This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft File: pHFXAbAK3kiVo5p2oNgQDsleq-M.mft (raw, json) Hash identifier: XX/fQ7/VmnubDhvm37GdH+S8HSVBx1Z6uNDCKG12KBc= Subject key identifier: 66:40:49:F3:36:C6:D2:5E:03:C2:5C:AA:19:5F:BA:D4:A4:5A:E5:75 Authority key identifier: A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3 Certificate issuer: /CN=a4715701b00ade4895a39a76a0d8100ec95eabe3 Certificate serial: 019AF2AD8E194131CE34AF0E4B9B3FEE8EE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft Manifest number: 03B3 Signing time: Sat 06 Dec 2025 08:00:51 +0000 Manifest this update: Sat 06 Dec 2025 08:00:51 +0000 Manifest next update: Sun 07 Dec 2025 08:00:51 +0000 Files and hashes: 1: pHFXAbAK3kiVo5p2oNgQDsleq-M.crl (hash: Q/NhC1O/f2+4jbj4C7pkzm3BAVaUCD2YFfb9fo8N8yI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.crl rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:8e:19:41:31:ce:34:af:0e:4b:9b:3f:ee:8e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4715701b00ade4895a39a76a0d8100ec95eabe3 Validity Not Before: Dec 6 08:00:51 2025 GMT Not After : Dec 7 08:00:51 2025 GMT Subject: CN=664049f336c6d25e03c25caa195fbad4a45ae575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:a1:89:f9:7b:68:30:ea:ea:b1:9c:3c:4a: 58:96:c4:49:65:ca:8d:70:fb:81:7a:5f:f3:b6:69: aa:6b:14:76:d1:0d:a7:38:22:0f:37:d9:0c:09:a6: 84:54:59:da:eb:d1:e8:0e:68:48:b5:f1:51:43:54: 81:49:46:29:3b:30:e6:b1:7e:88:cf:cf:ca:6b:c4: 41:72:b6:37:c6:59:fc:b8:36:30:16:8f:48:9a:66: a5:59:92:a7:58:d9:c3:00:c5:cd:18:36:4e:93:bb: 82:67:fb:12:54:cc:df:50:5e:3d:c9:da:8f:c2:7c: a7:0b:50:eb:07:0a:40:2f:72:bb:9f:a0:bf:e7:1f: e4:2d:07:2d:1a:48:b2:05:c9:5c:46:96:8b:3c:60: d9:70:ad:cf:53:17:89:90:4d:bc:cc:68:9e:7d:e6: 4f:4d:4f:a9:47:d4:97:95:30:fe:cd:d6:dd:7a:1c: 48:0e:ef:c7:a6:25:89:bd:c9:bb:e6:ef:b2:fa:cf: 97:b5:f0:35:c4:fe:8c:e3:f2:55:aa:0e:0e:d1:f8: 25:4d:0d:ac:52:6d:8f:57:ed:26:30:98:00:ad:1e: 62:f3:95:da:94:87:c9:b7:61:99:58:12:e7:08:6d: 56:69:b4:ce:fa:54:ec:4f:15:90:45:6c:71:75:cf: ff:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:40:49:F3:36:C6:D2:5E:03:C2:5C:AA:19:5F:BA:D4:A4:5A:E5:75 X509v3 Authority Key Identifier: keyid:A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:33:a8:b9:75:cb:e3:60:a2:95:cd:ef:c9:be:6e:66:79:5e: 30:6c:e4:18:f0:ff:49:ad:47:c3:f8:f7:d0:05:db:4f:2a:61: 95:b4:ac:3b:c0:dc:e3:f2:1c:5c:08:d6:8a:fe:dc:6f:ae:7f: fd:62:ce:16:e6:6e:b0:45:9a:87:45:34:fa:dd:a1:c6:c3:a7: 11:ed:7d:f2:3c:5c:28:94:de:05:2e:ef:b8:9f:3d:71:1d:fe: a8:0a:22:0c:3c:8a:be:60:2f:8b:2a:43:c3:38:3d:b2:45:9a: 25:11:48:26:66:15:e9:35:4b:57:fc:ca:f0:da:c0:86:5a:1c: 21:05:97:00:70:74:7c:f4:4a:89:b2:ff:0d:f0:79:3c:1b:d0: 03:44:92:36:91:60:e3:66:0a:4d:e8:69:41:2a:77:f7:53:2e: cc:d9:32:1c:26:47:4d:bb:cf:df:d6:bd:fb:b2:63:66:5b:f6: 55:e1:04:b8:52:c5:8f:34:75:c0:bf:d0:85:8d:53:f8:91:70: e7:0f:37:99:8a:85:5b:7a:e6:03:33:b4:1d:45:b3:de:f8:06: db:09:79:33:82:89:c3:f3:ce:a5:b5:96:23:7d:3d:c6:05:f1: fd:02:17:d7:84:f2:3f:0c:a9:9a:eb:97:de:33:e8:73:3b:a8: b5:b4:f7:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrY4ZQTHONK8OS5s/7o7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NzE1NzAxYjAwYWRlNDg5NWEzOWE3NmEwZDgxMDBlYzk1 ZWFiZTMwHhcNMjUxMjA2MDgwMDUxWhcNMjUxMjA3MDgwMDUxWjAzMTEwLwYDVQQD Eyg2NjQwNDlmMzM2YzZkMjVlMDNjMjVjYWExOTVmYmFkNGE0NWFlNTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze+hifl7aDDq6rGcPEpYlsRJZcqN cPuBel/ztmmqaxR20Q2nOCIPN9kMCaaEVFna69HoDmhItfFRQ1SBSUYpOzDmsX6I z8/Ka8RBcrY3xln8uDYwFo9ImmalWZKnWNnDAMXNGDZOk7uCZ/sSVMzfUF49ydqP wnynC1DrBwpAL3K7n6C/5x/kLQctGkiyBclcRpaLPGDZcK3PUxeJkE28zGiefeZP TU+pR9SXlTD+zdbdehxIDu/HpiWJvcm75u+y+s+XtfA1xP6M4/JVqg4O0fglTQ2s Um2PV+0mMJgArR5i85XalIfJt2GZWBLnCG1WabTO+lTsTxWQRWxxdc//5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZASfM2xtJeA8JcqhlfutSkWuV1MB8GA1UdIwQY MBaAFKRxVwGwCt5IlaOadqDYEA7JXqvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEhGWEFiQUsza2lWbzVwMm9OZ1FEc2xlcS1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MDM3YTUtNTY0MC00YjQxLTkyZTkt ZjZmMjU0NmJjNjBlLzEvcEhGWEFiQUsza2lWbzVwMm9OZ1FEc2xlcS1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82MDM3YTUtNTY0MC00YjQxLTkyZTktZjZmMjU0NmJjNjBl LzEvcEhGWEFiQUsza2lWbzVwMm9OZ1FEc2xlcS1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDOouXXL 42Cilc3vyb5uZnleMGzkGPD/Sa1Hw/j30AXbTyphlbSsO8Dc4/IcXAjWiv7cb65/ /WLOFuZusEWah0U0+t2hxsOnEe198jxcKJTeBS7vuJ89cR3+qAoiDDyKvmAviypD wzg9skWaJRFIJmYV6TVLV/zK8NrAhlocIQWXAHB0fPRKibL/DfB5PBvQA0SSNpFg 42YKTehpQSp391MuzNkyHCZHTbvP39a9+7JjZlv2VeEEuFLFjzR1wL/QhY1T+JFw 5w83mYqFW3rmAzO0HUWz3vgG2wl5M4KJw/POpbWWI309xgXx/QIX14TyPwypmuuX 3jPoczuotbT3sA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:15 2025 by rpki-client