This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft File: pPhiddwhxh2gzs0Sfpd0zKoysLs.mft (raw, json) Hash identifier: QbDY39Wy77KqftaPGep2GVOML1jVaJPmSVlI/Zwevw4= Subject key identifier: 68:7A:59:24:54:35:C0:79:A8:58:AE:F4:4E:03:53:FB:AA:B3:B1:C2 Authority key identifier: A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB Certificate issuer: /CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb Certificate serial: 019B67316BF3EA08E296DC7941742515E39D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft Manifest number: 179F Signing time: Sun 28 Dec 2025 23:00:50 +0000 Manifest this update: Sun 28 Dec 2025 23:00:50 +0000 Manifest next update: Mon 29 Dec 2025 23:00:50 +0000 Files and hashes: 1: a0SjSsK93R47m4eRP1Kso9k59CQ.roa (hash: 4DqaXQky67MktM88+QkXZEvBSJRKln9MtvLpFVmXjJ0=) 2: pPhiddwhxh2gzs0Sfpd0zKoysLs.crl (hash: QuB6OvxjuQyACk5tWQtVCd+UpaVh0X4dWzD6SFXbV7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:31:6b:f3:ea:08:e2:96:dc:79:41:74:25:15:e3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb Validity Not Before: Dec 28 23:00:50 2025 GMT Not After : Dec 29 23:00:50 2025 GMT Subject: CN=687a59245435c079a858aef44e0353fbaab3b1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:65:26:f4:e9:40:87:5b:3a:7a:7b:78:7c: ab:58:ee:ff:c8:b4:de:01:96:44:e2:25:09:4e:6c: b1:52:6f:6f:08:bd:57:8d:66:24:6b:76:f9:07:08: aa:91:e5:de:01:95:d1:e0:fb:31:13:c2:67:11:21: 61:7f:ba:db:94:26:c6:af:74:f0:64:20:91:66:6c: fc:0e:a0:d1:41:f2:b6:c3:43:97:41:21:73:22:18: b2:b8:88:97:4d:0d:14:3f:0a:4c:03:82:56:aa:ce: e3:49:b2:90:eb:fd:f9:21:4f:ba:09:1d:7b:34:08: 2b:1f:bb:cf:a5:04:d2:c2:b6:ce:22:95:5d:83:25: c6:2d:44:26:2c:d6:42:7c:58:da:67:0a:d6:85:24: ba:33:3b:a3:2e:92:4c:ce:52:c6:bb:a1:25:b9:1a: 6e:cd:e9:a4:5a:83:35:ee:7b:ca:9f:a8:a8:8b:6d: 9f:31:76:18:3e:27:72:9a:65:1e:0a:b3:26:e8:d1: 37:86:2e:9a:f3:59:21:ba:29:ac:57:ca:46:47:c1: e1:5b:5b:71:82:61:96:bd:f7:4d:ad:f8:62:31:c9: 1a:78:01:15:99:08:35:02:35:8d:1a:1f:14:92:82: 79:8a:e2:33:8d:52:96:f1:1a:a3:b0:7a:6c:b2:15: 7f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7A:59:24:54:35:C0:79:A8:58:AE:F4:4E:03:53:FB:AA:B3:B1:C2 X509v3 Authority Key Identifier: keyid:A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b6:b7:56:2d:c8:05:e5:ff:54:00:4f:04:02:4b:99:65:01: 69:9e:ce:bf:24:5c:5a:47:9a:48:96:c0:68:ca:11:56:61:0d: 22:32:b8:86:0e:57:54:00:4e:eb:9a:06:2c:e2:1b:88:51:56: a5:1c:93:b8:e2:a2:49:83:e2:0c:d4:e2:00:58:3d:10:20:60: 27:b9:32:c9:a9:c9:7e:ed:57:7f:61:24:ef:1b:25:1b:ef:1b: 36:90:66:0b:15:ed:18:9f:bc:9d:6e:73:d8:e9:ef:08:2a:ac: 81:cf:01:ee:41:2b:50:5b:aa:8a:97:cf:89:a3:b4:b9:a9:e5: c3:85:3f:14:a9:93:70:0c:19:01:c8:86:8a:58:f8:06:05:6e: f5:3b:45:a0:af:dd:d1:9e:f7:8c:ec:8d:dc:9b:87:89:f3:1d: b6:4f:e5:0b:46:a6:f0:22:bc:f1:bb:c3:fd:9a:27:f8:11:cf: d4:a0:ec:34:45:de:1d:66:82:b6:5b:7c:7c:b8:97:d1:a7:87: 6d:ec:0f:53:f8:46:4d:04:5b:a0:87:ad:31:9a:78:9c:d5:6b: b4:f1:de:93:18:4e:6f:49:aa:d1:e5:99:ae:68:5c:fe:8d:df: 3d:6e:0d:78:e2:24:b5:4e:b3:0e:6f:72:a2:6d:2e:e1:22:04: 1c:16:22:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnMWvz6gjiltx5QXQlFeOdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Zjg2Mjc1ZGMyMWM2MWRhMGNlY2QxMjdlOTc3NGNjYWEz MmIwYmIwHhcNMjUxMjI4MjMwMDUwWhcNMjUxMjI5MjMwMDUwWjAzMTEwLwYDVQQD Eyg2ODdhNTkyNDU0MzVjMDc5YTg1OGFlZjQ0ZTAzNTNmYmFhYjNiMWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9VlJvTpQIdbOnp7eHyrWO7/yLTe AZZE4iUJTmyxUm9vCL1XjWYka3b5BwiqkeXeAZXR4PsxE8JnESFhf7rblCbGr3Tw ZCCRZmz8DqDRQfK2w0OXQSFzIhiyuIiXTQ0UPwpMA4JWqs7jSbKQ6/35IU+6CR17 NAgrH7vPpQTSwrbOIpVdgyXGLUQmLNZCfFjaZwrWhSS6MzujLpJMzlLGu6EluRpu zemkWoM17nvKn6ioi22fMXYYPidymmUeCrMm6NE3hi6a81khuimsV8pGR8HhW1tx gmGWvfdNrfhiMckaeAEVmQg1AjWNGh8UkoJ5iuIzjVKW8RqjsHpsshV/1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGh6WSRUNcB5qFiu9E4DU/uqs7HCMB8GA1UdIwQY MBaAFKT4YnXcIcYdoM7NEn6XdMyqMrC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBoaWRkd2h4aDJnenMwU2ZwZDB6S295c0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YThiZjItNmNiMy00OWFlLTllMzIt ODgyOWVlNjYxYzY0LzEvcFBoaWRkd2h4aDJnenMwU2ZwZDB6S295c0xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YThiZjItNmNiMy00OWFlLTllMzItODgyOWVlNjYxYzY0 LzEvcFBoaWRkd2h4aDJnenMwU2ZwZDB6S295c0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLa3Vi3I BeX/VABPBAJLmWUBaZ7OvyRcWkeaSJbAaMoRVmENIjK4hg5XVABO65oGLOIbiFFW pRyTuOKiSYPiDNTiAFg9ECBgJ7kyyanJfu1Xf2Ek7xslG+8bNpBmCxXtGJ+8nW5z 2OnvCCqsgc8B7kErUFuqipfPiaO0uanlw4U/FKmTcAwZAciGilj4BgVu9TtFoK/d 0Z73jOyN3JuHifMdtk/lC0am8CK88bvD/Zon+BHP1KDsNEXeHWaCtlt8fLiX0aeH bewPU/hGTQRboIetMZp4nNVrtPHekxhOb0mq0eWZrmhc/o3fPW4NeOIktU6zDm9y om0u4SIEHBYiZA== -----END CERTIFICATE-----Generated at Mon Dec 29 04:15:48 2025 by rpki-client