This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json) Hash identifier: tqzkBiD/AGGvh9egJrIf9WnYxNuDlRPr2SZnKLdWx3s= Subject key identifier: 34:C0:81:65:5A:E2:C1:29:57:87:91:CC:A6:34:F6:D9:D1:67:79:A4 Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4 Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4 Certificate serial: 019B18A8E8384921E164B45590B974252F4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft Manifest number: 091A Signing time: Sat 13 Dec 2025 17:01:21 +0000 Manifest this update: Sat 13 Dec 2025 17:01:21 +0000 Manifest next update: Sun 14 Dec 2025 17:01:21 +0000 Files and hashes: 1: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: JkmyVXOkSTMTD67wN1cxAvE7L/q01glP4WlQtTuqCT4=) 2: cIvicQwvTTI6J8NGKDerxCkfUpQ.roa (hash: KRBjaA428X4oNlaq/pV1Uncb9bEVRkbIjJIh/xlTHjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:e8:38:49:21:e1:64:b4:55:90:b9:74:25:2f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4 Validity Not Before: Dec 13 17:01:21 2025 GMT Not After : Dec 14 17:01:21 2025 GMT Subject: CN=34c081655ae2c129578791cca634f6d9d16779a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:6d:52:50:44:ca:79:c1:16:b1:ff:73:4b: a6:15:4f:87:bc:86:a2:4d:6d:7e:e5:c1:a3:f5:09: 29:c3:ba:b5:1c:f6:1b:79:95:00:8e:81:f2:72:28: 0f:86:55:67:d3:7c:44:8e:02:4c:54:87:8e:25:1e: 37:09:c3:db:48:28:f6:72:26:cf:ae:ea:f2:3f:7f: 76:15:d1:96:af:8f:77:05:1c:79:9b:5e:87:8b:04: ab:80:39:50:20:82:05:c2:f2:bf:ca:27:f8:21:f7: 7e:0f:15:b5:14:96:51:f5:ef:cc:32:4a:d5:99:69: 7c:b5:4a:a0:62:e8:44:65:68:c2:b9:5e:02:ad:90: 22:ac:32:32:dc:61:4b:57:6d:91:85:c9:4d:8a:ec: 98:d8:b8:e8:f1:03:78:53:5b:6a:8d:82:00:34:70: be:50:32:32:ed:f8:ac:f2:5e:ba:e8:9a:90:f7:f9: ff:83:73:1a:62:87:1c:35:d6:e9:f6:c3:99:b2:94: 7b:62:86:df:f3:31:37:46:93:83:8f:0c:eb:2b:56: 81:1a:28:5d:2d:77:12:1f:19:8a:3f:c9:d6:a1:72: df:03:c9:f7:10:f3:75:51:ea:bf:96:3f:02:98:2f: c8:a1:09:76:71:23:2c:eb:89:49:13:40:6c:e5:c6: 6f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C0:81:65:5A:E2:C1:29:57:87:91:CC:A6:34:F6:D9:D1:67:79:A4 X509v3 Authority Key Identifier: keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:75:80:1b:13:86:de:eb:6b:0d:c2:b6:49:44:d0:27:35:08: d1:8f:99:fd:30:57:b1:7e:7b:8e:0d:52:4f:be:6e:3e:62:f2: 8f:a5:7c:a1:32:f7:59:d3:19:2a:10:9e:7d:6d:a5:c4:92:2d: 58:ce:71:73:b6:1b:f5:4a:f1:7e:4e:14:73:5f:93:4e:95:58: 79:bf:c6:05:d6:a1:4c:75:5c:08:76:f9:db:00:03:78:41:5b: fa:df:38:32:72:57:18:75:3f:97:bc:0f:56:e0:91:e7:4c:39: 20:ec:0b:0d:15:f9:3e:ca:6d:c5:98:72:c1:c8:0d:3f:a3:ec: 6d:ac:19:ae:9c:7d:e0:30:0d:d9:9e:ef:5d:c5:5c:1c:e4:64: 8a:71:aa:51:09:f0:36:71:9e:83:36:c5:2e:9e:f2:ca:9c:6e: 30:80:11:2c:f7:7e:63:bd:b0:82:cb:05:28:b3:ca:e6:35:72: 65:97:c0:ba:67:73:5c:b4:97:53:e5:51:ef:c9:ce:d0:d1:78: cf:35:b8:00:38:84:21:c2:ad:61:03:cc:6f:3b:27:6d:95:eb: 4f:52:b0:7d:97:ac:ff:d5:22:63:7b:bf:1d:ab:58:42:aa:97: 0b:79:54:76:1b:84:44:c2:d0:00:c2:70:36:94:d6:14:e7:06: 04:13:02:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqOg4SSHhZLRVkLl0JS9KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjODU5ZWQ2OTNjZTNkZTA1OWNhYTBhMGMxZTQyNDVjNWU5 ZTM3ZTQwHhcNMjUxMjEzMTcwMTIxWhcNMjUxMjE0MTcwMTIxWjAzMTEwLwYDVQQD EygzNGMwODE2NTVhZTJjMTI5NTc4NzkxY2NhNjM0ZjZkOWQxNjc3OWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8ltUlBEynnBFrH/c0umFU+HvIai TW1+5cGj9Qkpw7q1HPYbeZUAjoHycigPhlVn03xEjgJMVIeOJR43CcPbSCj2cibP ruryP392FdGWr493BRx5m16HiwSrgDlQIIIFwvK/yif4Ifd+DxW1FJZR9e/MMkrV mWl8tUqgYuhEZWjCuV4CrZAirDIy3GFLV22RhclNiuyY2Ljo8QN4U1tqjYIANHC+ UDIy7fis8l666JqQ9/n/g3MaYoccNdbp9sOZspR7Yobf8zE3RpODjwzrK1aBGihd LXcSHxmKP8nWoXLfA8n3EPN1Ueq/lj8CmC/IoQl2cSMs64lJE0Bs5cZvgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTAgWVa4sEpV4eRzKY09tnRZ3mkMB8GA1UdIwQY MBaAFDyFntaTzj3gWcqgoMHkJFxenjfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mZDkwNTQtNzc4ZC00MTNkLTllOTUt NTUxMWRhYTcyNzc4LzEvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mZDkwNTQtNzc4ZC00MTNkLTllOTUtNTUxMWRhYTcyNzc4 LzEvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXWAGxOG 3utrDcK2SUTQJzUI0Y+Z/TBXsX57jg1ST75uPmLyj6V8oTL3WdMZKhCefW2lxJIt WM5xc7Yb9Urxfk4Uc1+TTpVYeb/GBdahTHVcCHb52wADeEFb+t84MnJXGHU/l7wP VuCR50w5IOwLDRX5PsptxZhywcgNP6PsbawZrpx94DAN2Z7vXcVcHORkinGqUQnw NnGegzbFLp7yypxuMIARLPd+Y72wgssFKLPK5jVyZZfAumdzXLSXU+VR78nO0NF4 zzW4ADiEIcKtYQPMbzsnbZXrT1KwfZes/9UiY3u/HatYQqqXC3lUdhuERMLQAMJw NpTWFOcGBBMCrQ== -----END CERTIFICATE-----Generated at Sat Dec 13 20:59:35 2025 by rpki-client