This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft File: PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json) Hash identifier: za0eVynfy/fTkloAlpTsd3QV2intvBe8tyLVjl14IcA= Subject key identifier: 68:C6:35:68:8B:65:DB:09:86:6E:50:4B:4D:CB:BA:60:D4:85:CD:C9 Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2 Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2 Certificate serial: 019B32D5E461B97410D71BE53E1F8D8DE07A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft Manifest number: 1100 Signing time: Thu 18 Dec 2025 19:00:36 +0000 Manifest this update: Thu 18 Dec 2025 19:00:36 +0000 Manifest next update: Fri 19 Dec 2025 19:00:36 +0000 Files and hashes: 1: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: ywWMXlvGQg89lXRIzf+MKGOPUdcyTIYtEU1gsEmEYd8=) 2: lFB-3tPNMg7_ita4wpHXyFs1Wtg.roa (hash: 2vQA+DCbD+mwH0gGh6uSgSbBtdD3lkqqjcblNuRAAAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:e4:61:b9:74:10:d7:1b:e5:3e:1f:8d:8d:e0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2 Validity Not Before: Dec 18 19:00:36 2025 GMT Not After : Dec 19 19:00:36 2025 GMT Subject: CN=68c635688b65db09866e504b4dcbba60d485cdc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:0e:61:95:c2:2d:ce:ae:c8:b0:e3:d4:47: 4e:1c:e6:81:ca:27:c2:bc:f4:f7:e2:32:63:18:93: 39:fd:5f:90:33:2e:ba:ed:bf:24:c1:2f:d8:8a:67: 21:6b:ef:b3:94:5c:4c:39:c7:e8:71:91:f4:fd:5e: 7b:85:3f:ad:ba:64:76:63:64:06:b3:48:ad:ee:05: 9d:10:b9:e4:42:44:cf:94:b8:6c:84:4c:f3:ad:f6: b5:b3:e8:ca:aa:f1:93:51:18:e7:96:46:86:02:cf: e0:e2:50:c9:0f:68:87:d0:86:2b:51:30:d0:d2:f1: 56:57:2c:af:1d:43:b0:28:6d:53:aa:99:61:38:c3: 6f:25:ec:b8:f5:d9:f8:74:6e:9b:4f:97:c5:2a:6e: 50:9d:87:cc:1d:3e:30:ce:5e:e2:7d:19:c7:39:f0: a0:02:71:34:19:db:5f:68:5b:cb:ec:9d:6b:37:30: 5a:c8:1d:72:28:f4:9e:db:86:1e:8e:13:ba:f1:db: 79:55:c9:6b:fd:1e:d0:d8:63:2b:94:70:71:43:fa: 1f:f4:24:5d:75:bc:02:e2:07:4e:a7:41:ac:74:22: db:38:48:9c:87:d1:8b:c2:1f:44:95:b9:98:d1:0e: ad:6f:63:1e:d3:f8:97:f7:38:94:7d:64:3f:40:c9: 90:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C6:35:68:8B:65:DB:09:86:6E:50:4B:4D:CB:BA:60:D4:85:CD:C9 X509v3 Authority Key Identifier: keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cf:e7:20:12:e3:08:88:76:ed:4e:e5:49:8e:3f:a0:46:bb: cb:24:7a:71:41:c8:1f:9b:8f:90:42:f2:02:3b:8f:03:7a:f1: 8a:f0:a2:22:e7:5f:bc:92:93:cb:1c:02:7d:71:5b:26:c6:a2: af:2f:93:c4:59:ec:62:9e:74:4b:60:0b:b6:df:e1:a0:a7:cc: c2:11:8c:65:41:08:17:af:57:d3:4d:b2:a9:1a:6e:c7:73:a1: 70:05:dd:32:55:60:ce:cc:56:42:fb:ca:ea:70:da:e0:20:19: 8c:05:86:e8:57:0f:68:68:17:3c:a3:2a:c1:6d:01:21:0a:21: 14:39:80:2c:41:93:86:ea:14:02:39:b9:94:3b:76:d7:be:f9: cf:e5:ef:e2:d7:84:f9:b3:c5:9a:6d:37:9f:3c:43:27:5f:82: 47:ae:65:53:ca:b1:fd:b4:bc:23:52:b2:0c:11:82:9a:77:c1: a6:18:d1:d6:3b:7a:2f:d1:ad:2f:22:b4:1b:8d:fb:a3:a2:70: 54:48:eb:5d:c4:a6:09:03:84:0d:75:3a:67:a9:2d:a9:f1:b8: 16:9b:e3:37:88:6b:ee:b4:a2:2d:df:ee:a8:f1:d4:50:d2:57: d3:90:6d:85:15:87:a8:67:cb:e5:81:ed:fa:77:49:2e:f9:49: 84:4d:60:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1eRhuXQQ1xvlPh+NjeB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGRmZTEwOWRlODMxZDMyZmQ3OGE1OGNjNWMxZDE0OWE0 NTUzZDIwHhcNMjUxMjE4MTkwMDM2WhcNMjUxMjE5MTkwMDM2WjAzMTEwLwYDVQQD Eyg2OGM2MzU2ODhiNjVkYjA5ODY2ZTUwNGI0ZGNiYmE2MGQ0ODVjZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0kOYZXCLc6uyLDj1EdOHOaByifC vPT34jJjGJM5/V+QMy667b8kwS/Yimcha++zlFxMOcfocZH0/V57hT+tumR2Y2QG s0it7gWdELnkQkTPlLhshEzzrfa1s+jKqvGTURjnlkaGAs/g4lDJD2iH0IYrUTDQ 0vFWVyyvHUOwKG1TqplhOMNvJey49dn4dG6bT5fFKm5QnYfMHT4wzl7ifRnHOfCg AnE0GdtfaFvL7J1rNzBayB1yKPSe24YejhO68dt5Vclr/R7Q2GMrlHBxQ/of9CRd dbwC4gdOp0GsdCLbOEich9GLwh9ElbmY0Q6tb2Me0/iX9ziUfWQ/QMmQawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjGNWiLZdsJhm5QS03LumDUhc3JMB8GA1UdIwQY MBaAFDyN/hCd6DHTL9eKWMxcHRSaRVPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNTc5NjktZWE1Zi00NTE4LTkyZTEt NTNhMDY4MGY5NzEwLzEvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNTc5NjktZWE1Zi00NTE4LTkyZTEtNTNhMDY4MGY5NzEw LzEvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANs/nIBLj CIh27U7lSY4/oEa7yyR6cUHIH5uPkELyAjuPA3rxivCiIudfvJKTyxwCfXFbJsai ry+TxFnsYp50S2ALtt/hoKfMwhGMZUEIF69X002yqRpux3OhcAXdMlVgzsxWQvvK 6nDa4CAZjAWG6FcPaGgXPKMqwW0BIQohFDmALEGThuoUAjm5lDt21775z+Xv4teE +bPFmm03nzxDJ1+CR65lU8qx/bS8I1KyDBGCmnfBphjR1jt6L9GtLyK0G437o6Jw VEjrXcSmCQOEDXU6Z6ktqfG4FpvjN4hr7rSiLd/uqPHUUNJX05BthRWHqGfL5YHt +ndJLvlJhE1gow== -----END CERTIFICATE-----Generated at Thu Dec 18 23:42:51 2025 by rpki-client