This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json) Hash identifier: gOrSvq789mIwxEjZ6Kni2eR7mF5EkKamUL+LysM+JVA= Subject key identifier: 62:1F:E0:25:A4:73:6A:07:40:61:4D:66:82:2C:BB:2E:B7:67:7E:83 Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Certificate serial: 019B73352ACE83DB15290E25D71EF4B14BDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft Manifest number: 0470 Signing time: Wed 31 Dec 2025 07:00:22 +0000 Manifest this update: Wed 31 Dec 2025 07:00:22 +0000 Manifest next update: Thu 01 Jan 2026 07:00:22 +0000 Files and hashes: 1: 4ztGIasVEwEbakF0ec-7K0e5IU4.roa (hash: IY2hXYNDBxgugsXRkJWFvDBibE33L3+eqXYnL7k07xY=) 2: e753LkUtZdPOHhc1jXD6UBTKdAI.asa (hash: QxMQuuavAVTbwrJf2pty+8SMFCYB7PU0/p/Emd0Ybrg=) 3: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: ldHKT8ad9s/zj7XQkG9/iMTuEkEOz72J17rpneuam44=) 4: yQmkLUR6MH6h1RvFVHhe4DDu7QY.roa (hash: 7D7oyqrxVnp9P9+upqmUz5U0xALaurO7hGz+98jrtEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 07:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:35:2a:ce:83:db:15:29:0e:25:d7:1e:f4:b1:4b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Validity Not Before: Dec 31 07:00:22 2025 GMT Not After : Jan 1 07:00:22 2026 GMT Subject: CN=621fe025a4736a0740614d66822cbb2eb7677e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d6:97:4d:42:5c:b8:a5:dd:c1:b8:95:83:54: 0c:82:c4:4a:e3:21:34:65:ad:c4:fa:3d:07:4c:2b: bd:2b:48:bd:d3:71:03:fe:33:71:d9:ce:00:07:d8: 02:ac:ff:e0:5f:73:03:b0:04:3e:44:45:c5:3a:56: e7:4a:54:0d:f4:ee:18:60:ec:08:ec:71:06:07:ce: 1f:32:84:00:6d:a8:fa:b5:76:d1:5d:ac:9d:03:f1: cc:ce:32:2a:60:7b:e7:16:aa:c5:89:90:16:7a:c8: e9:87:4e:dc:5f:b8:02:86:11:b9:28:35:b9:e0:5b: fd:07:08:a6:fc:dd:a4:0b:c2:bd:e1:c7:2b:88:6b: fa:96:d6:ea:13:92:76:ae:e1:5f:bf:b7:3c:95:9d: 82:bf:04:c0:23:68:5d:14:cb:c0:4b:a3:e8:88:35: a5:34:25:f1:ca:1c:3e:d2:b3:75:14:4d:6d:4c:4b: 5d:cb:3c:bc:89:54:4b:42:ac:1c:df:32:e7:eb:37: 09:de:8e:e7:2a:e9:a3:16:31:be:54:c6:85:a4:2b: 9b:77:9e:cc:af:38:5a:6f:96:ba:55:40:89:6b:52: d6:6b:2d:a7:97:43:70:8b:d8:ea:7e:43:cf:ff:01: 9f:e8:4e:71:42:37:d0:a1:7b:1d:2e:eb:4e:43:cc: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1F:E0:25:A4:73:6A:07:40:61:4D:66:82:2C:BB:2E:B7:67:7E:83 X509v3 Authority Key Identifier: keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:21:e0:95:f7:9d:30:65:83:47:c4:b6:2a:fd:8e:b7:13:44: 5f:a5:d4:d5:17:a6:7b:1f:07:93:4c:9a:22:7c:d2:ca:c4:be: e7:03:26:50:52:68:4e:dc:68:27:84:f3:37:d6:22:1c:c4:08: 1e:25:9d:f1:1d:e2:ab:87:c1:1b:e7:e6:4f:c8:73:ac:e4:0e: 33:cd:b4:07:46:55:ad:3f:b6:d6:f7:8b:cc:09:f6:f7:c8:b3: 1b:a9:1d:af:ad:8b:6e:74:94:e6:45:a1:bf:b3:e1:b0:04:fc: f1:ad:87:99:1b:c3:ad:f8:52:2f:6a:b7:df:b1:91:d7:cd:4a: b6:84:46:66:c9:e9:02:d5:6d:76:96:4c:3f:35:dd:0b:ac:ee: d6:08:dd:c5:e9:99:ff:c7:5c:6e:ba:35:35:7d:c0:d7:48:a8: 1e:7d:9f:09:27:ca:c6:03:b2:a5:0d:95:73:e3:b5:1f:05:55: a0:b0:47:fc:8a:d2:5c:c5:39:57:5e:85:d1:85:87:15:e0:7e: 78:f8:9d:b5:b0:fa:57:cd:82:51:cd:ed:78:b3:06:8b:3b:ff: 2d:1d:34:78:df:b2:1a:14:60:52:34:57:db:03:f8:e9:ef:9f: 90:97:26:cf:62:cf:10:54:a8:f3:96:87:3e:4d:98:70:df:b1: 52:93:17:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzNSrOg9sVKQ4l1x70sUvaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZjZhNzFhMTgwZGNmOGIyMzBjNDE0ZjA5ZjdiNzFiYWVh OTc4MWMwHhcNMjUxMjMxMDcwMDIyWhcNMjYwMTAxMDcwMDIyWjAzMTEwLwYDVQQD Eyg2MjFmZTAyNWE0NzM2YTA3NDA2MTRkNjY4MjJjYmIyZWI3Njc3ZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39aXTUJcuKXdwbiVg1QMgsRK4yE0 Za3E+j0HTCu9K0i903ED/jNx2c4AB9gCrP/gX3MDsAQ+REXFOlbnSlQN9O4YYOwI 7HEGB84fMoQAbaj6tXbRXaydA/HMzjIqYHvnFqrFiZAWesjph07cX7gChhG5KDW5 4Fv9Bwim/N2kC8K94ccriGv6ltbqE5J2ruFfv7c8lZ2CvwTAI2hdFMvAS6PoiDWl NCXxyhw+0rN1FE1tTEtdyzy8iVRLQqwc3zLn6zcJ3o7nKumjFjG+VMaFpCubd57M rzhab5a6VUCJa1LWay2nl0Nwi9jqfkPP/wGf6E5xQjfQoXsdLutOQ8w4LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIf4CWkc2oHQGFNZoIsuy63Z36DMB8GA1UdIwQY MBaAFKX2pxoYDc+LIwxBTwn3txuuqXgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2Mt NjY2MDIzOGIwM2NlLzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2MtNjY2MDIzOGIwM2Nl LzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiHglfed MGWDR8S2Kv2OtxNEX6XU1Remex8Hk0yaInzSysS+5wMmUFJoTtxoJ4TzN9YiHMQI HiWd8R3iq4fBG+fmT8hzrOQOM820B0ZVrT+21veLzAn298izG6kdr62LbnSU5kWh v7PhsAT88a2HmRvDrfhSL2q337GR181KtoRGZsnpAtVtdpZMPzXdC6zu1gjdxemZ /8dcbro1NX3A10ioHn2fCSfKxgOypQ2Vc+O1HwVVoLBH/IrSXMU5V16F0YWHFeB+ ePidtbD6V82CUc3teLMGizv/LR00eN+yGhRgUjRX2wP46e+fkJcmz2LPEFSo85aH Pk2YcN+xUpMX1A== -----END CERTIFICATE-----Generated at Wed Dec 31 11:54:22 2025 by rpki-client