This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft File: phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json) Hash identifier: j0yH3jHPz4+iBrVTMYQ3+gTEfOMaS1MACNOy2DpT/zY= Subject key identifier: 6A:91:2C:DC:1E:14:01:C3:26:59:B9:84:13:C1:D6:B1:21:9E:2B:6B Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7 Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7 Certificate serial: 019BF8ADD7543E259AE2C80F86A46413E588 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft Manifest number: 150C Signing time: Mon 26 Jan 2026 05:01:40 +0000 Manifest this update: Mon 26 Jan 2026 05:01:40 +0000 Manifest next update: Tue 27 Jan 2026 05:01:40 +0000 Files and hashes: 1: Vd994I8OewATsGGSa4zEfrPZRM0.roa (hash: XSJbo9Wc3kl6cNjQcZjvVqM+NHSEiIeknkFve8lu2PM=) 2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: 6LpjsN27sUN7ThpzK9YNaT0a56FPRIcq5/uUgPEPYGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:d7:54:3e:25:9a:e2:c8:0f:86:a4:64:13:e5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7 Validity Not Before: Jan 26 05:01:40 2026 GMT Not After : Jan 27 05:01:40 2026 GMT Subject: CN=6a912cdc1e1401c32659b98413c1d6b1219e2b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4c:ad:f0:b2:80:1a:d7:5c:b6:7f:b9:48:91: ca:92:50:d3:18:f0:cd:75:ea:62:0f:28:1e:62:09: 67:22:82:4c:0e:6f:e6:f1:a6:78:8f:55:91:b0:f8: 11:54:17:fe:16:9c:c7:10:72:ef:21:8a:6e:e4:71: b9:35:3b:46:84:03:ec:de:d1:6d:69:1b:c0:be:29: 6a:99:b5:86:ee:72:23:e6:9d:50:9f:86:3c:fb:79: 6b:63:65:39:1c:da:97:0d:4c:0c:ab:f1:71:3d:87: 48:4f:51:56:3d:a0:1a:9a:a6:53:c1:fd:e8:30:48: e0:e5:78:dc:37:85:36:98:14:38:b7:de:25:cf:b4: ed:20:e7:50:41:01:35:11:a7:fd:93:ea:b1:57:b8: f6:f7:38:15:aa:d9:24:47:87:f0:33:bf:00:74:cf: ef:ff:96:3e:76:ee:22:ab:89:5b:3c:06:ca:10:ec: e0:e1:2f:36:51:89:89:12:a2:fd:8b:64:35:b5:ef: 5e:1e:41:fa:2d:6f:74:71:99:95:a3:24:1c:e1:14: 17:ec:47:e0:39:9d:f9:25:9c:b0:25:d8:16:eb:86: 1c:d2:f2:56:26:10:b3:83:33:5d:56:56:39:d2:aa: df:91:97:40:83:34:7b:61:28:8d:ea:a6:59:8f:5b: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:91:2C:DC:1E:14:01:C3:26:59:B9:84:13:C1:D6:B1:21:9E:2B:6B X509v3 Authority Key Identifier: keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ed:ec:50:de:de:84:08:d4:c4:51:21:f0:a8:33:58:28:d2: 20:32:fe:82:05:e0:7b:9a:ad:fe:13:1e:05:00:61:a1:c9:e8: d8:ee:b8:bc:ef:c7:60:7b:2c:af:c2:8c:d8:3e:68:d8:4c:6f: d5:b8:4d:d1:79:e1:cc:23:7c:78:f7:e7:34:1d:11:82:1e:be: 8c:0f:6c:10:fa:84:b6:52:28:86:ec:b1:e1:bb:32:3a:c5:1a: 40:cc:55:b6:00:62:e3:16:f9:9c:0c:ba:70:a9:83:37:46:48: fa:74:76:c8:37:77:cb:9b:d8:2f:6a:65:88:64:61:7e:dd:e7: f6:07:d3:64:44:f5:f4:df:2b:95:d8:bc:14:15:1e:da:c3:ab: c4:dd:ae:5b:ad:66:80:8e:01:1c:b4:f1:b0:88:b7:28:4e:21: fe:99:cc:a3:f4:63:6f:c8:9d:96:4b:cf:51:3a:64:4f:50:47: 99:b8:13:9d:09:3f:df:1f:2d:fb:9e:28:e8:8d:83:75:13:87: e3:70:f9:ac:71:2d:83:39:f3:07:9a:e6:01:26:76:5f:69:36: bd:bd:5c:ed:cf:85:a0:57:0f:7b:a8:b4:3b:bf:6f:ea:47:e3: 16:e8:39:1d:6f:a1:35:1a:c8:d6:dc:f4:30:6d:a4:17:1a:26: 6d:44:b1:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rddUPiWa4sgPhqRkE+WIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MTE2ZDA0M2U0NGI0MDQxNDRlNmE0MmQyNmFhOWRhZjUz ZDA0YTcwHhcNMjYwMTI2MDUwMTQwWhcNMjYwMTI3MDUwMTQwWjAzMTEwLwYDVQQD Eyg2YTkxMmNkYzFlMTQwMWMzMjY1OWI5ODQxM2MxZDZiMTIxOWUyYjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUyt8LKAGtdctn+5SJHKklDTGPDN depiDygeYglnIoJMDm/m8aZ4j1WRsPgRVBf+FpzHEHLvIYpu5HG5NTtGhAPs3tFt aRvAvilqmbWG7nIj5p1Qn4Y8+3lrY2U5HNqXDUwMq/FxPYdIT1FWPaAamqZTwf3o MEjg5XjcN4U2mBQ4t94lz7TtIOdQQQE1Eaf9k+qxV7j29zgVqtkkR4fwM78AdM/v /5Y+du4iq4lbPAbKEOzg4S82UYmJEqL9i2Q1te9eHkH6LW90cZmVoyQc4RQX7Efg OZ35JZywJdgW64Yc0vJWJhCzgzNdVlY50qrfkZdAgzR7YSiN6qZZj1sfvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqRLNweFAHDJlm5hBPB1rEhnitrMB8GA1UdIwQY MBaAFKYRbQQ+RLQEFE5qQtJqqdr1PQSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yNTBkYzgtMDcwMS00MjdhLWE4OWQt NDNmNWJjZjY3NzVkLzEvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8yNTBkYzgtMDcwMS00MjdhLWE4OWQtNDNmNWJjZjY3NzVk LzEvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjO3sUN7e hAjUxFEh8KgzWCjSIDL+ggXge5qt/hMeBQBhocno2O64vO/HYHssr8KM2D5o2Exv 1bhN0XnhzCN8ePfnNB0Rgh6+jA9sEPqEtlIohuyx4bsyOsUaQMxVtgBi4xb5nAy6 cKmDN0ZI+nR2yDd3y5vYL2pliGRhft3n9gfTZET19N8rldi8FBUe2sOrxN2uW61m gI4BHLTxsIi3KE4h/pnMo/Rjb8idlkvPUTpkT1BHmbgTnQk/3x8t+54o6I2DdROH 43D5rHEtgznzB5rmASZ2X2k2vb1c7c+FoFcPe6i0O79v6kfjFug5HW+hNRrI1tz0 MG2kFxombUSx9w== -----END CERTIFICATE-----Generated at Mon Jan 26 13:49:03 2026 by rpki-client