This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft File: RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json) Hash identifier: rLy/DpMa3MNXaVhsd8OiszKMj7Wqz4ZSNBIU8Y5owSM= Subject key identifier: 2B:22:B3:D1:B1:9C:C2:5E:95:12:DF:5D:B4:EE:50:A7:82:39:D9:CA Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07 Certificate issuer: /CN=44f4c5a61978549b248388f9df449d2a95e10a07 Certificate serial: 019B5D53DC20DE6DDA6DA142385BC6CB871B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 01:02:15 +0000 Manifest this update: Sat 27 Dec 2025 01:02:15 +0000 Manifest next update: Sun 28 Dec 2025 01:02:15 +0000 Files and hashes: 1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: jJYoIUqRRKyDI1vn0b4Yg7GBfm3yrovjwj84dJoKqQE=) 2: ios5KWpmGZUyejt9fTyM20Kq3iQ.roa (hash: ueEa/mQzKdPiJu8mODUSR4ctsWUuOZw5Ht5pcIUfCfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:dc:20:de:6d:da:6d:a1:42:38:5b:c6:cb:87:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07 Validity Not Before: Dec 27 01:02:15 2025 GMT Not After : Dec 28 01:02:15 2025 GMT Subject: CN=2b22b3d1b19cc25e9512df5db4ee50a78239d9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:02:24:5e:bc:78:15:7a:70:68:70:b1:f7:9e: 2b:b2:b1:c1:a3:9e:57:52:ec:ec:d2:38:42:be:60: 9b:7d:5b:3e:0e:6d:c6:70:e0:d7:21:b5:e4:bf:50: 86:34:2f:69:81:9b:da:18:e7:d8:6c:0d:3f:b1:14: b5:85:2f:8c:ea:3f:b0:4d:0e:da:f6:f0:f9:71:29: 32:1f:e0:8c:16:67:62:e2:8e:98:0e:74:23:c8:1c: 58:a0:8b:25:ef:66:53:fa:09:30:c4:9f:26:d0:24: 9e:c6:3a:22:08:d5:ec:3f:be:38:88:48:22:a1:58: 60:ea:a6:25:b8:8e:40:00:08:b6:05:17:a7:2e:f8: bd:51:d3:04:88:7b:d3:9d:53:3a:5d:ff:aa:44:6d: c8:be:db:2d:f8:07:e8:54:dd:e9:bc:23:0f:c4:fa: 57:ca:1b:9d:7c:73:96:e6:b0:90:94:f7:00:da:13: bc:d5:21:71:95:5e:d9:18:0e:49:f1:66:ff:44:cf: 93:22:a9:80:b9:65:c8:d0:fe:e1:09:df:5d:ca:be: 55:6f:4a:81:29:d6:01:86:c2:10:18:60:4d:d4:e1: 05:6b:6b:e7:a9:b7:e9:c5:94:73:a0:32:72:d5:fa: f4:7a:3c:79:73:78:4a:f9:4d:6c:f4:ad:98:b1:ad: 71:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:22:B3:D1:B1:9C:C2:5E:95:12:DF:5D:B4:EE:50:A7:82:39:D9:CA X509v3 Authority Key Identifier: keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:4f:d5:76:b1:83:66:f5:3e:d8:4c:d0:85:50:4b:5d:14:b7: de:e7:4b:52:0f:d6:3d:14:84:08:04:56:d3:2a:ee:dd:47:5b: c3:91:c1:73:02:fb:0c:16:94:0e:d4:81:41:ca:6f:0d:95:69: d4:5d:9c:9d:6d:c7:09:37:40:2c:1d:ca:ec:af:61:82:80:47: ec:b9:b2:25:e9:b2:e7:59:3b:f1:e7:36:dc:ba:8a:f7:74:f6: be:ad:d3:0a:0a:ed:e0:14:dd:e6:9d:67:49:63:e7:40:63:0a: d6:a9:9f:41:6e:eb:e3:b5:c2:e4:be:1b:d1:88:46:bf:28:8f: c1:41:38:aa:8c:23:d8:74:b9:77:4b:93:74:bd:c2:4a:69:69: 5d:35:c7:71:b4:4f:2f:b4:f7:c6:d0:d0:a4:d4:45:62:cc:0a: ce:25:6c:ba:15:d3:da:af:92:8a:13:58:30:6b:57:34:ab:84: 58:be:c0:25:c6:d2:82:08:f5:bd:86:a4:6b:05:dd:e6:c5:b9: a6:dd:ce:90:b5:47:2b:08:c6:5c:e8:90:2d:49:2e:14:1f:f5: d2:ed:9f:27:e6:83:80:ae:69:ab:72:b1:d9:a7:5e:86:77:fe: 35:de:9d:ba:c4:3f:ba:d2:b4:5a:a8:42:3d:8a:e7:fc:a7:44: cd:48:b5:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU9wg3m3abaFCOFvGy4cbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZjRjNWE2MTk3ODU0OWIyNDgzODhmOWRmNDQ5ZDJhOTVl MTBhMDcwHhcNMjUxMjI3MDEwMjE1WhcNMjUxMjI4MDEwMjE1WjAzMTEwLwYDVQQD EygyYjIyYjNkMWIxOWNjMjVlOTUxMmRmNWRiNGVlNTBhNzgyMzlkOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAIkXrx4FXpwaHCx954rsrHBo55X Uuzs0jhCvmCbfVs+Dm3GcODXIbXkv1CGNC9pgZvaGOfYbA0/sRS1hS+M6j+wTQ7a 9vD5cSkyH+CMFmdi4o6YDnQjyBxYoIsl72ZT+gkwxJ8m0CSexjoiCNXsP744iEgi oVhg6qYluI5AAAi2BRenLvi9UdMEiHvTnVM6Xf+qRG3Ivtst+AfoVN3pvCMPxPpX yhudfHOW5rCQlPcA2hO81SFxlV7ZGA5J8Wb/RM+TIqmAuWXI0P7hCd9dyr5Vb0qB KdYBhsIQGGBN1OEFa2vnqbfpxZRzoDJy1fr0ejx5c3hK+U1s9K2Ysa1xQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsis9GxnMJelRLfXbTuUKeCOdnKMB8GA1UdIwQY MBaAFET0xaYZeFSbJIOI+d9EnSqV4QoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlBURnBobDRWSnNrZzRqNTMwU2RLcFhoQ2djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lNWM4ZGYtNGVmOC00ZDkwLWE0OTAt MzU4MDBlOWYxNzBlLzEvUlBURnBobDRWSnNrZzRqNTMwU2RLcFhoQ2djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lNWM4ZGYtNGVmOC00ZDkwLWE0OTAtMzU4MDBlOWYxNzBl LzEvUlBURnBobDRWSnNrZzRqNTMwU2RLcFhoQ2djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0/VdrGD ZvU+2EzQhVBLXRS33udLUg/WPRSECARW0yru3Udbw5HBcwL7DBaUDtSBQcpvDZVp 1F2cnW3HCTdALB3K7K9hgoBH7LmyJemy51k78ec23LqK93T2vq3TCgrt4BTd5p1n SWPnQGMK1qmfQW7r47XC5L4b0YhGvyiPwUE4qowj2HS5d0uTdL3CSmlpXTXHcbRP L7T3xtDQpNRFYswKziVsuhXT2q+SihNYMGtXNKuEWL7AJcbSggj1vYakawXd5sW5 pt3OkLVHKwjGXOiQLUkuFB/10u2fJ+aDgK5pq3Kx2adehnf+Nd6dusQ/utK0WqhC PYrn/KdEzUi1Kg== -----END CERTIFICATE-----Generated at Sat Dec 27 10:52:14 2025 by rpki-client