+Vz RFE1/GchJuOsMsCC2yNxmGLs4uv9F9ulojnpC1OSLlN5GZmjR5Dd1P83GyuFWfrX OzzM+0SXFj7QX9JuofqXC5xy4fbeECMxtPpCoQyXXpXTZZbHrErSK4UKlnlIzIoa AzebvzBTCVe53mh9QEXQ5bFEGaSKdaT4BqeCkW1RDUSl690vRe5sk0gGi/q4351y cgbyJuYa9Es85A== -----END CERTIFICATE-----Generated at Sat Dec 27 04:48:15 2025 by rpki-client