This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json) Hash identifier: XEFsPI1lGSUOPXmYmJ3mET8q2CyCJyRqvAbuKVx67zs= Subject key identifier: D1:70:25:C6:4E:88:DC:8E:99:B6:10:B5:4B:51:C4:E6:93:11:8A:52 Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8 Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8 Certificate serial: 019B3EDAB402ABE76B897C78A0FDAB294DA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft Manifest number: 0851 Signing time: Sun 21 Dec 2025 03:01:18 +0000 Manifest this update: Sun 21 Dec 2025 03:01:18 +0000 Manifest next update: Mon 22 Dec 2025 03:01:18 +0000 Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: 4pnJqtcwDdw+4H6QYUGkwWKspXjmPe/761WSRMQLJEY=) 2: i340sEAoenuAlzDA8ogYFKSVnwY.roa (hash: DVw1PaAdh7Q9w56s4rrXE98GYfSax4nkJShcu/YtVBo=) 3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:b4:02:ab:e7:6b:89:7c:78:a0:fd:ab:29:4d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8 Validity Not Before: Dec 21 03:01:18 2025 GMT Not After : Dec 22 03:01:18 2025 GMT Subject: CN=d17025c64e88dc8e99b610b54b51c4e693118a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:77:55:5b:c5:67:41:70:31:f6:e0:52:14:32: 0c:72:99:80:41:2f:f8:3f:15:56:04:b8:41:c8:0a: 0d:b8:98:b4:5a:a5:d6:a8:d8:5b:31:7e:f7:e9:69: 0b:ad:46:c3:e2:04:df:b1:1c:eb:78:90:27:bd:89: 17:b6:33:37:96:fb:a0:16:d1:e3:47:c7:60:61:c9: 8d:9e:59:99:b4:90:0e:5b:0b:2a:85:52:8c:f9:d8: c2:4d:16:8a:1a:cb:77:a8:19:f4:4b:82:48:88:c8: 60:29:8d:dc:c6:28:b8:ee:d6:a5:34:9d:89:45:13: b1:dc:c9:09:bd:8c:6f:74:18:f1:24:ea:59:e6:54: dc:5b:98:ab:94:6d:b3:9c:50:64:b8:19:25:10:2b: c9:3f:89:ac:02:54:fa:66:95:e3:02:cc:f1:f7:26: 44:d8:0d:40:dd:6e:e7:fc:92:87:68:8a:ef:76:29: 30:23:17:18:51:04:d8:7a:0e:a4:f3:02:de:9a:9b: 30:02:d9:2e:86:dc:db:a4:53:0f:8b:41:f4:29:bc: f7:ca:6e:a4:e9:e7:27:c2:46:12:a0:37:21:c4:88: 1f:48:ee:d5:69:cc:07:34:0e:82:df:8e:21:3b:af: e4:1f:02:ba:73:d7:f4:86:42:60:c0:87:90:64:52: 2f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:70:25:C6:4E:88:DC:8E:99:B6:10:B5:4B:51:C4:E6:93:11:8A:52 X509v3 Authority Key Identifier: keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:61:be:44:6f:4b:cc:9d:a1:1b:8d:ba:eb:ca:da:f8:58:b5: 93:f8:48:a1:ba:12:24:26:bf:ca:7a:d7:73:dd:47:ba:51:31: d2:ad:4f:ad:d8:f9:50:99:cc:14:30:47:1e:57:ec:e3:db:34: ae:82:e3:2a:28:de:5b:72:5c:59:db:6b:e4:64:2e:b3:99:71: 4c:0f:69:6f:98:9b:41:17:1e:86:62:36:19:a8:29:4a:8b:15: f0:33:e1:04:84:a6:8d:4b:4b:f6:b3:ff:37:7e:34:4b:1b:a9: 82:59:a2:30:c6:b0:34:4f:3f:90:9d:90:00:f9:45:a3:ab:ad: 25:cd:44:d1:9e:b0:37:c7:dc:6b:3d:58:00:58:7c:74:fb:9d: f7:a1:a3:4f:04:61:ff:90:38:d1:1d:d6:06:ce:d4:60:21:97: a6:8e:0c:df:86:96:5d:3e:22:24:f7:7a:db:03:41:12:71:01: 58:0f:a3:0c:1d:ca:c8:89:44:ce:a4:17:ad:f1:17:41:57:c5: 94:28:2d:36:74:af:a0:dd:09:8c:18:63:df:6c:c2:ae:20:68: c8:0a:3c:fc:cc:79:0b:dd:0d:d6:a8:18:b0:ee:ee:8e:22:3e: 36:4a:09:3d:b4:e4:6c:fd:88:cb:f2:c3:d0:7c:08:cf:a2:21: 72:59:44:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2rQCq+driXx4oP2rKU2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZjFmYmRiY2UyMTQ1YTBkYjY5MDA2MDlmN2M1NDczMmRm YjBjZDgwHhcNMjUxMjIxMDMwMTE4WhcNMjUxMjIyMDMwMTE4WjAzMTEwLwYDVQQD EyhkMTcwMjVjNjRlODhkYzhlOTliNjEwYjU0YjUxYzRlNjkzMTE4YTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHdVW8VnQXAx9uBSFDIMcpmAQS/4 PxVWBLhByAoNuJi0WqXWqNhbMX736WkLrUbD4gTfsRzreJAnvYkXtjM3lvugFtHj R8dgYcmNnlmZtJAOWwsqhVKM+djCTRaKGst3qBn0S4JIiMhgKY3cxii47talNJ2J RROx3MkJvYxvdBjxJOpZ5lTcW5irlG2znFBkuBklECvJP4msAlT6ZpXjAszx9yZE 2A1A3W7n/JKHaIrvdikwIxcYUQTYeg6k8wLempswAtkuhtzbpFMPi0H0Kbz3ym6k 6ecnwkYSoDchxIgfSO7VacwHNA6C344hO6/kHwK6c9f0hkJgwIeQZFIvQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFwJcZOiNyOmbYQtUtRxOaTEYpSMB8GA1UdIwQY MBaAFNjx+9vOIUWg22kAYJ98VHMt+wzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMTQzMWUtNWE3ZC00ZmMzLWE4OGQt NDdmMDQzZmJhMTNiLzEvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zMTQzMWUtNWE3ZC00ZmMzLWE4OGQtNDdmMDQzZmJhMTNi LzEvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmG+RG9L zJ2hG42668ra+Fi1k/hIoboSJCa/ynrXc91HulEx0q1Prdj5UJnMFDBHHlfs49s0 roLjKijeW3JcWdtr5GQus5lxTA9pb5ibQRcehmI2GagpSosV8DPhBISmjUtL9rP/ N340SxupglmiMMawNE8/kJ2QAPlFo6utJc1E0Z6wN8fcaz1YAFh8dPud96GjTwRh /5A40R3WBs7UYCGXpo4M34aWXT4iJPd62wNBEnEBWA+jDB3KyIlEzqQXrfEXQVfF lCgtNnSvoN0JjBhj32zCriBoyAo8/Mx5C90N1qgYsO7ujiI+NkoJPbTkbP2Iy/LD 0HwIz6IhcllEUQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:00 2025 by rpki-client