This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft File: pFIjl-wNFJkgGvD6nqKgS31c-mo.mft (raw, json) Hash identifier: d7ANEw1k61Bo7RHK98iO4xq+oCmoU1nm+n287nPlE24= Subject key identifier: 8E:44:B8:D7:CE:6E:A4:5C:DC:F1:F1:B2:7E:7D:B3:D7:2D:BB:1C:8E Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A Certificate issuer: /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a Certificate serial: 019B3DFED9202FDF42E2AEB54B646C73B6A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft Manifest number: 0471 Signing time: Sat 20 Dec 2025 23:01:10 +0000 Manifest this update: Sat 20 Dec 2025 23:01:10 +0000 Manifest next update: Sun 21 Dec 2025 23:01:10 +0000 Files and hashes: 1: T73zcHs6Ep_CKwJnLjzUI2Lqk64.roa (hash: Q3Y+VkwX2oMhKJhHjrJ53ij+knYpPf4svYxgdosIZGQ=) 2: pFIjl-wNFJkgGvD6nqKgS31c-mo.crl (hash: 2Bg1NNmlNDtNhDRdzltWL19Dy5qqw+9s9oWCgwS+yzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:d9:20:2f:df:42:e2:ae:b5:4b:64:6c:73:b6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a Validity Not Before: Dec 20 23:01:10 2025 GMT Not After : Dec 21 23:01:10 2025 GMT Subject: CN=8e44b8d7ce6ea45cdcf1f1b27e7db3d72dbb1c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:15:a3:9a:11:9e:a9:fb:31:e4:91:05:4e: fc:bd:cf:be:3e:87:01:07:73:31:94:05:9c:35:7e: 52:eb:b6:87:f4:8d:73:23:7d:f1:f3:60:be:95:cd: 3c:1c:a2:1c:d8:50:00:36:d6:6f:24:39:91:8e:14: 63:87:d5:24:c9:b4:65:3d:4d:ee:60:61:23:3a:06: 66:d8:d2:91:60:45:6d:d9:40:b0:c7:ea:05:71:10: 51:8a:db:aa:6b:1d:7b:9e:59:2f:22:59:2e:c9:79: 2f:af:a6:f3:c3:d3:e8:95:41:29:d1:c4:b6:6f:70: 6c:7d:56:87:14:9f:7b:bf:74:a3:aa:5e:03:a5:af: 70:f1:a8:7e:b4:28:ff:30:57:f5:c9:5e:1b:18:e7: 8f:b0:83:c2:3e:b6:7e:28:d4:86:2b:e7:4d:80:d1: 00:91:0d:9f:b5:3b:e7:61:33:13:b8:21:b6:b8:26: db:7f:75:a5:c2:19:0f:00:41:b8:97:8a:2b:7f:76: b5:92:06:90:61:3b:1c:31:a7:37:0b:c7:8a:ad:d6: 97:d1:db:34:7b:63:62:17:e8:ec:18:45:62:a8:72: a9:9a:5c:5f:b1:ca:70:ff:99:31:a1:12:51:08:52: e4:39:43:5b:46:09:06:92:93:cc:88:91:a6:86:08: 01:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:44:B8:D7:CE:6E:A4:5C:DC:F1:F1:B2:7E:7D:B3:D7:2D:BB:1C:8E X509v3 Authority Key Identifier: keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0b:bf:cb:ab:60:b7:7f:d7:3b:38:d1:ec:af:b9:e6:52:65: 70:a3:c5:86:0e:43:d2:11:68:cf:00:4b:77:28:f6:3a:4f:8d: 05:7c:80:5a:c6:d7:c7:22:e9:59:68:fb:09:68:e5:fa:c6:e9: c5:eb:84:f3:23:dd:19:9b:f1:e1:65:25:ad:c4:84:64:37:47: 62:8d:be:9b:2b:fa:b7:32:c6:4d:52:36:1c:90:d2:1a:2a:2e: 1b:08:5a:66:fd:1f:3e:6f:67:b3:19:c3:a5:0b:34:48:8a:ea: 71:32:2b:d2:31:0e:6c:3e:83:88:36:05:1b:1a:d2:d3:89:11: 0f:30:a2:56:b9:89:86:ea:15:29:c7:db:99:61:7c:05:87:fe: 1e:cf:68:89:16:18:8e:1b:4b:51:ac:43:df:26:9a:3b:9f:7d: 15:d8:32:71:29:41:2b:c1:4b:05:01:88:e0:10:cf:71:c6:1e: e6:21:e1:4a:72:99:5e:e4:a6:72:68:16:fb:0f:65:3d:5e:6c: af:be:14:82:ec:3f:7a:95:49:1f:3d:54:22:ef:05:51:18:a6: 94:34:b8:ce:1a:1e:ed:8e:83:58:b3:ad:bf:26:8c:3e:6c:5d: 83:ad:77:d2:a5:83:14:98:76:d0:21:ce:a7:62:c6:97:52:6c: d0:15:32:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/tkgL99C4q61S2Rsc7aiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NTIyMzk3ZWMwZDE0OTkyMDFhZjBmYTllYTJhMDRiN2Q1 Y2ZhNmEwHhcNMjUxMjIwMjMwMTEwWhcNMjUxMjIxMjMwMTEwWjAzMTEwLwYDVQQD Eyg4ZTQ0YjhkN2NlNmVhNDVjZGNmMWYxYjI3ZTdkYjNkNzJkYmIxYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MkVo5oRnqn7MeSRBU78vc++PocB B3MxlAWcNX5S67aH9I1zI33x82C+lc08HKIc2FAANtZvJDmRjhRjh9UkybRlPU3u YGEjOgZm2NKRYEVt2UCwx+oFcRBRituqax17nlkvIlkuyXkvr6bzw9PolUEp0cS2 b3BsfVaHFJ97v3Sjql4Dpa9w8ah+tCj/MFf1yV4bGOePsIPCPrZ+KNSGK+dNgNEA kQ2ftTvnYTMTuCG2uCbbf3WlwhkPAEG4l4orf3a1kgaQYTscMac3C8eKrdaX0ds0 e2NiF+jsGEViqHKpmlxfscpw/5kxoRJRCFLkOUNbRgkGkpPMiJGmhggBjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5EuNfObqRc3PHxsn59s9ctuxyOMB8GA1UdIwQY MBaAFKRSI5fsDRSZIBrw+p6ioEt9XPpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNjkyZGYtZmY2Ny00NjU1LThkODgt ZmVjMDRjNDk1NTAyLzEvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNjkyZGYtZmY2Ny00NjU1LThkODgtZmVjMDRjNDk1NTAy LzEvcEZJamwtd05GSmtnR3ZENm5xS2dTMzFjLW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgu/y6tg t3/XOzjR7K+55lJlcKPFhg5D0hFozwBLdyj2Ok+NBXyAWsbXxyLpWWj7CWjl+sbp xeuE8yPdGZvx4WUlrcSEZDdHYo2+myv6tzLGTVI2HJDSGiouGwhaZv0fPm9nsxnD pQs0SIrqcTIr0jEObD6DiDYFGxrS04kRDzCiVrmJhuoVKcfbmWF8BYf+Hs9oiRYY jhtLUaxD3yaaO599FdgycSlBK8FLBQGI4BDPccYe5iHhSnKZXuSmcmgW+w9lPV5s r74Uguw/epVJHz1UIu8FURimlDS4zhoe7Y6DWLOtvyaMPmxdg6130qWDFJh20CHO p2LGl1Js0BUy5g== -----END CERTIFICATE-----Generated at Sun Dec 21 02:57:41 2025 by rpki-client