This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
File:                     phvll6k-axrZQXjQPo6MFVcmeMc.mft (raw, json)
Hash identifier:          +bhF4mBqxWBpN3PyX+pLA6jxWQWOuwu51hDTsutC8Xg=
Subject key identifier:   FB:E0:CC:B3:75:5D:41:12:94:8C:17:EB:2B:82:99:4E:60:E7:ED:5B
Authority key identifier: A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7
Certificate issuer:       /CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
Certificate serial:       019B4581758A08624C8FC84913DE4FD24751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
Manifest number:          0571
Signing time:             Mon 22 Dec 2025 10:01:10 +0000
Manifest this update:     Mon 22 Dec 2025 10:01:10 +0000
Manifest next update:     Tue 23 Dec 2025 10:01:10 +0000
Files and hashes:         1: phvll6k-axrZQXjQPo6MFVcmeMc.crl (hash: tUNuQYSZKFvCxs9rsBPhWQb8nxESXFXNADynA5MfBZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 10:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:45:81:75:8a:08:62:4c:8f:c8:49:13:de:4f:d2:47:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
        Validity
            Not Before: Dec 22 10:01:10 2025 GMT
            Not After : Dec 23 10:01:10 2025 GMT
        Subject: CN=fbe0ccb3755d4112948c17eb2b82994e60e7ed5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:85:57:fb:ef:df:40:ab:ac:03:e2:9c:58:c6:
                    db:3e:00:a1:a3:a5:bf:23:5a:10:8d:c2:61:3b:11:
                    6a:d6:ba:e9:11:d3:a7:16:db:63:1e:e4:5c:37:fd:
                    1e:48:62:e2:a6:e9:29:54:24:9d:6d:13:b7:4a:e4:
                    86:ee:e9:95:35:13:a0:76:ac:e3:9b:c5:99:85:7a:
                    ce:1b:70:62:32:6e:4a:2a:ca:c6:d7:d8:f1:e5:c9:
                    87:72:6c:40:b7:0a:ea:24:91:4b:a9:c0:4f:a2:39:
                    0e:e6:63:a3:48:1a:7b:5c:cc:b2:70:9b:fc:c0:07:
                    45:33:de:50:20:9a:e7:f9:5f:17:e7:1d:3b:49:ca:
                    71:68:45:d4:60:41:0b:c8:3f:15:57:3e:ce:54:63:
                    bc:5f:1f:db:d3:94:6d:9a:c2:d2:a0:7e:6d:17:14:
                    df:34:29:95:78:cd:22:16:e9:aa:65:d2:6b:51:f0:
                    10:78:7f:75:55:eb:b9:82:6f:ab:ac:93:f2:56:00:
                    8f:62:cb:e5:ee:50:a9:ff:fb:32:28:59:01:d4:42:
                    10:0f:b8:ec:d3:8f:64:4c:0a:77:5f:07:e4:fa:32:
                    64:b1:35:0b:77:59:fa:ad:ed:ca:c3:74:6a:cd:28:
                    00:7b:e7:44:e2:ec:a7:a6:10:bb:af:78:f2:0d:1c:
                    aa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E0:CC:B3:75:5D:41:12:94:8C:17:EB:2B:82:99:4E:60:E7:ED:5B
            X509v3 Authority Key Identifier:
                keyid:A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f0:9c:b1:8a:41:f8:10:12:2a:7f:df:15:db:f3:32:2f:a4:
         81:4b:30:59:7b:1e:16:6f:4f:14:3f:2d:f3:2b:b0:48:15:eb:
         38:88:b1:51:05:8d:13:4f:d7:ee:fc:38:3e:7a:1b:e0:48:f3:
         95:9b:b7:89:bf:5c:4f:00:e2:cb:b7:4a:ef:7f:a4:98:ae:cc:
         70:c0:d1:81:20:24:17:3b:6a:55:bd:4a:e4:ea:1a:48:56:20:
         1e:ba:a7:49:a8:5c:40:47:46:8e:c0:9c:92:c5:07:be:1f:39:
         c6:c9:1b:0a:a7:d3:1d:ec:a6:e3:d8:86:82:7b:84:9a:c4:f2:
         06:84:46:3c:4d:62:58:ae:2e:49:2a:53:f0:2a:2e:3d:16:b9:
         91:27:94:ce:3b:22:90:47:0b:20:5d:25:81:d0:8e:50:40:14:
         dc:c1:be:d9:ba:00:73:db:9a:67:59:44:86:1d:f8:af:bf:a7:
         4a:54:a0:57:ce:00:66:23:2b:bd:ad:20:9d:5a:5e:70:e6:37:
         5c:15:19:37:2f:fc:ec:e5:b9:b0:b5:87:5e:45:82:3f:ab:55:
         3c:31:62:3a:3d:cc:98:59:c7:1d:2f:1f:c4:cb:75:89:0c:b0:
         c7:2e:c8:67:10:59:51:74:a3:19:d6:1d:74:2c:ac:be:16:7d:
         6a:1c:d3:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtFgXWKCGJMj8hJE95P0kdRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MWJlNTk3YTkzZTZiMWFkOTQxNzhkMDNlOGU4YzE1NTcy
Njc4YzcwHhcNMjUxMjIyMTAwMTEwWhcNMjUxMjIzMTAwMTEwWjAzMTEwLwYDVQQD
EyhmYmUwY2NiMzc1NWQ0MTEyOTQ4YzE3ZWIyYjgyOTk0ZTYwZTdlZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYVX++/fQKusA+KcWMbbPgCho6W/
I1oQjcJhOxFq1rrpEdOnFttjHuRcN/0eSGLipukpVCSdbRO3SuSG7umVNROgdqzj
m8WZhXrOG3BiMm5KKsrG19jx5cmHcmxAtwrqJJFLqcBPojkO5mOjSBp7XMyycJv8
wAdFM95QIJrn+V8X5x07ScpxaEXUYEELyD8VVz7OVGO8Xx/b05RtmsLSoH5tFxTf
NCmVeM0iFumqZdJrUfAQeH91Veu5gm+rrJPyVgCPYsvl7lCp//syKFkB1EIQD7js
049kTAp3Xwfk+jJksTULd1n6re3Kw3RqzSgAe+dE4uynphC7r3jyDRyqqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvgzLN1XUESlIwX6yuCmU5g5+1bMB8GA1UdIwQY
MBaAFKYb5ZepPmsa2UF40D6OjBVXJnjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81NmEwZWYtZjZiOS00MjQwLTljZGMt
YzFlNGNjYjE1NmVlLzEvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC81NmEwZWYtZjZiOS00MjQwLTljZGMtYzFlNGNjYjE1NmVl
LzEvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffCcsYpB
+BASKn/fFdvzMi+kgUswWXseFm9PFD8t8yuwSBXrOIixUQWNE0/X7vw4Pnob4Ejz
lZu3ib9cTwDiy7dK73+kmK7McMDRgSAkFztqVb1K5OoaSFYgHrqnSahcQEdGjsCc
ksUHvh85xskbCqfTHeym49iGgnuEmsTyBoRGPE1iWK4uSSpT8CouPRa5kSeUzjsi
kEcLIF0lgdCOUEAU3MG+2boAc9uaZ1lEhh34r7+nSlSgV84AZiMrva0gnVpecOY3
XBUZNy/87OW5sLWHXkWCP6tVPDFiOj3MmFnHHS8fxMt1iQywxy7IZxBZUXSjGdYd
dCysvhZ9ahzTdw==
-----END CERTIFICATE-----
Generated at Mon Dec 22 14:12:20 2025 by rpki-client