This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft File: phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json) Hash identifier: PHqrTryrKs2WuRPn7iQOii+ZxC8CW1lPOgINL0Rv7Fk= Subject key identifier: AA:E2:54:9C:3E:AE:B0:16:7A:F1:21:91:E5:C9:F6:85:E0:88:47:2B Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7 Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7 Certificate serial: 019BF6BF6D78F7469782FCA8178154EEBD53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft Manifest number: 150B Signing time: Sun 25 Jan 2026 20:01:39 +0000 Manifest this update: Sun 25 Jan 2026 20:01:39 +0000 Manifest next update: Mon 26 Jan 2026 20:01:39 +0000 Files and hashes: 1: Vd994I8OewATsGGSa4zEfrPZRM0.roa (hash: XSJbo9Wc3kl6cNjQcZjvVqM+NHSEiIeknkFve8lu2PM=) 2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: pKHgRqP3+n8oQj1fg4GwZdaZOFZTJG8I1Q3GtaFMfxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:6d:78:f7:46:97:82:fc:a8:17:81:54:ee:bd:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7 Validity Not Before: Jan 25 20:01:39 2026 GMT Not After : Jan 26 20:01:39 2026 GMT Subject: CN=aae2549c3eaeb0167af12191e5c9f685e088472b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:87:c7:5c:5d:df:50:10:38:58:a8:a0:ab:a7: 7c:fb:af:31:5f:20:46:d6:1c:8b:fb:c8:7b:4f:60: 93:93:40:99:6e:93:3d:ed:54:af:b4:80:bc:a6:e6: 84:81:81:0c:2f:8d:00:10:f2:c4:16:2c:bb:08:4f: 86:16:7c:76:62:cc:59:5e:7c:4a:b1:8b:a3:0b:66: 6c:cd:c0:e5:fd:94:89:7a:0f:ea:2c:43:cc:55:38: 84:41:2a:92:e4:a9:44:e5:d3:d8:7f:b7:18:69:a4: 7c:29:78:3d:93:18:37:a4:e3:97:b3:bd:e8:34:d8: f4:96:a4:76:d3:3a:37:a8:73:11:3c:43:08:0d:84: 89:bc:fc:29:63:47:d2:7f:7f:e6:07:0d:53:b1:d6: 59:0b:cf:0a:fc:07:15:3b:56:21:0c:0d:91:a8:db: 9a:90:df:5b:63:cb:35:06:ae:af:d0:92:71:dd:46: 8c:8e:6a:93:45:1e:2b:0a:d7:9e:ad:bd:ad:16:c1: ea:13:d8:32:b1:81:a2:63:9b:9c:d5:17:c1:b0:8c: 76:c0:01:b5:26:fe:df:35:39:94:74:1c:6a:99:70: a7:3d:93:f1:f3:e8:47:20:f8:aa:3d:55:a9:57:5d: f4:ac:bc:14:92:de:a3:72:95:d3:44:f3:75:db:9a: 41:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E2:54:9C:3E:AE:B0:16:7A:F1:21:91:E5:C9:F6:85:E0:88:47:2B X509v3 Authority Key Identifier: keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:77:a8:52:c9:e4:68:e0:64:1a:f8:d1:7d:6d:9b:f1:cc:2c: 1d:ca:25:ae:59:5a:a4:ca:2a:3c:0f:62:a4:18:2f:ce:36:10: c4:24:97:5f:20:ed:d4:f2:0a:64:81:a7:5d:b7:90:4a:3e:ad: 6d:93:6d:f0:17:fb:6c:bb:f9:07:9e:39:44:bf:42:80:d9:52: fc:99:e1:58:91:77:a8:5b:be:37:e9:43:8a:28:62:fb:66:20: 69:20:56:47:4e:a6:19:88:f5:37:5e:e2:27:3d:05:6d:65:03: 09:cb:78:df:48:7c:75:85:12:ad:36:48:d8:44:2e:14:73:34: 42:f3:ab:42:1d:d1:5e:e8:27:26:e6:7c:ad:c2:b4:aa:1e:fa: aa:e4:28:f9:77:0b:de:6c:fa:3f:85:4d:42:32:c3:e2:54:fa: 87:23:8c:9e:75:be:b1:de:f9:e2:be:ba:e2:b3:80:14:aa:31: 5d:44:cd:44:17:d9:f0:e1:b5:ef:c7:14:b2:06:d2:63:ec:95: ba:92:50:d3:ef:0d:f8:84:fa:da:17:fe:32:51:8d:c8:0f:3a: 00:32:ba:1b:53:a5:e7:12:68:40:62:d8:b6:a9:8e:17:d3:70: f1:40:45:37:d9:77:c9:7f:52:c2:99:b0:4d:57:5f:d2:3e:05: c8:36:bc:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v21490aXgvyoF4FU7r1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MTE2ZDA0M2U0NGI0MDQxNDRlNmE0MmQyNmFhOWRhZjUz ZDA0YTcwHhcNMjYwMTI1MjAwMTM5WhcNMjYwMTI2MjAwMTM5WjAzMTEwLwYDVQQD EyhhYWUyNTQ5YzNlYWViMDE2N2FmMTIxOTFlNWM5ZjY4NWUwODg0NzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYfHXF3fUBA4WKigq6d8+68xXyBG 1hyL+8h7T2CTk0CZbpM97VSvtIC8puaEgYEML40AEPLEFiy7CE+GFnx2YsxZXnxK sYujC2ZszcDl/ZSJeg/qLEPMVTiEQSqS5KlE5dPYf7cYaaR8KXg9kxg3pOOXs73o NNj0lqR20zo3qHMRPEMIDYSJvPwpY0fSf3/mBw1TsdZZC88K/AcVO1YhDA2RqNua kN9bY8s1Bq6v0JJx3UaMjmqTRR4rCteerb2tFsHqE9gysYGiY5uc1RfBsIx2wAG1 Jv7fNTmUdBxqmXCnPZPx8+hHIPiqPVWpV130rLwUkt6jcpXTRPN125pBJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKriVJw+rrAWevEhkeXJ9oXgiEcrMB8GA1UdIwQY MBaAFKYRbQQ+RLQEFE5qQtJqqdr1PQSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yNTBkYzgtMDcwMS00MjdhLWE4OWQt NDNmNWJjZjY3NzVkLzEvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8yNTBkYzgtMDcwMS00MjdhLWE4OWQtNDNmNWJjZjY3NzVk LzEvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3eoUsnk aOBkGvjRfW2b8cwsHcolrllapMoqPA9ipBgvzjYQxCSXXyDt1PIKZIGnXbeQSj6t bZNt8Bf7bLv5B545RL9CgNlS/JnhWJF3qFu+N+lDiihi+2YgaSBWR06mGYj1N17i Jz0FbWUDCct430h8dYUSrTZI2EQuFHM0QvOrQh3RXugnJuZ8rcK0qh76quQo+XcL 3mz6P4VNQjLD4lT6hyOMnnW+sd754r664rOAFKoxXUTNRBfZ8OG178cUsgbSY+yV upJQ0+8N+IT62hf+MlGNyA86ADK6G1Ol5xJoQGLYtqmOF9Nw8UBFN9l3yX9Swpmw TVdf0j4FyDa8jA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:14 2026 by rpki-client