This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json) Hash identifier: cNOwMQqh5WMsNW3WHD/O4+GeNfHmR8fVfydNl5ih26o= Subject key identifier: BF:D4:46:2E:B8:96:8C:1C:E7:A9:7D:9C:E9:36:47:1F:61:08:87:DB Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Certificate serial: 019BF5753C48E7BC5750412D96D7271CE76A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft Manifest number: 04B4 Signing time: Sun 25 Jan 2026 14:00:59 +0000 Manifest this update: Sun 25 Jan 2026 14:00:59 +0000 Manifest next update: Mon 26 Jan 2026 14:00:59 +0000 Files and hashes: 1: e753LkUtZdPOHhc1jXD6UBTKdAI.asa (hash: QxMQuuavAVTbwrJf2pty+8SMFCYB7PU0/p/Emd0Ybrg=) 2: l2imbiusoMKFDayNbJoOchhQjKo.roa (hash: YYelOZGI0tep3ojBK7JJq7+uS3WslSPQkey1gLDWKRs=) 3: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: +cnmrUfhulUAXDF8ChggL97t587SaX4Nn0kgsfoiOSk=) 4: sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa (hash: /0Ln3Zg2sTICpShIMihehk8+YHZcL9xlacfJl1AeuPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:3c:48:e7:bc:57:50:41:2d:96:d7:27:1c:e7:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Validity Not Before: Jan 25 14:00:59 2026 GMT Not After : Jan 26 14:00:59 2026 GMT Subject: CN=bfd4462eb8968c1ce7a97d9ce936471f610887db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b0:9f:ad:29:78:87:fd:d4:60:b0:ff:f4:1e: b1:35:dc:78:8f:0e:9e:60:89:b2:e7:52:a4:64:50: ff:f0:79:ac:fe:bc:6c:ce:f0:ce:71:36:60:08:64: cd:dd:a9:fa:5b:14:3a:c8:26:0b:ed:d3:b1:66:68: 73:9c:f0:20:95:8a:8c:c1:10:10:55:74:49:89:f7: c8:c0:1e:3a:19:51:78:35:bc:6b:18:c4:82:a4:03: 28:ca:5c:f0:af:1c:60:78:c4:50:63:f0:dd:0c:99: aa:e6:d4:40:90:08:82:1c:9d:ec:9d:0d:41:87:70: da:c0:86:ce:f8:e4:ca:af:ab:fb:91:d4:54:a4:13: 7c:bf:73:d3:db:55:91:2d:33:58:0b:bc:ed:35:21: d7:fb:5c:03:17:05:29:e9:6e:16:0e:6c:1c:09:71: f2:75:1e:b5:ff:ed:c3:a3:8c:c2:25:10:ae:36:50: f4:93:88:5d:3a:15:3f:42:f2:e9:6c:5a:fd:31:d3: 1e:dd:ea:be:ac:3f:f4:43:fb:b3:b4:8c:db:1a:e5: e4:da:9c:be:65:16:92:9b:57:26:aa:42:33:2c:f0: 42:9a:d3:14:10:cf:04:3e:94:a9:21:e8:dc:d2:cf: 1b:aa:5d:e9:ea:1a:87:56:a7:5b:06:56:ea:ee:13: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D4:46:2E:B8:96:8C:1C:E7:A9:7D:9C:E9:36:47:1F:61:08:87:DB X509v3 Authority Key Identifier: keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d3:6c:11:42:9f:4f:71:cf:41:ae:7c:7a:7d:e7:7e:9a:42: 40:7a:fe:10:c5:0f:73:d7:f3:de:d3:53:26:e2:05:a9:31:0c: fb:77:de:d3:ea:cb:3a:44:16:1d:9a:fa:e4:be:a4:3e:b5:cd: cb:48:38:f1:fa:cd:a7:1c:c1:ec:f3:d1:31:59:9a:83:27:f7: 9f:4d:ca:ff:fc:2d:09:8e:7e:0b:70:a7:31:ad:b9:e1:73:5b: 8f:92:4d:67:7a:7d:ca:6e:b7:c6:13:bb:bf:c1:06:f1:18:b7: 79:8a:95:04:bd:64:6e:d7:0b:c0:a3:eb:08:20:25:e4:bb:ca: df:13:d7:a7:36:ce:fa:cd:ad:fd:f0:9b:cb:76:0e:27:1b:2d: ef:14:ec:70:95:bf:44:60:8a:ba:53:b9:68:07:cd:59:82:20: f3:ce:76:30:49:2f:ea:24:5a:b9:f7:42:9d:bc:e8:0e:67:71: c0:2b:f3:9e:0b:45:a6:dc:0a:43:8f:68:2c:c9:b2:41:60:69: f0:c4:9d:81:61:ee:cd:c7:ac:39:ca:99:70:ea:8e:ec:ed:23: 8a:36:b7:22:70:8b:23:cd:1e:da:59:c4:44:ed:2f:18:44:64: 6b:bf:bb:a8:1d:a1:62:84:4d:cd:2a:8a:d6:b7:e6:3b:0e:50: 4f:e8:b3:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dTxI57xXUEEtltcnHOdqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZjZhNzFhMTgwZGNmOGIyMzBjNDE0ZjA5ZjdiNzFiYWVh OTc4MWMwHhcNMjYwMTI1MTQwMDU5WhcNMjYwMTI2MTQwMDU5WjAzMTEwLwYDVQQD EyhiZmQ0NDYyZWI4OTY4YzFjZTdhOTdkOWNlOTM2NDcxZjYxMDg4N2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bCfrSl4h/3UYLD/9B6xNdx4jw6e YImy51KkZFD/8Hms/rxszvDOcTZgCGTN3an6WxQ6yCYL7dOxZmhznPAglYqMwRAQ VXRJiffIwB46GVF4NbxrGMSCpAMoylzwrxxgeMRQY/DdDJmq5tRAkAiCHJ3snQ1B h3DawIbO+OTKr6v7kdRUpBN8v3PT21WRLTNYC7ztNSHX+1wDFwUp6W4WDmwcCXHy dR61/+3Do4zCJRCuNlD0k4hdOhU/QvLpbFr9MdMe3eq+rD/0Q/uztIzbGuXk2py+ ZRaSm1cmqkIzLPBCmtMUEM8EPpSpIejc0s8bql3p6hqHVqdbBlbq7hP9wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/URi64lowc56l9nOk2Rx9hCIfbMB8GA1UdIwQY MBaAFKX2pxoYDc+LIwxBTwn3txuuqXgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2Mt NjY2MDIzOGIwM2NlLzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2MtNjY2MDIzOGIwM2Nl LzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtNsEUKf T3HPQa58en3nfppCQHr+EMUPc9fz3tNTJuIFqTEM+3fe0+rLOkQWHZr65L6kPrXN y0g48frNpxzB7PPRMVmagyf3n03K//wtCY5+C3CnMa254XNbj5JNZ3p9ym63xhO7 v8EG8Ri3eYqVBL1kbtcLwKPrCCAl5LvK3xPXpzbO+s2t/fCby3YOJxst7xTscJW/ RGCKulO5aAfNWYIg8852MEkv6iRaufdCnbzoDmdxwCvzngtFptwKQ49oLMmyQWBp 8MSdgWHuzcesOcqZcOqO7O0jija3InCLI80e2lnERO0vGERka7+7qB2hYoRNzSqK 1rfmOw5QT+izHQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:40 2026 by rpki-client