This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json) Hash identifier: pB7L8o41fxvM9daW6DzxkFJ4zrRNYPAmUX7jXjDC+ys= Subject key identifier: 24:11:56:77:93:A2:D2:4B:85:27:90:CA:F9:C4:21:7F:C2:D6:20:78 Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e Certificate serial: 019B1081911CAE260861C92B199B773F9DC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft Manifest number: 0F68 Signing time: Fri 12 Dec 2025 03:01:25 +0000 Manifest this update: Fri 12 Dec 2025 03:01:25 +0000 Manifest next update: Sat 13 Dec 2025 03:01:25 +0000 Files and hashes: 1: 8CZZasv15ITHGJH10Ps_PRDQgPA.roa (hash: ChPUFc9NmhtK34OUC7Eaou9d/4NJyuFg8hJJ9aydum8=) 2: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: Luh4fSDc2b96W0iDRc8Bo0gY3IYtupeYI2Hvl8OSUvY=) 3: hmC9MAuZ5kgPbA1CQDROjstXo9U.roa (hash: hinoRroZw08wfbaOxEPEaLrexGciPrDYQgu6xfF4boI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:91:1c:ae:26:08:61:c9:2b:19:9b:77:3f:9d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e Validity Not Before: Dec 12 03:01:25 2025 GMT Not After : Dec 13 03:01:25 2025 GMT Subject: CN=2411567793a2d24b852790caf9c4217fc2d62078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6a:c9:a7:b5:1e:d6:55:36:02:88:7b:61:65: e2:41:ab:dc:87:8d:3b:9e:82:ce:b0:a6:ec:0c:9e: 81:ca:40:30:cf:48:9d:4e:f2:fa:8d:52:fc:9b:95: 1a:b6:d3:d8:b2:05:03:20:4b:1e:77:1d:e2:da:01: 9d:66:b1:fc:8a:5a:e3:1c:65:04:6e:12:27:b2:f2: b5:d5:25:07:e5:68:e7:0f:6c:99:4d:5f:35:6c:47: 04:b2:da:b1:b1:f6:5d:63:58:92:ed:68:66:84:74: 51:9b:b0:08:ed:a3:ab:1b:73:3a:5f:42:5d:93:b2: cd:fe:d2:c2:6c:89:f3:74:d7:db:4e:d1:84:2c:d8: e9:ea:ad:1c:b3:a6:02:da:ee:5e:30:76:4d:dc:32: 24:74:52:3c:2c:3c:01:99:b0:0f:68:ee:89:e3:32: 83:d0:26:3c:ae:b4:cf:3a:ef:25:85:1e:cc:f5:b3: 18:cd:80:ab:f3:c8:95:21:1b:5e:0c:28:4c:ad:d2: a4:89:d0:64:c2:f1:05:3a:bf:9d:62:96:01:f8:8c: ed:70:7f:8e:57:e7:76:13:3e:4b:24:15:4c:e8:1a: a3:da:a0:e5:86:85:e8:5f:2c:39:f9:6f:4d:46:40: 77:5f:09:ad:08:95:d8:16:4d:79:0e:84:f2:44:f8: 8b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:11:56:77:93:A2:D2:4B:85:27:90:CA:F9:C4:21:7F:C2:D6:20:78 X509v3 Authority Key Identifier: keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:84:15:07:cc:f3:41:0a:a9:cb:d9:e0:ef:d7:1b:42:bd:95: 4c:43:f9:52:5f:f0:e2:32:b7:48:72:06:ee:bd:ff:de:5c:27: 28:d3:ff:e9:6a:a0:24:e9:6f:d4:1f:b8:05:e5:ea:53:c5:56: 4e:4d:7f:79:0c:99:83:ea:df:25:d4:05:fa:09:75:51:c9:b1: fb:72:54:1b:f7:89:4d:69:f3:a9:98:7b:7e:bc:0d:9a:08:47: ec:a8:e3:6b:ef:44:0a:fb:b7:e0:e0:2b:29:54:18:82:75:1a: 9a:76:75:50:fc:3f:2c:36:51:9d:ed:f9:a9:bb:4c:12:3d:53: 1d:18:10:49:47:88:31:f0:65:bd:63:be:8b:11:2a:9d:cb:ca: 32:e1:40:62:e4:22:e4:63:60:92:c5:71:2e:37:0a:02:8f:eb: e5:1e:99:c2:22:0e:ba:fe:69:bc:0f:cf:a1:03:26:f4:7f:65: 3a:f5:5e:a6:5d:f7:39:8b:48:28:72:df:77:ed:3e:6f:23:d8: 47:16:bb:1b:d8:20:82:ad:24:68:ee:00:f9:bf:35:51:c3:44: 63:07:5b:74:96:50:5e:42:9b:c6:b3:2b:aa:a5:4a:8a:45:d8: 5c:32:08:60:f8:b2:c3:dc:48:a0:c7:8c:c5:cd:34:37:f5:2f: 9f:39:84:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgZEcriYIYckrGZt3P53CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMWFlMTViZTg2ZWIwYzRkOWE3NjRjYzdhOGY2NTk5NWJm OGM5MGUwHhcNMjUxMjEyMDMwMTI1WhcNMjUxMjEzMDMwMTI1WjAzMTEwLwYDVQQD EygyNDExNTY3NzkzYTJkMjRiODUyNzkwY2FmOWM0MjE3ZmMyZDYyMDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22rJp7Ue1lU2Aoh7YWXiQavch407 noLOsKbsDJ6BykAwz0idTvL6jVL8m5UattPYsgUDIEsedx3i2gGdZrH8ilrjHGUE bhInsvK11SUH5WjnD2yZTV81bEcEstqxsfZdY1iS7WhmhHRRm7AI7aOrG3M6X0Jd k7LN/tLCbInzdNfbTtGELNjp6q0cs6YC2u5eMHZN3DIkdFI8LDwBmbAPaO6J4zKD 0CY8rrTPOu8lhR7M9bMYzYCr88iVIRteDChMrdKkidBkwvEFOr+dYpYB+IztcH+O V+d2Ez5LJBVM6Bqj2qDlhoXoXyw5+W9NRkB3XwmtCJXYFk15DoTyRPiLCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQRVneTotJLhSeQyvnEIX/C1iB4MB8GA1UdIwQY MBaAFD4a4VvobrDE2adkzHqPZZlb+MkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83M2YyM2EtZTk3Ny00MWMzLTkyMmQt YjI3YzM0MTI0MjZhLzEvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83M2YyM2EtZTk3Ny00MWMzLTkyMmQtYjI3YzM0MTI0MjZh LzEvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYQVB8zz QQqpy9ng79cbQr2VTEP5Ul/w4jK3SHIG7r3/3lwnKNP/6WqgJOlv1B+4BeXqU8VW Tk1/eQyZg+rfJdQF+gl1Ucmx+3JUG/eJTWnzqZh7frwNmghH7Kjja+9ECvu34OAr KVQYgnUamnZ1UPw/LDZRne35qbtMEj1THRgQSUeIMfBlvWO+ixEqncvKMuFAYuQi 5GNgksVxLjcKAo/r5R6ZwiIOuv5pvA/PoQMm9H9lOvVepl33OYtIKHLfd+0+byPY Rxa7G9gggq0kaO4A+b81UcNEYwdbdJZQXkKbxrMrqqVKikXYXDIIYPiyw9xIoMeM xc00N/UvnzmE1w== -----END CERTIFICATE-----Generated at Fri Dec 12 05:33:00 2025 by rpki-client