This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json) Hash identifier: 2pPa4TdRgYVQdaoX+KEfeNZP0Qt6lzvR3KYW0QgexCY= Subject key identifier: 1E:5C:D0:C2:57:42:3B:C2:D4:E6:74:AD:2A:12:3D:D8:90:76:2F:FA Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97 Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197 Certificate serial: 019B2DB0AC91CB2554F6E55C39DA1AC12D35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft Manifest number: 0BF8 Signing time: Wed 17 Dec 2025 19:01:51 +0000 Manifest this update: Wed 17 Dec 2025 19:01:51 +0000 Manifest next update: Thu 18 Dec 2025 19:01:51 +0000 Files and hashes: 1: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: l2kuF7LIPPaKz2VJsz7gG7jwEymiOUKUt+AZltKw7+U=) 2: _BTZQ0zK_fvKReKxFaBu1-Vwvm8.roa (hash: IbkaaN1eobNCsZcNskJYmH0crzqKNoH6G8sKqEsCFhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:ac:91:cb:25:54:f6:e5:5c:39:da:1a:c1:2d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197 Validity Not Before: Dec 17 19:01:51 2025 GMT Not After : Dec 18 19:01:51 2025 GMT Subject: CN=1e5cd0c257423bc2d4e674ad2a123dd890762ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c4:c7:68:91:04:a9:0c:1a:62:ff:32:35:65: 2a:b2:e1:d8:b0:a1:d9:69:cc:14:1d:fe:75:ac:30: 18:9d:e3:e0:2a:eb:ed:4c:f1:44:14:0a:ff:82:e6: 6f:7a:30:07:ae:6c:ed:1d:8e:c6:dc:7c:ff:04:41: e9:b0:97:d4:9e:dd:3d:bb:89:08:b6:38:f8:68:9f: 62:e0:7c:7f:88:46:0a:22:fa:28:6d:8b:b7:4d:1e: d5:4a:b5:4f:49:a9:e9:08:f0:93:2a:a5:69:83:67: 88:9d:13:f9:6e:fe:85:07:40:b0:a6:18:e4:cc:f4: c7:d8:06:70:01:4e:fa:21:fa:de:7c:0d:25:c7:c4: ca:48:c8:c9:85:86:be:f2:01:18:3f:6e:59:29:2d: ba:f2:4e:da:c4:d0:58:11:5c:6d:d1:63:a6:d4:29: 14:51:41:9d:1b:cb:2c:01:13:16:ed:d0:86:21:63: f3:f2:0a:ea:2d:87:8b:75:6e:7d:ed:d5:4b:08:69: 66:f9:28:6e:88:82:c2:69:23:5f:a7:12:14:8b:77: c3:c9:5a:d3:2c:b4:c6:84:dd:5e:6b:84:71:24:86: 94:41:f8:8a:04:d2:f7:62:e6:48:05:7b:8e:8f:03: 11:1c:8d:78:2a:0b:10:15:39:86:9f:a4:21:92:f1: 75:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5C:D0:C2:57:42:3B:C2:D4:E6:74:AD:2A:12:3D:D8:90:76:2F:FA X509v3 Authority Key Identifier: keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:b8:2e:a0:58:2f:0c:15:2c:64:d5:00:3f:ed:0a:40:d0:67: f3:cd:95:c5:6a:11:5c:2c:10:8b:16:2d:0c:d3:e8:9c:22:59: 91:ae:54:c8:24:9b:36:f3:20:cf:7b:d3:29:3e:c8:40:59:e5: 8a:1e:87:07:4d:f8:97:f3:93:d6:1a:cd:37:45:7b:be:98:e8: 42:8c:a6:ae:49:fe:df:50:74:c7:65:e3:21:8f:61:77:d1:12: 2e:d7:a5:56:90:6b:33:8c:95:35:26:ee:37:43:5a:50:10:f9: a0:50:c8:ec:21:24:dd:45:72:81:de:27:e2:f5:bb:e9:1b:e8: 30:db:b1:c8:82:2c:09:cb:c6:f8:3f:e6:88:1f:df:7e:7d:7e: 02:b0:f1:20:e1:77:6e:df:69:27:77:9a:30:bd:1f:91:72:35: c8:98:9d:45:42:5d:b5:94:aa:1a:12:86:70:a6:56:f2:44:3d: a4:df:79:04:75:9f:48:38:a8:1f:8a:dd:8d:47:a8:99:2e:e8: d3:7d:6c:ff:7f:52:60:0a:85:f6:5c:2b:aa:1b:af:ad:ee:16: ab:8a:f7:2b:cf:13:e9:92:ea:89:de:5d:a8:7a:cf:23:33:15: 94:04:c9:9a:82:23:16:b5:6f:17:c0:d4:92:78:4c:c0:d8:62: 3a:e6:34:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsKyRyyVU9uVcOdoawS01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNzc1ZTFiOWZiMGFjOTNkNTYzYmE4ZTk3MDg4NGRhNTdi NmUxOTcwHhcNMjUxMjE3MTkwMTUxWhcNMjUxMjE4MTkwMTUxWjAzMTEwLwYDVQQD EygxZTVjZDBjMjU3NDIzYmMyZDRlNjc0YWQyYTEyM2RkODkwNzYyZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cTHaJEEqQwaYv8yNWUqsuHYsKHZ acwUHf51rDAYnePgKuvtTPFEFAr/guZvejAHrmztHY7G3Hz/BEHpsJfUnt09u4kI tjj4aJ9i4Hx/iEYKIvoobYu3TR7VSrVPSanpCPCTKqVpg2eInRP5bv6FB0Cwphjk zPTH2AZwAU76IfrefA0lx8TKSMjJhYa+8gEYP25ZKS268k7axNBYEVxt0WOm1CkU UUGdG8ssARMW7dCGIWPz8grqLYeLdW597dVLCGlm+ShuiILCaSNfpxIUi3fDyVrT LLTGhN1ea4RxJIaUQfiKBNL3YuZIBXuOjwMRHI14KgsQFTmGn6QhkvF16QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5c0MJXQjvC1OZ0rSoSPdiQdi/6MB8GA1UdIwQY MBaAFDx3XhufsKyT1WO6jpcIhNpXtuGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEt NGU1Njg2YmU2YjgyLzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEtNGU1Njg2YmU2Yjgy LzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprguoFgv DBUsZNUAP+0KQNBn882VxWoRXCwQixYtDNPonCJZka5UyCSbNvMgz3vTKT7IQFnl ih6HB034l/OT1hrNN0V7vpjoQoymrkn+31B0x2XjIY9hd9ESLtelVpBrM4yVNSbu N0NaUBD5oFDI7CEk3UVygd4n4vW76RvoMNuxyIIsCcvG+D/miB/ffn1+ArDxIOF3 bt9pJ3eaML0fkXI1yJidRUJdtZSqGhKGcKZW8kQ9pN95BHWfSDioH4rdjUeomS7o 031s/39SYAqF9lwrqhuvre4Wq4r3K88T6ZLqid5dqHrPIzMVlATJmoIjFrVvF8DU knhMwNhiOuY0vA== -----END CERTIFICATE-----Generated at Wed Dec 17 21:05:14 2025 by rpki-client