This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json) Hash identifier: sGAnXgE3cC1nBxQQ/LWY0bSo3z7odr51AdMtBKY6QKU= Subject key identifier: DD:FE:95:30:08:2D:E7:74:F9:F7:D5:D7:DF:E9:5D:DD:61:CA:3D:37 Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7 Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7 Certificate serial: 019B175F04FFB8B860DE90E112507CA69868 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 11:01:01 +0000 Manifest this update: Sat 13 Dec 2025 11:01:01 +0000 Manifest next update: Sun 14 Dec 2025 11:01:01 +0000 Files and hashes: 1: OEpDgvPaXUzQjnGh8DicbzVRQqo.roa (hash: Tur6sEnsgmRlnAb38JyLyFtsAnKmMwtkefk62vCJp6k=) 2: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: LhRqO2beHQlXkJtAMMFriaHLk3ssP77jJ41S6Bsvr4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:5f:04:ff:b8:b8:60:de:90:e1:12:50:7c:a6:98:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7 Validity Not Before: Dec 13 11:01:01 2025 GMT Not After : Dec 14 11:01:01 2025 GMT Subject: CN=ddfe9530082de774f9f7d5d7dfe95ddd61ca3d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:50:18:2f:f7:16:24:df:30:c5:3a:bd:0a: fc:51:b9:74:c0:86:2c:f2:f5:2d:75:c4:97:b0:0a: 49:27:63:8c:ea:0f:89:5b:e4:4c:3e:79:3a:b9:e9: 46:90:22:50:e7:9d:92:cd:51:c8:fc:c8:bc:11:0c: 21:a5:bd:e6:25:33:9a:c5:b2:62:16:b7:14:29:50: b0:6e:1f:81:93:ee:7c:c3:2f:69:67:61:2e:fd:c5: 60:03:67:bd:f1:1b:a0:cb:2a:3d:41:96:b8:1e:44: ba:7d:9d:3a:59:99:87:e4:e6:15:6d:7a:ec:ee:7e: 27:57:d2:3b:75:e6:6e:37:cb:43:45:30:47:05:b7: 55:1f:d3:71:73:6c:9e:b8:8e:9c:5e:10:ce:4a:68: 23:e3:45:74:b6:cc:b0:0c:67:70:c4:ef:9c:b3:7d: 62:b6:09:89:28:24:f2:41:07:2a:78:92:cd:5f:b9: 12:09:40:50:c6:5e:2c:38:73:44:71:70:cf:d0:96: 65:8b:fd:54:ed:70:03:96:db:cd:d7:3d:14:63:41: 31:46:31:cc:dc:c4:7e:6d:36:c7:15:7c:8d:12:10: 9f:9a:ec:12:62:9f:15:2a:f8:54:06:5d:b4:96:b5: f4:54:30:8c:b5:54:10:42:ba:7b:cb:4b:66:f0:3a: 3a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FE:95:30:08:2D:E7:74:F9:F7:D5:D7:DF:E9:5D:DD:61:CA:3D:37 X509v3 Authority Key Identifier: keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b7:9d:d0:c4:b7:ae:ab:d4:c6:84:06:62:e9:82:d6:3b:14: 4a:81:0c:be:06:c7:85:b3:06:1d:11:f4:4a:a5:a4:e1:de:2f: 96:f2:b2:28:d9:ae:94:47:7f:6c:89:89:a0:63:c8:26:64:0a: d4:cb:c7:ec:0a:44:c0:20:92:69:98:61:40:14:5c:75:29:af: 52:bf:00:11:48:93:4a:02:06:b1:82:6e:44:59:ce:a3:5f:8d: 19:7a:69:10:8f:04:bb:af:a6:e9:b6:0a:26:af:2c:41:f7:70: ba:20:c0:c0:40:23:ee:d6:3b:a4:f7:27:35:a2:19:3d:a0:0b: 59:7c:62:e0:7f:2b:41:57:b9:10:a6:48:6c:64:b3:d4:6f:fc: d6:fc:53:33:b1:fe:b0:cb:b6:5d:25:0b:e6:e6:15:93:09:c7: ce:24:7f:ed:b8:36:5e:54:c6:bc:ae:7b:dc:d3:05:bd:89:99: 66:66:5e:5b:b0:82:9a:cd:bc:db:6d:e7:8e:27:b1:a1:98:cf: 0b:bd:b8:37:39:83:c6:3b:52:ad:b6:e9:18:ec:ec:4c:5c:a9: b4:f6:55:bd:e3:8f:cc:e5:dd:bb:f2:6a:5e:b5:63:3a:49:5e: 5c:f5:4c:19:ee:89:d5:cc:b4:14:d9:18:98:a7:e4:e3:52:93: 51:87:06:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXXwT/uLhg3pDhElB8pphoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMTkwNDgzNDhkN2VjYjlmMTE5MTA4MDU1NWJmNDQ1OGEx YTU0ZTcwHhcNMjUxMjEzMTEwMTAxWhcNMjUxMjE0MTEwMTAxWjAzMTEwLwYDVQQD EyhkZGZlOTUzMDA4MmRlNzc0ZjlmN2Q1ZDdkZmU5NWRkZDYxY2EzZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7RQGC/3FiTfMMU6vQr8Ubl0wIYs 8vUtdcSXsApJJ2OM6g+JW+RMPnk6uelGkCJQ552SzVHI/Mi8EQwhpb3mJTOaxbJi FrcUKVCwbh+Bk+58wy9pZ2Eu/cVgA2e98Rugyyo9QZa4HkS6fZ06WZmH5OYVbXrs 7n4nV9I7deZuN8tDRTBHBbdVH9Nxc2yeuI6cXhDOSmgj40V0tsywDGdwxO+cs31i tgmJKCTyQQcqeJLNX7kSCUBQxl4sOHNEcXDP0JZli/1U7XADltvN1z0UY0ExRjHM 3MR+bTbHFXyNEhCfmuwSYp8VKvhUBl20lrX0VDCMtVQQQrp7y0tm8Do6lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3+lTAILed0+ffV19/pXd1hyj03MB8GA1UdIwQY MBaAFD4ZBINI1+y58RkQgFVb9EWKGlTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hZjI2MmMtZTJjZC00ODQxLTg1MGYt MDJmMzVhZDg3N2YzLzEvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9hZjI2MmMtZTJjZC00ODQxLTg1MGYtMDJmMzVhZDg3N2Yz LzEvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7ed0MS3 rqvUxoQGYumC1jsUSoEMvgbHhbMGHRH0SqWk4d4vlvKyKNmulEd/bImJoGPIJmQK 1MvH7ApEwCCSaZhhQBRcdSmvUr8AEUiTSgIGsYJuRFnOo1+NGXppEI8Eu6+m6bYK Jq8sQfdwuiDAwEAj7tY7pPcnNaIZPaALWXxi4H8rQVe5EKZIbGSz1G/81vxTM7H+ sMu2XSUL5uYVkwnHziR/7bg2XlTGvK573NMFvYmZZmZeW7CCms28223njiexoZjP C724NzmDxjtSrbbpGOzsTFyptPZVveOPzOXdu/JqXrVjOkleXPVMGe6J1cy0FNkY mKfk41KTUYcGLQ== -----END CERTIFICATE-----Generated at Sat Dec 13 14:45:55 2025 by rpki-client