This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft File: pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft (raw, json) Hash identifier: y89i1TlXsgHKbeK5bcz7FHsNg70jF4b2SxXaOCcXbdU= Subject key identifier: 43:84:39:85:81:EB:22:A0:B8:C6:0C:33:D5:86:9F:2C:A9:9A:80:18 Authority key identifier: A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0 Certificate issuer: /CN=a475e651f81aab603392f25521b7c9ab5bd281c0 Certificate serial: 019AF0BF6E59E28FDD513AAD32BF9DF0AB57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft Manifest number: 058D Signing time: Fri 05 Dec 2025 23:01:08 +0000 Manifest this update: Fri 05 Dec 2025 23:01:08 +0000 Manifest next update: Sat 06 Dec 2025 23:01:08 +0000 Files and hashes: 1: pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl (hash: hTUi22ynn82hGD8Jk3B2VNRDdduNNdvGf7uIo0NQs1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6e:59:e2:8f:dd:51:3a:ad:32:bf:9d:f0:ab:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a475e651f81aab603392f25521b7c9ab5bd281c0 Validity Not Before: Dec 5 23:01:08 2025 GMT Not After : Dec 6 23:01:08 2025 GMT Subject: CN=4384398581eb22a0b8c60c33d5869f2ca99a8018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:19:67:cf:df:af:c8:3c:4c:23:45:58:15:1b: 66:a0:d3:6e:34:0b:d0:a3:93:d2:0d:70:f6:b8:d3: 05:1c:4c:69:c4:3d:7f:f0:e7:70:88:b8:2c:6c:5b: 98:b3:a0:e1:62:d3:ab:6b:df:3c:08:77:00:41:db: 65:6e:54:17:92:4b:63:23:36:2e:ba:2d:09:84:37: 16:8c:42:12:4c:2b:b0:03:8d:d0:d1:e6:61:26:15: c1:e7:a5:a2:f3:57:f0:68:99:19:71:75:36:6b:b9: 7c:82:d2:c8:5f:8e:0f:69:ca:35:d4:50:96:d4:2c: b0:d8:69:8d:03:41:87:b7:6f:80:8e:6f:2a:22:a7: 3f:9c:18:64:f9:9b:53:01:5e:3e:c0:eb:56:8b:5b: a1:b7:de:4a:79:e4:ff:ab:78:74:5a:ed:13:cd:9c: 6e:44:0f:be:74:a9:f2:6c:95:40:8f:09:1b:74:b4: 66:d1:76:f7:14:50:9a:18:31:5d:ff:19:1f:b0:2b: 2a:42:9f:f5:83:fd:62:20:68:4b:1a:d7:9c:ab:7f: eb:83:1f:00:d5:06:51:1a:65:d1:b4:d0:3d:8a:99: 5a:6a:f9:5e:b7:da:53:59:6f:2d:b6:6f:85:8c:fa: ca:61:01:46:22:de:db:4f:33:d3:dd:21:25:06:5d: a9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:84:39:85:81:EB:22:A0:B8:C6:0C:33:D5:86:9F:2C:A9:9A:80:18 X509v3 Authority Key Identifier: keyid:A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:89:33:5c:ba:8f:22:62:f3:b5:fc:cf:e6:ce:d8:f1:09:36: f6:ce:18:71:bf:60:82:61:bc:27:6e:82:52:78:cd:a3:4b:fa: 0b:00:70:51:37:83:5e:28:10:f1:15:03:68:14:43:1f:3e:62: 73:cc:8c:75:c8:93:f6:6b:bd:15:f2:6d:04:8c:d0:df:c7:68: 42:d7:91:bd:a3:b6:01:60:21:ec:3a:e2:9f:fa:79:01:c7:b0: f2:ed:d2:73:54:86:16:8b:d5:f1:2c:04:ea:cf:37:fa:cd:8a: c1:81:0f:79:fa:5c:b9:44:b4:79:48:1e:ca:a5:68:14:fa:d2: bf:65:4d:99:d8:7a:1c:b2:3c:6e:e2:dc:60:1e:66:38:8e:3a: 16:ae:5c:39:29:a5:92:91:ed:ac:b3:68:0e:dc:8f:de:a5:bf: 6a:e0:d6:39:48:6d:34:95:b8:61:e3:e4:17:d5:8d:46:99:4e: 60:4d:9e:f5:d9:55:5f:fb:e4:3b:9c:f1:ae:10:db:85:84:f7: 16:34:e9:74:91:0a:ba:2f:a7:68:96:18:1a:84:35:49:4a:2a: a3:bd:97:a0:e7:d8:2f:55:51:cb:fd:fa:c4:6d:2c:58:e9:a3: f8:b5:7e:66:dd:09:46:45:45:a6:a5:19:c4:ac:cc:68:1c:22: 9d:d8:35:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv25Z4o/dUTqtMr+d8KtXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NzVlNjUxZjgxYWFiNjAzMzkyZjI1NTIxYjdjOWFiNWJk MjgxYzAwHhcNMjUxMjA1MjMwMTA4WhcNMjUxMjA2MjMwMTA4WjAzMTEwLwYDVQQD Eyg0Mzg0Mzk4NTgxZWIyMmEwYjhjNjBjMzNkNTg2OWYyY2E5OWE4MDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxlnz9+vyDxMI0VYFRtmoNNuNAvQ o5PSDXD2uNMFHExpxD1/8OdwiLgsbFuYs6DhYtOra988CHcAQdtlblQXkktjIzYu ui0JhDcWjEISTCuwA43Q0eZhJhXB56Wi81fwaJkZcXU2a7l8gtLIX44Paco11FCW 1Cyw2GmNA0GHt2+Ajm8qIqc/nBhk+ZtTAV4+wOtWi1uht95KeeT/q3h0Wu0TzZxu RA++dKnybJVAjwkbdLRm0Xb3FFCaGDFd/xkfsCsqQp/1g/1iIGhLGtecq3/rgx8A 1QZRGmXRtNA9iplaavlet9pTWW8ttm+FjPrKYQFGIt7bTzPT3SElBl2pfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOEOYWB6yKguMYMM9WGnyypmoAYMB8GA1UdIwQY MBaAFKR15lH4GqtgM5LyVSG3yatb0oHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEhYbVVmZ2FxMkF6a3ZKVkliZkpxMXZTZ2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9jZWMzMjctMzhlMS00YWY0LWEwOGYt NzdjZmQyMTViNzMyLzEvcEhYbVVmZ2FxMkF6a3ZKVkliZkpxMXZTZ2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9jZWMzMjctMzhlMS00YWY0LWEwOGYtNzdjZmQyMTViNzMy LzEvcEhYbVVmZ2FxMkF6a3ZKVkliZkpxMXZTZ2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYkzXLqP ImLztfzP5s7Y8Qk29s4Ycb9ggmG8J26CUnjNo0v6CwBwUTeDXigQ8RUDaBRDHz5i c8yMdciT9mu9FfJtBIzQ38doQteRvaO2AWAh7Drin/p5Acew8u3Sc1SGFovV8SwE 6s83+s2KwYEPefpcuUS0eUgeyqVoFPrSv2VNmdh6HLI8buLcYB5mOI46Fq5cOSml kpHtrLNoDtyP3qW/auDWOUhtNJW4YePkF9WNRplOYE2e9dlVX/vkO5zxrhDbhYT3 FjTpdJEKui+naJYYGoQ1SUoqo72XoOfYL1VRy/36xG0sWOmj+LV+Zt0JRkVFpqUZ xKzMaBwindg19g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:43 2025 by rpki-client