This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json) Hash identifier: 6qnhJEAOwratcvjXOyn2HZ0JXOYaWIcPBV4zRwQx8kQ= Subject key identifier: 3C:A4:13:D9:F3:96:4C:4D:81:E9:D8:8D:C5:C1:A8:1F:83:B3:EB:01 Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7 Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7 Certificate serial: 019AF2AD5434A721A081FE3C3FC3D6A29B6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:00:36 +0000 Manifest this update: Sat 06 Dec 2025 08:00:36 +0000 Manifest next update: Sun 07 Dec 2025 08:00:36 +0000 Files and hashes: 1: OEpDgvPaXUzQjnGh8DicbzVRQqo.roa (hash: Tur6sEnsgmRlnAb38JyLyFtsAnKmMwtkefk62vCJp6k=) 2: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: l7kcE+JIlLkSrgRB7Mr8un8RDWjdGA2YZ28rxptpI30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:54:34:a7:21:a0:81:fe:3c:3f:c3:d6:a2:9b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7 Validity Not Before: Dec 6 08:00:36 2025 GMT Not After : Dec 7 08:00:36 2025 GMT Subject: CN=3ca413d9f3964c4d81e9d88dc5c1a81f83b3eb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:95:58:5d:5d:8b:03:4a:37:a2:8b:53:f0: 00:bf:e9:fd:27:be:cb:59:55:f1:46:11:48:59:c4: ad:98:9b:6d:1b:48:34:a1:13:76:6c:10:4f:7a:b5: 6e:e8:63:ac:31:36:f2:90:15:1d:60:2d:9f:81:80: 87:38:85:98:f5:7d:b5:cd:eb:0d:65:36:b7:7f:cf: 76:c7:b0:84:29:89:b3:a7:f0:7c:c1:bb:26:a1:87: 34:ec:d1:fd:ed:27:92:2f:ab:34:3a:f3:1a:df:eb: 98:1e:5f:68:6c:8a:41:f8:c8:81:10:0b:bd:cd:0d: db:f8:5a:39:f8:95:7f:07:11:db:a8:13:32:db:20: b4:62:b5:10:f0:a3:a5:a1:f4:45:5e:e8:c3:bb:e5: 75:02:45:c5:c7:d4:c3:6e:bc:b9:c0:7f:87:be:61: 53:0d:49:dd:53:33:cb:5e:7c:74:0f:0a:cd:4d:d0: d3:f2:73:58:1f:17:17:9c:11:4b:14:1c:f4:66:33: 63:25:3a:78:14:3c:40:3b:0b:ff:b1:f6:9a:45:f3: 09:6a:28:68:a2:9c:3b:5a:88:cd:79:a3:ea:f7:dd: 45:17:ee:e3:bb:78:cd:f9:6f:4a:e6:b6:73:2a:13: c5:14:ca:98:d8:ac:7f:0d:fc:6e:1c:7f:0d:ec:6d: 9e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A4:13:D9:F3:96:4C:4D:81:E9:D8:8D:C5:C1:A8:1F:83:B3:EB:01 X509v3 Authority Key Identifier: keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e1:f3:97:30:27:00:2b:46:a2:52:e8:b1:24:25:62:df:f7: 3c:33:1a:28:7b:dd:65:b3:c3:23:25:8b:58:8a:f7:3b:d6:fd: 38:7c:14:bc:e2:aa:77:89:6d:27:4e:07:b2:c5:83:a2:7a:c3: fe:05:97:92:8e:3b:de:7f:81:0b:8e:37:9f:5f:18:5d:ab:d9: 3a:28:82:64:01:27:29:e6:4b:64:71:f5:41:1d:99:54:f5:c0: de:7a:45:9d:39:4f:56:69:5e:3c:de:cd:58:ea:3e:c5:c9:ad: b0:97:41:e8:52:78:39:45:9f:95:25:48:2b:8a:e7:97:4b:f0: ec:9a:28:85:fc:f5:ef:db:ff:52:ed:46:0e:61:df:a9:82:b4: df:5a:a8:3f:bd:b5:4a:04:fd:02:22:30:9f:57:69:67:e2:a8: a8:f4:4b:af:eb:b5:d6:ab:e2:2f:c0:58:60:87:00:ba:3b:55: 1e:f0:63:18:6f:15:7b:c7:ee:e4:90:7c:f2:a4:19:d1:cd:e8: e4:c4:8b:ad:0f:62:49:13:cc:ba:a0:72:71:5d:c4:0a:c1:69: 6f:8c:7b:eb:5c:0c:15:14:64:0e:22:01:2a:e7:b4:d1:45:c1: 2e:fc:f9:7a:51:45:09:c4:e3:e9:e4:b7:06:96:ca:14:3f:cf: d4:9a:8e:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVQ0pyGggf48P8PWoptvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMTkwNDgzNDhkN2VjYjlmMTE5MTA4MDU1NWJmNDQ1OGEx YTU0ZTcwHhcNMjUxMjA2MDgwMDM2WhcNMjUxMjA3MDgwMDM2WjAzMTEwLwYDVQQD EygzY2E0MTNkOWYzOTY0YzRkODFlOWQ4OGRjNWMxYTgxZjgzYjNlYjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLGVWF1diwNKN6KLU/AAv+n9J77L WVXxRhFIWcStmJttG0g0oRN2bBBPerVu6GOsMTbykBUdYC2fgYCHOIWY9X21zesN ZTa3f892x7CEKYmzp/B8wbsmoYc07NH97SeSL6s0OvMa3+uYHl9obIpB+MiBEAu9 zQ3b+Fo5+JV/BxHbqBMy2yC0YrUQ8KOlofRFXujDu+V1AkXFx9TDbry5wH+HvmFT DUndUzPLXnx0DwrNTdDT8nNYHxcXnBFLFBz0ZjNjJTp4FDxAOwv/sfaaRfMJaiho opw7WojNeaPq991FF+7ju3jN+W9K5rZzKhPFFMqY2Kx/DfxuHH8N7G2eDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDykE9nzlkxNgenYjcXBqB+Ds+sBMB8GA1UdIwQY MBaAFD4ZBINI1+y58RkQgFVb9EWKGlTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hZjI2MmMtZTJjZC00ODQxLTg1MGYt MDJmMzVhZDg3N2YzLzEvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9hZjI2MmMtZTJjZC00ODQxLTg1MGYtMDJmMzVhZDg3N2Yz LzEvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuHzlzAn ACtGolLosSQlYt/3PDMaKHvdZbPDIyWLWIr3O9b9OHwUvOKqd4ltJ04HssWDonrD /gWXko473n+BC443n18YXavZOiiCZAEnKeZLZHH1QR2ZVPXA3npFnTlPVmlePN7N WOo+xcmtsJdB6FJ4OUWflSVIK4rnl0vw7Joohfz179v/Uu1GDmHfqYK031qoP721 SgT9AiIwn1dpZ+KoqPRLr+u11qviL8BYYIcAujtVHvBjGG8Ve8fu5JB88qQZ0c3o 5MSLrQ9iSRPMuqBycV3ECsFpb4x761wMFRRkDiIBKue00UXBLvz5elFFCcTj6eS3 BpbKFD/P1JqOSA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:48:20 2025 by rpki-client