This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft File: phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json) Hash identifier: 20NgJ8YmaVoIw0KNW+Udp6C//8KTDfVhVfQnSTBYJ0M= Subject key identifier: 99:33:E8:79:72:15:A9:82:C4:A5:26:F1:47:0C:53:69:B5:74:1D:91 Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7 Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7 Certificate serial: 019AF509FF41D5EDABEF4A79B7C111ED40ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft Manifest number: 1485 Signing time: Sat 06 Dec 2025 19:01:04 +0000 Manifest this update: Sat 06 Dec 2025 19:01:04 +0000 Manifest next update: Sun 07 Dec 2025 19:01:04 +0000 Files and hashes: 1: 697jToKu2XxRDQWnpoghgdx0sOU.roa (hash: xKX34cyzr+9M8J3R+2YiMwwAXU/hT9vjt9tsB/Y8oWQ=) 2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: Fmbb03LqdneiOWCiy088EnokRjhOLNy6q+FYtRrCHRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ff:41:d5:ed:ab:ef:4a:79:b7:c1:11:ed:40:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7 Validity Not Before: Dec 6 19:01:04 2025 GMT Not After : Dec 7 19:01:04 2025 GMT Subject: CN=9933e8797215a982c4a526f1470c5369b5741d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:1b:1b:ac:4d:e9:59:ab:d5:ac:5a:98:db: ac:c5:21:1a:6d:d7:f9:d0:41:64:14:f1:84:cc:bc: e1:8a:8f:b0:ec:fd:ad:43:b1:24:ab:39:f0:d0:b7: cf:41:1f:24:71:0e:3d:34:1c:bb:dc:6e:a0:38:40: 05:bf:99:96:67:e7:3d:0a:0f:36:a3:aa:88:08:64: c8:ce:6c:2b:ae:fa:6e:35:18:51:6a:cf:b6:04:19: 34:8a:41:f2:88:d0:65:3e:ef:4a:4c:9c:f6:16:12: 1f:f3:b1:17:fe:47:77:1e:da:c6:c5:f9:c1:c4:3c: 38:25:42:75:08:77:a0:08:57:38:18:99:dd:ff:7b: d2:59:5f:d0:80:70:64:05:9c:ea:27:c7:42:69:c7: 7c:71:2a:65:27:a5:b6:d6:dd:3d:b0:43:f7:cb:f1: 68:b4:68:6a:6c:e7:82:ff:b0:5b:7a:03:bd:41:6f: 1a:fe:4d:32:22:6b:3b:2d:0f:1b:17:23:7d:80:47: 65:e5:74:52:c7:c3:28:3b:58:51:d7:04:22:40:23: 57:be:f4:36:a9:e1:1d:98:50:f9:a9:0e:dd:55:c9: f0:4d:6f:02:9e:9c:5c:9f:35:da:98:14:c1:26:af: 78:81:11:65:cc:e4:7c:5b:7a:02:7d:6c:b8:3f:75: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:33:E8:79:72:15:A9:82:C4:A5:26:F1:47:0C:53:69:B5:74:1D:91 X509v3 Authority Key Identifier: keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:14:f1:e2:a5:3a:ab:2a:7e:8f:35:89:a3:73:a7:84:ca:a2: d3:4b:bc:c7:bd:41:76:7e:ef:cf:a2:f9:e4:50:05:ec:a1:96: e2:b6:af:bf:46:bc:f6:77:a3:d3:3e:23:e2:62:1f:1f:f1:99: 88:67:9c:ae:f5:d7:47:aa:53:0c:93:06:90:ee:b2:1e:2f:4d: ad:04:19:77:3b:81:82:79:bb:9d:b3:fe:00:3a:51:2d:54:e0: e3:ca:c2:61:8a:d3:f8:b8:a9:47:98:11:0d:86:af:2c:ea:58: a7:cb:65:3d:15:c6:e2:db:13:33:13:d7:9c:77:86:19:aa:39: 07:38:6a:f2:21:89:2d:62:09:e1:01:6d:37:85:31:95:eb:50: 9b:95:96:d7:ce:b0:ad:aa:ea:3a:4e:89:cb:47:f2:42:67:75: 4c:33:b0:92:ea:73:38:7a:0d:f0:0b:63:f4:cd:19:d3:1c:34: f7:e6:2f:90:56:06:a8:ce:91:6c:ab:32:68:b7:0a:f1:74:0d: 10:21:e5:b0:48:cd:e7:89:72:cc:87:e4:34:13:3a:a3:22:14: b5:88:2e:ec:ad:0f:c5:11:78:c8:4f:50:ca:7a:ab:59:73:36: c7:c8:67:3c:38:87:85:96:ba:9f:a2:15:bf:9c:89:a3:80:51: 59:10:42:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cf9B1e2r70p5t8ER7UDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MTE2ZDA0M2U0NGI0MDQxNDRlNmE0MmQyNmFhOWRhZjUz ZDA0YTcwHhcNMjUxMjA2MTkwMTA0WhcNMjUxMjA3MTkwMTA0WjAzMTEwLwYDVQQD Eyg5OTMzZTg3OTcyMTVhOTgyYzRhNTI2ZjE0NzBjNTM2OWI1NzQxZDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvgbG6xN6Vmr1axamNusxSEabdf5 0EFkFPGEzLzhio+w7P2tQ7Ekqznw0LfPQR8kcQ49NBy73G6gOEAFv5mWZ+c9Cg82 o6qICGTIzmwrrvpuNRhRas+2BBk0ikHyiNBlPu9KTJz2FhIf87EX/kd3HtrGxfnB xDw4JUJ1CHegCFc4GJnd/3vSWV/QgHBkBZzqJ8dCacd8cSplJ6W21t09sEP3y/Fo tGhqbOeC/7BbegO9QW8a/k0yIms7LQ8bFyN9gEdl5XRSx8MoO1hR1wQiQCNXvvQ2 qeEdmFD5qQ7dVcnwTW8CnpxcnzXamBTBJq94gRFlzOR8W3oCfWy4P3WgcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkz6HlyFamCxKUm8UcMU2m1dB2RMB8GA1UdIwQY MBaAFKYRbQQ+RLQEFE5qQtJqqdr1PQSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yNTBkYzgtMDcwMS00MjdhLWE4OWQt NDNmNWJjZjY3NzVkLzEvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8yNTBkYzgtMDcwMS00MjdhLWE4OWQtNDNmNWJjZjY3NzVk LzEvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxTx4qU6 qyp+jzWJo3OnhMqi00u8x71Bdn7vz6L55FAF7KGW4ravv0a89nej0z4j4mIfH/GZ iGecrvXXR6pTDJMGkO6yHi9NrQQZdzuBgnm7nbP+ADpRLVTg48rCYYrT+LipR5gR DYavLOpYp8tlPRXG4tsTMxPXnHeGGao5Bzhq8iGJLWIJ4QFtN4UxletQm5WW186w rarqOk6Jy0fyQmd1TDOwkupzOHoN8Atj9M0Z0xw09+YvkFYGqM6RbKsyaLcK8XQN ECHlsEjN54lyzIfkNBM6oyIUtYgu7K0PxRF4yE9QynqrWXM2x8hnPDiHhZa6n6IV v5yJo4BRWRBCBw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:59:26 2025 by rpki-client