This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft File: PheDehDbHT3XPiDfC0eeQNsiNv4.mft (raw, json) Hash identifier: 35bJu0yzFs5wdYu2FVwNtcrNhtRUknJkLhAGqyhJTwU= Subject key identifier: 56:85:F3:E1:62:B3:9D:EA:E9:18:CC:AE:A6:CD:1B:71:30:E1:CC:1C Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE Certificate issuer: /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe Certificate serial: 019B19BBF6D38D12F52321C63C62DE82B365 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft Manifest number: 0F8B Signing time: Sat 13 Dec 2025 22:01:47 +0000 Manifest this update: Sat 13 Dec 2025 22:01:47 +0000 Manifest next update: Sun 14 Dec 2025 22:01:47 +0000 Files and hashes: 1: CZQAZEvMh_XTxw7BOmbx2zwgX-k.roa (hash: Ire9dW7Oeexx5f9et2qGgWkDs4AnuBBZcM9DwhOcJAg=) 2: PheDehDbHT3XPiDfC0eeQNsiNv4.crl (hash: K6InpaHV74f46FxbOuX8eG/2ZDf7Ru5Oa6kGKZVc0Xk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:f6:d3:8d:12:f5:23:21:c6:3c:62:de:82:b3:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe Validity Not Before: Dec 13 22:01:47 2025 GMT Not After : Dec 14 22:01:47 2025 GMT Subject: CN=5685f3e162b39deae918ccaea6cd1b7130e1cc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:3b:7a:16:4b:26:e8:02:dc:47:53:04:67: 9f:52:bf:52:ac:3b:e4:b0:70:ab:b7:f2:2a:e0:d2: 71:b8:68:18:d5:b6:b1:c5:c6:fc:59:3f:f8:3a:33: f2:8a:79:1d:fd:d1:ea:ac:ec:22:fe:29:99:ec:18: 24:9a:46:34:d4:e8:57:30:24:65:63:77:05:c4:c6: d0:b0:bd:57:bb:8e:41:18:a2:00:fe:8a:be:7d:47: a2:c1:1a:e8:4c:3c:e9:e8:e8:24:03:c8:8a:3a:d1: 16:98:7f:64:b2:7d:29:74:a7:a6:08:1a:aa:6d:c2: 24:b4:fe:0d:9e:f6:97:17:b0:93:8b:5d:26:86:5c: f8:2b:10:9f:b8:f4:6f:fb:63:f4:3d:59:a3:04:9a: e2:77:a4:f5:a5:ad:46:4f:35:ee:d7:de:be:42:03: ee:8f:2d:55:17:83:07:63:71:ed:eb:8e:cb:dc:69: 5a:2b:9d:09:69:d2:87:24:76:a8:3f:5c:f6:be:96: 2b:2d:cc:4d:02:1f:1f:78:f1:41:5c:60:e1:2b:b6: ad:9f:86:68:27:54:e4:f4:e1:b7:11:8e:3b:f2:4e: df:db:6a:92:7c:13:42:7a:7a:b5:56:da:48:60:c2: f3:8f:3f:d4:3e:50:47:41:43:b6:a9:30:dd:c3:32: 47:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:85:F3:E1:62:B3:9D:EA:E9:18:CC:AE:A6:CD:1B:71:30:E1:CC:1C X509v3 Authority Key Identifier: keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:47:d1:e7:a0:54:bb:8a:1c:bb:11:6e:f8:46:fb:81:00:66: 97:22:3f:fc:bf:1d:91:d5:a5:73:24:c2:2f:ea:13:f4:de:0a: 4d:bf:c3:b0:ab:98:98:f8:6b:8f:32:bf:b2:e0:6d:a5:53:0b: 62:2a:53:83:6f:52:af:75:20:de:1d:7d:b3:e3:06:dc:28:40: e9:89:b7:3c:1b:b1:df:14:bc:ca:40:fb:fe:50:73:f1:ff:4a: d1:88:ac:cd:39:88:ca:22:41:a7:7f:45:bd:30:89:27:11:15: 2c:ec:bc:17:fd:6d:ae:5b:bb:5f:8a:6c:08:6c:eb:9a:e6:e5: 82:74:54:85:a5:62:01:1e:33:90:9e:b2:2c:eb:86:f6:b3:8b: e8:ff:79:66:70:95:ba:b4:5e:0f:22:2c:cb:6a:7a:43:1e:4f: 54:74:06:35:58:2c:d0:6c:e8:75:d8:c9:40:43:02:14:b4:d6: 0f:60:4e:3a:3d:b4:f5:2f:95:35:64:4f:47:c6:0e:b1:18:04: 1a:41:1a:c7:81:a3:83:7c:49:ff:f8:62:eb:fa:41:73:70:60: 59:e8:6f:2e:4f:4b:10:97:47:6f:71:43:a4:38:0d:6e:29:c0: e9:58:86:f5:b1:64:9d:d9:16:b8:7e:7c:b4:72:09:4d:96:89: 4b:8d:be:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu/bTjRL1IyHGPGLegrNlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMTc4MzdhMTBkYjFkM2RkNzNlMjBkZjBiNDc5ZTQwZGIy MjM2ZmUwHhcNMjUxMjEzMjIwMTQ3WhcNMjUxMjE0MjIwMTQ3WjAzMTEwLwYDVQQD Eyg1Njg1ZjNlMTYyYjM5ZGVhZTkxOGNjYWVhNmNkMWI3MTMwZTFjYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAY7ehZLJugC3EdTBGefUr9SrDvk sHCrt/Iq4NJxuGgY1baxxcb8WT/4OjPyinkd/dHqrOwi/imZ7BgkmkY01OhXMCRl Y3cFxMbQsL1Xu45BGKIA/oq+fUeiwRroTDzp6OgkA8iKOtEWmH9ksn0pdKemCBqq bcIktP4NnvaXF7CTi10mhlz4KxCfuPRv+2P0PVmjBJrid6T1pa1GTzXu196+QgPu jy1VF4MHY3Ht647L3GlaK50JadKHJHaoP1z2vpYrLcxNAh8fePFBXGDhK7atn4Zo J1Tk9OG3EY478k7f22qSfBNCenq1VtpIYMLzjz/UPlBHQUO2qTDdwzJHowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaF8+Fis53q6RjMrqbNG3Ew4cwcMB8GA1UdIwQY MBaAFD4Xg3oQ2x091z4g3wtHnkDbIjb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGhlRGVoRGJIVDNYUGlEZkMwZWVRTnNpTnY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80YzA0M2MtNWZjZC00OGNiLWJkNTAt YzU5NmFmMmE0MmJhLzEvUGhlRGVoRGJIVDNYUGlEZkMwZWVRTnNpTnY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80YzA0M2MtNWZjZC00OGNiLWJkNTAtYzU5NmFmMmE0MmJh LzEvUGhlRGVoRGJIVDNYUGlEZkMwZWVRTnNpTnY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUfR56BU u4ocuxFu+Eb7gQBmlyI//L8dkdWlcyTCL+oT9N4KTb/DsKuYmPhrjzK/suBtpVML YipTg29Sr3Ug3h19s+MG3ChA6Ym3PBux3xS8ykD7/lBz8f9K0YiszTmIyiJBp39F vTCJJxEVLOy8F/1trlu7X4psCGzrmublgnRUhaViAR4zkJ6yLOuG9rOL6P95ZnCV urReDyIsy2p6Qx5PVHQGNVgs0GzoddjJQEMCFLTWD2BOOj209S+VNWRPR8YOsRgE GkEax4Gjg3xJ//hi6/pBc3BgWehvLk9LEJdHb3FDpDgNbinA6ViG9bFkndkWuH58 tHIJTZaJS42+Mw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:55:24 2025 by rpki-client