This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json) Hash identifier: egycEZpprASFrJ9vubI8syxumpNCxcodVshyg/5SwpM= Subject key identifier: 83:31:F8:7F:EA:BF:9C:F6:61:33:0B:39:8A:0D:C8:46:83:67:67:FD Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Certificate serial: 019B3F4857ECA19F076383089280AA7D86F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft Manifest number: 0545 Signing time: Sun 21 Dec 2025 05:01:04 +0000 Manifest this update: Sun 21 Dec 2025 05:01:04 +0000 Manifest next update: Mon 22 Dec 2025 05:01:04 +0000 Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: Fab5j02SWDN+Uf2xNpsdtuJNTEQ9zcxY3PssIa7xBOU=) 2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:57:ec:a1:9f:07:63:83:08:92:80:aa:7d:86:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Validity Not Before: Dec 21 05:01:04 2025 GMT Not After : Dec 22 05:01:04 2025 GMT Subject: CN=8331f87feabf9cf661330b398a0dc846836767fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:54:f1:ff:b1:7a:e5:ce:49:68:b3:dc:8f:38: 98:9d:94:7a:86:39:ae:d5:0d:07:0c:d6:a6:e7:5c: b0:ba:4f:89:f5:08:f6:d0:4f:2f:32:17:d6:a8:e5: 73:1b:3d:08:01:5b:45:bd:b7:9a:7a:4a:dd:e9:80: 5b:34:26:42:e4:00:0a:ab:ed:fa:bb:1c:49:69:39: ce:88:ce:1a:24:4c:d5:4f:b4:cc:8b:9f:f3:95:ff: 3f:02:2a:fa:11:6d:40:a8:94:3f:dd:cd:ed:af:3d: ca:98:e2:be:92:e7:ca:ee:52:88:fb:61:b2:d3:d2: b3:cb:ae:d4:74:c4:76:34:84:ff:06:f5:d2:94:c5: 04:74:cc:3f:2d:9e:bb:28:18:b1:a9:38:29:a0:97: 54:95:8f:a7:b7:34:eb:4d:d5:bf:6e:09:03:38:00: 65:ba:81:89:df:57:2b:7f:97:6f:73:69:e3:84:46: 2e:40:fc:b4:50:29:3d:7e:da:2c:f2:5b:1b:34:49: 1b:b0:6a:02:f8:be:a0:22:07:b2:cd:57:c9:39:dd: cb:0c:22:30:a6:18:ed:bb:53:f0:6f:8e:9f:b8:9f: 22:d3:68:f0:a9:f1:aa:21:9a:dd:ca:dd:d8:db:2e: 81:cf:06:8a:6f:7d:f1:45:46:84:7e:be:ba:2e:22: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:31:F8:7F:EA:BF:9C:F6:61:33:0B:39:8A:0D:C8:46:83:67:67:FD X509v3 Authority Key Identifier: keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:42:64:2c:68:5c:c7:71:2b:59:92:60:18:55:50:3d:38:47: 82:33:29:c3:49:83:5c:c0:6c:1e:6a:6c:fd:df:ab:c7:d6:bc: 17:de:cd:2b:3a:d1:7f:62:79:98:30:6a:bf:d0:1a:14:a1:ef: d6:12:c5:57:46:9e:0b:72:d7:11:e1:4d:e7:ff:f7:fb:99:04: ae:3f:18:45:d5:91:0a:d9:23:48:2a:c1:e6:89:4c:ce:67:a5: a1:9e:a8:45:ee:ee:eb:01:2d:8a:9b:63:92:67:54:0b:de:40: 7b:15:de:75:13:4f:69:c0:0d:b6:74:8c:5c:ab:88:5d:12:b3: 47:f7:eb:40:92:f9:31:be:a7:eb:53:95:66:ac:ce:ab:62:53: 67:77:51:9b:79:5c:08:b2:e0:19:4c:fa:a0:6c:a3:d6:a1:77: 9a:45:ec:0b:ab:23:f3:f1:3a:eb:6a:b7:64:ce:7b:29:1b:49: 6f:21:a2:94:43:22:98:36:b6:fe:1d:c9:74:d9:c1:d2:55:22: d2:06:89:b7:be:54:80:05:e1:83:aa:ba:5a:25:11:c3:ac:d7: 76:9f:5d:ab:01:4e:c0:36:04:03:9e:c5:98:32:4c:aa:e0:ab: 7d:c8:c8:dc:ee:da:1e:50:df:63:0d:ef:e9:66:b9:86:f9:4d: f0:c0:69:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SFfsoZ8HY4MIkoCqfYb2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjODdmZWI0YWI5YTU3NzY1ZmMwYTY2NDU3MmMzNTAzMmU4 NjZhZDQwHhcNMjUxMjIxMDUwMTA0WhcNMjUxMjIyMDUwMTA0WjAzMTEwLwYDVQQD Eyg4MzMxZjg3ZmVhYmY5Y2Y2NjEzMzBiMzk4YTBkYzg0NjgzNjc2N2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolTx/7F65c5JaLPcjziYnZR6hjmu 1Q0HDNam51ywuk+J9Qj20E8vMhfWqOVzGz0IAVtFvbeaekrd6YBbNCZC5AAKq+36 uxxJaTnOiM4aJEzVT7TMi5/zlf8/Air6EW1AqJQ/3c3trz3KmOK+kufK7lKI+2Gy 09Kzy67UdMR2NIT/BvXSlMUEdMw/LZ67KBixqTgpoJdUlY+ntzTrTdW/bgkDOABl uoGJ31crf5dvc2njhEYuQPy0UCk9ftos8lsbNEkbsGoC+L6gIgeyzVfJOd3LDCIw phjtu1Pwb46fuJ8i02jwqfGqIZrdyt3Y2y6BzwaKb33xRUaEfr66LiLi6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMx+H/qv5z2YTMLOYoNyEaDZ2f9MB8GA1UdIwQY MBaAFDyH/rSrmld2X8CmZFcsNQMuhmrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQt NDhmYjAwZmM5N2I2LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQtNDhmYjAwZmM5N2I2 LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUJkLGhc x3ErWZJgGFVQPThHgjMpw0mDXMBsHmps/d+rx9a8F97NKzrRf2J5mDBqv9AaFKHv 1hLFV0aeC3LXEeFN5//3+5kErj8YRdWRCtkjSCrB5olMzmeloZ6oRe7u6wEtiptj kmdUC95AexXedRNPacANtnSMXKuIXRKzR/frQJL5Mb6n61OVZqzOq2JTZ3dRm3lc CLLgGUz6oGyj1qF3mkXsC6sj8/E662q3ZM57KRtJbyGilEMimDa2/h3JdNnB0lUi 0gaJt75UgAXhg6q6WiURw6zXdp9dqwFOwDYEA57FmDJMquCrfcjI3O7aHlDfYw3v 6Wa5hvlN8MBpKA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:54:16 2025 by rpki-client