This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json) Hash identifier: hCPnXVLivg632ifF7POPeNKKVdSqQ2BqWRTxKjHow6s= Subject key identifier: 27:D6:29:3A:9A:08:F5:D4:BA:48:EC:F4:F7:14:F7:80:39:46:FE:2E Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Certificate serial: 019AF5E63626E5E66D63BAE36DFE5BC19B58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft Manifest number: 051F Signing time: Sat 06 Dec 2025 23:01:36 +0000 Manifest this update: Sat 06 Dec 2025 23:01:36 +0000 Manifest next update: Sun 07 Dec 2025 23:01:36 +0000 Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: CzrSJrs8F9U0Sq847tL0Ldlqg3GdNpzL33aZzqDTI4o=) 2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:36:26:e5:e6:6d:63:ba:e3:6d:fe:5b:c1:9b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Validity Not Before: Dec 6 23:01:36 2025 GMT Not After : Dec 7 23:01:36 2025 GMT Subject: CN=27d6293a9a08f5d4ba48ecf4f714f7803946fe2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:2b:35:84:42:14:cc:9d:59:bc:e8:f8:ce: a1:cf:fc:0b:e9:9e:2c:85:d7:2b:1a:51:5c:3e:15: 90:04:11:f0:54:25:89:de:48:b3:bf:82:27:a0:a0: 5d:93:53:c9:00:76:24:ec:24:d4:75:38:e7:ec:57: 9b:0a:e0:1c:eb:9c:5d:a8:1c:e5:c2:7e:6e:45:93: b8:01:e7:79:34:6d:49:9f:74:28:04:61:b5:2a:66: eb:18:07:3a:df:cd:f2:a7:3b:47:2c:22:d3:8f:52: 25:f1:21:82:59:9e:14:de:69:7a:85:1c:24:25:4c: 03:4a:42:34:91:7f:a7:6e:af:3d:43:15:ff:05:7e: 13:f8:d2:9e:fa:74:5c:f0:21:55:9d:c1:03:30:29: 4e:13:41:72:2e:52:55:39:2e:83:83:9e:f2:d4:a4: ee:42:f8:76:a3:fb:6b:85:93:f3:b6:69:cc:aa:47: 6d:d9:c5:2f:fe:c8:53:98:e8:d6:9a:f7:61:56:e6: f9:b3:33:a0:08:01:84:3a:d7:b3:d5:61:c9:a8:e5: c1:c4:55:89:5c:fe:96:99:32:0f:39:cb:86:b4:68: 86:5f:23:a3:99:35:2d:a5:bc:db:4f:72:d5:b7:64: 77:8b:f8:14:05:07:87:b2:26:84:55:ba:8e:f5:57: 4a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D6:29:3A:9A:08:F5:D4:BA:48:EC:F4:F7:14:F7:80:39:46:FE:2E X509v3 Authority Key Identifier: keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:cc:58:f9:d7:a7:ef:0a:57:34:64:74:c3:52:b4:67:86:76: a2:fd:e1:59:f7:d8:49:96:cd:91:a7:91:30:c4:bf:ba:c0:a1: ad:8c:6c:cb:56:e9:e1:ec:a6:37:1a:a0:2f:8c:e2:73:06:f1: 42:27:8f:56:d3:dc:84:72:83:1d:af:1a:f3:83:31:fc:81:89: 16:32:97:20:73:ab:6b:e9:79:44:dd:11:83:ad:cb:6e:9d:70: 18:fa:44:a1:20:b7:fb:c1:92:f8:2b:6b:d8:81:6f:af:80:28: 21:db:e8:a4:7d:d4:b0:99:7c:13:0a:af:c1:ba:77:68:e7:63: 8b:f2:26:12:b2:3e:58:d4:5e:15:88:07:cc:a5:5a:40:2f:7c: f1:a3:3d:a3:c2:a3:c4:e1:34:6f:70:13:85:8d:6a:c5:cc:b9: a3:45:25:79:a0:2e:e9:25:3f:71:d4:3e:c4:33:e0:11:2b:6b: ab:ef:fc:6f:04:81:70:43:26:55:15:54:12:3a:dc:53:34:10: ac:d1:92:2f:1d:cd:ab:7f:ca:36:9d:e7:2f:ee:42:5d:3c:16: 72:f7:cd:c0:bf:f4:0a:13:fa:22:db:37:c7:93:36:d5:6b:6e: f2:f0:70:f2:a9:db:82:b7:ac:f1:f3:e4:7d:9f:da:5a:03:15: 2e:c8:da:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15jYm5eZtY7rjbf5bwZtYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjODdmZWI0YWI5YTU3NzY1ZmMwYTY2NDU3MmMzNTAzMmU4 NjZhZDQwHhcNMjUxMjA2MjMwMTM2WhcNMjUxMjA3MjMwMTM2WjAzMTEwLwYDVQQD EygyN2Q2MjkzYTlhMDhmNWQ0YmE0OGVjZjRmNzE0Zjc4MDM5NDZmZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum4rNYRCFMydWbzo+M6hz/wL6Z4s hdcrGlFcPhWQBBHwVCWJ3kizv4InoKBdk1PJAHYk7CTUdTjn7FebCuAc65xdqBzl wn5uRZO4Aed5NG1Jn3QoBGG1KmbrGAc6383ypztHLCLTj1Il8SGCWZ4U3ml6hRwk JUwDSkI0kX+nbq89QxX/BX4T+NKe+nRc8CFVncEDMClOE0FyLlJVOS6Dg57y1KTu Qvh2o/trhZPztmnMqkdt2cUv/shTmOjWmvdhVub5szOgCAGEOtez1WHJqOXBxFWJ XP6WmTIPOcuGtGiGXyOjmTUtpbzbT3LVt2R3i/gUBQeHsiaEVbqO9VdKSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfWKTqaCPXUukjs9PcU94A5Rv4uMB8GA1UdIwQY MBaAFDyH/rSrmld2X8CmZFcsNQMuhmrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQt NDhmYjAwZmM5N2I2LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQtNDhmYjAwZmM5N2I2 LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMxY+den 7wpXNGR0w1K0Z4Z2ov3hWffYSZbNkaeRMMS/usChrYxsy1bp4eymNxqgL4zicwbx QiePVtPchHKDHa8a84Mx/IGJFjKXIHOra+l5RN0Rg63Lbp1wGPpEoSC3+8GS+Ctr 2IFvr4AoIdvopH3UsJl8Ewqvwbp3aOdji/ImErI+WNReFYgHzKVaQC988aM9o8Kj xOE0b3AThY1qxcy5o0UleaAu6SU/cdQ+xDPgEStrq+/8bwSBcEMmVRVUEjrcUzQQ rNGSLx3Nq3/KNp3nL+5CXTwWcvfNwL/0ChP6Its3x5M21Wtu8vBw8qnbgres8fPk fZ/aWgMVLsja9A== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:40 2025 by rpki-client