This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft File: PheDehDbHT3XPiDfC0eeQNsiNv4.mft (raw, json) Hash identifier: KDnULkb8C/WybYZ9Ai0fZBla98R4m6ojjJPvN+HFMzc= Subject key identifier: D0:8B:F8:75:A8:19:DC:4B:29:BE:9A:E0:9A:7A:4D:4E:57:82:59:93 Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE Certificate issuer: /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe Certificate serial: 019AF31C6F8D7FB1CE3E382654552EEACFCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft Manifest number: 0F77 Signing time: Sat 06 Dec 2025 10:01:58 +0000 Manifest this update: Sat 06 Dec 2025 10:01:58 +0000 Manifest next update: Sun 07 Dec 2025 10:01:58 +0000 Files and hashes: 1: CZQAZEvMh_XTxw7BOmbx2zwgX-k.roa (hash: Ire9dW7Oeexx5f9et2qGgWkDs4AnuBBZcM9DwhOcJAg=) 2: PheDehDbHT3XPiDfC0eeQNsiNv4.crl (hash: /cWvUg6uFqcoOr/joQ1NzymOjrcDGNN9xxNWiRgqQJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:6f:8d:7f:b1:ce:3e:38:26:54:55:2e:ea:cf:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe Validity Not Before: Dec 6 10:01:58 2025 GMT Not After : Dec 7 10:01:58 2025 GMT Subject: CN=d08bf875a819dc4b29be9ae09a7a4d4e57825993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:03:7c:69:8c:87:7d:ee:13:89:e8:c0:d3:36: 04:7d:11:65:33:12:68:8d:5d:77:c1:bc:56:ae:51: 04:8c:cc:69:db:fe:2c:d1:53:fc:59:a4:13:39:11: e6:46:c2:86:04:80:3a:61:c5:be:dc:38:23:97:95: 14:18:08:f9:3b:d0:91:a7:95:c6:36:d4:7a:06:63: d7:a0:b8:19:85:ec:4d:37:88:4a:25:8d:3d:8e:8b: 1e:79:bd:41:fc:66:1d:c5:d6:80:f2:67:f1:a4:fe: 6e:be:b9:1d:4b:4e:04:90:4e:ac:ad:5b:17:11:19: 41:65:59:ce:c8:62:4d:67:3c:36:4b:e7:26:f7:ed: 2c:00:12:c4:52:19:e0:60:42:43:b7:35:03:bc:5d: 2c:9d:fa:33:fd:06:46:f2:9f:08:43:fe:c7:9e:56: a1:f0:14:e2:ed:94:b6:41:ea:69:03:77:8c:41:47: a4:e7:2d:06:71:73:cb:30:89:9b:a4:1a:21:ad:7e: 60:31:8f:8e:0a:15:6f:78:da:d8:29:14:a5:60:82: d8:a7:82:1b:3c:b5:39:a1:8d:72:83:ee:30:dd:99: 66:97:f9:43:4a:52:79:0a:07:f3:0c:da:99:a7:a0: 82:c4:e2:42:88:fb:77:f9:ae:2c:b3:d0:4b:d8:49: a7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8B:F8:75:A8:19:DC:4B:29:BE:9A:E0:9A:7A:4D:4E:57:82:59:93 X509v3 Authority Key Identifier: keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ae:a9:f4:7a:49:c7:d9:dc:cb:ac:40:5a:f8:d3:9c:17:66: 9b:3d:d7:21:8e:fb:50:4c:55:08:cf:10:9d:a0:27:1a:ce:22: 67:1f:a7:57:a8:c3:60:59:00:29:2c:b0:6c:0c:80:71:6d:39: fc:48:da:76:7b:2d:d2:16:a6:88:a0:d8:83:86:04:0b:4d:02: 91:a0:96:a9:26:f3:7b:fc:33:26:c7:02:5d:6e:db:0d:0d:a7: 02:3c:c7:a2:9e:20:42:21:94:ab:5c:05:43:b1:c8:9d:f7:48: 0e:b8:51:00:bb:40:09:e5:48:31:e7:18:2b:bf:c9:43:d4:aa: 38:e3:44:e1:50:bc:96:8d:72:73:37:d3:f7:9f:21:68:ef:01: c0:8e:76:0a:cd:4a:17:14:06:82:7e:c8:7a:d9:db:8d:ce:59: 5e:79:10:64:c2:a2:8f:7f:23:50:38:fa:02:0f:35:fe:2f:85: b2:65:af:89:96:3d:16:ed:96:b3:c0:9d:3e:7e:63:6c:1a:51: fc:15:3b:ed:be:fa:f0:c2:fe:e5:a1:b0:09:f8:6e:c0:22:52: ec:ee:be:66:01:b5:e1:78:0f:7e:8b:40:7e:03:db:a6:55:c4: 6f:cd:36:8c:d3:c8:34:46:ac:d0:e9:52:c9:bd:4b:92:8b:6d: 89:17:71:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHG+Nf7HOPjgmVFUu6s/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMTc4MzdhMTBkYjFkM2RkNzNlMjBkZjBiNDc5ZTQwZGIy MjM2ZmUwHhcNMjUxMjA2MTAwMTU4WhcNMjUxMjA3MTAwMTU4WjAzMTEwLwYDVQQD EyhkMDhiZjg3NWE4MTlkYzRiMjliZTlhZTA5YTdhNGQ0ZTU3ODI1OTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gN8aYyHfe4TiejA0zYEfRFlMxJo jV13wbxWrlEEjMxp2/4s0VP8WaQTORHmRsKGBIA6YcW+3Dgjl5UUGAj5O9CRp5XG NtR6BmPXoLgZhexNN4hKJY09joseeb1B/GYdxdaA8mfxpP5uvrkdS04EkE6srVsX ERlBZVnOyGJNZzw2S+cm9+0sABLEUhngYEJDtzUDvF0snfoz/QZG8p8IQ/7Hnlah 8BTi7ZS2QeppA3eMQUek5y0GcXPLMImbpBohrX5gMY+OChVveNrYKRSlYILYp4Ib PLU5oY1yg+4w3Zlml/lDSlJ5CgfzDNqZp6CCxOJCiPt3+a4ss9BL2EmnFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCL+HWoGdxLKb6a4Jp6TU5XglmTMB8GA1UdIwQY MBaAFD4Xg3oQ2x091z4g3wtHnkDbIjb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGhlRGVoRGJIVDNYUGlEZkMwZWVRTnNpTnY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80YzA0M2MtNWZjZC00OGNiLWJkNTAt YzU5NmFmMmE0MmJhLzEvUGhlRGVoRGJIVDNYUGlEZkMwZWVRTnNpTnY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80YzA0M2MtNWZjZC00OGNiLWJkNTAtYzU5NmFmMmE0MmJh LzEvUGhlRGVoRGJIVDNYUGlEZkMwZWVRTnNpTnY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIa6p9HpJ x9ncy6xAWvjTnBdmmz3XIY77UExVCM8QnaAnGs4iZx+nV6jDYFkAKSywbAyAcW05 /Ejadnst0hamiKDYg4YEC00CkaCWqSbze/wzJscCXW7bDQ2nAjzHop4gQiGUq1wF Q7HInfdIDrhRALtACeVIMecYK7/JQ9SqOONE4VC8lo1yczfT958haO8BwI52Cs1K FxQGgn7Ietnbjc5ZXnkQZMKij38jUDj6Ag81/i+FsmWviZY9Fu2Ws8CdPn5jbBpR /BU77b768ML+5aGwCfhuwCJS7O6+ZgG14XgPfotAfgPbplXEb802jNPINEas0OlS yb1LkottiRdxgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:39:34 2025 by rpki-client