This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft File: pFIjl-wNFJkgGvD6nqKgS31c-mo.mft (raw, json) Hash identifier: DAmTW8COdrrO4vfhU++PaPYnCDIx6/C9aBJ7jCUA3qM= Subject key identifier: B2:FF:33:A0:F8:26:B2:33:55:03:A2:5B:83:B9:A8:E4:7C:66:CB:64 Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A Certificate issuer: /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a Certificate serial: 019B3268E14FE7DBE3C944C4DD0E6C82034C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft Manifest number: 046B Signing time: Thu 18 Dec 2025 17:01:32 +0000 Manifest this update: Thu 18 Dec 2025 17:01:32 +0000 Manifest next update: Fri 19 Dec 2025 17:01:32 +0000 Files and hashes: 1: T73zcHs6Ep_CKwJnLjzUI2Lqk64.roa (hash: Q3Y+VkwX2oMhKJhHjrJ53ij+knYpPf4svYxgdosIZGQ=) 2: pFIjl-wNFJkgGvD6nqKgS31c-mo.crl (hash: tS8q0Bvgtr+xiMA41ZNUWJAPsM7JimLcmkFYLo+EaNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:e1:4f:e7:db:e3:c9:44:c4:dd:0e:6c:82:03:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a Validity Not Before: Dec 18 17:01:32 2025 GMT Not After : Dec 19 17:01:32 2025 GMT Subject: CN=b2ff33a0f826b2335503a25b83b9a8e47c66cb64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5b:b3:4a:cf:8a:3d:36:8d:56:29:d7:e3:f8: 2d:8a:74:2b:5a:dc:50:f4:88:a4:f5:50:73:4b:e5: c4:60:ab:6a:d3:54:35:d6:6b:a2:22:c1:24:24:11: 07:7d:d3:4c:c8:1d:96:2b:e8:03:d7:23:22:5f:e8: 1e:ba:d5:79:28:58:6b:83:5c:d1:be:eb:d5:0f:e8: fe:db:81:e5:f9:eb:2f:17:91:c1:f0:48:d3:8b:0a: dd:15:06:3c:85:ea:60:ae:86:e4:36:cc:98:9b:30: f6:75:16:cc:a6:03:86:68:17:4d:e1:62:60:5c:e4: 58:4f:35:d8:1d:24:7e:57:c4:d3:cd:94:2c:ee:d6: b9:a0:c0:53:1b:ab:89:6b:4a:4d:b3:24:9f:0e:7c: ce:6b:87:db:72:0e:c2:d4:f6:51:f1:35:53:e5:39: 79:a1:40:ad:a9:aa:f9:a5:9f:4b:80:62:99:68:93: 16:7f:96:b7:f1:5c:e9:ef:fe:8a:1f:39:3e:79:43: 54:60:fd:36:24:10:8c:ff:bc:41:18:a3:a4:f9:81: fd:66:f9:d6:24:e1:4c:22:15:8b:cd:ca:34:c8:79: bd:00:41:b7:8e:21:5c:06:ec:9c:c6:b1:82:ec:49: b6:eb:81:aa:8c:60:08:4a:52:82:44:74:68:c3:b6: 10:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FF:33:A0:F8:26:B2:33:55:03:A2:5B:83:B9:A8:E4:7C:66:CB:64 X509v3 Authority Key Identifier: keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:d6:ae:d6:10:b6:c3:c3:a4:57:e8:bd:ac:3a:07:b9:00:6f: 1d:b0:d2:96:e8:01:08:3c:3e:fc:28:2b:c4:41:6d:78:67:e6: 95:f3:4f:14:94:a7:5a:25:56:cc:11:42:d5:81:ad:f4:94:dc: a5:4d:3d:ae:d4:0a:e2:83:08:04:a9:a9:28:71:c8:ff:e4:c7: ff:b9:3b:a7:9f:6b:eb:8e:a2:d1:a5:4a:c3:a9:29:6b:1b:92: 9f:d7:00:29:56:ec:63:85:76:ea:58:21:cf:40:b8:e4:64:c2: 61:58:e2:28:2d:b0:c4:6f:22:ae:a9:e2:f5:f7:b4:19:26:14: 5f:64:4d:bb:65:66:86:d8:b9:62:be:a0:34:bf:1b:30:d2:5b: fd:ff:01:da:92:10:c1:fe:95:bb:b0:03:d0:05:c0:7c:c7:09: 77:c0:ec:49:20:02:35:57:7a:e2:11:7b:d0:2c:67:a7:29:0c: 50:b3:58:42:e5:81:9c:ee:11:bd:04:31:2e:1e:f3:aa:0c:bf: 97:d9:81:b6:2b:c3:78:22:3a:c9:f5:74:fb:57:57:51:8b:9d: 8a:0a:9d:2b:12:2b:1c:6a:3b:18:62:4e:82:d1:02:d6:37:20: 70:aa:05:64:5b:f5:23:f8:84:1b:6f:96:54:6d:3b:9a:ce:87: 64:a7:1d:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaOFP59vjyUTE3Q5sggNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NTIyMzk3ZWMwZDE0OTkyMDFhZjBmYTllYTJhMDRiN2Q1 Y2ZhNmEwHhcNMjUxMjE4MTcwMTMyWhcNMjUxMjE5MTcwMTMyWjAzMTEwLwYDVQQD EyhiMmZmMzNhMGY4MjZiMjMzNTUwM2EyNWI4M2I5YThlNDdjNjZjYjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FuzSs+KPTaNVinX4/gtinQrWtxQ 9Iik9VBzS+XEYKtq01Q11muiIsEkJBEHfdNMyB2WK+gD1yMiX+geutV5KFhrg1zR vuvVD+j+24Hl+esvF5HB8EjTiwrdFQY8hepgrobkNsyYmzD2dRbMpgOGaBdN4WJg XORYTzXYHSR+V8TTzZQs7ta5oMBTG6uJa0pNsySfDnzOa4fbcg7C1PZR8TVT5Tl5 oUCtqar5pZ9LgGKZaJMWf5a38Vzp7/6KHzk+eUNUYP02JBCM/7xBGKOk+YH9ZvnW JOFMIhWLzco0yHm9AEG3jiFcBuycxrGC7Em264GqjGAISlKCRHRow7YQvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLL/M6D4JrIzVQOiW4O5qOR8ZstkMB8GA1UdIwQY MBaAFKRSI5fsDRSZIBrw+p6ioEt9XPpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNjkyZGYtZmY2Ny00NjU1LThkODgt ZmVjMDRjNDk1NTAyLzEvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNjkyZGYtZmY2Ny00NjU1LThkODgtZmVjMDRjNDk1NTAy LzEvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdau1hC2 w8OkV+i9rDoHuQBvHbDSlugBCDw+/CgrxEFteGfmlfNPFJSnWiVWzBFC1YGt9JTc pU09rtQK4oMIBKmpKHHI/+TH/7k7p59r646i0aVKw6kpaxuSn9cAKVbsY4V26lgh z0C45GTCYVjiKC2wxG8irqni9fe0GSYUX2RNu2Vmhti5Yr6gNL8bMNJb/f8B2pIQ wf6Vu7AD0AXAfMcJd8DsSSACNVd64hF70CxnpykMULNYQuWBnO4RvQQxLh7zqgy/ l9mBtivDeCI6yfV0+1dXUYudigqdKxIrHGo7GGJOgtEC1jcgcKoFZFv1I/iEG2+W VG07ms6HZKcdlA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:28:12 2025 by rpki-client