This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json) Hash identifier: 4Fv/uKR+VAULKdo3uCr10NVPC2LsvsA5NJZPZXBER/A= Subject key identifier: 71:74:1E:4B:7E:2D:85:19:66:AF:72:DD:3F:DA:34:54:18:EF:CA:AE Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97 Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197 Certificate serial: 019B3B34A47AAF1173A2367EC9D2F8DC6FB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft Manifest number: 0BFF Signing time: Sat 20 Dec 2025 10:01:04 +0000 Manifest this update: Sat 20 Dec 2025 10:01:04 +0000 Manifest next update: Sun 21 Dec 2025 10:01:04 +0000 Files and hashes: 1: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: h1f+1jHd2h3JRs4JiHlnFlUxreIE2RBL5gpriNKLW0E=) 2: _BTZQ0zK_fvKReKxFaBu1-Vwvm8.roa (hash: IbkaaN1eobNCsZcNskJYmH0crzqKNoH6G8sKqEsCFhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:a4:7a:af:11:73:a2:36:7e:c9:d2:f8:dc:6f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197 Validity Not Before: Dec 20 10:01:04 2025 GMT Not After : Dec 21 10:01:04 2025 GMT Subject: CN=71741e4b7e2d851966af72dd3fda345418efcaae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e4:57:b3:0a:23:92:5a:e8:2f:4b:85:d5:d5: fe:23:73:f9:1a:84:38:53:1a:4e:83:d2:26:f1:5b: 57:d6:b4:03:ea:6d:c0:a4:3d:f4:14:bd:fb:4b:34: 65:a8:a7:cc:5c:4b:27:d9:51:55:2e:f1:0c:61:87: 3b:27:db:b9:fc:6e:d8:9f:c6:2f:a2:df:6a:37:da: 2d:f6:f3:90:77:da:df:de:2a:93:b7:84:f0:78:6c: 2b:d5:e2:8a:25:38:43:30:bb:5e:73:b5:48:7a:3f: 46:5a:5a:24:e2:fe:d4:59:4a:24:e2:fd:01:0a:de: 25:13:84:78:75:8d:57:20:62:a1:6d:98:1b:3a:f1: d0:c5:83:49:76:3c:ae:f6:a8:02:12:69:1b:7b:1b: 9e:ce:e7:9f:76:5c:d0:7f:3c:91:7f:7a:d1:ec:ae: a1:df:86:54:a1:ee:9d:9e:58:a4:47:25:d2:d5:b5: 7a:1a:16:9e:ad:bc:7b:f1:7c:fb:e6:36:13:3b:c0: c9:ab:71:20:c5:cc:0e:b9:04:e8:12:7f:84:e5:a6: a4:a0:e3:b4:ca:ce:58:7e:34:52:6a:07:ce:4b:e9: 1c:59:37:0a:a7:ea:f9:d6:bb:6d:df:05:3b:7b:6c: bc:70:8c:39:63:fa:d8:35:f5:ea:66:a7:93:46:de: 01:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:74:1E:4B:7E:2D:85:19:66:AF:72:DD:3F:DA:34:54:18:EF:CA:AE X509v3 Authority Key Identifier: keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:36:a6:2b:c2:5d:0d:42:b9:7c:e6:21:f9:b6:77:54:81:10: 38:70:6f:7f:96:60:f5:f8:5a:cb:5b:fd:9e:d4:09:2e:02:59: 21:33:a9:e4:c5:30:bc:3e:ad:10:ff:78:6a:d6:9e:03:b1:23: aa:2d:ac:47:92:08:9c:d4:8d:60:8f:83:f5:8b:e9:ee:1a:b6: c3:4a:18:ad:99:c1:59:bf:be:6f:68:24:7b:7f:4c:3d:fb:0f: 1c:25:67:f5:2a:1c:3c:d9:99:5b:9a:2e:25:52:89:18:9f:a0: 7c:11:fe:83:60:ef:ab:63:cb:9d:6c:e2:67:8d:1a:71:14:14: 69:cc:8a:14:2d:4b:a6:12:4e:8b:77:7c:cc:a9:8f:a6:b1:19: 0c:34:9e:ce:c5:cd:55:33:01:40:3f:b2:d3:2d:01:05:3c:c6: 26:9d:02:73:8f:1d:d0:22:e3:9b:cf:a5:9c:10:c9:4a:14:a5: e2:0f:0d:6a:1d:e2:bd:c4:b9:1f:2d:96:52:58:36:09:84:63: 22:2e:84:52:08:af:27:ca:1e:1b:dc:a1:69:88:4b:46:a4:c7: ec:1d:d3:3d:ed:92:b1:9a:86:6b:b7:45:a6:37:7a:0b:42:bb: 34:e7:7a:31:bc:2f:e8:bb:9b:21:94:a5:d4:4e:50:a2:05:45: 44:c7:03:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NKR6rxFzojZ+ydL43G+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNzc1ZTFiOWZiMGFjOTNkNTYzYmE4ZTk3MDg4NGRhNTdi NmUxOTcwHhcNMjUxMjIwMTAwMTA0WhcNMjUxMjIxMTAwMTA0WjAzMTEwLwYDVQQD Eyg3MTc0MWU0YjdlMmQ4NTE5NjZhZjcyZGQzZmRhMzQ1NDE4ZWZjYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+RXswojklroL0uF1dX+I3P5GoQ4 UxpOg9Im8VtX1rQD6m3ApD30FL37SzRlqKfMXEsn2VFVLvEMYYc7J9u5/G7Yn8Yv ot9qN9ot9vOQd9rf3iqTt4TweGwr1eKKJThDMLtec7VIej9GWlok4v7UWUok4v0B Ct4lE4R4dY1XIGKhbZgbOvHQxYNJdjyu9qgCEmkbexuezuefdlzQfzyRf3rR7K6h 34ZUoe6dnlikRyXS1bV6Ghaerbx78Xz75jYTO8DJq3EgxcwOuQToEn+E5aakoOO0 ys5YfjRSagfOS+kcWTcKp+r51rtt3wU7e2y8cIw5Y/rYNfXqZqeTRt4BPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHF0Hkt+LYUZZq9y3T/aNFQY78quMB8GA1UdIwQY MBaAFDx3XhufsKyT1WO6jpcIhNpXtuGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEt NGU1Njg2YmU2YjgyLzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEtNGU1Njg2YmU2Yjgy LzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzamK8Jd DUK5fOYh+bZ3VIEQOHBvf5Zg9fhay1v9ntQJLgJZITOp5MUwvD6tEP94ataeA7Ej qi2sR5IInNSNYI+D9Yvp7hq2w0oYrZnBWb++b2gke39MPfsPHCVn9SocPNmZW5ou JVKJGJ+gfBH+g2Dvq2PLnWziZ40acRQUacyKFC1LphJOi3d8zKmPprEZDDSezsXN VTMBQD+y0y0BBTzGJp0Cc48d0CLjm8+lnBDJShSl4g8Nah3ivcS5Hy2WUlg2CYRj Ii6EUgivJ8oeG9yhaYhLRqTH7B3TPe2SsZqGa7dFpjd6C0K7NOd6Mbwv6LubIZSl 1E5QogVFRMcDpQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:52:09 2025 by rpki-client