This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json) Hash identifier: QC5LTiY8QpxqDlkY60URWzY1zK0HCFzG+yXlo3aesOU= Subject key identifier: 3B:69:75:E2:15:07:8D:24:43:68:5D:82:BB:EF:CA:32:0A:BD:45:BE Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Certificate serial: 019AFA300E01A6290A59EB9465159967481D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft Manifest number: 0431 Signing time: Sun 07 Dec 2025 19:00:44 +0000 Manifest this update: Sun 07 Dec 2025 19:00:44 +0000 Manifest next update: Mon 08 Dec 2025 19:00:44 +0000 Files and hashes: 1: 4ztGIasVEwEbakF0ec-7K0e5IU4.roa (hash: IY2hXYNDBxgugsXRkJWFvDBibE33L3+eqXYnL7k07xY=) 2: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: MaUrmBnhyYTMyd04wrxBaNOblcqTxq/G1KbmBbciDHw=) 3: yQmkLUR6MH6h1RvFVHhe4DDu7QY.roa (hash: 7D7oyqrxVnp9P9+upqmUz5U0xALaurO7hGz+98jrtEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:30:0e:01:a6:29:0a:59:eb:94:65:15:99:67:48:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Validity Not Before: Dec 7 19:00:44 2025 GMT Not After : Dec 8 19:00:44 2025 GMT Subject: CN=3b6975e215078d2443685d82bbefca320abd45be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:68:d2:9b:5a:9d:9e:b2:97:95:cf:25:a7:e5: 79:45:4d:69:5e:28:c7:c4:6d:64:20:18:ba:b7:af: 6d:cd:21:55:93:de:8b:88:c7:ae:9f:20:00:2a:37: be:66:b4:33:8b:eb:48:ea:52:42:f7:dc:2f:6a:2e: 41:58:35:40:bb:f4:3b:82:e6:dd:5d:ed:e2:b4:3a: ea:8f:ba:e2:bb:ed:01:c8:07:bd:57:d3:cc:1c:68: df:15:39:10:b8:76:f7:72:2c:c5:5d:b0:df:ea:3a: 36:90:d1:a9:8d:f2:17:af:67:80:6a:c0:98:e9:20: 9f:b9:7b:91:89:4a:49:b1:e8:0d:55:32:67:96:6e: 1d:88:33:f4:22:62:38:f7:8a:d6:b9:61:35:41:a2: 4a:e6:dc:71:64:af:01:9f:aa:e0:69:ac:e7:03:6d: ac:a2:74:fa:d3:f9:94:89:87:a7:9b:07:5f:4f:a7: 82:7b:f3:3b:e5:15:9c:e3:6a:76:30:97:a8:68:e9: e2:b4:82:3a:1d:7e:11:1f:50:fc:c2:dc:d5:5f:b1: 37:9d:f3:a3:d8:ec:e9:63:88:82:db:b0:01:af:a9: e6:69:41:0c:5e:b2:a8:30:ca:d3:b2:f2:a2:7e:60: 09:8b:ff:54:51:79:4c:4c:32:3f:21:3c:47:da:f8: be:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:69:75:E2:15:07:8D:24:43:68:5D:82:BB:EF:CA:32:0A:BD:45:BE X509v3 Authority Key Identifier: keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2f:b4:a7:93:eb:da:08:dd:22:6f:f0:d9:9b:67:09:e3:fa: be:bf:eb:a3:b4:34:1e:d7:56:d1:8e:00:60:ec:c6:85:40:67: c8:6b:8a:92:6d:e6:b2:ef:75:af:bd:35:66:9c:63:5a:64:2f: 56:3d:05:ef:a3:77:e9:dc:ee:73:7f:c6:a6:3d:51:cc:59:6f: 40:b5:31:bf:2e:53:02:56:11:80:96:5c:4d:fa:37:9f:8b:17: 3a:24:84:69:70:f1:95:68:9c:87:38:9e:9f:36:16:16:bc:09: e8:28:9f:38:7b:c6:da:4b:e7:81:37:34:5c:c4:66:39:b3:04: a9:d0:68:7a:68:35:5a:3b:9b:e8:4c:77:4e:08:2d:21:b1:88: 87:28:90:43:41:05:b0:b2:d7:22:81:50:b9:57:23:b4:2c:85: c6:d3:9b:29:a0:ac:a3:6a:1f:28:d1:81:25:a5:3d:fe:35:bc: b7:ba:ba:da:b0:da:e9:96:7b:a0:80:c2:78:8d:66:c9:46:bd: d5:2f:2e:ed:16:3c:6a:3a:16:1c:e3:75:85:66:c3:35:86:c3: c6:76:b0:e2:dd:42:5c:33:ca:80:d8:44:af:ed:8e:58:1d:39: 4a:56:d1:2f:b6:32:78:f9:a5:1b:6b:bf:4d:83:7c:a4:c4:cf: f0:d4:4b:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6MA4BpikKWeuUZRWZZ0gdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZjZhNzFhMTgwZGNmOGIyMzBjNDE0ZjA5ZjdiNzFiYWVh OTc4MWMwHhcNMjUxMjA3MTkwMDQ0WhcNMjUxMjA4MTkwMDQ0WjAzMTEwLwYDVQQD EygzYjY5NzVlMjE1MDc4ZDI0NDM2ODVkODJiYmVmY2EzMjBhYmQ0NWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GjSm1qdnrKXlc8lp+V5RU1pXijH xG1kIBi6t69tzSFVk96LiMeunyAAKje+ZrQzi+tI6lJC99wvai5BWDVAu/Q7gubd Xe3itDrqj7riu+0ByAe9V9PMHGjfFTkQuHb3cizFXbDf6jo2kNGpjfIXr2eAasCY 6SCfuXuRiUpJsegNVTJnlm4diDP0ImI494rWuWE1QaJK5txxZK8Bn6rgaaznA22s onT60/mUiYenmwdfT6eCe/M75RWc42p2MJeoaOnitII6HX4RH1D8wtzVX7E3nfOj 2OzpY4iC27ABr6nmaUEMXrKoMMrTsvKifmAJi/9UUXlMTDI/ITxH2vi+hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtpdeIVB40kQ2hdgrvvyjIKvUW+MB8GA1UdIwQY MBaAFKX2pxoYDc+LIwxBTwn3txuuqXgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2Mt NjY2MDIzOGIwM2NlLzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2MtNjY2MDIzOGIwM2Nl LzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWi+0p5Pr 2gjdIm/w2ZtnCeP6vr/ro7Q0HtdW0Y4AYOzGhUBnyGuKkm3msu91r701ZpxjWmQv Vj0F76N36dzuc3/Gpj1RzFlvQLUxvy5TAlYRgJZcTfo3n4sXOiSEaXDxlWichzie nzYWFrwJ6CifOHvG2kvngTc0XMRmObMEqdBoemg1Wjub6Ex3TggtIbGIhyiQQ0EF sLLXIoFQuVcjtCyFxtObKaCso2ofKNGBJaU9/jW8t7q62rDa6ZZ7oIDCeI1myUa9 1S8u7RY8ajoWHON1hWbDNYbDxnaw4t1CXDPKgNhEr+2OWB05SlbRL7YyePmlG2u/ TYN8pMTP8NRL1Q== -----END CERTIFICATE-----Generated at Sun Dec 7 21:02:18 2025 by rpki-client