This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json) Hash identifier: O7llq95v1eiRS0IGRSCqVtnqPhvh+dmPNoPciH4qjvk= Subject key identifier: F5:F7:43:7C:55:8C:96:55:4D:7B:06:7C:3B:C1:10:9E:7B:AB:82:AD Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8 Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8 Certificate serial: 019B0E5BE1E40F9EF1FBCFC8CBFCC4A5D71C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft Manifest number: 0837 Signing time: Thu 11 Dec 2025 17:01:01 +0000 Manifest this update: Thu 11 Dec 2025 17:01:01 +0000 Manifest next update: Fri 12 Dec 2025 17:01:01 +0000 Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: VbnQygIYEFgnKIa3S5ZQIi1k1nbVEDiNByxKoULdoLM=) 2: prpYICT0TxRnfz3f1SbuxkyzHec.roa (hash: f1mqtnfaKkN/awcNdwOl6TXQqJTQAHYbsOv9Ok3PohI=) 3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:e1:e4:0f:9e:f1:fb:cf:c8:cb:fc:c4:a5:d7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8 Validity Not Before: Dec 11 17:01:01 2025 GMT Not After : Dec 12 17:01:01 2025 GMT Subject: CN=f5f7437c558c96554d7b067c3bc1109e7bab82ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d2:0c:32:15:40:b8:dc:05:b0:ee:c9:2b:29: ad:92:9b:bb:d4:e8:67:d6:76:72:98:c2:fa:0c:14: de:65:1c:75:21:9c:d1:9b:40:d6:ba:d5:d9:9f:7b: 59:27:7b:25:b1:74:91:93:0d:e7:01:c0:39:93:d5: 4d:dd:40:eb:8c:b6:9f:76:cf:8c:a0:2e:75:d2:1a: d8:0c:39:ed:10:dc:54:5a:7f:74:f4:02:f4:f6:4f: 94:76:15:85:0d:74:b6:9d:96:85:f6:f8:65:14:96: f0:ab:8e:8b:d9:0a:dc:f7:45:be:2b:68:87:1d:af: 85:2d:96:4c:52:1a:8a:03:28:68:32:5c:87:d7:6b: 42:4a:c7:29:6d:a2:e0:16:0d:34:50:a5:18:e9:87: ca:c1:f5:0d:28:c9:6a:2a:eb:76:ef:5d:40:41:94: 48:3e:b8:78:ea:74:8f:c6:5d:6a:54:be:51:58:9a: 59:e4:d8:6b:50:5f:42:bf:bd:b5:51:dc:fa:2b:d1: f4:63:70:9a:58:5e:be:04:53:b5:97:e6:45:75:4f: b2:27:c2:97:d9:d6:37:bd:59:15:c9:ab:b8:de:6e: 24:db:f4:82:ae:a4:65:04:86:95:16:9c:f5:47:55: 59:25:58:6a:61:77:f3:aa:04:94:5a:5c:3d:be:24: f2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F7:43:7C:55:8C:96:55:4D:7B:06:7C:3B:C1:10:9E:7B:AB:82:AD X509v3 Authority Key Identifier: keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7d:ca:00:39:e2:e5:77:4b:44:27:6a:ff:60:6a:fa:e9:c2: 18:a3:54:75:d2:50:95:66:a8:e0:81:72:e0:86:39:65:6a:34: e4:11:ed:ac:fb:06:91:71:74:1e:46:11:2c:8a:dd:75:11:b7: 08:80:79:21:7c:fb:69:85:45:4b:c8:32:64:65:24:b4:5d:b7: 77:77:9b:6b:71:83:0e:8c:26:30:df:32:d5:24:11:c3:fa:5f: 9e:9b:df:03:67:6c:99:55:9e:0c:86:b2:18:b1:a7:19:f2:77: 5a:18:ae:9f:23:93:cc:9f:df:d2:6c:85:5c:6d:28:b4:56:fe: 70:32:29:0d:ae:c9:e5:97:e4:02:37:8e:d3:f0:66:5d:6b:5a: f0:c2:f2:9d:0a:b9:b1:a4:70:ff:30:e9:30:ae:5b:9e:92:a6: e4:13:f0:14:ea:f8:f6:58:ed:8a:ed:a6:7a:22:03:47:43:f7: 58:80:5f:30:d1:ab:58:a4:0c:1b:6d:e8:49:48:77:a7:7a:25: a2:67:50:6e:5e:b5:04:f4:3e:49:fd:fe:cb:c3:4a:e2:f8:e8: a8:1e:35:75:df:c8:c0:e9:b3:f2:34:87:5b:98:43:ff:ed:9d: 13:ed:2b:ce:ec:ad:07:e9:5a:44:5b:f5:88:94:d1:f6:04:40: fc:8f:e2:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW+HkD57x+8/Iy/zEpdccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZjFmYmRiY2UyMTQ1YTBkYjY5MDA2MDlmN2M1NDczMmRm YjBjZDgwHhcNMjUxMjExMTcwMTAxWhcNMjUxMjEyMTcwMTAxWjAzMTEwLwYDVQQD EyhmNWY3NDM3YzU1OGM5NjU1NGQ3YjA2N2MzYmMxMTA5ZTdiYWI4MmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tIMMhVAuNwFsO7JKymtkpu71Ohn 1nZymML6DBTeZRx1IZzRm0DWutXZn3tZJ3slsXSRkw3nAcA5k9VN3UDrjLafds+M oC510hrYDDntENxUWn909AL09k+UdhWFDXS2nZaF9vhlFJbwq46L2Qrc90W+K2iH Ha+FLZZMUhqKAyhoMlyH12tCSscpbaLgFg00UKUY6YfKwfUNKMlqKut2711AQZRI Prh46nSPxl1qVL5RWJpZ5NhrUF9Cv721Udz6K9H0Y3CaWF6+BFO1l+ZFdU+yJ8KX 2dY3vVkVyau43m4k2/SCrqRlBIaVFpz1R1VZJVhqYXfzqgSUWlw9viTyKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPX3Q3xVjJZVTXsGfDvBEJ57q4KtMB8GA1UdIwQY MBaAFNjx+9vOIUWg22kAYJ98VHMt+wzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMTQzMWUtNWE3ZC00ZmMzLWE4OGQt NDdmMDQzZmJhMTNiLzEvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zMTQzMWUtNWE3ZC00ZmMzLWE4OGQtNDdmMDQzZmJhMTNi LzEvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn33KADni 5XdLRCdq/2Bq+unCGKNUddJQlWao4IFy4IY5ZWo05BHtrPsGkXF0HkYRLIrddRG3 CIB5IXz7aYVFS8gyZGUktF23d3eba3GDDowmMN8y1SQRw/pfnpvfA2dsmVWeDIay GLGnGfJ3WhiunyOTzJ/f0myFXG0otFb+cDIpDa7J5ZfkAjeO0/BmXWta8MLynQq5 saRw/zDpMK5bnpKm5BPwFOr49ljtiu2meiIDR0P3WIBfMNGrWKQMG23oSUh3p3ol omdQbl61BPQ+Sf3+y8NK4vjoqB41dd/IwOmz8jSHW5hD/+2dE+0rzuytB+laRFv1 iJTR9gRA/I/iPA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:36:40 2025 by rpki-client