This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft File: phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json) Hash identifier: ATrjePCcvVF4p5itJIFiYllprh6luf/21WlyU4m/DnA= Subject key identifier: FF:A0:28:53:E7:AE:E4:44:BE:D5:B8:29:89:FF:00:9E:8D:08:81:31 Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63 Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063 Certificate serial: 019AF19B5BA8B9093C462B390151370E749E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:21 +0000 Manifest this update: Sat 06 Dec 2025 03:01:21 +0000 Manifest next update: Sun 07 Dec 2025 03:01:21 +0000 Files and hashes: 1: K8gb2IugzK8IgsCtvVgzoDUY6tM.roa (hash: wR8LR0jtRTOAWt2SjVhqd0hsllRe9a/OzBTCiGqDDfI=) 2: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: vDcKgQpXU/eXyCsDrz2pzjSDZ2spaPULf9Dd4kvb4rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:5b:a8:b9:09:3c:46:2b:39:01:51:37:0e:74:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063 Validity Not Before: Dec 6 03:01:21 2025 GMT Not After : Dec 7 03:01:21 2025 GMT Subject: CN=ffa02853e7aee444bed5b82989ff009e8d088131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dc:5c:ff:30:1c:b4:f6:3e:90:1d:83:21:22: 5a:56:7b:cd:7b:30:f3:cf:49:86:a7:09:97:93:b4: 29:4f:77:dc:63:c0:28:3e:cd:b9:e8:dc:4b:2e:62: b1:d2:a2:99:c0:54:b8:27:d5:4e:fe:ae:93:a3:dd: 95:43:e5:4e:1f:37:b9:34:f7:48:22:41:c3:25:ce: c2:7e:1d:0e:b8:41:e8:0f:e8:80:5e:00:4a:7b:c8: 58:23:89:d1:61:8a:9f:3b:5a:e3:23:04:d5:73:52: 25:3c:96:00:4b:be:86:38:fd:b1:18:9e:b1:3e:5f: bf:7f:db:a9:bb:57:24:a6:ee:52:06:1b:58:b4:9d: a1:30:b2:20:a0:b9:e5:c1:5b:1f:c4:aa:07:81:40: 29:36:db:21:b1:df:9d:35:b7:08:e6:04:34:0a:63: af:ad:7a:d6:7a:cd:6e:44:70:fa:0f:30:7a:6d:01: fe:7e:26:9c:f1:cc:42:83:de:26:44:5d:4b:03:11: 6e:c7:13:a1:75:91:ba:f6:09:5a:05:52:b1:e2:f1: 9c:d8:4a:76:f3:11:70:9e:ff:f8:ed:b9:8f:3c:f5: a5:10:e8:f6:f0:ce:8c:7a:75:6f:fb:a2:07:37:99: 9e:f4:fc:b9:11:f8:c5:11:81:7a:29:5a:73:ee:88: ac:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A0:28:53:E7:AE:E4:44:BE:D5:B8:29:89:FF:00:9E:8D:08:81:31 X509v3 Authority Key Identifier: keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:30:6d:a9:c8:88:55:d5:ef:7d:e4:b3:a5:64:35:a9:02:50: b7:f0:ab:93:ea:cf:b1:c8:65:c3:4c:8e:b8:fe:28:8f:ae:25: 2c:dd:a3:dc:19:57:f6:7d:f6:4c:45:74:e7:74:48:6e:1b:0e: 3b:e8:68:80:e3:5f:bd:58:8c:19:5a:ea:9a:1e:a9:5c:ec:15: 89:14:78:c8:e3:f6:48:30:be:48:00:da:53:d5:1d:9b:4a:c3: 1b:bb:3e:de:2a:b2:2a:cb:29:45:d4:39:4d:9f:0d:2b:f3:f1: 94:41:b5:c3:59:41:fe:74:c8:61:e1:1a:10:f2:99:dc:46:f7: c6:01:bf:56:db:85:31:1b:be:d1:81:7a:37:5c:1e:b6:61:25: 31:9f:d5:a8:17:38:a4:a5:32:f1:c8:c5:1e:a7:d6:e6:ce:25: 3e:d1:3b:51:d1:15:50:3a:b0:78:52:07:c0:ae:a3:58:5d:bc: d2:b6:f8:a5:a6:74:f7:56:58:b5:51:97:14:5a:44:0b:0a:b4: 80:2a:a9:6e:93:4b:be:98:a2:56:43:b7:ef:32:7d:95:94:51: 30:89:e8:22:3a:4e:6e:de:a6:c8:c1:ac:d5:95:ba:38:61:26: 9b:b1:da:df:b6:ef:b2:50:33:0e:eb:3c:0a:aa:c0:48:c3:13: 3f:57:6a:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1uouQk8Ris5AVE3DnSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MWE4ZjY2N2EzZGRkYmQ0YTM1MjMxOGQ4ZjA2MDZjNDZl OWYwNjMwHhcNMjUxMjA2MDMwMTIxWhcNMjUxMjA3MDMwMTIxWjAzMTEwLwYDVQQD EyhmZmEwMjg1M2U3YWVlNDQ0YmVkNWI4Mjk4OWZmMDA5ZThkMDg4MTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdxc/zActPY+kB2DISJaVnvNezDz z0mGpwmXk7QpT3fcY8AoPs256NxLLmKx0qKZwFS4J9VO/q6To92VQ+VOHze5NPdI IkHDJc7Cfh0OuEHoD+iAXgBKe8hYI4nRYYqfO1rjIwTVc1IlPJYAS76GOP2xGJ6x Pl+/f9upu1ckpu5SBhtYtJ2hMLIgoLnlwVsfxKoHgUApNtshsd+dNbcI5gQ0CmOv rXrWes1uRHD6DzB6bQH+fiac8cxCg94mRF1LAxFuxxOhdZG69glaBVKx4vGc2Ep2 8xFwnv/47bmPPPWlEOj28M6MenVv+6IHN5me9Py5EfjFEYF6KVpz7oisDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+gKFPnruREvtW4KYn/AJ6NCIExMB8GA1UdIwQY MBaAFKYaj2Z6Pd29SjUjGNjwYGxG6fBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jZTg4YTItZWI4Ny00MmE1LTkxNmQt YjU2YmIwNjQ3ODY4LzEvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jZTg4YTItZWI4Ny00MmE1LTkxNmQtYjU2YmIwNjQ3ODY4 LzEvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDBtqciI VdXvfeSzpWQ1qQJQt/Crk+rPschlw0yOuP4oj64lLN2j3BlX9n32TEV053RIbhsO O+hogONfvViMGVrqmh6pXOwViRR4yOP2SDC+SADaU9Udm0rDG7s+3iqyKsspRdQ5 TZ8NK/PxlEG1w1lB/nTIYeEaEPKZ3Eb3xgG/VtuFMRu+0YF6N1wetmElMZ/VqBc4 pKUy8cjFHqfW5s4lPtE7UdEVUDqweFIHwK6jWF280rb4paZ091ZYtVGXFFpECwq0 gCqpbpNLvpiiVkO37zJ9lZRRMInoIjpObt6myMGs1ZW6OGEmm7Ha37bvslAzDus8 CqrASMMTP1dqFg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:26:28 2025 by rpki-client