This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft File: pFzsFmCtLf53GpoSNLHRKpxbghE.mft (raw, json) Hash identifier: k3SVorlZ32nwvh5BFYUPqJS0RDf5UF6uax3KXy11O9E= Subject key identifier: 44:D9:4A:AC:BB:13:6B:EF:31:48:4D:59:58:8C:A1:9B:DC:66:F2:A2 Authority key identifier: A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11 Certificate issuer: /CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211 Certificate serial: 019AF3898D2186CF2B54C2377173A0A726FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft Manifest number: 01B4 Signing time: Sat 06 Dec 2025 12:01:09 +0000 Manifest this update: Sat 06 Dec 2025 12:01:09 +0000 Manifest next update: Sun 07 Dec 2025 12:01:09 +0000 Files and hashes: 1: BI83gyIjEGBOS7ZKdoDrSv8devY.roa (hash: jLwvUyWb11PVZ3r8d/OcSHQ4Hzj4d1bbdW3f/BH7o3c=) 2: pFzsFmCtLf53GpoSNLHRKpxbghE.crl (hash: KaQTdmFmwpgKaO6dPYbXz0sJLE39Xe7sRpU1wiAZgt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:8d:21:86:cf:2b:54:c2:37:71:73:a0:a7:26:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211 Validity Not Before: Dec 6 12:01:09 2025 GMT Not After : Dec 7 12:01:09 2025 GMT Subject: CN=44d94aacbb136bef31484d59588ca19bdc66f2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:d1:92:46:e9:17:37:63:08:bb:6e:62:f3: e8:9b:60:48:21:9e:ba:0b:a7:cf:70:14:08:72:0e: a6:24:0d:29:61:de:63:26:f1:27:90:41:62:29:c8: d5:c0:1f:34:b3:52:41:66:03:42:11:e3:38:f2:a6: c3:49:aa:75:e3:27:ac:98:4c:5e:ec:9e:da:e9:a7: 4f:42:8b:a4:c6:98:56:8e:57:ed:e4:aa:30:96:b0: b9:f9:f3:ef:cd:14:c1:ef:39:1b:4a:d5:c6:87:e9: 38:45:f9:69:7e:db:8a:42:43:e2:ba:08:5d:1d:d2: 0b:38:0b:37:f3:94:66:80:6a:c5:09:72:27:5a:8f: a1:03:74:cb:88:c6:f2:e6:81:31:5b:bf:c6:55:f8: 67:d1:d8:66:69:e9:11:4a:a6:27:65:c6:eb:81:93: 31:88:50:41:c1:a0:28:38:3f:a2:a3:d4:80:81:b1: 6b:d7:f0:b8:96:f8:50:04:73:87:10:35:45:5b:97: 5b:ba:e5:91:84:38:72:5e:aa:75:bc:fe:a5:90:fd: 41:86:41:2c:81:b9:5f:ee:94:ad:5b:d6:40:59:dc: c6:fe:a6:91:7a:ff:de:d5:99:f1:6d:c6:15:f1:ef: 40:40:d2:90:18:96:cf:c9:2d:28:7a:90:56:ee:e8: 9d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D9:4A:AC:BB:13:6B:EF:31:48:4D:59:58:8C:A1:9B:DC:66:F2:A2 X509v3 Authority Key Identifier: keyid:A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:56:43:82:d7:a8:8c:7b:6b:72:1b:8d:75:1d:78:90:ee:b8: 39:12:76:06:6a:b6:c2:6c:1f:47:32:1b:f6:1c:66:2c:c1:9e: 09:91:70:e9:6f:d4:3b:51:cf:65:ab:4b:da:10:57:3f:dc:b1: e5:90:7b:cd:81:41:09:98:0b:c7:91:71:21:43:91:04:3f:8d: dc:aa:1b:a5:be:07:19:ed:48:ce:73:07:80:73:c0:26:2f:a0: 90:cb:9d:d2:4d:11:e8:c2:d3:56:e4:f7:72:31:9e:d6:43:6b: c9:55:86:ea:25:b3:02:a9:e8:e6:d9:6a:39:9f:db:5b:e4:62: 8f:eb:23:82:01:8b:59:e3:a6:d7:9b:c5:a3:31:97:45:21:b5: 1f:b5:ea:67:8e:32:48:6d:57:06:a8:fd:c6:c3:6a:d2:22:6d: 0d:5a:78:de:a1:7e:ba:91:69:51:61:cc:89:6d:84:2c:ec:2e: 74:0c:8b:b6:a0:47:f9:83:a8:1a:80:1f:81:ee:99:67:d5:94: 49:d1:d8:df:ed:a5:fa:5e:92:3b:48:25:78:97:75:8d:ee:f3: 57:2f:bd:f0:3d:3f:70:c3:0d:df:0d:22:fa:62:b1:c5:3f:73: f8:da:93:57:d3:57:bc:d7:21:32:48:5a:a9:a6:bc:3f:13:eb: fd:4c:cc:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziY0hhs8rVMI3cXOgpyb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NWNlYzE2NjBhZDJkZmU3NzFhOWExMjM0YjFkMTJhOWM1 YjgyMTEwHhcNMjUxMjA2MTIwMTA5WhcNMjUxMjA3MTIwMTA5WjAzMTEwLwYDVQQD Eyg0NGQ5NGFhY2JiMTM2YmVmMzE0ODRkNTk1ODhjYTE5YmRjNjZmMmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6PRkkbpFzdjCLtuYvPom2BIIZ66 C6fPcBQIcg6mJA0pYd5jJvEnkEFiKcjVwB80s1JBZgNCEeM48qbDSap14yesmExe 7J7a6adPQoukxphWjlft5KowlrC5+fPvzRTB7zkbStXGh+k4RflpftuKQkPiughd HdILOAs385RmgGrFCXInWo+hA3TLiMby5oExW7/GVfhn0dhmaekRSqYnZcbrgZMx iFBBwaAoOD+io9SAgbFr1/C4lvhQBHOHEDVFW5dbuuWRhDhyXqp1vP6lkP1BhkEs gblf7pStW9ZAWdzG/qaRev/e1ZnxbcYV8e9AQNKQGJbPyS0oepBW7uidGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETZSqy7E2vvMUhNWViMoZvcZvKiMB8GA1UdIwQY MBaAFKRc7BZgrS3+dxqaEjSx0SqcW4IRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEZ6c0ZtQ3RMZjUzR3BvU05MSFJLcHhiZ2hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zMTc2ZWEtMmY1NC00NDcyLTllYjIt OTNhMzU2OTRmNjg1LzEvcEZ6c0ZtQ3RMZjUzR3BvU05MSFJLcHhiZ2hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8zMTc2ZWEtMmY1NC00NDcyLTllYjItOTNhMzU2OTRmNjg1 LzEvcEZ6c0ZtQ3RMZjUzR3BvU05MSFJLcHhiZ2hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalZDgteo jHtrchuNdR14kO64ORJ2Bmq2wmwfRzIb9hxmLMGeCZFw6W/UO1HPZatL2hBXP9yx 5ZB7zYFBCZgLx5FxIUORBD+N3Kobpb4HGe1IznMHgHPAJi+gkMud0k0R6MLTVuT3 cjGe1kNryVWG6iWzAqno5tlqOZ/bW+Rij+sjggGLWeOm15vFozGXRSG1H7XqZ44y SG1XBqj9xsNq0iJtDVp43qF+upFpUWHMiW2ELOwudAyLtqBH+YOoGoAfge6ZZ9WU SdHY3+2l+l6SO0gleJd1je7zVy+98D0/cMMN3w0i+mKxxT9z+NqTV9NXvNchMkha qaa8PxPr/UzMzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:42 2025 by rpki-client