This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json) Hash identifier: YTWBHQ4uVlg9ciGo3leYle2ehLMlXDH/cAzw8ru3S4I= Subject key identifier: FC:A1:7D:EA:3D:DF:18:DC:19:78:DB:90:E5:29:A6:E7:DC:EE:76:81 Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1 Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1 Certificate serial: 019AF879283CBEDC0EF6BFA8787F42EE5BAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft Manifest number: 16FA Signing time: Sun 07 Dec 2025 11:01:20 +0000 Manifest this update: Sun 07 Dec 2025 11:01:20 +0000 Manifest next update: Mon 08 Dec 2025 11:01:20 +0000 Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=) 2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: P5VDh3Bak4+0ymrsftXvDeoboKd+qH3v87v2jxGPk2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:79:28:3c:be:dc:0e:f6:bf:a8:78:7f:42:ee:5b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1 Validity Not Before: Dec 7 11:01:20 2025 GMT Not After : Dec 8 11:01:20 2025 GMT Subject: CN=fca17dea3ddf18dc1978db90e529a6e7dcee7681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:3c:f8:5a:8c:6d:58:ab:70:ed:f5:37:29: 17:05:e1:84:33:09:88:96:48:49:b7:26:d0:66:15: 04:a2:52:67:ce:41:12:29:6d:de:ef:7f:8f:13:2f: ed:a9:d0:03:d5:e9:54:1e:21:02:d4:9f:95:06:f0: 94:81:7f:17:54:2e:5d:c6:c1:37:01:61:13:72:d9: 25:cd:18:64:e4:86:95:7a:ca:33:68:49:4d:e7:1b: b3:44:a1:fd:cd:bf:78:36:4e:80:35:b2:82:4c:75: 84:45:ff:13:e9:8f:79:78:81:74:9a:0b:6b:94:3c: e1:cf:69:0c:44:21:62:30:f5:71:bd:f4:89:18:b4: 9b:30:d1:26:ed:74:ed:6a:32:4b:28:9b:33:0b:e1: a0:ba:af:b4:b6:17:93:8f:fb:bc:22:4b:a4:96:81: b2:ce:9f:14:c9:40:eb:02:3f:8a:50:ea:0b:4e:fe: 74:d7:b4:62:a2:50:0f:ab:8e:d6:94:00:7d:43:77: ce:7c:be:7a:de:95:09:f6:2b:1e:68:42:6c:fe:03: ed:68:f9:ee:0a:2a:6e:77:09:93:cb:c3:ec:7a:d9: 99:1b:2d:b4:e5:ce:98:a8:e8:ea:b7:80:66:90:c7: e8:49:28:59:07:a2:ea:e7:40:32:b0:eb:cf:42:6f: 6e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A1:7D:EA:3D:DF:18:DC:19:78:DB:90:E5:29:A6:E7:DC:EE:76:81 X509v3 Authority Key Identifier: keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:e6:60:4b:c8:3d:e3:e6:ab:0b:40:c8:06:f5:74:26:21:f0: 3d:b8:3d:4c:6b:6d:38:d4:ee:19:cd:56:b2:5d:53:c3:f9:7c: 8f:ab:c5:2a:dc:6f:4c:96:74:65:e5:15:fd:54:a8:8b:8c:80: 1d:70:51:87:ed:8b:81:7d:8a:4c:db:02:7a:8d:43:50:96:7d: 55:22:90:9a:ac:b4:8d:a7:47:5e:c2:34:20:49:ac:1a:54:ed: f9:7a:12:9a:8a:18:84:35:9f:ad:57:c9:b5:d1:94:59:bc:14: d7:21:08:97:fb:cc:14:f7:5f:29:16:0f:6e:05:34:de:29:9a: 47:4b:7d:40:14:50:ce:98:32:3f:e9:ad:5f:d4:eb:ed:0d:98: 87:80:51:9d:99:e8:73:5b:55:9d:ab:68:53:a2:72:a2:27:f9: 1e:79:c4:f8:69:ec:8a:c1:7d:f5:7e:3f:84:72:b7:30:56:44: f1:3d:7e:c6:59:97:f3:26:1e:cf:a2:c6:fa:1b:30:93:e5:16: d2:01:88:e8:3b:41:c4:cf:2b:21:f7:41:85:64:f8:60:a1:7b: f3:3a:e4:3c:69:28:5a:0b:2d:75:55:b2:b5:00:fa:6b:03:d4: 38:a9:c8:42:f3:c7:e4:bf:c3:61:1b:b8:9d:a1:96:3c:d1:9e: a0:7b:25:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4eSg8vtwO9r+oeH9C7lurMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NTAwMjAyMmI3YTNlNDc5MGI4YjRlMmY2ZDViN2EzZGFi ZGRjZTEwHhcNMjUxMjA3MTEwMTIwWhcNMjUxMjA4MTEwMTIwWjAzMTEwLwYDVQQD EyhmY2ExN2RlYTNkZGYxOGRjMTk3OGRiOTBlNTI5YTZlN2RjZWU3NjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt08+FqMbVircO31NykXBeGEMwmI lkhJtybQZhUEolJnzkESKW3e73+PEy/tqdAD1elUHiEC1J+VBvCUgX8XVC5dxsE3 AWETctklzRhk5IaVesozaElN5xuzRKH9zb94Nk6ANbKCTHWERf8T6Y95eIF0mgtr lDzhz2kMRCFiMPVxvfSJGLSbMNEm7XTtajJLKJszC+Gguq+0theTj/u8IkukloGy zp8UyUDrAj+KUOoLTv5017RiolAPq47WlAB9Q3fOfL563pUJ9iseaEJs/gPtaPnu CipudwmTy8PsetmZGy205c6YqOjqt4BmkMfoSShZB6Lq50AysOvPQm9u6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyhfeo93xjcGXjbkOUppufc7naBMB8GA1UdIwQY MBaAFKRQAgIrej5HkLi04vbVt6PavdzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEt YjM2N2ViZGYzMDJiLzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEtYjM2N2ViZGYzMDJi LzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy+ZgS8g9 4+arC0DIBvV0JiHwPbg9TGttONTuGc1Wsl1Tw/l8j6vFKtxvTJZ0ZeUV/VSoi4yA HXBRh+2LgX2KTNsCeo1DUJZ9VSKQmqy0jadHXsI0IEmsGlTt+XoSmooYhDWfrVfJ tdGUWbwU1yEIl/vMFPdfKRYPbgU03imaR0t9QBRQzpgyP+mtX9Tr7Q2Yh4BRnZno c1tVnatoU6Jyoif5HnnE+GnsisF99X4/hHK3MFZE8T1+xlmX8yYez6LG+hswk+UW 0gGI6DtBxM8rIfdBhWT4YKF78zrkPGkoWgstdVWytQD6awPUOKnIQvPH5L/DYRu4 naGWPNGeoHslzw== -----END CERTIFICATE-----Generated at Sun Dec 7 17:18:20 2025 by rpki-client