This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json) Hash identifier: C8dFBU/5BgzPvOFwZ58SNXNobT1ym6ureElx101pGcI= Subject key identifier: 7C:8B:84:F7:04:72:A4:6C:7F:0A:F4:9A:7A:6E:EA:73:01:D3:FB:00 Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4 Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4 Certificate serial: 019AF5E60B2C8C4BD0C5C4729CF4E71F5F51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft Manifest number: 0908 Signing time: Sat 06 Dec 2025 23:01:25 +0000 Manifest this update: Sat 06 Dec 2025 23:01:25 +0000 Manifest next update: Sun 07 Dec 2025 23:01:25 +0000 Files and hashes: 1: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: uwfplbVMnuQ7g/ZDuSODPYO4AFLcFWi3jZZ/qcx8udU=) 2: cIvicQwvTTI6J8NGKDerxCkfUpQ.roa (hash: KRBjaA428X4oNlaq/pV1Uncb9bEVRkbIjJIh/xlTHjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:0b:2c:8c:4b:d0:c5:c4:72:9c:f4:e7:1f:5f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4 Validity Not Before: Dec 6 23:01:25 2025 GMT Not After : Dec 7 23:01:25 2025 GMT Subject: CN=7c8b84f70472a46c7f0af49a7a6eea7301d3fb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:0f:cd:42:de:df:c2:6c:99:7e:27:e8:4a: bd:24:1d:96:dc:91:23:c0:d5:ae:25:4f:15:a3:6c: 16:2c:58:5b:f4:78:ef:3a:d0:e5:6b:86:62:02:1a: b1:77:28:7e:d3:6b:fa:28:5f:ac:ea:14:e1:a2:b8: 12:a7:11:21:5a:73:fc:e2:f0:d4:cc:ab:5d:bd:7e: b5:76:04:00:c5:60:35:94:c4:28:de:1b:54:23:a2: 4f:0d:90:98:4c:8f:c3:e8:1a:ff:60:70:ac:58:93: 37:04:fd:b7:68:c4:53:85:3b:25:e6:c7:e1:95:23: 87:43:43:a1:55:83:f9:fa:97:42:92:91:13:84:3f: 07:99:70:d7:79:5f:d2:03:cd:91:4e:9e:f7:03:b2: 0a:98:c3:cb:dc:d3:00:57:3e:f7:95:b3:02:58:10: f4:62:6e:7c:ef:7f:af:b3:ec:40:42:bb:d4:ba:95: 71:0a:f2:12:65:f4:d6:b1:67:e1:81:5c:7c:08:3f: a4:12:3b:01:a6:7e:b4:94:62:7b:e1:2d:50:ce:37: c4:fc:66:a3:68:44:4e:47:fa:f6:9c:b1:84:da:fd: b3:bb:7d:6b:b3:7e:72:f2:d6:4f:de:82:3d:42:f1: 3a:ad:6e:e1:8c:da:09:71:ed:a9:c9:7b:d5:8e:23: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8B:84:F7:04:72:A4:6C:7F:0A:F4:9A:7A:6E:EA:73:01:D3:FB:00 X509v3 Authority Key Identifier: keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:05:dd:6c:d5:88:c6:9c:40:4a:0b:30:e0:2a:53:89:67:b0: 5e:79:ce:76:c7:5d:5f:aa:d2:04:d0:47:09:92:97:53:19:e5: 8a:7f:2a:24:a6:77:07:1e:2d:58:1b:bd:b9:6d:3b:6c:7f:a9: 3e:21:e9:a9:25:1c:a5:07:7a:6d:79:f6:df:d7:60:73:89:d9: 3b:a3:b0:58:e1:dc:ea:79:c8:ba:94:13:e3:f5:68:a6:25:60: 26:8e:ca:99:eb:a7:ae:cd:e5:09:d1:bd:67:10:76:4f:c8:a0: a3:f2:fd:17:c0:5f:14:e0:cf:f9:28:75:b3:5a:23:b4:ad:e7: 13:b2:2f:29:16:c3:70:a8:97:4c:82:55:2f:51:cd:af:45:d4: 53:89:eb:e5:e7:c0:69:af:54:e0:d1:94:8d:d3:37:9d:09:0c: 50:d1:34:2f:71:93:67:47:87:05:e4:48:1a:8d:06:13:02:e4: 64:7d:57:27:ba:bf:c0:ad:8c:be:cb:cb:1c:a5:8e:d4:71:03: 96:3d:86:52:2b:38:12:b3:89:7e:a7:fb:6d:b3:be:cb:65:b2: 8e:64:56:d2:51:b4:65:fd:ba:b8:e1:f6:16:e6:23:57:21:14: 40:1a:1a:8b:7a:c2:b4:78:53:56:91:5e:b9:92:52:24:ff:b8: e6:e0:be:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15gssjEvQxcRynPTnH19RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjODU5ZWQ2OTNjZTNkZTA1OWNhYTBhMGMxZTQyNDVjNWU5 ZTM3ZTQwHhcNMjUxMjA2MjMwMTI1WhcNMjUxMjA3MjMwMTI1WjAzMTEwLwYDVQQD Eyg3YzhiODRmNzA0NzJhNDZjN2YwYWY0OWE3YTZlZWE3MzAxZDNmYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6IPzULe38JsmX4n6Eq9JB2W3JEj wNWuJU8Vo2wWLFhb9HjvOtDla4ZiAhqxdyh+02v6KF+s6hThorgSpxEhWnP84vDU zKtdvX61dgQAxWA1lMQo3htUI6JPDZCYTI/D6Br/YHCsWJM3BP23aMRThTsl5sfh lSOHQ0OhVYP5+pdCkpEThD8HmXDXeV/SA82RTp73A7IKmMPL3NMAVz73lbMCWBD0 Ym5873+vs+xAQrvUupVxCvISZfTWsWfhgVx8CD+kEjsBpn60lGJ74S1QzjfE/Gaj aEROR/r2nLGE2v2zu31rs35y8tZP3oI9QvE6rW7hjNoJce2pyXvVjiO6/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyLhPcEcqRsfwr0mnpu6nMB0/sAMB8GA1UdIwQY MBaAFDyFntaTzj3gWcqgoMHkJFxenjfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mZDkwNTQtNzc4ZC00MTNkLTllOTUt NTUxMWRhYTcyNzc4LzEvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mZDkwNTQtNzc4ZC00MTNkLTllOTUtNTUxMWRhYTcyNzc4 LzEvUElXZTFwUE9QZUJaeXFDZ3dlUWtYRjZlTi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwXdbNWI xpxASgsw4CpTiWewXnnOdsddX6rSBNBHCZKXUxnlin8qJKZ3Bx4tWBu9uW07bH+p PiHpqSUcpQd6bXn239dgc4nZO6OwWOHc6nnIupQT4/VopiVgJo7Kmeunrs3lCdG9 ZxB2T8igo/L9F8BfFODP+Sh1s1ojtK3nE7IvKRbDcKiXTIJVL1HNr0XUU4nr5efA aa9U4NGUjdM3nQkMUNE0L3GTZ0eHBeRIGo0GEwLkZH1XJ7q/wK2MvsvLHKWO1HED lj2GUis4ErOJfqf7bbO+y2WyjmRW0lG0Zf26uOH2FuYjVyEUQBoai3rCtHhTVpFe uZJSJP+45uC+/w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:24:11 2025 by rpki-client