This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json) Hash identifier: aHU8eIxi5tPLsGXTKVHDZ5MwvbFrzQUgJ0F4Wtj9Cdk= Subject key identifier: 87:29:C6:CE:D6:F2:AA:65:78:37:BE:8D:90:BE:2F:86:DD:44:2C:43 Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1 Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1 Certificate serial: 019AF2AD63A94D08F19D1B1F08C2AC1B67DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft Manifest number: 16F7 Signing time: Sat 06 Dec 2025 08:00:40 +0000 Manifest this update: Sat 06 Dec 2025 08:00:40 +0000 Manifest next update: Sun 07 Dec 2025 08:00:40 +0000 Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=) 2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: lUyrs0Thm9T88Mdma/o1NHMdKdW8SWCm4wdJzjat3SI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:63:a9:4d:08:f1:9d:1b:1f:08:c2:ac:1b:67:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1 Validity Not Before: Dec 6 08:00:40 2025 GMT Not After : Dec 7 08:00:40 2025 GMT Subject: CN=8729c6ced6f2aa657837be8d90be2f86dd442c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4f:d8:14:c7:77:d4:b7:a1:77:3f:d0:d7:2c: d2:3a:fe:7e:ca:74:1f:f2:27:0a:49:67:9c:a6:75: 30:94:b8:c7:fd:1a:50:65:fa:a2:12:a4:7c:f2:cb: 73:33:63:26:3b:25:18:5b:93:3c:94:cf:f5:81:e1: dc:2f:97:6c:c5:3a:3a:da:e0:09:b3:f2:89:bb:48: 0c:4b:49:6e:4b:78:2f:df:de:73:ea:20:f4:47:54: 4b:7d:ab:56:46:8a:df:e0:ae:19:44:46:17:05:d0: 4f:38:d8:8f:f0:09:b5:19:df:ef:fb:41:86:32:3a: d8:b8:83:bd:2a:3c:66:3e:33:35:33:ab:f9:c6:1e: 8b:24:15:2f:1a:31:e7:cb:df:3a:fa:11:b6:7a:5c: a1:6b:9b:35:26:56:bc:29:ab:ff:4b:ad:b2:b4:c8: e3:12:1f:b8:81:d2:cc:c7:a6:f8:4a:8a:0b:93:4f: bb:b7:bd:1d:19:b1:e4:44:9c:73:21:61:07:a9:7d: ba:18:5c:be:d0:5f:12:66:23:8d:79:50:7c:61:96: 39:fd:ec:f0:7c:f4:5a:06:b4:12:eb:fc:a0:28:b6: d6:38:ef:e4:d2:4f:26:89:92:f7:a9:5f:6d:f7:40: 3d:0d:26:3f:a5:3b:55:fe:0d:5d:ef:8f:df:1e:8c: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:29:C6:CE:D6:F2:AA:65:78:37:BE:8D:90:BE:2F:86:DD:44:2C:43 X509v3 Authority Key Identifier: keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fb:c4:1d:56:0a:fe:c8:68:11:87:01:a6:b4:a5:cc:ff:69: 59:ea:b3:12:4a:84:96:b2:ce:a3:98:5e:07:55:5e:57:73:6d: 59:1f:e9:d4:dc:79:9f:c5:37:c9:6e:cd:28:d9:eb:d1:82:9b: 13:e7:81:7a:a7:33:6c:04:43:af:b5:0c:1e:2b:ab:2e:04:36: 50:cd:ba:4f:9d:a5:58:a4:21:25:27:d6:fc:70:73:90:09:a6: f3:c0:5e:94:36:ac:9f:2d:9f:47:ad:99:40:aa:62:6a:a3:e2: 15:e3:d9:97:a3:f8:35:f8:30:94:5d:8c:64:b9:ae:13:39:c8: b8:15:8c:91:f4:8c:6e:5f:4b:ce:6e:22:ac:35:b8:da:74:0f: 63:47:48:57:0a:95:5b:ea:a9:14:22:8e:81:98:c1:d9:be:fc: 2a:75:c0:57:8d:2b:87:6f:44:9c:1b:47:25:30:e4:67:78:c1: b6:7b:89:da:bd:a2:b2:a6:34:24:3a:e6:bf:6b:4b:28:89:77: bd:43:10:b5:3b:0a:58:2b:2e:76:7a:a3:45:07:92:2e:dc:64: 63:a0:d1:34:13:87:87:41:1c:88:11:b5:29:42:a6:3c:76:8d: 38:d9:26:d1:dc:cd:24:69:09:6a:63:0e:b5:6a:ed:07:d5:0f: 53:72:8e:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWOpTQjxnRsfCMKsG2ffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NTAwMjAyMmI3YTNlNDc5MGI4YjRlMmY2ZDViN2EzZGFi ZGRjZTEwHhcNMjUxMjA2MDgwMDQwWhcNMjUxMjA3MDgwMDQwWjAzMTEwLwYDVQQD Eyg4NzI5YzZjZWQ2ZjJhYTY1NzgzN2JlOGQ5MGJlMmY4NmRkNDQyYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik/YFMd31Lehdz/Q1yzSOv5+ynQf 8icKSWecpnUwlLjH/RpQZfqiEqR88stzM2MmOyUYW5M8lM/1geHcL5dsxTo62uAJ s/KJu0gMS0luS3gv395z6iD0R1RLfatWRorf4K4ZREYXBdBPONiP8Am1Gd/v+0GG MjrYuIO9KjxmPjM1M6v5xh6LJBUvGjHny986+hG2elyha5s1Jla8Kav/S62ytMjj Eh+4gdLMx6b4SooLk0+7t70dGbHkRJxzIWEHqX26GFy+0F8SZiONeVB8YZY5/ezw fPRaBrQS6/ygKLbWOO/k0k8miZL3qV9t90A9DSY/pTtV/g1d74/fHoznkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcpxs7W8qpleDe+jZC+L4bdRCxDMB8GA1UdIwQY MBaAFKRQAgIrej5HkLi04vbVt6PavdzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEt YjM2N2ViZGYzMDJiLzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEtYjM2N2ViZGYzMDJi LzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPvEHVYK /shoEYcBprSlzP9pWeqzEkqElrLOo5heB1VeV3NtWR/p1Nx5n8U3yW7NKNnr0YKb E+eBeqczbARDr7UMHiurLgQ2UM26T52lWKQhJSfW/HBzkAmm88BelDasny2fR62Z QKpiaqPiFePZl6P4NfgwlF2MZLmuEznIuBWMkfSMbl9Lzm4irDW42nQPY0dIVwqV W+qpFCKOgZjB2b78KnXAV40rh29EnBtHJTDkZ3jBtnuJ2r2isqY0JDrmv2tLKIl3 vUMQtTsKWCsudnqjRQeSLtxkY6DRNBOHh0EciBG1KUKmPHaNONkm0dzNJGkJamMO tWrtB9UPU3KO9A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:57 2025 by rpki-client