This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft File: pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft (raw, json) Hash identifier: upr+wRGHG+Tx4RUSY2lCNT7l3+0ICAwdaXo9oD6pXCY= Subject key identifier: 06:95:85:2C:50:60:E7:44:CC:C2:7D:42:79:A0:3F:7F:49:F5:A0:AD Authority key identifier: A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0 Certificate issuer: /CN=a475e651f81aab603392f25521b7c9ab5bd281c0 Certificate serial: 019B22F53AD8E373174FD2E112FA15314A64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft Manifest number: 05A7 Signing time: Mon 15 Dec 2025 17:00:55 +0000 Manifest this update: Mon 15 Dec 2025 17:00:55 +0000 Manifest next update: Tue 16 Dec 2025 17:00:55 +0000 Files and hashes: 1: pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl (hash: /pADyC39/RIuK2HS5Z0rA8hzBJOrjpIM1GFzg/qqUGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:3a:d8:e3:73:17:4f:d2:e1:12:fa:15:31:4a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a475e651f81aab603392f25521b7c9ab5bd281c0 Validity Not Before: Dec 15 17:00:55 2025 GMT Not After : Dec 16 17:00:55 2025 GMT Subject: CN=0695852c5060e744ccc27d4279a03f7f49f5a0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1a:a4:de:25:75:2f:cb:d2:c6:e4:48:45:7f: 53:13:d1:52:f4:9f:0c:cd:98:cc:b3:8e:ef:ad:24: 23:19:4e:62:f4:62:bd:18:a0:da:06:f5:b9:69:ab: 6b:2f:36:c8:b3:f7:15:94:ce:98:be:fe:fe:08:60: 69:a2:ae:80:4e:cf:b0:e7:2c:84:05:4f:e9:75:31: b4:f7:4c:ed:3e:70:1a:e1:e4:58:c0:a5:25:e2:d1: 51:17:88:28:8f:73:1c:58:9e:ac:65:fe:9c:39:36: 51:6e:f3:e4:4c:57:ff:9b:43:f8:d9:8b:4b:55:fe: ab:18:a3:31:ef:48:5b:8b:35:d0:e5:85:ce:1f:b6: 37:78:3a:4b:db:1c:e2:db:00:4e:91:46:72:dc:4d: 75:8e:1e:8c:48:c4:e6:67:6c:d1:85:77:a2:ac:02: d9:62:34:79:46:0b:d5:0f:66:64:fb:50:01:c0:f4: 7b:ba:ef:11:e7:7c:0d:bc:c3:8b:42:4f:2f:08:65: 2f:c6:17:0c:a6:40:a3:95:5c:74:fa:d9:41:76:06: 74:ee:a9:c9:02:04:88:38:aa:46:29:88:10:42:4a: 83:4d:45:4d:e5:c7:05:ad:a6:e4:5a:ca:0e:d1:4d: 17:c1:9c:f9:60:06:d1:57:70:2c:f3:1c:64:31:f2: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:95:85:2C:50:60:E7:44:CC:C2:7D:42:79:A0:3F:7F:49:F5:A0:AD X509v3 Authority Key Identifier: keyid:A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a5:ca:e5:12:d2:d2:93:1f:61:8d:6d:d4:1e:4d:d6:c1:cd: 47:9c:ef:79:80:f7:b5:17:51:28:e1:73:59:84:b9:8a:eb:94: 97:74:d4:e5:45:88:4a:c8:72:b1:99:6c:38:08:66:55:14:d4: c9:41:be:66:5f:b2:d4:6e:3b:a4:d9:69:f3:c7:b9:25:53:f8: f7:e1:17:24:58:85:13:a6:45:ed:40:7d:db:e5:79:d6:5a:48: 42:9b:93:8c:85:3a:d4:b6:10:60:8a:7e:db:53:91:18:7d:e3: 37:90:1d:a9:d3:2d:a2:28:c8:32:eb:d1:36:87:2e:de:56:34: 66:43:c4:27:a9:ef:66:6d:6c:68:46:63:96:d0:2f:73:16:f4: 6f:d4:f7:0d:29:a1:eb:40:9b:ba:15:b5:e0:dd:9e:3c:00:7a: 2d:95:52:c0:b5:02:51:c1:b4:f6:cf:2c:2f:3f:48:63:13:5e: fb:14:2c:c5:39:16:b8:8e:b1:58:69:14:7e:88:16:24:23:b0: 7b:c6:e9:f9:a1:78:19:89:4f:5a:f7:2c:5b:fc:07:da:ad:9b: 30:2f:fd:a5:3b:0e:87:53:eb:8c:62:6e:b6:b6:7d:76:64:e8: e4:ef:1c:ac:c1:f8:41:3d:77:ec:13:c6:2a:45:f7:48:c9:cc: ab:a2:59:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9TrY43MXT9LhEvoVMUpkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NzVlNjUxZjgxYWFiNjAzMzkyZjI1NTIxYjdjOWFiNWJk MjgxYzAwHhcNMjUxMjE1MTcwMDU1WhcNMjUxMjE2MTcwMDU1WjAzMTEwLwYDVQQD EygwNjk1ODUyYzUwNjBlNzQ0Y2NjMjdkNDI3OWEwM2Y3ZjQ5ZjVhMGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRqk3iV1L8vSxuRIRX9TE9FS9J8M zZjMs47vrSQjGU5i9GK9GKDaBvW5aatrLzbIs/cVlM6Yvv7+CGBpoq6ATs+w5yyE BU/pdTG090ztPnAa4eRYwKUl4tFRF4goj3McWJ6sZf6cOTZRbvPkTFf/m0P42YtL Vf6rGKMx70hbizXQ5YXOH7Y3eDpL2xzi2wBOkUZy3E11jh6MSMTmZ2zRhXeirALZ YjR5RgvVD2Zk+1ABwPR7uu8R53wNvMOLQk8vCGUvxhcMpkCjlVx0+tlBdgZ07qnJ AgSIOKpGKYgQQkqDTUVN5ccFrabkWsoO0U0XwZz5YAbRV3As8xxkMfKh8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaVhSxQYOdEzMJ9QnmgP39J9aCtMB8GA1UdIwQY MBaAFKR15lH4GqtgM5LyVSG3yatb0oHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEhYbVVmZ2FxMkF6a3ZKVkliZkpxMXZTZ2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9jZWMzMjctMzhlMS00YWY0LWEwOGYt NzdjZmQyMTViNzMyLzEvcEhYbVVmZ2FxMkF6a3ZKVkliZkpxMXZTZ2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9jZWMzMjctMzhlMS00YWY0LWEwOGYtNzdjZmQyMTViNzMy LzEvcEhYbVVmZ2FxMkF6a3ZKVkliZkpxMXZTZ2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6XK5RLS 0pMfYY1t1B5N1sHNR5zveYD3tRdRKOFzWYS5iuuUl3TU5UWISshysZlsOAhmVRTU yUG+Zl+y1G47pNlp88e5JVP49+EXJFiFE6ZF7UB92+V51lpIQpuTjIU61LYQYIp+ 21ORGH3jN5AdqdMtoijIMuvRNocu3lY0ZkPEJ6nvZm1saEZjltAvcxb0b9T3DSmh 60CbuhW14N2ePAB6LZVSwLUCUcG09s8sLz9IYxNe+xQsxTkWuI6xWGkUfogWJCOw e8bp+aF4GYlPWvcsW/wH2q2bMC/9pTsOh1PrjGJutrZ9dmTo5O8crMH4QT137BPG KkX3SMnMq6JZRA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:55:54 2025 by rpki-client