This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json) Hash identifier: uOeCa2/NLn0nVvW714dX+9Ejm2E8mZPoUorHmx0IvQk= Subject key identifier: 5C:77:E5:64:9D:46:0F:53:C2:EF:13:F0:20:B2:6B:E4:4E:CE:31:63 Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97 Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197 Certificate serial: 019B5A1B1D487522EB14075464ED1504E584 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft Manifest number: 0C0F Signing time: Fri 26 Dec 2025 10:01:24 +0000 Manifest this update: Fri 26 Dec 2025 10:01:24 +0000 Manifest next update: Sat 27 Dec 2025 10:01:24 +0000 Files and hashes: 1: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: iqNsuCUUsz77e1v71UegHPhSFe70KHHYTzPAfLQfakw=) 2: _BTZQ0zK_fvKReKxFaBu1-Vwvm8.roa (hash: IbkaaN1eobNCsZcNskJYmH0crzqKNoH6G8sKqEsCFhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:1d:48:75:22:eb:14:07:54:64:ed:15:04:e5:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197 Validity Not Before: Dec 26 10:01:24 2025 GMT Not After : Dec 27 10:01:24 2025 GMT Subject: CN=5c77e5649d460f53c2ef13f020b26be44ece3163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:47:26:45:bf:21:3e:97:c9:0c:9c:d0:dd:fe: e5:42:11:bc:84:fd:fc:ef:c6:f3:0b:8a:75:7d:44: ef:98:20:17:70:10:ec:63:dd:b0:19:c1:66:cb:c6: f5:bf:59:8f:e6:bc:a9:d6:8c:7c:73:50:85:44:73: a3:a5:53:c6:65:aa:e7:ab:49:58:30:b8:35:dd:53: 5d:b7:8d:c8:3d:90:a9:fb:51:e8:3f:f2:80:32:a7: d7:5e:c6:a2:18:77:40:4d:1f:f2:5d:bb:cd:5e:29: dc:bd:0a:7c:0a:78:ee:88:9c:b0:eb:8c:8b:53:8c: 5e:ef:af:b6:fa:3f:a9:94:ea:72:83:28:f5:73:62: 51:34:fd:09:d5:78:22:8f:aa:2b:0b:15:d0:6c:22: 09:e7:cd:15:ae:f3:c3:26:d2:2c:aa:fc:93:c4:e3: f9:ab:d3:ce:36:49:c0:99:30:8d:3e:1f:19:49:86: 7b:06:bf:68:71:e3:82:8f:93:3e:61:f7:1c:82:b3: 15:73:e3:2d:f4:e8:20:17:72:56:0d:4e:58:b6:fa: e0:6c:25:31:71:16:e7:1e:bd:47:6e:cb:6a:5b:c5: c1:e6:ca:64:91:77:5b:3d:4c:cf:58:55:e5:c6:11: 2e:8f:69:e6:93:f2:7d:3c:57:03:fb:88:e5:2f:97: 59:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:77:E5:64:9D:46:0F:53:C2:EF:13:F0:20:B2:6B:E4:4E:CE:31:63 X509v3 Authority Key Identifier: keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:75:b8:4b:1a:8c:f9:72:74:c4:75:db:5f:7f:fb:73:76:72: d2:63:3e:a4:34:88:6d:78:a1:a9:db:14:e7:0a:be:0b:f2:cc: d2:3a:16:cd:aa:e2:26:40:67:80:2b:dc:91:d0:08:5d:a7:fd: 76:45:fe:a9:98:4d:67:76:58:2e:8f:1d:3e:29:09:37:66:f4: e7:69:37:90:ba:0a:95:87:9a:8b:19:81:37:ac:e1:8e:82:5f: 82:07:2a:93:4d:21:51:d8:c9:cb:a2:25:da:8b:a5:ed:62:1c: 50:b0:c3:a1:dd:59:b8:56:9a:ed:b3:b1:73:cd:2d:58:d8:e9: 5b:08:f6:55:70:a3:0a:98:c0:b6:78:22:97:6a:0b:55:98:b1: c3:57:6b:be:7a:e2:87:f4:4a:b6:c9:a7:a8:41:fc:fa:21:5e: 77:14:50:82:f8:7d:57:4f:57:f0:8b:48:c4:43:1a:97:29:6e: a1:c9:54:6c:32:c5:e0:c1:c6:46:a6:8b:32:9c:d4:23:93:65: 2d:d4:6b:4c:4e:5e:6a:6e:51:3d:c0:f2:37:a7:92:e2:f8:3d: 5c:d5:e1:b2:fc:61:e6:01:f6:74:41:5c:b7:e0:4a:25:a5:42: ae:d3:99:b6:24:9a:4d:9d:5a:17:e5:07:36:eb:f7:2d:9a:a6: e4:9c:ae:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGx1IdSLrFAdUZO0VBOWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNzc1ZTFiOWZiMGFjOTNkNTYzYmE4ZTk3MDg4NGRhNTdi NmUxOTcwHhcNMjUxMjI2MTAwMTI0WhcNMjUxMjI3MTAwMTI0WjAzMTEwLwYDVQQD Eyg1Yzc3ZTU2NDlkNDYwZjUzYzJlZjEzZjAyMGIyNmJlNDRlY2UzMTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUcmRb8hPpfJDJzQ3f7lQhG8hP38 78bzC4p1fUTvmCAXcBDsY92wGcFmy8b1v1mP5ryp1ox8c1CFRHOjpVPGZarnq0lY MLg13VNdt43IPZCp+1HoP/KAMqfXXsaiGHdATR/yXbvNXincvQp8CnjuiJyw64yL U4xe76+2+j+plOpygyj1c2JRNP0J1Xgij6orCxXQbCIJ580VrvPDJtIsqvyTxOP5 q9PONknAmTCNPh8ZSYZ7Br9oceOCj5M+YfccgrMVc+Mt9OggF3JWDU5YtvrgbCUx cRbnHr1HbstqW8XB5spkkXdbPUzPWFXlxhEuj2nmk/J9PFcD+4jlL5dZ7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFx35WSdRg9Twu8T8CCya+ROzjFjMB8GA1UdIwQY MBaAFDx3XhufsKyT1WO6jpcIhNpXtuGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEt NGU1Njg2YmU2YjgyLzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEtNGU1Njg2YmU2Yjgy LzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnW4SxqM +XJ0xHXbX3/7c3Zy0mM+pDSIbXihqdsU5wq+C/LM0joWzariJkBngCvckdAIXaf9 dkX+qZhNZ3ZYLo8dPikJN2b052k3kLoKlYeaixmBN6zhjoJfggcqk00hUdjJy6Il 2oul7WIcULDDod1ZuFaa7bOxc80tWNjpWwj2VXCjCpjAtngil2oLVZixw1drvnri h/RKtsmnqEH8+iFedxRQgvh9V09X8ItIxEMalyluoclUbDLF4MHGRqaLMpzUI5Nl LdRrTE5eam5RPcDyN6eS4vg9XNXhsvxh5gH2dEFct+BKJaVCrtOZtiSaTZ1aF+UH Nuv3LZqm5Jyu/g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:01 2025 by rpki-client