This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json) Hash identifier: 2HbMWY0lTV4sMvmZx9xaL+s1DhGBh0euxjThknLUJXM= Subject key identifier: 13:AA:76:56:E1:05:1F:6B:A2:D0:3C:D8:37:F4:4F:DC:F9:09:13:18 Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe Certificate serial: 019AF0BF4DF3BA798158B09EB8476A4FED77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft Manifest number: 09EE Signing time: Fri 05 Dec 2025 23:01:00 +0000 Manifest this update: Fri 05 Dec 2025 23:01:00 +0000 Manifest next update: Sat 06 Dec 2025 23:01:00 +0000 Files and hashes: 1: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: eORFLL/ahftZb3o0EkZ1dkNbaxyAuVFSr9OVYVZutdc=) 2: _-WfGC5BAnZg40YHw-xkJtMu1y8.roa (hash: fBNuXZvCsQYQGG7z7gRAz8VOFKDx2N1N7BNPe/5ZuRI=) 3: quGmI9u7kZ_srTH3LAyxtNKvCAo.roa (hash: RhLYYew4zXRTIVHsFT/3lhPwJj/c1cXNf2IyJ1qOi6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:4d:f3:ba:79:81:58:b0:9e:b8:47:6a:4f:ed:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe Validity Not Before: Dec 5 23:01:00 2025 GMT Not After : Dec 6 23:01:00 2025 GMT Subject: CN=13aa7656e1051f6ba2d03cd837f44fdcf9091318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:73:64:95:ee:59:e4:a4:23:8b:23:ee:f6: 29:ae:ad:59:79:f5:48:35:e8:c2:98:80:f3:87:72: 90:52:1c:9d:9e:c5:2a:55:b2:5c:55:a6:34:41:c1: 91:06:e0:b8:88:c2:ae:ca:25:a9:34:2a:bf:89:81: 21:1d:54:73:0b:28:6f:25:88:62:f1:09:53:a2:4e: fb:19:02:28:05:7d:55:39:8e:7d:5f:a9:2a:72:5d: c1:ff:81:f3:96:05:0e:ca:ab:04:cb:27:93:0b:6f: 1e:eb:f0:2f:cb:d4:f6:40:01:dd:92:12:5a:c7:0d: ef:d8:43:05:01:9a:e7:bc:65:b9:72:25:12:ab:85: a5:a1:3c:32:ca:9e:15:a0:9f:4a:5c:7a:75:5e:8b: cc:0d:81:c8:bc:28:2c:d3:d8:41:dd:67:70:b9:c8: 52:60:5e:c5:6f:0b:81:9c:29:21:ea:2a:72:21:51: b2:d5:48:db:24:ed:78:7d:88:d5:fd:2c:ad:02:05: 2d:07:2b:a3:38:b0:e1:d9:b1:98:db:8b:6e:5c:36: 45:b7:e2:9d:1d:2e:07:ed:21:cd:88:ac:11:80:76: 69:a2:7d:8e:8f:00:73:6c:21:f2:ff:25:cf:8c:2f: cc:be:58:d2:4c:1f:35:5e:ae:9d:8e:03:be:43:3a: c6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AA:76:56:E1:05:1F:6B:A2:D0:3C:D8:37:F4:4F:DC:F9:09:13:18 X509v3 Authority Key Identifier: keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fe:78:9b:0e:e6:24:03:5d:6d:8c:bc:b9:21:40:0a:78:af: 16:0c:34:fd:6c:9e:f4:aa:06:09:4d:c7:83:03:93:2b:25:b7: a7:de:32:57:a6:b5:c6:24:83:e5:cc:df:3c:43:b9:66:08:fe: 20:1f:19:c9:ff:ce:3f:f4:8a:86:df:f2:32:63:46:16:2e:11: 7a:4b:a6:8d:d5:df:29:a5:99:5c:8b:24:96:a5:e0:98:22:9d: fc:d4:51:9a:60:e4:7b:29:79:da:2d:96:59:80:28:4a:64:65: 46:f8:48:22:b3:b4:15:ab:27:8d:3e:c9:fc:b9:18:f8:71:7e: b5:c8:8b:48:e2:43:5b:81:5f:6a:51:34:bf:13:8b:8d:a6:76: 26:56:47:23:2c:e3:e2:30:08:c6:8e:67:60:87:c5:e4:30:57: de:e7:d4:31:dc:7b:b5:1c:2a:06:ac:7f:65:b2:30:0c:ae:23: e4:db:f0:82:c8:1e:a1:1e:44:c4:9e:9c:b5:0b:db:c1:57:62: 0e:99:27:73:28:1a:c8:e2:0d:c8:65:99:c3:d9:9e:95:5a:8f: 52:9c:32:ce:f8:5b:9c:cc:5e:11:c6:e5:32:52:37:4f:a7:49: 16:ef:5a:91:2f:9d:f6:54:67:08:74:e8:44:ae:19:1a:11:cb: 16:85:29:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv03zunmBWLCeuEdqT+13MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjhkNmYxM2UzNTlkZDBiYjQ1MzRhMjQ2NTU5NzRjNTdk MmIwZmUwHhcNMjUxMjA1MjMwMTAwWhcNMjUxMjA2MjMwMTAwWjAzMTEwLwYDVQQD EygxM2FhNzY1NmUxMDUxZjZiYTJkMDNjZDgzN2Y0NGZkY2Y5MDkxMzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyhzZJXuWeSkI4sj7vYprq1ZefVI NejCmIDzh3KQUhydnsUqVbJcVaY0QcGRBuC4iMKuyiWpNCq/iYEhHVRzCyhvJYhi 8QlTok77GQIoBX1VOY59X6kqcl3B/4HzlgUOyqsEyyeTC28e6/Avy9T2QAHdkhJa xw3v2EMFAZrnvGW5ciUSq4WloTwyyp4VoJ9KXHp1XovMDYHIvCgs09hB3WdwuchS YF7FbwuBnCkh6ipyIVGy1UjbJO14fYjV/SytAgUtByujOLDh2bGY24tuXDZFt+Kd HS4H7SHNiKwRgHZpon2OjwBzbCHy/yXPjC/MvljSTB81Xq6djgO+QzrGuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOqdlbhBR9rotA82Df0T9z5CRMYMB8GA1UdIwQY MBaAFD4o1vE+NZ3Qu0U0okZVl0xX0rD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEt NTQ4ODE2OTExOWU4LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEtNTQ4ODE2OTExOWU4 LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMP54mw7m JANdbYy8uSFACnivFgw0/Wye9KoGCU3HgwOTKyW3p94yV6a1xiSD5czfPEO5Zgj+ IB8Zyf/OP/SKht/yMmNGFi4RekumjdXfKaWZXIsklqXgmCKd/NRRmmDkeyl52i2W WYAoSmRlRvhIIrO0FasnjT7J/LkY+HF+tciLSOJDW4FfalE0vxOLjaZ2JlZHIyzj 4jAIxo5nYIfF5DBX3ufUMdx7tRwqBqx/ZbIwDK4j5NvwgsgeoR5ExJ6ctQvbwVdi DpkncygayOINyGWZw9melVqPUpwyzvhbnMxeEcblMlI3T6dJFu9akS+d9lRnCHTo RK4ZGhHLFoUpVA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:35 2025 by rpki-client