This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft File: pHwKyKnV9ixJHUsXyyErUsDnVgc.mft (raw, json) Hash identifier: 0quBRa+gcQdGcZtv87ZOPZNmzlaPYLhkh7NwXjIvZ6k= Subject key identifier: C1:AA:ED:8A:B9:BA:DB:98:22:F8:46:20:4A:A0:C3:FC:4E:7E:6E:0A Authority key identifier: A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07 Certificate issuer: /CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607 Certificate serial: 019B66FA5D3501777A78C1D4244EFFB89B50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft Manifest number: 13E1 Signing time: Sun 28 Dec 2025 22:00:42 +0000 Manifest this update: Sun 28 Dec 2025 22:00:42 +0000 Manifest next update: Mon 29 Dec 2025 22:00:42 +0000 Files and hashes: 1: fFbdm0OeWE1GYVnCMSWrkaX1IWg.roa (hash: H5NNOHLLRS0hsZTLRHxW4ce45JGvEraIddrEMS924Cg=) 2: pHwKyKnV9ixJHUsXyyErUsDnVgc.crl (hash: bwyjh+pjUd2iMWS05rvQum1vncrj/rLc7Kq2boJ3wJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fa:5d:35:01:77:7a:78:c1:d4:24:4e:ff:b8:9b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607 Validity Not Before: Dec 28 22:00:42 2025 GMT Not After : Dec 29 22:00:42 2025 GMT Subject: CN=c1aaed8ab9badb9822f846204aa0c3fc4e7e6e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:62:52:49:27:e3:c1:fb:dd:71:2c:55:4c: 16:a8:8b:16:76:8a:d6:a5:95:29:b1:2b:b0:fa:e5: 2b:bb:37:1b:3b:d8:6f:06:6b:68:bf:09:7b:34:44: eb:76:10:5c:52:ae:88:70:ff:30:4b:e8:09:03:05: b5:50:a2:98:a8:69:71:e2:8c:75:49:02:da:46:bb: 67:23:7f:9a:15:70:78:46:da:50:53:4b:3f:8f:58: 17:a6:18:88:94:3b:c5:53:33:23:3a:14:4e:ca:d1: 70:95:90:cc:38:14:cd:4b:05:a4:0e:09:13:6d:b4: 37:67:78:3d:fa:3f:39:0c:fb:df:94:34:2a:47:f0: 1e:88:0c:63:fc:23:b6:0a:16:2a:eb:42:66:37:b8: 38:62:fc:bc:37:1b:84:b0:c7:e0:da:6d:fe:79:52: 39:99:15:e5:a9:b3:28:5d:95:51:12:df:be:e5:ed: 20:a1:09:f5:44:c9:4c:d1:d0:1d:d9:40:07:d7:81: 23:72:10:62:e8:e4:d6:03:bd:4e:ca:41:c6:75:c0: dd:16:73:bb:02:e4:28:b7:88:ea:f4:fe:6c:89:f2: 07:1a:ec:22:94:a6:1c:b7:b0:0b:cc:73:5b:8f:93: 7a:b5:ae:47:3f:db:5a:e0:66:21:e0:d0:de:32:d3: aa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AA:ED:8A:B9:BA:DB:98:22:F8:46:20:4A:A0:C3:FC:4E:7E:6E:0A X509v3 Authority Key Identifier: keyid:A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:57:6d:d8:26:f2:7d:52:9a:92:20:4b:e1:bf:89:21:d8:d7: 57:d2:96:18:3c:92:8d:f1:3c:93:5c:69:b4:72:94:9d:7b:34: b2:79:7b:5f:8e:28:77:f8:c6:c9:70:9f:4a:57:09:14:69:0f: 16:29:f0:6a:d3:c9:f3:9a:0f:0a:f1:57:34:9f:19:f0:01:28: 84:ac:ae:b5:e3:53:db:ab:cd:2c:e3:6d:7c:0b:d0:25:7b:6e: cb:99:a0:35:76:af:5b:74:e5:92:15:9d:08:56:11:a5:51:bc: 0b:40:64:6f:cd:d7:b7:eb:e9:d9:9f:4c:7f:f8:87:7c:2e:cd: dc:bb:50:45:14:7a:f3:31:62:af:29:1e:9b:49:df:80:7a:37: fd:0b:83:24:79:d4:53:41:b2:e1:1b:99:51:00:75:90:21:2c: 51:c6:30:fd:73:3a:de:f2:d4:f2:7e:4c:78:7c:65:67:5e:05: 76:90:9b:6c:77:17:38:26:28:5a:b7:a6:22:2d:fc:dc:a5:40: de:c6:c7:8b:c5:db:e1:bd:8d:f5:5c:3d:f9:e4:c8:19:d3:3a: 4e:71:4b:37:88:49:84:86:b2:72:78:51:76:a3:4e:4d:83:4b: 5e:dd:8b:f7:33:b5:dc:a8:95:cb:a3:ab:e4:85:4c:eb:11:98: 56:24:21:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+l01AXd6eMHUJE7/uJtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0N2MwYWM4YTlkNWY2MmM0OTFkNGIxN2NiMjEyYjUyYzBl NzU2MDcwHhcNMjUxMjI4MjIwMDQyWhcNMjUxMjI5MjIwMDQyWjAzMTEwLwYDVQQD EyhjMWFhZWQ4YWI5YmFkYjk4MjJmODQ2MjA0YWEwYzNmYzRlN2U2ZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG9iUkkn48H73XEsVUwWqIsWdorW pZUpsSuw+uUruzcbO9hvBmtovwl7NETrdhBcUq6IcP8wS+gJAwW1UKKYqGlx4ox1 SQLaRrtnI3+aFXB4RtpQU0s/j1gXphiIlDvFUzMjOhROytFwlZDMOBTNSwWkDgkT bbQ3Z3g9+j85DPvflDQqR/AeiAxj/CO2ChYq60JmN7g4Yvy8NxuEsMfg2m3+eVI5 mRXlqbMoXZVREt++5e0goQn1RMlM0dAd2UAH14EjchBi6OTWA71OykHGdcDdFnO7 AuQot4jq9P5sifIHGuwilKYct7ALzHNbj5N6ta5HP9ta4GYh4NDeMtOqGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGq7Yq5utuYIvhGIEqgw/xOfm4KMB8GA1UdIwQY MBaAFKR8Csip1fYsSR1LF8shK1LA51YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yNWM5MWQtNWEwNS00NmEyLTlhNzkt NDIwY2MyNTFlNWViLzEvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yNWM5MWQtNWEwNS00NmEyLTlhNzktNDIwY2MyNTFlNWVi LzEvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgldt2Cby fVKakiBL4b+JIdjXV9KWGDySjfE8k1xptHKUnXs0snl7X44od/jGyXCfSlcJFGkP FinwatPJ85oPCvFXNJ8Z8AEohKyuteNT26vNLONtfAvQJXtuy5mgNXavW3TlkhWd CFYRpVG8C0Bkb83Xt+vp2Z9Mf/iHfC7N3LtQRRR68zFirykem0nfgHo3/QuDJHnU U0Gy4RuZUQB1kCEsUcYw/XM63vLU8n5MeHxlZ14FdpCbbHcXOCYoWremIi383KVA 3sbHi8Xb4b2N9Vw9+eTIGdM6TnFLN4hJhIaycnhRdqNOTYNLXt2L9zO13KiVy6Or 5IVM6xGYViQh5g== -----END CERTIFICATE-----Generated at Sun Dec 28 23:40:06 2025 by rpki-client