This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft File: pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json) Hash identifier: Nd4DR+NhWZjgPc1nAoKCnL4d2lphsMg0T1n1ukTFAcc= Subject key identifier: 34:1D:07:5E:94:BB:BC:98:67:7F:86:9C:4C:27:67:84:3C:7F:0E:BA Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2 Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2 Certificate serial: 019B397D2FAF2670DCF7E57A45246CFFA73C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft Manifest number: 17A0 Signing time: Sat 20 Dec 2025 02:01:03 +0000 Manifest this update: Sat 20 Dec 2025 02:01:03 +0000 Manifest next update: Sun 21 Dec 2025 02:01:03 +0000 Files and hashes: 1: HMGH1OixlUbIZln6UuRHK_JoRTM.roa (hash: hIobepQhJMDuyYwWr9rOBNqOIvasbF7MFvvQPTjZKdk=) 2: PQ45AYuoXrKgjYd4a2nYqs6hfn8.roa (hash: 7Md1PLbDzWkJqH/gps7rzdw/URXMoRhj3yufH4c5pmc=) 3: XXKuildCsFJXdNyCwBMrowurkY0.roa (hash: NXW1f3EG3KW4h6xADEdnRgY4ZNLFSP48OU6WesEP2Jo=) 4: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: YgfzuMl7WAoPB5C0H06gDFh0Iqc7vHQeOXCf6aTJs6I=) 5: pjx3rNTZc8zgxWfuwXBOXgS3sqk.roa (hash: WRGBj9YhrJQ6r6myfQ5P/R+NIt879XmbiNbiLcGeJP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:2f:af:26:70:dc:f7:e5:7a:45:24:6c:ff:a7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2 Validity Not Before: Dec 20 02:01:03 2025 GMT Not After : Dec 21 02:01:03 2025 GMT Subject: CN=341d075e94bbbc98677f869c4c2767843c7f0eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:80:4c:1a:b6:da:77:67:8f:4d:5e:dd:62: 13:dd:28:33:eb:99:cc:17:48:f8:ff:8c:6f:14:bc: b8:7c:d4:5f:49:d6:51:11:dd:69:64:9a:ff:35:02: ca:5f:f5:b3:01:d5:c3:e4:21:5b:6c:fb:2e:22:41: e9:5c:84:83:33:6a:67:44:79:58:9e:3c:11:38:d2: f9:f0:a5:86:97:6a:af:c6:dc:d9:b9:3a:e8:46:77: 48:78:1b:7f:d6:96:78:e0:4f:ff:38:10:93:8b:3c: ce:dd:38:c4:ad:e3:17:28:59:87:8d:89:23:15:f7: 4c:df:16:4c:90:f3:01:a9:23:ec:7a:33:bd:7f:7d: a8:1f:dc:37:c1:19:00:50:c0:67:6c:2b:da:96:16: 2b:01:dc:ed:40:09:a6:eb:fa:93:d3:50:b6:6f:81: 63:e6:fe:a7:89:5d:47:6b:c9:2a:f8:8e:a0:bc:7f: c8:bb:d5:33:92:9c:29:89:69:f9:e5:fa:23:65:24: a4:85:01:97:9c:77:dd:98:96:6a:68:4f:61:39:20: b6:56:7e:b7:e8:6f:cb:2c:5f:99:c2:3d:0a:78:d7: 84:58:0c:01:cd:d0:68:45:d7:84:b5:fe:a7:03:da: 72:14:4e:39:d4:bf:c4:db:24:cd:c1:a1:89:95:45: 03:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1D:07:5E:94:BB:BC:98:67:7F:86:9C:4C:27:67:84:3C:7F:0E:BA X509v3 Authority Key Identifier: keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a9:34:20:38:c7:d4:97:8f:16:09:a3:16:a7:9e:44:e0:a7: 5e:83:c2:b1:fc:02:dc:77:31:ba:7e:d2:fe:eb:df:f6:3d:77: 4c:1d:c8:34:b4:1f:a7:db:e8:9e:f1:78:e4:45:a9:fa:b7:06: 23:74:dd:b9:e0:f3:33:77:4b:08:03:7e:2e:ac:86:96:45:6a: 4f:74:24:f7:e6:74:fd:6c:a3:61:64:8c:08:27:2c:bb:9a:ed: 28:8e:b7:e4:75:f7:5b:24:94:25:f3:5d:19:99:be:23:37:77: 98:46:bb:41:a6:a1:1a:28:7f:32:bd:e7:23:f6:bb:68:f9:9a: 96:0e:5e:4c:2b:52:dc:9d:d0:88:ef:8c:f1:0f:51:e7:9e:8a: 72:f4:82:7e:2d:ca:b8:aa:f6:e1:b0:64:2a:d6:5f:9f:87:60: ca:28:a7:b8:35:82:32:12:cf:58:dd:0d:06:fb:63:0b:8b:7f: 5d:af:96:88:64:55:1c:48:0d:37:b4:97:5f:18:9c:28:bb:1c: 6e:16:56:96:41:b1:6c:1d:e2:f5:09:59:9f:d8:42:90:15:1a: c8:ff:f8:89:cc:c8:b4:aa:ea:f6:ca:88:1d:f5:d7:c2:7d:6f: d5:55:c1:35:53:97:22:3f:da:7c:c0:8f:40:fa:f3:49:93:1d: 2f:ff:1c:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fS+vJnDc9+V6RSRs/6c8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Zjg0MzYwMDNkMzc2MDIwMjZiNjU1MzE3NTVjYThmY2Qz MWJlZDIwHhcNMjUxMjIwMDIwMTAzWhcNMjUxMjIxMDIwMTAzWjAzMTEwLwYDVQQD EygzNDFkMDc1ZTk0YmJiYzk4Njc3Zjg2OWM0YzI3Njc4NDNjN2YwZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzCATBq22ndnj01e3WIT3Sgz65nM F0j4/4xvFLy4fNRfSdZREd1pZJr/NQLKX/WzAdXD5CFbbPsuIkHpXISDM2pnRHlY njwRONL58KWGl2qvxtzZuTroRndIeBt/1pZ44E//OBCTizzO3TjEreMXKFmHjYkj FfdM3xZMkPMBqSPsejO9f32oH9w3wRkAUMBnbCvalhYrAdztQAmm6/qT01C2b4Fj 5v6niV1Ha8kq+I6gvH/Iu9UzkpwpiWn55fojZSSkhQGXnHfdmJZqaE9hOSC2Vn63 6G/LLF+Zwj0KeNeEWAwBzdBoRdeEtf6nA9pyFE451L/E2yTNwaGJlUUDRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQdB16Uu7yYZ3+GnEwnZ4Q8fw66MB8GA1UdIwQY MBaAFKT4Q2AD03YCAmtlUxdVyo/NMb7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQt MjdiZjgzY2RlZDZiLzEvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQtMjdiZjgzY2RlZDZi LzEvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6k0IDjH 1JePFgmjFqeeROCnXoPCsfwC3Hcxun7S/uvf9j13TB3INLQfp9vonvF45EWp+rcG I3TdueDzM3dLCAN+LqyGlkVqT3Qk9+Z0/WyjYWSMCCcsu5rtKI635HX3WySUJfNd GZm+Izd3mEa7QaahGih/Mr3nI/a7aPmalg5eTCtS3J3QiO+M8Q9R556KcvSCfi3K uKr24bBkKtZfn4dgyiinuDWCMhLPWN0NBvtjC4t/Xa+WiGRVHEgNN7SXXxicKLsc bhZWlkGxbB3i9QlZn9hCkBUayP/4iczItKrq9sqIHfXXwn1v1VXBNVOXIj/afMCP QPrzSZMdL/8cEw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:32:37 2025 by rpki-client