This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json) Hash identifier: K+DNoqMx5No4SABHjb/nlL5+bgsXlMWjixDcZY94yhY= Subject key identifier: 3D:90:5A:92:81:8B:3C:EF:DB:41:98:B9:D1:84:9D:58:E7:7B:50:32 Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1 Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1 Certificate serial: 019B4B8305DE78F02EEEE67E2346CB5443BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft Manifest number: 1725 Signing time: Tue 23 Dec 2025 14:00:36 +0000 Manifest this update: Tue 23 Dec 2025 14:00:36 +0000 Manifest next update: Wed 24 Dec 2025 14:00:36 +0000 Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=) 2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: Jd6dAlaKLYxrSOo+4JEB2OX1ywg8siLTRW6xk/IfKTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:05:de:78:f0:2e:ee:e6:7e:23:46:cb:54:43:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1 Validity Not Before: Dec 23 14:00:36 2025 GMT Not After : Dec 24 14:00:36 2025 GMT Subject: CN=3d905a92818b3cefdb4198b9d1849d58e77b5032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:b4:8e:98:88:3a:5e:84:d9:4f:eb:14:e9: b9:9e:63:d9:1b:ea:98:18:46:2d:32:b0:b3:e6:2c: 68:1c:ee:4a:56:4e:28:c5:ac:2c:f4:f2:1d:2f:9e: 03:2d:c2:53:10:5a:eb:9c:2e:6b:32:ef:05:5b:11: fd:cb:2a:73:b8:35:09:8c:3e:79:cc:49:25:65:9b: ab:08:6b:eb:41:21:c6:9e:06:72:d0:c9:39:1b:84: 83:ca:f3:51:70:70:b7:54:25:34:a7:82:e5:29:d0: 4c:84:6c:6d:5c:c0:19:42:8f:25:e3:ef:e9:04:fe: 39:c2:98:ba:0b:85:a4:26:ca:05:f1:12:3b:50:c9: 35:1e:c1:cf:27:dd:41:fc:0a:a4:67:43:51:dc:0a: 5d:ac:fc:52:8b:cd:0c:58:be:46:fe:23:de:e0:95: 24:59:83:e9:f7:d5:e7:1c:7a:11:b1:17:6e:a2:b7: 9c:ac:c3:53:7a:79:51:f1:1d:ed:2f:06:94:5d:50: 05:c2:49:c9:ec:73:01:c0:86:95:fb:15:64:9a:b4: 4a:0e:e7:78:94:eb:61:56:b7:96:4e:30:9f:01:26: 91:54:fb:ce:94:89:ae:6b:7c:9f:a3:34:55:64:64: d9:d2:12:7f:3e:30:57:95:50:5e:70:ee:14:5d:d5: bc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:90:5A:92:81:8B:3C:EF:DB:41:98:B9:D1:84:9D:58:E7:7B:50:32 X509v3 Authority Key Identifier: keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:31:cd:15:78:3e:8a:d1:fb:31:44:05:28:be:a0:f9:8e:91: 32:5d:13:39:c1:fd:11:d3:92:8f:0b:51:a9:f4:35:fe:40:4c: 28:cf:ed:15:64:62:47:cc:91:dc:25:5c:fa:3b:6a:85:bf:79: 1e:4d:fb:9b:8c:58:fb:0b:11:d0:7e:a4:bb:d4:31:b5:95:cc: 35:4e:c9:b5:54:c1:2e:41:e5:9f:56:22:73:78:ff:d3:c2:f1: ac:41:91:73:b4:68:f6:a8:4f:e1:67:5d:f9:07:e9:c0:d0:ae: 92:de:f7:23:d4:71:49:1a:fc:c1:ef:65:e2:8f:8e:39:21:a7: 79:44:2c:2b:50:4f:ba:e6:cc:87:e1:5c:3f:31:af:b0:8e:69: 84:d5:69:a7:57:bd:34:1e:09:43:39:17:c1:9f:3a:7a:10:6a: 84:c0:74:82:09:6f:03:77:89:2b:db:1c:dd:06:21:59:4e:e0: 03:92:5d:da:c4:2a:b8:b4:54:bd:4a:70:53:0f:33:46:da:de: 4b:a2:71:7e:2c:52:5a:0f:fd:6f:5d:9e:c2:8d:c5:c7:bc:86: 06:b1:51:ba:d6:17:58:8a:40:d6:e3:3a:05:e6:b5:e8:95:2f: 79:ff:18:55:64:36:c9:d9:68:ed:06:cb:25:3b:c5:cc:9f:74: 42:a5:f1:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLgwXeePAu7uZ+I0bLVEO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NTAwMjAyMmI3YTNlNDc5MGI4YjRlMmY2ZDViN2EzZGFi ZGRjZTEwHhcNMjUxMjIzMTQwMDM2WhcNMjUxMjI0MTQwMDM2WjAzMTEwLwYDVQQD EygzZDkwNWE5MjgxOGIzY2VmZGI0MTk4YjlkMTg0OWQ1OGU3N2I1MDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4K0jpiIOl6E2U/rFOm5nmPZG+qY GEYtMrCz5ixoHO5KVk4oxaws9PIdL54DLcJTEFrrnC5rMu8FWxH9yypzuDUJjD55 zEklZZurCGvrQSHGngZy0Mk5G4SDyvNRcHC3VCU0p4LlKdBMhGxtXMAZQo8l4+/p BP45wpi6C4WkJsoF8RI7UMk1HsHPJ91B/AqkZ0NR3ApdrPxSi80MWL5G/iPe4JUk WYPp99XnHHoRsRduorecrMNTenlR8R3tLwaUXVAFwknJ7HMBwIaV+xVkmrRKDud4 lOthVreWTjCfASaRVPvOlImua3yfozRVZGTZ0hJ/PjBXlVBecO4UXdW8vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2QWpKBizzv20GYudGEnVjne1AyMB8GA1UdIwQY MBaAFKRQAgIrej5HkLi04vbVt6PavdzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEt YjM2N2ViZGYzMDJiLzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEtYjM2N2ViZGYzMDJi LzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazHNFXg+ itH7MUQFKL6g+Y6RMl0TOcH9EdOSjwtRqfQ1/kBMKM/tFWRiR8yR3CVc+jtqhb95 Hk37m4xY+wsR0H6ku9QxtZXMNU7JtVTBLkHln1Yic3j/08LxrEGRc7Ro9qhP4Wdd +QfpwNCukt73I9RxSRr8we9l4o+OOSGneUQsK1BPuubMh+FcPzGvsI5phNVpp1e9 NB4JQzkXwZ86ehBqhMB0gglvA3eJK9sc3QYhWU7gA5Jd2sQquLRUvUpwUw8zRtre S6JxfixSWg/9b12ewo3Fx7yGBrFRutYXWIpA1uM6Bea16JUvef8YVWQ2ydlo7QbL JTvFzJ90QqXxIQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:41:54 2025 by rpki-client