This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json) Hash identifier: w1AGO61UU7xBiQZ2arLdh3E1/+in1CSOdNI5IuniyEs= Subject key identifier: B4:A5:45:11:C0:25:E5:30:46:84:84:A1:75:A7:D7:43:FE:8D:34:74 Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Certificate serial: 019AF3F7518472696AF10DD595F34BBB311C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft Manifest number: 051E Signing time: Sat 06 Dec 2025 14:01:02 +0000 Manifest this update: Sat 06 Dec 2025 14:01:02 +0000 Manifest next update: Sun 07 Dec 2025 14:01:02 +0000 Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: UQ6A4zjxMaT0WTq8++5bsW70opp4bwAN4V4sYSbd3fE=) 2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:51:84:72:69:6a:f1:0d:d5:95:f3:4b:bb:31:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Validity Not Before: Dec 6 14:01:02 2025 GMT Not After : Dec 7 14:01:02 2025 GMT Subject: CN=b4a54511c025e530468484a175a7d743fe8d3474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2f:f5:5d:b2:cb:c1:ba:ba:a3:77:d5:dc:d2: 9f:9c:ab:ce:d5:c6:ed:a7:b1:a4:73:ce:d0:a6:03: eb:55:ef:5d:74:1f:91:d5:44:a3:d0:7c:d7:04:5a: ac:a5:51:2f:63:cb:c5:30:4b:1d:fd:db:ae:8f:19: 4d:e4:4b:7a:b2:70:45:81:7a:ad:0e:82:7e:91:cd: fc:d4:71:d2:1e:2c:a8:50:94:6e:0b:23:32:b8:e1: 33:f9:1d:f5:bb:0d:34:48:23:89:9e:68:59:19:bf: ca:2b:46:d0:3a:bd:3f:64:7d:b2:cc:57:1c:6a:0f: 0f:ca:61:db:47:83:24:b2:8a:21:b2:52:81:31:df: 9d:e5:c1:bb:f7:7f:6e:31:4a:c5:ef:a5:f0:a4:0f: 08:e6:53:5e:47:0e:a3:3a:bd:37:98:98:a7:f9:a4: ff:09:90:6c:87:1b:1c:6e:1a:82:3f:c8:4e:6b:5c: 76:6f:fa:ad:3f:bf:a6:ee:80:fb:04:2a:e9:3d:1b: 73:a1:e2:4b:3a:53:21:62:1f:8a:70:d7:66:4f:d0: e8:6c:1f:f4:46:97:f8:65:a1:39:2d:d5:b2:3b:fa: 94:1f:15:85:93:44:09:e4:90:0a:0e:0c:54:0f:a2: a9:ca:5f:b1:04:14:40:5d:bb:db:c7:46:1e:43:11: a8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A5:45:11:C0:25:E5:30:46:84:84:A1:75:A7:D7:43:FE:8D:34:74 X509v3 Authority Key Identifier: keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:74:0b:e0:8c:9f:88:73:88:92:78:ab:55:62:48:fa:d2:ca: 77:c4:cc:82:92:4b:e1:e7:0d:2b:8d:1d:cb:55:35:bb:85:f1: 14:6e:73:c7:9a:36:ff:cd:74:b7:7b:57:b1:c4:60:7f:9e:23: c0:d1:d8:4f:57:36:e7:c7:ac:0d:0c:f8:c9:56:65:37:18:61: ca:72:82:4c:b7:ab:e0:aa:bf:12:6d:6d:e6:91:21:09:51:77: 9a:63:cd:22:ca:f8:64:85:54:56:4f:f2:4f:e4:12:53:1f:4b: 6e:70:7c:07:b9:ff:e1:88:15:50:8b:6a:d3:8b:56:ce:68:ff: 60:2a:3c:6b:4f:c6:7e:51:87:e6:d7:b5:2d:f5:1f:03:50:a0: 93:b1:59:6b:5f:84:3c:54:da:1f:6d:20:00:d9:56:85:3f:4f: 50:b5:8b:f9:7d:1a:2d:23:3f:50:87:3f:a1:88:e7:6a:81:a6: 5b:12:a4:aa:4c:fa:da:1a:0d:03:a6:e8:bf:8d:42:96:f0:6f: 85:ef:58:28:ec:28:ea:00:dd:c3:af:9e:05:80:09:7e:0b:74: e5:ca:f6:7e:9f:a4:63:eb:fc:96:6b:6b:f4:48:4d:bd:12:92: f6:24:73:b6:bd:15:fb:1d:b2:79:a5:c4:d1:fc:86:75:43:28: 64:0d:4b:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91GEcmlq8Q3VlfNLuzEcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjODdmZWI0YWI5YTU3NzY1ZmMwYTY2NDU3MmMzNTAzMmU4 NjZhZDQwHhcNMjUxMjA2MTQwMTAyWhcNMjUxMjA3MTQwMTAyWjAzMTEwLwYDVQQD EyhiNGE1NDUxMWMwMjVlNTMwNDY4NDg0YTE3NWE3ZDc0M2ZlOGQzNDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y/1XbLLwbq6o3fV3NKfnKvO1cbt p7Gkc87QpgPrVe9ddB+R1USj0HzXBFqspVEvY8vFMEsd/duujxlN5Et6snBFgXqt DoJ+kc381HHSHiyoUJRuCyMyuOEz+R31uw00SCOJnmhZGb/KK0bQOr0/ZH2yzFcc ag8PymHbR4MksoohslKBMd+d5cG7939uMUrF76XwpA8I5lNeRw6jOr03mJin+aT/ CZBshxscbhqCP8hOa1x2b/qtP7+m7oD7BCrpPRtzoeJLOlMhYh+KcNdmT9DobB/0 Rpf4ZaE5LdWyO/qUHxWFk0QJ5JAKDgxUD6Kpyl+xBBRAXbvbx0YeQxGo4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSlRRHAJeUwRoSEoXWn10P+jTR0MB8GA1UdIwQY MBaAFDyH/rSrmld2X8CmZFcsNQMuhmrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQt NDhmYjAwZmM5N2I2LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQtNDhmYjAwZmM5N2I2 LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnQL4Iyf iHOIknirVWJI+tLKd8TMgpJL4ecNK40dy1U1u4XxFG5zx5o2/810t3tXscRgf54j wNHYT1c258esDQz4yVZlNxhhynKCTLer4Kq/Em1t5pEhCVF3mmPNIsr4ZIVUVk/y T+QSUx9LbnB8B7n/4YgVUItq04tWzmj/YCo8a0/GflGH5te1LfUfA1Cgk7FZa1+E PFTaH20gANlWhT9PULWL+X0aLSM/UIc/oYjnaoGmWxKkqkz62hoNA6bov41ClvBv he9YKOwo6gDdw6+eBYAJfgt05cr2fp+kY+v8lmtr9EhNvRKS9iRztr0V+x2yeaXE 0fyGdUMoZA1L0w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:45:16 2025 by rpki-client