This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft File: phvll6k-axrZQXjQPo6MFVcmeMc.mft (raw, json) Hash identifier: ob6NwYD3J4OPKwCRq2e7w7J9B7tyiVIAylSRgI7Xme0= Subject key identifier: 9C:0D:38:5E:E5:91:48:57:9D:68:97:D2:13:F8:B7:3E:61:76:82:74 Authority key identifier: A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7 Certificate issuer: /CN=a61be597a93e6b1ad94178d03e8e8c15572678c7 Certificate serial: 019AF088152085AFE5D0F82F51A549F44114 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft Manifest number: 0545 Signing time: Fri 05 Dec 2025 22:00:41 +0000 Manifest this update: Fri 05 Dec 2025 22:00:41 +0000 Manifest next update: Sat 06 Dec 2025 22:00:41 +0000 Files and hashes: 1: phvll6k-axrZQXjQPo6MFVcmeMc.crl (hash: ERWeVQEALtX3X2jYePyJ6Dgp9j8IvXGZUffqGxt3kD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:15:20:85:af:e5:d0:f8:2f:51:a5:49:f4:41:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a61be597a93e6b1ad94178d03e8e8c15572678c7 Validity Not Before: Dec 5 22:00:41 2025 GMT Not After : Dec 6 22:00:41 2025 GMT Subject: CN=9c0d385ee59148579d6897d213f8b73e61768274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:b5:75:9f:eb:f4:f0:69:8a:51:a4:87:74: f7:6c:5d:a3:8c:79:70:c9:99:f1:81:9f:34:e5:ca: 92:b9:96:85:a2:b9:95:06:d3:90:66:b1:7a:19:15: a3:0d:42:3c:32:c1:f4:6a:9c:8f:85:5e:5d:2b:a6: b7:8b:c2:6b:26:48:31:29:7a:e8:bd:25:5c:07:f7: d8:77:eb:6d:fd:9f:47:b4:d9:af:28:db:05:aa:32: fb:d0:87:2b:31:0b:9e:21:b6:d4:07:c3:0b:7d:04: 09:92:79:67:82:44:53:be:6e:24:9f:a8:da:21:06: 4a:16:92:95:b5:b0:ca:6c:c6:b6:66:2e:ca:99:34: c7:e8:73:bb:82:cb:64:50:a7:aa:a9:0d:c5:6e:6b: 3f:c4:4d:c0:5b:34:2d:25:2d:b8:71:49:95:2e:3c: 73:4b:a8:8f:f7:84:39:de:6d:f8:28:88:43:37:ec: 52:33:a2:e0:d5:66:b1:e5:0c:9d:21:2c:dd:c9:78: 27:35:45:64:e9:2b:c6:6e:b7:ab:cc:58:b1:db:a0: 74:1f:1b:f6:2a:20:43:04:6c:cc:86:e7:da:41:2b: 40:d4:0b:a4:fd:3e:10:4c:a0:65:db:5a:25:f2:72: 30:6f:00:9a:13:34:ca:7a:fe:08:58:52:d2:57:84: 27:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0D:38:5E:E5:91:48:57:9D:68:97:D2:13:F8:B7:3E:61:76:82:74 X509v3 Authority Key Identifier: keyid:A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:df:ee:e4:14:e4:87:1e:59:d4:f1:a0:d1:ea:e7:3c:8a:60: 8b:bd:bf:f0:ec:6e:e6:20:e1:1d:1d:15:22:a1:b4:fe:4b:9d: 1e:e5:be:9b:55:21:6f:55:bc:ec:a1:c1:12:19:cf:07:b7:f5: c0:4e:6d:85:b9:b3:82:4a:cd:a0:8d:b3:b1:07:a8:27:ee:9d: 5c:82:40:cb:54:af:1d:00:4c:4d:c3:3e:05:a3:b0:39:05:f9: 98:2b:bb:1d:4d:bf:63:29:c6:9c:a5:df:60:9b:bb:12:f2:13: 54:79:31:c7:fc:a0:77:95:29:d9:52:b8:40:60:1a:53:e9:a8: eb:1b:92:25:da:02:e8:a5:bc:91:30:00:61:0b:b3:4c:92:ca: 43:5c:0a:36:4d:15:e6:cd:c8:e5:4e:54:35:bf:34:3e:47:21: b3:95:8c:a4:67:6a:ac:4b:a0:ec:03:b2:bb:4b:ea:83:7e:27: 86:7f:59:0c:c1:a8:09:47:63:79:06:5b:04:fa:c3:51:fb:3d: 28:be:db:bc:11:29:88:1c:12:38:60:f8:53:c3:3f:ff:ea:3a: 8c:d8:55:b7:42:53:0c:0f:2e:c6:05:1a:9f:c5:4d:4f:ab:e5: 65:67:39:eb:22:7f:91:6a:69:0a:f4:a3:ab:8a:e8:ac:62:a0: 33:28:40:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiBUgha/l0PgvUaVJ9EEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MWJlNTk3YTkzZTZiMWFkOTQxNzhkMDNlOGU4YzE1NTcy Njc4YzcwHhcNMjUxMjA1MjIwMDQxWhcNMjUxMjA2MjIwMDQxWjAzMTEwLwYDVQQD Eyg5YzBkMzg1ZWU1OTE0ODU3OWQ2ODk3ZDIxM2Y4YjczZTYxNzY4Mjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4K1dZ/r9PBpilGkh3T3bF2jjHlw yZnxgZ805cqSuZaFormVBtOQZrF6GRWjDUI8MsH0apyPhV5dK6a3i8JrJkgxKXro vSVcB/fYd+tt/Z9HtNmvKNsFqjL70IcrMQueIbbUB8MLfQQJknlngkRTvm4kn6ja IQZKFpKVtbDKbMa2Zi7KmTTH6HO7gstkUKeqqQ3Fbms/xE3AWzQtJS24cUmVLjxz S6iP94Q53m34KIhDN+xSM6Lg1Wax5QydISzdyXgnNUVk6SvGbrerzFix26B0Hxv2 KiBDBGzMhufaQStA1Auk/T4QTKBl21ol8nIwbwCaEzTKev4IWFLSV4QnQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwNOF7lkUhXnWiX0hP4tz5hdoJ0MB8GA1UdIwQY MBaAFKYb5ZepPmsa2UF40D6OjBVXJnjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81NmEwZWYtZjZiOS00MjQwLTljZGMt YzFlNGNjYjE1NmVlLzEvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC81NmEwZWYtZjZiOS00MjQwLTljZGMtYzFlNGNjYjE1NmVl LzEvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtt/u5BTk hx5Z1PGg0ernPIpgi72/8Oxu5iDhHR0VIqG0/kudHuW+m1Uhb1W87KHBEhnPB7f1 wE5thbmzgkrNoI2zsQeoJ+6dXIJAy1SvHQBMTcM+BaOwOQX5mCu7HU2/YynGnKXf YJu7EvITVHkxx/ygd5Up2VK4QGAaU+mo6xuSJdoC6KW8kTAAYQuzTJLKQ1wKNk0V 5s3I5U5UNb80Pkchs5WMpGdqrEug7AOyu0vqg34nhn9ZDMGoCUdjeQZbBPrDUfs9 KL7bvBEpiBwSOGD4U8M//+o6jNhVt0JTDA8uxgUan8VNT6vlZWc56yJ/kWppCvSj q4rorGKgMyhAeA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:47 2025 by rpki-client