This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json) Hash identifier: p82BfB1gWJd1ijjux4ZiBGXW2sJAhN0GDyo0CgrRYlE= Subject key identifier: 18:65:98:B0:55:1B:F5:FE:CB:7D:C4:B2:72:31:D4:C2:61:46:D8:65 Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Certificate serial: 019B281B8147023D4178A08FB22E645209C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft Manifest number: 0539 Signing time: Tue 16 Dec 2025 17:00:49 +0000 Manifest this update: Tue 16 Dec 2025 17:00:49 +0000 Manifest next update: Wed 17 Dec 2025 17:00:49 +0000 Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: UsBQA1AnS0Q2Ajhuyp/qfRs7GgiMxwmzKFQ5lwesvE4=) 2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:81:47:02:3d:41:78:a0:8f:b2:2e:64:52:09:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Validity Not Before: Dec 16 17:00:49 2025 GMT Not After : Dec 17 17:00:49 2025 GMT Subject: CN=186598b0551bf5fecb7dc4b27231d4c26146d865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:d7:f2:49:2b:cf:2d:5c:02:d4:c0:a0:d7: d0:6a:d4:3e:8c:79:31:9e:78:36:ff:3a:f8:86:d3: 08:cb:a0:9b:b5:b5:82:86:2a:36:05:8c:03:4a:05: 18:8b:2b:07:14:f3:22:a2:99:19:d6:c4:6d:60:1a: b7:d1:22:e6:a3:6c:59:42:f5:a5:4a:01:a4:b9:8a: 54:62:d5:8b:c6:38:65:e2:0d:ec:c5:6e:a7:9b:d7: 5b:73:58:12:49:b6:21:d2:2b:df:9a:a6:85:a5:65: 34:d1:f6:a1:b4:af:e8:8c:b8:14:9c:a6:d4:c5:bc: 9f:3d:25:fe:af:5d:55:aa:0e:85:e5:0f:0d:3d:bc: 4b:e3:9d:fd:d7:52:c2:33:d0:c6:26:12:06:b0:c1: 29:d4:76:b0:27:5c:83:42:89:a7:94:f5:c1:c3:cd: 60:73:dd:41:95:72:61:35:89:27:c1:b5:33:0b:e6: d9:bd:a8:22:f7:3e:42:02:33:b2:53:fd:5d:dd:85: 79:ab:e7:d5:fa:d5:dc:43:c7:1a:e7:21:79:23:ff: 62:1a:3f:c0:c7:de:d4:1a:52:df:17:12:88:23:56: d7:8c:64:c9:e0:c8:5a:7d:a0:de:01:76:39:e9:99: 20:da:e4:c1:f7:bf:12:78:8e:c4:c7:8f:97:04:6a: 27:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:65:98:B0:55:1B:F5:FE:CB:7D:C4:B2:72:31:D4:C2:61:46:D8:65 X509v3 Authority Key Identifier: keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ab:4f:c4:09:00:a5:ba:17:ad:bd:60:c0:b4:45:6b:0b:24: 0f:38:cc:41:a0:aa:af:b0:0b:2f:2a:49:7c:f8:39:2a:fb:7c: 09:41:0c:4c:3b:a0:a7:88:2f:5a:b0:0a:2b:d3:64:91:2d:41: 00:58:17:42:dc:ba:c1:29:63:a8:a7:ee:e7:c8:57:ac:d8:5e: 05:48:11:98:8e:fa:14:5b:49:a0:ce:ce:11:90:7c:fa:05:35: 41:58:39:57:45:52:4c:3c:8a:ef:10:5d:8b:a5:a9:a6:37:0e: 46:bd:86:1e:69:dc:ee:7f:c3:c3:3f:db:6c:22:f8:f6:30:0e: 8a:04:d2:09:bc:7d:bd:d5:21:5f:c5:d9:4c:88:f5:c2:b5:c3: cd:f0:cf:30:27:6f:25:70:70:27:26:1f:6a:8e:e9:d7:f5:0f: 5d:23:a5:2a:38:a6:37:e2:8c:cf:9c:c9:69:97:8a:0e:ce:90: f8:fc:99:4d:28:80:0c:83:91:ad:4c:ac:40:74:34:e3:38:23: f3:4c:63:06:d0:68:9a:f7:35:50:d3:ad:60:c1:75:db:f8:ff: 01:00:b7:38:aa:30:83:b2:10:14:db:7c:27:6b:b4:4e:a6:b6: f6:3c:ae:a5:ac:91:78:dd:c9:6d:61:90:84:2f:ea:b6:55:b6: 07:d7:b7:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG4FHAj1BeKCPsi5kUgnJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjODdmZWI0YWI5YTU3NzY1ZmMwYTY2NDU3MmMzNTAzMmU4 NjZhZDQwHhcNMjUxMjE2MTcwMDQ5WhcNMjUxMjE3MTcwMDQ5WjAzMTEwLwYDVQQD EygxODY1OThiMDU1MWJmNWZlY2I3ZGM0YjI3MjMxZDRjMjYxNDZkODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCLX8kkrzy1cAtTAoNfQatQ+jHkx nng2/zr4htMIy6CbtbWChio2BYwDSgUYiysHFPMiopkZ1sRtYBq30SLmo2xZQvWl SgGkuYpUYtWLxjhl4g3sxW6nm9dbc1gSSbYh0ivfmqaFpWU00fahtK/ojLgUnKbU xbyfPSX+r11Vqg6F5Q8NPbxL453911LCM9DGJhIGsMEp1HawJ1yDQomnlPXBw81g c91BlXJhNYknwbUzC+bZvagi9z5CAjOyU/1d3YV5q+fV+tXcQ8ca5yF5I/9iGj/A x97UGlLfFxKII1bXjGTJ4MhafaDeAXY56Zkg2uTB978SeI7Ex4+XBGonywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhlmLBVG/X+y33EsnIx1MJhRthlMB8GA1UdIwQY MBaAFDyH/rSrmld2X8CmZFcsNQMuhmrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQt NDhmYjAwZmM5N2I2LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQtNDhmYjAwZmM5N2I2 LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6tPxAkA pboXrb1gwLRFawskDzjMQaCqr7ALLypJfPg5Kvt8CUEMTDugp4gvWrAKK9NkkS1B AFgXQty6wSljqKfu58hXrNheBUgRmI76FFtJoM7OEZB8+gU1QVg5V0VSTDyK7xBd i6WppjcORr2GHmnc7n/Dwz/bbCL49jAOigTSCbx9vdUhX8XZTIj1wrXDzfDPMCdv JXBwJyYfao7p1/UPXSOlKjimN+KMz5zJaZeKDs6Q+PyZTSiADIORrUysQHQ04zgj 80xjBtBomvc1UNOtYMF12/j/AQC3OKowg7IQFNt8J2u0Tqa29jyupayReN3JbWGQ hC/qtlW2B9e3pw== -----END CERTIFICATE-----Generated at Wed Dec 17 00:29:45 2025 by rpki-client