This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json) Hash identifier: uPmZUxyMbUvhlT7OWSwTZ6MDUFIHfQNgkr1T6rkb+3U= Subject key identifier: B4:95:CF:55:F4:9C:46:26:0E:D3:A1:BF:72:94:3B:36:2C:74:0A:41 Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Certificate serial: 019B378F143995FFE3095F4E6658A7271D03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft Manifest number: 0541 Signing time: Fri 19 Dec 2025 17:01:22 +0000 Manifest this update: Fri 19 Dec 2025 17:01:22 +0000 Manifest next update: Sat 20 Dec 2025 17:01:22 +0000 Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: 6q792966I0e0ygZjCD68lMxaeHofm58qEkgBUG1hSZQ=) 2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:14:39:95:ff:e3:09:5f:4e:66:58:a7:27:1d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Validity Not Before: Dec 19 17:01:22 2025 GMT Not After : Dec 20 17:01:22 2025 GMT Subject: CN=b495cf55f49c46260ed3a1bf72943b362c740a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:56:5c:70:48:f5:04:16:15:97:c6:14:58:28: 57:29:9e:5c:1b:20:02:2e:82:4f:84:1f:85:4f:93: 78:21:17:36:45:0d:80:59:3b:1a:27:84:0e:2f:11: 66:f7:4c:10:a6:a6:98:43:01:3a:6c:75:78:d9:dc: b8:4f:07:a0:25:eb:26:c8:e1:d8:7c:2f:08:1c:c6: b4:59:51:ac:07:2d:e1:aa:47:c8:66:4e:eb:ce:a2: 15:bd:f9:b0:b4:a1:c8:24:67:0d:2e:46:23:18:5a: dd:57:50:de:23:6c:f4:87:1e:e4:7a:8d:eb:69:80: 73:5c:78:9c:54:28:ae:a0:14:a4:3b:1b:a8:c8:41: 54:39:08:1f:0e:38:12:d3:d2:ad:24:07:b7:3e:bb: 9f:ac:bc:75:b9:5d:f0:f4:c8:f5:8e:43:aa:bd:d4: c1:3f:43:23:78:cd:0e:c9:93:e0:ac:7e:c4:fb:e5: 85:41:d8:03:0d:fe:ce:1b:ad:21:7a:7f:35:1c:6a: 80:e6:12:b3:cd:4a:37:00:48:be:26:47:ef:70:39: 48:f2:e5:99:01:a7:b3:3a:37:fb:95:c2:d4:47:77: 07:b4:9e:37:89:f3:95:5c:ed:80:a2:09:65:80:04: 1c:ca:81:f6:2d:49:56:37:43:d3:aa:e6:f0:42:92: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:95:CF:55:F4:9C:46:26:0E:D3:A1:BF:72:94:3B:36:2C:74:0A:41 X509v3 Authority Key Identifier: keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:6d:31:c5:71:a2:a7:63:a8:07:78:df:20:fc:4a:c9:75:55: db:a1:be:25:1a:cc:54:c7:2f:92:3c:26:21:04:22:8e:b0:83: cc:8a:be:6a:ce:b2:2f:7a:60:d7:76:fb:6a:4e:6b:62:e6:f1: 60:22:c9:4a:a0:07:b3:7c:db:06:f0:47:90:dc:76:7a:09:88: 0f:5c:bb:d8:37:9a:54:44:db:13:12:34:4d:3c:c3:40:eb:02: 25:f1:63:ba:2b:59:b1:5d:7f:93:6f:31:78:94:43:3f:7e:93: f4:91:82:f3:77:01:a4:4b:61:b9:89:17:26:df:31:f7:3a:a7: 6a:57:c8:c0:69:f9:6d:b0:a1:a5:da:76:1e:f5:90:cd:a4:5c: b4:56:68:2c:66:83:7b:c2:f3:5b:2e:af:44:72:8d:5a:1f:bd: f0:7b:c0:5d:eb:78:64:c3:af:9a:60:d9:f8:99:b6:1c:09:dc: 07:3e:89:6c:a8:2a:47:ad:bd:a6:79:41:ad:54:b3:aa:d5:a2: 97:bc:c7:a3:5f:b3:d2:9a:73:73:0d:bd:0e:47:78:6c:f3:9f: 54:c2:da:53:5f:f4:0d:2b:11:c5:59:43:f5:14:9e:7a:31:e2: e3:4d:c2:85:91:ee:84:26:df:d4:cf:06:d8:c4:71:46:ee:72: 86:d7:3b:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jxQ5lf/jCV9OZlinJx0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjODdmZWI0YWI5YTU3NzY1ZmMwYTY2NDU3MmMzNTAzMmU4 NjZhZDQwHhcNMjUxMjE5MTcwMTIyWhcNMjUxMjIwMTcwMTIyWjAzMTEwLwYDVQQD EyhiNDk1Y2Y1NWY0OWM0NjI2MGVkM2ExYmY3Mjk0M2IzNjJjNzQwYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlZccEj1BBYVl8YUWChXKZ5cGyAC LoJPhB+FT5N4IRc2RQ2AWTsaJ4QOLxFm90wQpqaYQwE6bHV42dy4TwegJesmyOHY fC8IHMa0WVGsBy3hqkfIZk7rzqIVvfmwtKHIJGcNLkYjGFrdV1DeI2z0hx7keo3r aYBzXHicVCiuoBSkOxuoyEFUOQgfDjgS09KtJAe3PrufrLx1uV3w9Mj1jkOqvdTB P0MjeM0OyZPgrH7E++WFQdgDDf7OG60hen81HGqA5hKzzUo3AEi+JkfvcDlI8uWZ AaezOjf7lcLUR3cHtJ43ifOVXO2AogllgAQcyoH2LUlWN0PTqubwQpLs9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSVz1X0nEYmDtOhv3KUOzYsdApBMB8GA1UdIwQY MBaAFDyH/rSrmld2X8CmZFcsNQMuhmrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQt NDhmYjAwZmM5N2I2LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQtNDhmYjAwZmM5N2I2 LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARG0xxXGi p2OoB3jfIPxKyXVV26G+JRrMVMcvkjwmIQQijrCDzIq+as6yL3pg13b7ak5rYubx YCLJSqAHs3zbBvBHkNx2egmID1y72DeaVETbExI0TTzDQOsCJfFjuitZsV1/k28x eJRDP36T9JGC83cBpEthuYkXJt8x9zqnalfIwGn5bbChpdp2HvWQzaRctFZoLGaD e8LzWy6vRHKNWh+98HvAXet4ZMOvmmDZ+Jm2HAncBz6JbKgqR629pnlBrVSzqtWi l7zHo1+z0ppzcw29Dkd4bPOfVMLaU1/0DSsRxVlD9RSeejHi403ChZHuhCbf1M8G 2MRxRu5yhtc7pw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:39:10 2025 by rpki-client