This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft File: pFIjl-wNFJkgGvD6nqKgS31c-mo.mft (raw, json) Hash identifier: 7sJMc1+jx3+mN9xFMoT2vSbwg9o9rVPixlWttvGR7M8= Subject key identifier: D1:80:9A:29:F6:0F:CC:2D:20:A0:1A:67:45:59:23:37:82:E1:10:CF Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A Certificate issuer: /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a Certificate serial: 019AF0BF97E40A5246216297BDCD00086255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft Manifest number: 0449 Signing time: Fri 05 Dec 2025 23:01:19 +0000 Manifest this update: Fri 05 Dec 2025 23:01:19 +0000 Manifest next update: Sat 06 Dec 2025 23:01:19 +0000 Files and hashes: 1: T73zcHs6Ep_CKwJnLjzUI2Lqk64.roa (hash: Q3Y+VkwX2oMhKJhHjrJ53ij+knYpPf4svYxgdosIZGQ=) 2: pFIjl-wNFJkgGvD6nqKgS31c-mo.crl (hash: c9AnQ4ly7jX0B2yAQumGdnODy0vkk/yeAS3HMViKx7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:97:e4:0a:52:46:21:62:97:bd:cd:00:08:62:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a Validity Not Before: Dec 5 23:01:19 2025 GMT Not After : Dec 6 23:01:19 2025 GMT Subject: CN=d1809a29f60fcc2d20a01a674559233782e110cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:58:46:74:d5:79:83:96:12:a7:58:9f:85: 74:46:09:0b:ab:b4:c0:9e:99:5c:c7:1e:83:76:35: a6:22:e6:fa:2e:1c:8c:bc:b3:de:8f:fa:8f:1d:42: b6:5a:b3:63:c6:9c:b4:ce:81:4e:2f:ba:d9:12:de: f5:0b:c0:2c:56:85:77:e9:0c:2a:12:e8:cf:86:89: 83:fe:f5:2e:38:63:0c:26:36:80:c2:b1:25:65:dd: b7:59:89:12:c3:36:5c:fa:94:70:28:17:3e:da:ce: 9d:e5:1d:2b:2e:c6:5b:0f:2a:87:b3:91:f9:49:e9: a6:ea:69:90:1d:9e:94:44:10:52:b5:eb:e7:4c:11: ba:f4:63:7c:09:20:9a:4f:39:d6:c2:ca:01:ff:11: 02:a3:79:7d:19:96:54:a8:a4:ac:0f:27:57:f1:b7: d1:de:6e:c0:23:4c:f0:d7:56:d4:ec:4e:fc:a3:86: 8e:c2:f9:3f:cc:74:09:e1:a5:07:64:87:1b:47:b4: 6f:21:fb:50:2c:0a:76:89:fe:88:e5:5c:52:48:46: 33:1a:b7:30:cb:0f:88:82:ed:d0:6e:47:a0:e6:f9: ae:fc:11:89:c5:c8:93:21:d1:8f:72:46:b1:a5:1b: 91:a2:1e:92:8a:07:da:9f:94:69:69:9d:67:69:35: d1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:80:9A:29:F6:0F:CC:2D:20:A0:1A:67:45:59:23:37:82:E1:10:CF X509v3 Authority Key Identifier: keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:14:29:9f:22:5d:63:d8:97:ae:ed:32:0a:05:d2:cb:df:53: 25:b5:39:46:80:db:59:32:d9:3c:20:f6:37:a8:3f:19:32:12: 6d:95:65:7a:f4:6a:03:25:f0:79:92:66:75:fc:88:64:df:79: 51:4b:2d:41:38:ff:d4:39:5f:2e:de:a7:10:a3:40:90:38:ca: 2f:58:9f:d5:bc:1f:63:f3:e7:e2:fe:b3:83:8d:c6:c3:a3:57: aa:29:26:58:29:c3:50:10:da:6b:8c:e8:89:a1:f1:1b:4e:da: 85:18:d8:15:0b:00:3b:63:bc:21:e5:62:f3:89:96:02:d3:b3: 14:65:1a:11:92:0d:0e:e9:b7:81:6a:97:02:fe:45:c1:29:4d: a8:81:a9:f2:0b:3d:fe:f6:78:ea:09:5a:21:03:23:73:17:ee: fb:b4:4b:fb:48:2c:72:f4:31:90:29:be:57:90:97:bf:c4:21: 32:d6:79:3b:0e:dd:c6:50:0c:19:78:0c:2f:e9:0b:0b:8d:b0: dd:55:f5:c4:d0:54:33:9d:1f:02:1c:b0:36:b5:ea:d6:2b:0f: 9f:d4:3a:9c:84:cc:fc:11:7c:f6:27:67:1d:aa:03:d3:41:b8: 3b:60:00:79:a2:3e:56:24:17:f0:ea:74:ef:2e:49:f1:8a:a9: e3:88:d3:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5fkClJGIWKXvc0ACGJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NTIyMzk3ZWMwZDE0OTkyMDFhZjBmYTllYTJhMDRiN2Q1 Y2ZhNmEwHhcNMjUxMjA1MjMwMTE5WhcNMjUxMjA2MjMwMTE5WjAzMTEwLwYDVQQD EyhkMTgwOWEyOWY2MGZjYzJkMjBhMDFhNjc0NTU5MjMzNzgyZTExMGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI1YRnTVeYOWEqdYn4V0RgkLq7TA nplcxx6DdjWmIub6LhyMvLPej/qPHUK2WrNjxpy0zoFOL7rZEt71C8AsVoV36Qwq EujPhomD/vUuOGMMJjaAwrElZd23WYkSwzZc+pRwKBc+2s6d5R0rLsZbDyqHs5H5 Semm6mmQHZ6URBBStevnTBG69GN8CSCaTznWwsoB/xECo3l9GZZUqKSsDydX8bfR 3m7AI0zw11bU7E78o4aOwvk/zHQJ4aUHZIcbR7RvIftQLAp2if6I5VxSSEYzGrcw yw+Igu3Qbkeg5vmu/BGJxciTIdGPckaxpRuRoh6Sigfan5RpaZ1naTXROwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGAmin2D8wtIKAaZ0VZIzeC4RDPMB8GA1UdIwQY MBaAFKRSI5fsDRSZIBrw+p6ioEt9XPpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNjkyZGYtZmY2Ny00NjU1LThkODgt ZmVjMDRjNDk1NTAyLzEvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNjkyZGYtZmY2Ny00NjU1LThkODgtZmVjMDRjNDk1NTAy LzEvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBQpnyJd Y9iXru0yCgXSy99TJbU5RoDbWTLZPCD2N6g/GTISbZVlevRqAyXweZJmdfyIZN95 UUstQTj/1DlfLt6nEKNAkDjKL1if1bwfY/Pn4v6zg43Gw6NXqikmWCnDUBDaa4zo iaHxG07ahRjYFQsAO2O8IeVi84mWAtOzFGUaEZINDum3gWqXAv5FwSlNqIGp8gs9 /vZ46glaIQMjcxfu+7RL+0gscvQxkCm+V5CXv8QhMtZ5Ow7dxlAMGXgML+kLC42w 3VX1xNBUM50fAhywNrXq1isPn9Q6nITM/BF89idnHaoD00G4O2AAeaI+ViQX8Op0 7y5J8Yqp44jTJg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:20 2025 by rpki-client