This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json) Hash identifier: xT35XUGkm4gMPbxVmxQ/DavGESUsjn71WO5QgZfdiJQ= Subject key identifier: D7:C7:9A:91:39:43:AE:BF:6C:A4:6B:CD:2B:ED:C5:2F:FB:6B:FC:30 Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Certificate serial: 019B24AD08B46AFF4F6534964299715AADC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft Manifest number: 0447 Signing time: Tue 16 Dec 2025 01:01:18 +0000 Manifest this update: Tue 16 Dec 2025 01:01:18 +0000 Manifest next update: Wed 17 Dec 2025 01:01:18 +0000 Files and hashes: 1: 4ztGIasVEwEbakF0ec-7K0e5IU4.roa (hash: IY2hXYNDBxgugsXRkJWFvDBibE33L3+eqXYnL7k07xY=) 2: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: SF3Lu3b1VD0WYQZ9Tpid0J7Ui0Msa1Zf/98RnG+apq4=) 3: yQmkLUR6MH6h1RvFVHhe4DDu7QY.roa (hash: 7D7oyqrxVnp9P9+upqmUz5U0xALaurO7hGz+98jrtEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ad:08:b4:6a:ff:4f:65:34:96:42:99:71:5a:ad:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Validity Not Before: Dec 16 01:01:18 2025 GMT Not After : Dec 17 01:01:18 2025 GMT Subject: CN=d7c79a913943aebf6ca46bcd2bedc52ffb6bfc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:69:06:de:e2:00:21:8d:39:9b:16:2e:8e:f6: de:2c:c2:80:65:4d:5a:c4:bf:d1:64:c9:9d:1f:f0: f3:4a:e2:17:4e:34:02:85:86:7b:c3:fe:20:4b:31: 34:d0:17:44:49:3b:22:a4:e7:ca:c5:8e:39:f9:49: ad:83:49:2b:ed:51:0b:a1:7c:aa:bc:e7:6e:eb:fa: 0f:8e:17:c5:ec:6f:f1:62:b3:cc:25:30:e1:df:a8: 95:c8:71:2e:25:6a:36:60:27:f4:4f:40:df:da:aa: 0d:bc:1c:39:99:ef:f1:b1:25:5c:b1:11:9b:77:b9: c8:de:93:72:0e:96:e6:33:ed:0b:b0:ec:83:42:60: 21:de:7c:23:23:36:e2:48:83:77:a6:58:fc:46:ab: 54:1f:c0:a5:03:d5:06:66:06:72:eb:94:2a:39:dd: 3f:cd:e0:b8:f4:cd:77:74:c7:61:2f:af:20:92:aa: 14:65:ef:13:82:f9:cd:56:ca:33:72:64:8e:7c:7d: bc:f8:fe:5a:28:be:70:96:c3:58:1b:b8:85:eb:9d: 6d:a1:e1:5e:f3:4a:63:0b:10:bd:7f:6c:16:24:3d: f8:f7:c4:3d:ff:ea:06:f6:69:7b:8a:84:69:71:1e: 6f:94:18:16:e4:2d:ae:03:ba:12:39:8a:ec:72:59: 45:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C7:9A:91:39:43:AE:BF:6C:A4:6B:CD:2B:ED:C5:2F:FB:6B:FC:30 X509v3 Authority Key Identifier: keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0a:7b:c5:d7:c8:ce:df:d9:d8:76:a6:9c:fe:d7:0f:a3:40: c2:28:e7:14:24:21:30:a6:bb:d7:da:21:2f:64:8d:12:c1:4e: 62:a4:4f:63:11:04:2a:88:a5:08:06:fd:09:df:a7:59:c7:46: 10:11:64:a6:0c:62:b6:2f:be:f6:6e:6c:60:cf:2d:90:51:43: 7c:64:1c:25:80:05:d4:07:c5:1a:bc:95:3d:ad:6f:c9:82:b7: d0:93:2e:80:ba:a6:b9:b7:5b:54:4a:17:64:d7:84:35:1a:c0: 8d:7e:43:be:c6:59:4e:d4:1d:8d:78:65:95:c6:5b:9c:d5:87: d4:a9:8e:dc:e9:63:0c:c1:ad:b4:6f:a4:62:78:bf:89:75:fd: 54:5f:4f:7e:e5:bb:40:db:92:f9:8f:41:de:29:21:ce:b3:89: a5:68:b4:38:d1:35:e9:bd:9a:3f:ba:d4:fc:49:bf:87:55:a7: b5:1e:82:a2:b7:44:15:01:30:16:71:ae:b9:a7:11:a8:3d:db: b5:06:06:17:54:8f:80:16:85:99:bf:66:50:15:89:d1:55:11: ab:6f:76:0b:62:14:30:91:94:90:e8:6f:c2:ba:cd:26:9d:99: 0f:ff:3b:ea:38:37:e7:01:e4:3c:c9:31:70:b6:41:c7:9a:50: 4f:61:43:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrQi0av9PZTSWQplxWq3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZjZhNzFhMTgwZGNmOGIyMzBjNDE0ZjA5ZjdiNzFiYWVh OTc4MWMwHhcNMjUxMjE2MDEwMTE4WhcNMjUxMjE3MDEwMTE4WjAzMTEwLwYDVQQD EyhkN2M3OWE5MTM5NDNhZWJmNmNhNDZiY2QyYmVkYzUyZmZiNmJmYzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12kG3uIAIY05mxYujvbeLMKAZU1a xL/RZMmdH/DzSuIXTjQChYZ7w/4gSzE00BdESTsipOfKxY45+Umtg0kr7VELoXyq vOdu6/oPjhfF7G/xYrPMJTDh36iVyHEuJWo2YCf0T0Df2qoNvBw5me/xsSVcsRGb d7nI3pNyDpbmM+0LsOyDQmAh3nwjIzbiSIN3plj8RqtUH8ClA9UGZgZy65QqOd0/ zeC49M13dMdhL68gkqoUZe8TgvnNVsozcmSOfH28+P5aKL5wlsNYG7iF651toeFe 80pjCxC9f2wWJD3498Q9/+oG9ml7ioRpcR5vlBgW5C2uA7oSOYrscllF4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfHmpE5Q66/bKRrzSvtxS/7a/wwMB8GA1UdIwQY MBaAFKX2pxoYDc+LIwxBTwn3txuuqXgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2Mt NjY2MDIzOGIwM2NlLzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2MtNjY2MDIzOGIwM2Nl LzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwp7xdfI zt/Z2HamnP7XD6NAwijnFCQhMKa719ohL2SNEsFOYqRPYxEEKoilCAb9Cd+nWcdG EBFkpgxiti++9m5sYM8tkFFDfGQcJYAF1AfFGryVPa1vyYK30JMugLqmubdbVEoX ZNeENRrAjX5DvsZZTtQdjXhllcZbnNWH1KmO3OljDMGttG+kYni/iXX9VF9PfuW7 QNuS+Y9B3ikhzrOJpWi0ONE16b2aP7rU/Em/h1WntR6CordEFQEwFnGuuacRqD3b tQYGF1SPgBaFmb9mUBWJ0VURq292C2IUMJGUkOhvwrrNJp2ZD/876jg35wHkPMkx cLZBx5pQT2FD6A== -----END CERTIFICATE-----Generated at Tue Dec 16 09:45:20 2025 by rpki-client