This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft File: pHwKyKnV9ixJHUsXyyErUsDnVgc.mft (raw, json) Hash identifier: FHIgHVT4GN3DNOjkIdiXoUX/Z7dYzb//Jh7Hjv5h1kA= Subject key identifier: FB:0A:33:AC:27:50:79:DA:77:EA:9C:D0:72:63:2B:99:F4:BD:59:8F Authority key identifier: A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07 Certificate issuer: /CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607 Certificate serial: 019AF12CD4BFBD6AF999A1A231EA9AF174D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft Manifest number: 13A4 Signing time: Sat 06 Dec 2025 01:00:38 +0000 Manifest this update: Sat 06 Dec 2025 01:00:38 +0000 Manifest next update: Sun 07 Dec 2025 01:00:38 +0000 Files and hashes: 1: fFbdm0OeWE1GYVnCMSWrkaX1IWg.roa (hash: H5NNOHLLRS0hsZTLRHxW4ce45JGvEraIddrEMS924Cg=) 2: pHwKyKnV9ixJHUsXyyErUsDnVgc.crl (hash: Hkd61nfRzECLbwro89/8SzcpFeczIr8JQx2fudTISMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d4:bf:bd:6a:f9:99:a1:a2:31:ea:9a:f1:74:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607 Validity Not Before: Dec 6 01:00:38 2025 GMT Not After : Dec 7 01:00:38 2025 GMT Subject: CN=fb0a33ac275079da77ea9cd072632b99f4bd598f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:61:17:2c:cb:fd:10:32:d0:71:c2:bb:54:54: e1:f9:b8:8a:23:39:1d:38:07:af:0c:3d:7a:93:8c: cf:c7:ab:2c:53:e0:b1:79:d7:13:f6:b8:dd:0a:c3: 55:3f:64:b2:cc:39:5b:3f:d8:8d:c8:8e:a8:75:d5: 77:e3:54:31:8d:90:4a:18:30:7d:e8:d6:55:3f:d9: 8b:56:6a:e0:55:8c:dc:62:ad:55:b5:ad:32:a5:db: 30:37:b3:e5:27:ad:b9:17:cc:04:76:c5:7c:85:df: b3:9b:b1:0d:ef:9a:8a:0a:92:01:95:bb:38:0b:c2: 3d:4b:c3:0f:2f:2a:f1:57:5d:9f:11:3b:9d:6b:45: 7d:6a:99:c1:62:bd:c3:a4:bb:fa:fd:62:a6:59:ee: 53:03:1e:9b:64:01:e4:fc:29:a2:87:e6:37:2e:4a: 0a:10:d1:66:f1:03:69:8f:50:88:69:48:99:02:23: 62:63:7b:88:7d:57:20:81:42:12:93:52:1c:ec:75: 01:aa:26:93:6a:25:e8:33:27:b8:cc:cd:cc:f8:88: bd:95:1c:cd:a9:c3:f7:3c:b8:44:53:cd:50:13:43: 22:9f:21:ec:9a:0c:9b:73:dc:11:bf:09:a4:32:e3: 68:67:84:aa:75:ce:c5:5d:0d:d8:e7:1a:4c:c8:73: 11:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0A:33:AC:27:50:79:DA:77:EA:9C:D0:72:63:2B:99:F4:BD:59:8F X509v3 Authority Key Identifier: keyid:A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c0:65:03:06:65:aa:98:a6:88:5e:9f:0e:a4:af:5b:26:da: 2e:7b:14:68:a0:be:52:56:d9:7d:cc:99:80:58:25:5d:3c:08: 16:40:83:40:ab:c6:c3:71:a9:3f:84:fd:51:52:a8:50:30:e7: 43:e5:a2:9d:1c:4e:16:ca:70:d3:52:84:79:35:01:d7:ee:88: 15:ee:7a:bb:44:6b:05:a4:92:39:6d:6c:89:07:43:fa:37:44: 88:3f:21:bd:f6:42:45:c9:85:5f:23:9b:f1:14:44:da:73:8f: 3e:18:30:f0:dc:9f:6f:c2:df:f6:82:1b:b6:65:6d:5e:df:a9: b0:97:74:11:4c:c1:2c:4d:d5:90:45:fe:6d:9a:25:a7:d7:4d: f2:c7:3c:d5:8d:c9:28:56:be:84:a9:89:16:99:0a:4e:37:e7: 0c:99:20:1a:91:ff:4e:e1:7a:31:20:ef:cf:62:9c:56:32:34: e2:db:18:4c:3d:73:05:e5:fd:c9:a4:d1:8a:ff:9f:41:e3:0c: f9:3f:6a:8c:8c:08:c5:b9:1d:65:2c:e9:fb:c8:54:36:fd:08: 2b:2b:b9:ea:c2:fb:36:09:ff:5d:42:83:77:ec:3f:11:16:2f: 89:fc:5a:ce:9c:da:6f:d8:68:ec:a5:32:70:b0:77:e0:a1:47: b6:58:8e:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNS/vWr5maGiMeqa8XTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0N2MwYWM4YTlkNWY2MmM0OTFkNGIxN2NiMjEyYjUyYzBl NzU2MDcwHhcNMjUxMjA2MDEwMDM4WhcNMjUxMjA3MDEwMDM4WjAzMTEwLwYDVQQD EyhmYjBhMzNhYzI3NTA3OWRhNzdlYTljZDA3MjYzMmI5OWY0YmQ1OThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22EXLMv9EDLQccK7VFTh+biKIzkd OAevDD16k4zPx6ssU+CxedcT9rjdCsNVP2SyzDlbP9iNyI6oddV341QxjZBKGDB9 6NZVP9mLVmrgVYzcYq1Vta0ypdswN7PlJ625F8wEdsV8hd+zm7EN75qKCpIBlbs4 C8I9S8MPLyrxV12fETuda0V9apnBYr3DpLv6/WKmWe5TAx6bZAHk/Cmih+Y3LkoK ENFm8QNpj1CIaUiZAiNiY3uIfVcggUISk1Ic7HUBqiaTaiXoMye4zM3M+Ii9lRzN qcP3PLhEU81QE0MinyHsmgybc9wRvwmkMuNoZ4Sqdc7FXQ3Y5xpMyHMRGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsKM6wnUHnad+qc0HJjK5n0vVmPMB8GA1UdIwQY MBaAFKR8Csip1fYsSR1LF8shK1LA51YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yNWM5MWQtNWEwNS00NmEyLTlhNzkt NDIwY2MyNTFlNWViLzEvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yNWM5MWQtNWEwNS00NmEyLTlhNzktNDIwY2MyNTFlNWVi LzEvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8BlAwZl qpimiF6fDqSvWybaLnsUaKC+UlbZfcyZgFglXTwIFkCDQKvGw3GpP4T9UVKoUDDn Q+WinRxOFspw01KEeTUB1+6IFe56u0RrBaSSOW1siQdD+jdEiD8hvfZCRcmFXyOb 8RRE2nOPPhgw8Nyfb8Lf9oIbtmVtXt+psJd0EUzBLE3VkEX+bZolp9dN8sc81Y3J KFa+hKmJFpkKTjfnDJkgGpH/TuF6MSDvz2KcVjI04tsYTD1zBeX9yaTRiv+fQeMM +T9qjIwIxbkdZSzp+8hUNv0IKyu56sL7Ngn/XUKDd+w/ERYvifxazpzab9ho7KUy cLB34KFHtliOMA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:25:44 2025 by rpki-client