This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft File: phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft (raw, json) Hash identifier: /iuyAshSrvd9ZdKPl0UJ76FSGxf+wYMVzVMTHQnBgN4= Subject key identifier: 4F:07:90:68:08:85:2D:07:93:ED:41:27:15:F0:ED:FE:59:06:9C:86 Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA Certificate issuer: /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa Certificate serial: 019B556203A6DA6A7F7642577A24EA96A123 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft Manifest number: 02BB Signing time: Thu 25 Dec 2025 12:00:45 +0000 Manifest this update: Thu 25 Dec 2025 12:00:45 +0000 Manifest next update: Fri 26 Dec 2025 12:00:45 +0000 Files and hashes: 1: TOxCM6S_arlfToUA479zh5nkrJo.roa (hash: vJ1XssSgRtqMk/Uwgd5Thnwzm2ARorFtzVtt1LqNVUg=) 2: phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl (hash: IPIhakNTWN7xtpxB0lCQzQq69wYp8Ez4vBTPSK3SSgA=) 3: vnrJw0_RXF_3eNlI4J759GvRvbQ.roa (hash: Eb6f4bJUmWLqH0E5jlnZq5oby6oYj5i5BTlzMbxWrPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:62:03:a6:da:6a:7f:76:42:57:7a:24:ea:96:a1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa Validity Not Before: Dec 25 12:00:45 2025 GMT Not After : Dec 26 12:00:45 2025 GMT Subject: CN=4f07906808852d0793ed412715f0edfe59069c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:64:48:c7:c8:91:d3:47:19:03:0f:f1:af: 9d:ea:99:c2:28:1c:6a:9d:d5:44:a5:41:bd:bb:55: ad:88:c8:20:5e:5a:37:03:d8:70:4a:d3:d9:17:71: 16:29:26:5f:56:eb:72:db:54:67:a0:da:20:cb:ce: e1:1c:76:24:70:df:dc:c8:54:d8:25:08:34:d9:1e: b3:0c:c8:a6:62:75:c5:bc:f0:af:59:9e:83:da:2a: 95:96:41:ab:53:81:1a:45:a4:82:bf:61:66:81:15: 80:e7:df:2c:fa:df:72:c3:a6:eb:e2:37:74:b6:49: 18:59:fe:97:2b:5e:d7:f1:17:dc:f6:b6:4e:70:d6: 19:d6:80:80:80:b5:eb:e2:f7:70:37:b4:a6:fc:7b: fa:2e:e3:81:4a:1a:9a:5e:33:dc:0b:55:fd:cb:80: 46:23:99:75:03:70:c9:ad:b8:db:a3:5d:cb:33:09: 0c:93:3a:27:36:38:a7:45:c2:89:bd:74:aa:f0:41: 47:33:79:01:90:94:d9:24:08:06:97:95:48:c8:bd: 3d:b4:3e:01:d9:87:12:09:fe:4e:4e:e3:68:ce:69: 4a:26:10:63:d5:12:8c:cb:57:8f:ed:86:28:fe:35: 4e:93:d5:7f:e4:1d:9f:f7:3f:68:30:3a:f5:23:4d: 57:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:07:90:68:08:85:2D:07:93:ED:41:27:15:F0:ED:FE:59:06:9C:86 X509v3 Authority Key Identifier: keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d2:40:83:3c:2f:aa:39:8e:03:69:54:e4:11:0b:cd:a2:15: 54:a7:af:55:b4:45:e4:f3:70:a2:3f:19:a5:e8:86:ce:5c:1e: a4:5c:7c:c6:45:03:aa:8f:2e:67:f1:bf:b8:e6:45:31:4c:56: 88:36:e0:87:50:39:e3:9e:2a:d2:f3:22:64:17:34:1f:45:da: c5:a7:81:3c:6f:c1:b1:23:f4:e1:55:0c:61:a6:4b:3b:0d:85: 48:ac:fe:d6:ec:a2:f6:d5:e8:a1:50:0c:3a:e4:2c:12:2c:b8: 93:cd:12:4f:5b:72:59:e5:33:05:08:b2:ba:e5:80:a6:34:2b: 98:47:47:b3:2a:33:70:1c:32:8d:53:6f:a1:20:15:b0:8e:e4: e9:07:bb:c5:db:6a:a7:55:6a:c8:97:0b:b5:64:7e:3a:24:18: e1:bc:4d:cd:cd:5a:73:cb:0e:13:35:2e:5b:7c:ee:56:13:07: c1:12:50:b3:42:2f:25:78:20:39:b5:44:e6:f4:4e:7c:83:c8: ca:9d:c4:e4:73:03:50:95:67:69:ea:33:0e:65:ab:6b:58:79: 8a:9a:e7:ca:9a:d9:23:b0:b8:0f:69:68:68:93:90:aa:90:47: 90:4d:41:70:61:da:20:fc:fc:0e:c4:98:bb:5c:96:e5:e2:07: b6:e8:9d:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVYgOm2mp/dkJXeiTqlqEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MTYyMTAyZTVhM2MwYWVlYWI2M2MyMWVkOTJhODA1ODI2 ZGI3YWEwHhcNMjUxMjI1MTIwMDQ1WhcNMjUxMjI2MTIwMDQ1WjAzMTEwLwYDVQQD Eyg0ZjA3OTA2ODA4ODUyZDA3OTNlZDQxMjcxNWYwZWRmZTU5MDY5Yzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8xkSMfIkdNHGQMP8a+d6pnCKBxq ndVEpUG9u1WtiMggXlo3A9hwStPZF3EWKSZfVuty21RnoNogy87hHHYkcN/cyFTY JQg02R6zDMimYnXFvPCvWZ6D2iqVlkGrU4EaRaSCv2FmgRWA598s+t9yw6br4jd0 tkkYWf6XK17X8Rfc9rZOcNYZ1oCAgLXr4vdwN7Sm/Hv6LuOBShqaXjPcC1X9y4BG I5l1A3DJrbjbo13LMwkMkzonNjinRcKJvXSq8EFHM3kBkJTZJAgGl5VIyL09tD4B 2YcSCf5OTuNozmlKJhBj1RKMy1eP7YYo/jVOk9V/5B2f9z9oMDr1I01XNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8HkGgIhS0Hk+1BJxXw7f5ZBpyGMB8GA1UdIwQY MBaAFKYWIQLlo8Cu6rY8Ie2SqAWCbbeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGIt OWNlZTc3YmM1MjIyLzEvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGItOWNlZTc3YmM1MjIy LzEvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9JAgzwv qjmOA2lU5BELzaIVVKevVbRF5PNwoj8ZpeiGzlwepFx8xkUDqo8uZ/G/uOZFMUxW iDbgh1A5454q0vMiZBc0H0XaxaeBPG/BsSP04VUMYaZLOw2FSKz+1uyi9tXooVAM OuQsEiy4k80ST1tyWeUzBQiyuuWApjQrmEdHsyozcBwyjVNvoSAVsI7k6Qe7xdtq p1VqyJcLtWR+OiQY4bxNzc1ac8sOEzUuW3zuVhMHwRJQs0IvJXggObVE5vROfIPI yp3E5HMDUJVnaeozDmWra1h5iprnyprZI7C4D2loaJOQqpBHkE1BcGHaIPz8DsSY u1yW5eIHtuiduQ== -----END CERTIFICATE-----Generated at Thu Dec 25 18:03:22 2025 by rpki-client