This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft File: pHFXAbAK3kiVo5p2oNgQDsleq-M.mft (raw, json) Hash identifier: DVXqEYlexlvS5owAiua1IMD+kqPQxdliFxqBWJA5vhM= Subject key identifier: D8:A5:7F:92:2D:03:CC:E4:99:EE:A0:A5:9F:13:0D:20:67:F2:A5:B2 Authority key identifier: A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3 Certificate issuer: /CN=a4715701b00ade4895a39a76a0d8100ec95eabe3 Certificate serial: 019B3FEC9D5713EB37CF27FA78BCF567B302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft Manifest number: 03DB Signing time: Sun 21 Dec 2025 08:00:29 +0000 Manifest this update: Sun 21 Dec 2025 08:00:29 +0000 Manifest next update: Mon 22 Dec 2025 08:00:29 +0000 Files and hashes: 1: pHFXAbAK3kiVo5p2oNgQDsleq-M.crl (hash: /dfRxfQ87VGl8bTs/MT7XTUPYR9MphA7nPCA0tCuCEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.crl rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:9d:57:13:eb:37:cf:27:fa:78:bc:f5:67:b3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4715701b00ade4895a39a76a0d8100ec95eabe3 Validity Not Before: Dec 21 08:00:29 2025 GMT Not After : Dec 22 08:00:29 2025 GMT Subject: CN=d8a57f922d03cce499eea0a59f130d2067f2a5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:60:22:98:da:05:a5:33:19:a0:aa:da:62: fe:54:df:1b:d9:99:83:50:75:21:84:9e:a5:e6:3b: de:81:ef:37:7b:e1:61:ed:d2:7a:21:56:b8:76:df: 4d:11:52:ab:e1:3c:8d:b8:e6:db:d4:03:e1:0f:8a: f0:80:c4:41:7f:07:e3:21:53:2b:39:45:f4:a1:b7: 82:06:0c:8d:59:ec:2c:44:05:00:f0:f0:81:dc:10: f5:79:7c:46:74:fe:40:46:77:69:08:04:40:a3:90: 71:a2:62:3d:64:66:ec:e3:85:1e:64:d6:d5:ef:c5: b7:3e:b6:d6:82:bb:d6:12:11:5d:63:65:f0:5e:17: 4a:49:5c:8f:24:0d:dc:d7:78:5a:d4:db:1f:26:96: b6:1c:78:37:f9:eb:c4:71:94:99:8e:e7:1c:8b:da: cc:65:e4:13:09:e5:e4:a9:a0:8a:64:d7:3e:b4:70: 3b:d8:82:d5:af:63:c0:6a:d3:5b:78:20:d1:0b:f3: b2:11:d0:9b:55:19:14:f3:a5:1a:49:fa:d7:92:d3: 9b:fc:51:d8:56:dd:ff:47:86:10:06:56:98:9a:92: 55:a3:48:09:50:b4:0c:9c:3e:17:b9:a3:af:26:bb: f4:63:a3:30:14:5f:61:ab:c4:93:4b:31:92:90:cb: ff:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A5:7F:92:2D:03:CC:E4:99:EE:A0:A5:9F:13:0D:20:67:F2:A5:B2 X509v3 Authority Key Identifier: keyid:A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b1:c1:16:47:fb:a8:ed:98:74:9d:e1:62:13:2a:b1:82:37: 0b:18:cb:a8:83:d0:aa:47:0f:b0:fe:3b:30:32:66:5b:23:b6: e1:81:6e:6a:eb:9a:ec:3e:8f:42:0e:2f:af:89:53:4c:dd:c1: ae:c0:e8:e0:ef:f8:6e:be:4d:7a:7e:5f:32:b3:2b:3a:3b:34: bc:3b:ce:af:f4:f5:62:08:1f:e4:ba:2f:93:10:7a:5a:f2:52: 5b:fa:41:4c:0a:a6:18:6f:f4:cb:f0:99:6b:ca:76:9a:50:c8: a9:64:73:73:28:f8:be:b4:5f:55:22:fc:e8:85:d6:b6:4a:69: 22:43:e1:53:a2:11:f1:a6:6e:b1:a8:fa:ab:89:5d:ae:b8:38: 9d:9c:25:55:a7:1f:2b:3c:0e:74:f5:ff:c1:c6:17:ce:f6:6e: d9:fb:91:f8:24:aa:4a:c9:05:1b:e5:0a:17:64:09:e5:62:06: fe:53:5d:c5:bb:a5:14:f9:fe:87:0e:0b:df:18:86:35:c8:4a: 86:23:74:76:b0:65:03:dd:9b:40:bb:30:dc:44:f1:28:b2:47: fb:c9:e1:bf:9b:3d:4f:27:41:20:20:27:55:d1:ef:ad:7d:27: 44:dd:7f:a3:a7:2e:99:b4:11:71:c4:54:68:ad:96:7c:ad:ec: 19:ad:66:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7J1XE+s3zyf6eLz1Z7MCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NzE1NzAxYjAwYWRlNDg5NWEzOWE3NmEwZDgxMDBlYzk1 ZWFiZTMwHhcNMjUxMjIxMDgwMDI5WhcNMjUxMjIyMDgwMDI5WjAzMTEwLwYDVQQD EyhkOGE1N2Y5MjJkMDNjY2U0OTllZWEwYTU5ZjEzMGQyMDY3ZjJhNWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6tgIpjaBaUzGaCq2mL+VN8b2ZmD UHUhhJ6l5jvege83e+Fh7dJ6IVa4dt9NEVKr4TyNuObb1APhD4rwgMRBfwfjIVMr OUX0obeCBgyNWewsRAUA8PCB3BD1eXxGdP5ARndpCARAo5BxomI9ZGbs44UeZNbV 78W3PrbWgrvWEhFdY2XwXhdKSVyPJA3c13ha1NsfJpa2HHg3+evEcZSZjucci9rM ZeQTCeXkqaCKZNc+tHA72ILVr2PAatNbeCDRC/OyEdCbVRkU86UaSfrXktOb/FHY Vt3/R4YQBlaYmpJVo0gJULQMnD4XuaOvJrv0Y6MwFF9hq8STSzGSkMv/QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNilf5ItA8zkme6gpZ8TDSBn8qWyMB8GA1UdIwQY MBaAFKRxVwGwCt5IlaOadqDYEA7JXqvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEhGWEFiQUsza2lWbzVwMm9OZ1FEc2xlcS1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MDM3YTUtNTY0MC00YjQxLTkyZTkt ZjZmMjU0NmJjNjBlLzEvcEhGWEFiQUsza2lWbzVwMm9OZ1FEc2xlcS1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82MDM3YTUtNTY0MC00YjQxLTkyZTktZjZmMjU0NmJjNjBl LzEvcEhGWEFiQUsza2lWbzVwMm9OZ1FEc2xlcS1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLHBFkf7 qO2YdJ3hYhMqsYI3CxjLqIPQqkcPsP47MDJmWyO24YFuauua7D6PQg4vr4lTTN3B rsDo4O/4br5Nen5fMrMrOjs0vDvOr/T1Yggf5LovkxB6WvJSW/pBTAqmGG/0y/CZ a8p2mlDIqWRzcyj4vrRfVSL86IXWtkppIkPhU6IR8aZusaj6q4ldrrg4nZwlVacf KzwOdPX/wcYXzvZu2fuR+CSqSskFG+UKF2QJ5WIG/lNdxbulFPn+hw4L3xiGNchK hiN0drBlA92bQLsw3ETxKLJH+8nhv5s9TydBICAnVdHvrX0nRN1/o6cumbQRccRU aK2WfK3sGa1mMQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:09:46 2025 by rpki-client