This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft File: R-ph18wsJ4p8S8-8ITezlKImVK0.mft (raw, json) Hash identifier: FipjiToiKZuRqQI+HkdS8ViCIV4ip4Ujoaj/UFKOhWQ= Subject key identifier: CF:8E:45:83:D6:F2:80:7E:DC:B6:9D:55:FF:82:D6:9D:13:01:29:76 Authority key identifier: 47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD Certificate issuer: /CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad Certificate serial: 019B41370C834EEA989DEF72E7BBF7428423 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft Manifest number: 0656 Signing time: Sun 21 Dec 2025 14:01:25 +0000 Manifest this update: Sun 21 Dec 2025 14:01:25 +0000 Manifest next update: Mon 22 Dec 2025 14:01:25 +0000 Files and hashes: 1: 2E-i-XVwWZd-hZzL5RDcxHIUK_w.roa (hash: kmE7612P7PDRz8jZU91zzdg87lpJGT1okogHYfmxmWk=) 2: R-ph18wsJ4p8S8-8ITezlKImVK0.crl (hash: qkyggEFPUe7zqvAOWSmG3DoC8f8wNbBzhi6cymKWmUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:0c:83:4e:ea:98:9d:ef:72:e7:bb:f7:42:84:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad Validity Not Before: Dec 21 14:01:25 2025 GMT Not After : Dec 22 14:01:25 2025 GMT Subject: CN=cf8e4583d6f2807edcb69d55ff82d69d13012976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:59:84:0d:b7:28:8e:85:92:ca:41:7f:67: 9e:e1:79:17:3d:a1:1d:03:16:18:a0:21:f8:2d:5c: 92:10:30:cc:4f:bd:10:21:13:1c:a7:fd:6f:58:44: a7:e9:16:ca:ac:ff:17:b4:a3:89:a7:10:6d:e6:2c: c7:20:a4:ef:a6:87:18:e2:d8:34:ee:55:11:5a:84: c6:56:46:f9:bb:03:d6:af:ed:0e:31:2b:d2:1c:10: 90:d2:2f:e0:d6:96:1d:5a:58:e4:c5:d4:04:10:8c: 46:b3:d1:0f:95:c1:be:35:81:1f:a1:a2:0a:8c:29: d3:8f:fc:65:df:a9:64:58:1a:d5:e1:d3:86:36:58: 8d:cf:15:05:52:05:f9:28:31:fc:18:37:2e:5d:c6: 97:d9:6a:e6:dc:18:56:bf:42:76:cf:d9:53:dc:e4: 27:30:19:c1:af:86:94:19:68:55:d8:a3:49:dd:8c: 84:58:b5:ad:d7:fe:d6:1e:39:f1:ac:aa:d8:30:52: 11:9f:90:27:d7:ae:78:70:3e:4a:9c:0c:29:ad:6a: 94:e1:d2:b1:38:32:ff:04:eb:26:30:e3:09:1a:d1: f8:29:b4:5e:4e:95:e5:62:b0:de:3a:18:15:58:87: ce:f1:4b:8a:ce:6a:c3:03:96:b2:fe:5e:43:57:0b: 08:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8E:45:83:D6:F2:80:7E:DC:B6:9D:55:FF:82:D6:9D:13:01:29:76 X509v3 Authority Key Identifier: keyid:47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5d:a6:d0:e0:b7:d9:3f:43:12:2f:13:6c:84:0b:05:30:a2: bb:2f:2c:9e:e4:ea:7e:a5:85:38:b3:25:65:7a:72:eb:5c:10: c5:81:eb:bc:ba:85:9b:18:ed:2f:07:17:c3:0b:bb:98:4c:36: af:db:e3:a9:f7:56:06:fa:fe:70:5d:d2:4d:6c:ed:a4:68:80: 13:6e:80:a6:ac:fc:71:0a:a6:4a:d2:0b:48:07:c2:d2:c8:00: d4:97:e0:06:aa:26:67:9f:e2:ac:37:78:32:9b:37:48:7d:ee: c9:96:48:65:93:2e:68:e4:40:d6:de:7d:17:b8:fb:b4:d6:03: db:62:e1:47:4f:72:27:16:fd:8e:f6:76:c4:f3:1e:92:78:11: c7:ad:5e:b8:f5:6f:97:b0:84:28:77:28:1e:a5:ca:26:d5:b2: 29:18:62:f4:b0:96:99:b8:2e:6e:ce:60:b7:21:ef:c1:2c:08: 8e:fb:15:44:0a:77:55:30:2b:5f:90:ce:7e:b7:8a:86:98:a9: df:90:74:25:91:84:3d:5d:ae:d8:79:49:56:d9:79:dc:30:fb: 50:21:4e:94:87:51:2b:7d:a7:a0:7d:61:e4:d3:7e:54:30:db: 01:3b:1c:21:df:41:ff:c0:a1:b1:b1:aa:a4:d6:06:ed:7b:1a: d4:45:8c:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNwyDTuqYne9y57v3QoQjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZWE2MWQ3Y2MyYzI3OGE3YzRiY2ZiYzIxMzdiMzk0YTIy NjU0YWQwHhcNMjUxMjIxMTQwMTI1WhcNMjUxMjIyMTQwMTI1WjAzMTEwLwYDVQQD EyhjZjhlNDU4M2Q2ZjI4MDdlZGNiNjlkNTVmZjgyZDY5ZDEzMDEyOTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CVZhA23KI6FkspBf2ee4XkXPaEd AxYYoCH4LVySEDDMT70QIRMcp/1vWESn6RbKrP8XtKOJpxBt5izHIKTvpocY4tg0 7lURWoTGVkb5uwPWr+0OMSvSHBCQ0i/g1pYdWljkxdQEEIxGs9EPlcG+NYEfoaIK jCnTj/xl36lkWBrV4dOGNliNzxUFUgX5KDH8GDcuXcaX2Wrm3BhWv0J2z9lT3OQn MBnBr4aUGWhV2KNJ3YyEWLWt1/7WHjnxrKrYMFIRn5An1654cD5KnAwprWqU4dKx ODL/BOsmMOMJGtH4KbReTpXlYrDeOhgVWIfO8UuKzmrDA5ay/l5DVwsI3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+ORYPW8oB+3LadVf+C1p0TASl2MB8GA1UdIwQY MBaAFEfqYdfMLCeKfEvPvCE3s5SiJlStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1waDE4d3NKNHA4UzgtOElUZXpsS0ltVkswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xMTVjNDQtYmM0YS00ZTI0LWJmMzgt OGM3MjYwOWYyZjAyLzEvUi1waDE4d3NKNHA4UzgtOElUZXpsS0ltVkswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8xMTVjNDQtYmM0YS00ZTI0LWJmMzgtOGM3MjYwOWYyZjAy LzEvUi1waDE4d3NKNHA4UzgtOElUZXpsS0ltVkswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS12m0OC3 2T9DEi8TbIQLBTCiuy8snuTqfqWFOLMlZXpy61wQxYHrvLqFmxjtLwcXwwu7mEw2 r9vjqfdWBvr+cF3STWztpGiAE26Apqz8cQqmStILSAfC0sgA1JfgBqomZ5/irDd4 Mps3SH3uyZZIZZMuaORA1t59F7j7tNYD22LhR09yJxb9jvZ2xPMekngRx61euPVv l7CEKHcoHqXKJtWyKRhi9LCWmbgubs5gtyHvwSwIjvsVRAp3VTArX5DOfreKhpip 35B0JZGEPV2u2HlJVtl53DD7UCFOlIdRK32noH1h5NN+VDDbATscId9B/8ChsbGq pNYG7Xsa1EWMBw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:05:05 2025 by rpki-client