This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft File: phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json) Hash identifier: S5t66kJ9WYfnA0vXAxeF08b5YQsk78ve1MXaE6ITYfk= Subject key identifier: C4:5A:9D:99:B5:E7:D7:7B:47:09:7C:7A:63:C0:C3:50:9C:0F:97:5E Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63 Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063 Certificate serial: 019B44A56253BFD75658BEB2B74C129A4BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 06:00:47 +0000 Manifest this update: Mon 22 Dec 2025 06:00:47 +0000 Manifest next update: Tue 23 Dec 2025 06:00:47 +0000 Files and hashes: 1: K8gb2IugzK8IgsCtvVgzoDUY6tM.roa (hash: wR8LR0jtRTOAWt2SjVhqd0hsllRe9a/OzBTCiGqDDfI=) 2: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: qGEEyztDTPQRDgbDx3H/Bx+1Eg8mTOxr0MKk8JgvCak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:62:53:bf:d7:56:58:be:b2:b7:4c:12:9a:4b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063 Validity Not Before: Dec 22 06:00:47 2025 GMT Not After : Dec 23 06:00:47 2025 GMT Subject: CN=c45a9d99b5e7d77b47097c7a63c0c3509c0f975e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:82:c3:8e:cd:94:7e:25:3b:5d:00:8f:5e:c8: f0:60:9a:3b:c9:36:91:96:ad:37:59:b6:94:cc:67: 40:a6:06:cd:d2:39:65:de:a6:56:56:98:70:da:07: ca:60:d4:a9:92:b3:9d:de:01:bd:19:08:2d:7e:97: e1:1a:5a:88:77:0a:0d:90:57:3c:13:c8:3e:e3:41: ad:6f:38:f1:ac:73:ca:10:39:78:12:b9:30:35:c7: 00:a8:fe:e8:e4:47:44:cb:44:bd:01:bc:34:af:5f: 45:b9:52:18:f4:06:2c:db:d0:91:87:9a:37:c4:a5: df:2d:fe:c5:ce:9c:24:7c:bb:3e:da:77:b1:ff:6b: 52:ca:14:68:e2:fb:e5:4f:3d:f9:20:f4:48:f3:9e: 79:4e:ca:9a:51:0e:28:18:35:1c:62:b2:e8:77:78: e7:01:3d:30:ef:c2:b6:df:dd:90:fa:30:12:85:68: 31:79:02:28:b1:a7:8f:fa:0f:71:d1:67:5b:1c:cc: 9b:cf:28:df:88:71:ba:e2:c2:b5:f3:8d:19:de:9e: 64:01:79:21:2d:c5:e8:37:15:fb:47:fa:37:8b:4c: a2:6f:b0:50:7b:fc:42:dd:64:30:a2:87:f0:c3:ff: a6:34:95:62:c1:fc:28:32:bf:54:b3:43:97:35:51: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5A:9D:99:B5:E7:D7:7B:47:09:7C:7A:63:C0:C3:50:9C:0F:97:5E X509v3 Authority Key Identifier: keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:25:b1:88:8f:5d:4c:1e:7b:cf:6f:e7:84:00:dd:cd:4d:74: 1a:d6:0a:5d:36:cb:8a:4b:e8:95:a8:32:74:1c:29:e4:38:8a: f2:12:e9:20:14:b2:19:28:2f:a7:98:77:66:ac:b6:7f:28:ec: 94:09:99:a8:63:83:6c:5e:b5:0b:e6:c0:4c:ec:39:d4:26:f4: 89:10:de:50:dc:09:d6:f7:de:8a:f1:54:40:c1:a6:89:b2:8a: d0:2a:25:34:d0:7e:05:fe:86:7b:9e:16:03:06:d8:97:7d:67: 45:3d:c3:e0:42:3f:73:aa:92:2d:80:02:7f:66:97:84:3b:63: 1e:4a:0e:6e:fe:2b:98:f9:30:2f:55:1b:d9:b7:69:c3:3a:82: 9f:c5:40:ff:12:00:7f:bf:24:1e:71:d2:d5:94:bb:b5:7a:d9: 27:27:68:46:d6:13:93:0e:2a:74:4f:d4:54:0d:0e:f4:36:82: 3e:79:ee:1b:1f:f5:74:f8:d8:fd:18:dd:e6:11:6a:bf:c8:b3: 8c:7b:ef:f9:e3:26:f2:42:23:11:95:67:4c:44:39:f1:94:4b: 70:ff:84:2e:37:c1:b0:bb:f7:eb:d2:0c:a5:cf:10:3c:b8:60: 65:c7:57:7f:9a:c4:86:ca:95:a8:4f:ab:58:df:0d:3e:64:79: dc:3b:4c:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpWJTv9dWWL6yt0wSmkv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MWE4ZjY2N2EzZGRkYmQ0YTM1MjMxOGQ4ZjA2MDZjNDZl OWYwNjMwHhcNMjUxMjIyMDYwMDQ3WhcNMjUxMjIzMDYwMDQ3WjAzMTEwLwYDVQQD EyhjNDVhOWQ5OWI1ZTdkNzdiNDcwOTdjN2E2M2MwYzM1MDljMGY5NzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioLDjs2UfiU7XQCPXsjwYJo7yTaR lq03WbaUzGdApgbN0jll3qZWVphw2gfKYNSpkrOd3gG9GQgtfpfhGlqIdwoNkFc8 E8g+40GtbzjxrHPKEDl4ErkwNccAqP7o5EdEy0S9Abw0r19FuVIY9AYs29CRh5o3 xKXfLf7FzpwkfLs+2nex/2tSyhRo4vvlTz35IPRI8555TsqaUQ4oGDUcYrLod3jn AT0w78K2392Q+jAShWgxeQIosaeP+g9x0WdbHMybzyjfiHG64sK1840Z3p5kAXkh LcXoNxX7R/o3i0yib7BQe/xC3WQwoofww/+mNJViwfwoMr9Us0OXNVFI+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRanZm159d7Rwl8emPAw1CcD5deMB8GA1UdIwQY MBaAFKYaj2Z6Pd29SjUjGNjwYGxG6fBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jZTg4YTItZWI4Ny00MmE1LTkxNmQt YjU2YmIwNjQ3ODY4LzEvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jZTg4YTItZWI4Ny00MmE1LTkxNmQtYjU2YmIwNjQ3ODY4 LzEvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiWxiI9d TB57z2/nhADdzU10GtYKXTbLikvolagydBwp5DiK8hLpIBSyGSgvp5h3Zqy2fyjs lAmZqGODbF61C+bATOw51Cb0iRDeUNwJ1vfeivFUQMGmibKK0ColNNB+Bf6Ge54W AwbYl31nRT3D4EI/c6qSLYACf2aXhDtjHkoObv4rmPkwL1Ub2bdpwzqCn8VA/xIA f78kHnHS1ZS7tXrZJydoRtYTkw4qdE/UVA0O9DaCPnnuGx/1dPjY/Rjd5hFqv8iz jHvv+eMm8kIjEZVnTEQ58ZRLcP+ELjfBsLv369IMpc8QPLhgZcdXf5rEhsqVqE+r WN8NPmR53DtMaQ== -----END CERTIFICATE-----Generated at Mon Dec 22 08:08:20 2025 by rpki-client