This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft File: RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json) Hash identifier: hKre/ZNn9BpVKZQYjjWWgtLQuxP29GiYIfCvErFcV/8= Subject key identifier: 96:79:CE:7B:84:75:1F:6F:46:84:83:1D:64:40:12:35:FB:82:5E:2D Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07 Certificate issuer: /CN=44f4c5a61978549b248388f9df449d2a95e10a07 Certificate serial: 019AF50A427106464ADC44F33E89A1B91D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:01:21 +0000 Manifest this update: Sat 06 Dec 2025 19:01:21 +0000 Manifest next update: Sun 07 Dec 2025 19:01:21 +0000 Files and hashes: 1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: C5OTarliNTpK1HIg+rYtMsNG/ewNedCzbKUmcavXqWg=) 2: ios5KWpmGZUyejt9fTyM20Kq3iQ.roa (hash: ueEa/mQzKdPiJu8mODUSR4ctsWUuOZw5Ht5pcIUfCfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:42:71:06:46:4a:dc:44:f3:3e:89:a1:b9:1d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07 Validity Not Before: Dec 6 19:01:21 2025 GMT Not After : Dec 7 19:01:21 2025 GMT Subject: CN=9679ce7b84751f6f4684831d64401235fb825e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e4:e1:62:6c:9f:a1:ed:11:13:51:b6:82:ff: 61:f9:b4:32:d9:ee:5f:97:ef:09:fc:27:ba:19:d1: 60:66:1d:97:57:fb:cb:0b:0e:13:45:18:e8:7b:f9: 56:e4:64:ad:db:1d:93:d4:d7:f4:8c:0d:19:76:8f: ee:a5:39:a8:a1:2e:77:74:0b:3d:78:f7:b2:f3:94: f1:8c:8c:d3:e7:e8:00:7b:8f:83:a5:c9:54:fc:5f: 32:53:82:86:bd:3b:25:da:67:c3:20:e7:f7:e4:2d: 42:d4:1d:af:94:ea:d7:0c:77:eb:70:47:6b:2a:15: a5:b4:a3:32:1a:bd:96:b6:bf:8a:51:d8:f8:ae:91: 12:53:bb:ac:86:ab:58:0a:38:6e:c6:9e:77:80:27: 44:ae:69:10:c4:54:5a:9a:74:54:1e:c5:8e:df:48: 41:e3:f8:4f:40:47:bc:e7:ce:d0:cb:2e:25:0a:1a: 22:54:25:f0:82:a5:ea:ed:06:24:92:77:3e:f8:db: 0f:66:e3:1f:25:06:fa:81:a4:18:6e:42:b4:9f:d5: 62:2b:5a:57:44:36:5a:9b:aa:33:2c:83:12:c1:5e: 1c:2e:fe:64:c0:17:98:e7:b1:f7:77:01:10:20:05: b5:a8:47:be:d6:b4:18:4d:38:93:89:9c:18:0e:6b: 0b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:79:CE:7B:84:75:1F:6F:46:84:83:1D:64:40:12:35:FB:82:5E:2D X509v3 Authority Key Identifier: keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:61:40:4a:73:a6:e0:63:9d:19:19:b7:9c:2b:64:bb:53:be: 1e:66:2c:42:41:bd:b9:3b:56:05:79:13:8f:23:9d:11:5f:d0: 90:3a:34:72:be:f6:65:15:dd:8e:b3:11:5c:aa:67:45:eb:79: 04:17:54:40:85:a2:92:90:16:e9:c0:27:a8:a3:56:ec:c3:d7: bc:d4:dc:ed:34:45:0e:be:40:67:ef:bf:e0:20:72:4f:3c:90: 79:29:7b:b0:5e:2d:db:b6:88:37:b4:e4:50:11:df:ec:14:df: 09:4a:f3:73:57:e0:ed:56:37:9c:6e:aa:5e:75:e6:5f:bb:e7: 44:7e:a7:5f:8f:c1:6d:c3:8a:90:f5:1f:d6:1b:27:cb:46:e6: da:74:49:af:a8:10:60:66:87:a6:b7:c2:e2:43:84:b4:93:16: 9c:ae:9a:cd:3e:ba:20:aa:73:b2:90:33:6e:10:da:62:ee:2b: 68:fa:a1:7c:0f:be:00:1f:c7:6c:09:e8:f7:66:a7:2a:9b:a7: 58:04:6e:a8:8f:2a:61:f5:c3:2a:d5:d5:61:59:85:61:c8:46: 09:5c:94:8a:83:72:02:a5:af:dd:06:9c:27:34:df:4e:68:df: 74:e6:f0:b4:31:7c:21:0f:53:d6:8e:cf:40:bb:ad:9f:b9:e6: 28:cf:57:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CkJxBkZK3ETzPomhuR2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZjRjNWE2MTk3ODU0OWIyNDgzODhmOWRmNDQ5ZDJhOTVl MTBhMDcwHhcNMjUxMjA2MTkwMTIxWhcNMjUxMjA3MTkwMTIxWjAzMTEwLwYDVQQD Eyg5Njc5Y2U3Yjg0NzUxZjZmNDY4NDgzMWQ2NDQwMTIzNWZiODI1ZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+ThYmyfoe0RE1G2gv9h+bQy2e5f l+8J/Ce6GdFgZh2XV/vLCw4TRRjoe/lW5GSt2x2T1Nf0jA0Zdo/upTmooS53dAs9 ePey85TxjIzT5+gAe4+DpclU/F8yU4KGvTsl2mfDIOf35C1C1B2vlOrXDHfrcEdr KhWltKMyGr2Wtr+KUdj4rpESU7ushqtYCjhuxp53gCdErmkQxFRamnRUHsWO30hB 4/hPQEe8587Qyy4lChoiVCXwgqXq7QYkknc++NsPZuMfJQb6gaQYbkK0n9ViK1pX RDZam6ozLIMSwV4cLv5kwBeY57H3dwEQIAW1qEe+1rQYTTiTiZwYDmsLrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZ5znuEdR9vRoSDHWRAEjX7gl4tMB8GA1UdIwQY MBaAFET0xaYZeFSbJIOI+d9EnSqV4QoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlBURnBobDRWSnNrZzRqNTMwU2RLcFhoQ2djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lNWM4ZGYtNGVmOC00ZDkwLWE0OTAt MzU4MDBlOWYxNzBlLzEvUlBURnBobDRWSnNrZzRqNTMwU2RLcFhoQ2djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lNWM4ZGYtNGVmOC00ZDkwLWE0OTAtMzU4MDBlOWYxNzBl LzEvUlBURnBobDRWSnNrZzRqNTMwU2RLcFhoQ2djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmFASnOm 4GOdGRm3nCtku1O+HmYsQkG9uTtWBXkTjyOdEV/QkDo0cr72ZRXdjrMRXKpnRet5 BBdUQIWikpAW6cAnqKNW7MPXvNTc7TRFDr5AZ++/4CByTzyQeSl7sF4t27aIN7Tk UBHf7BTfCUrzc1fg7VY3nG6qXnXmX7vnRH6nX4/BbcOKkPUf1hsny0bm2nRJr6gQ YGaHprfC4kOEtJMWnK6azT66IKpzspAzbhDaYu4raPqhfA++AB/HbAno92anKpun WARuqI8qYfXDKtXVYVmFYchGCVyUioNyAqWv3QacJzTfTmjfdObwtDF8IQ9T1o7P QLutn7nmKM9XWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:42 2025 by rpki-client