This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft File: pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json) Hash identifier: YWtIqjjdKFpH174l7SJm/eg4yAD/JpGV6C+/xiEwqjA= Subject key identifier: 5F:4A:17:DC:54:EB:95:FA:00:8C:38:BF:3E:10:4A:B0:BA:F4:BB:59 Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2 Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2 Certificate serial: 019B0F00718D63C88E6EA2B126C9C8506772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft Manifest number: 178A Signing time: Thu 11 Dec 2025 20:00:45 +0000 Manifest this update: Thu 11 Dec 2025 20:00:45 +0000 Manifest next update: Fri 12 Dec 2025 20:00:45 +0000 Files and hashes: 1: HMGH1OixlUbIZln6UuRHK_JoRTM.roa (hash: hIobepQhJMDuyYwWr9rOBNqOIvasbF7MFvvQPTjZKdk=) 2: PQ45AYuoXrKgjYd4a2nYqs6hfn8.roa (hash: 7Md1PLbDzWkJqH/gps7rzdw/URXMoRhj3yufH4c5pmc=) 3: XXKuildCsFJXdNyCwBMrowurkY0.roa (hash: NXW1f3EG3KW4h6xADEdnRgY4ZNLFSP48OU6WesEP2Jo=) 4: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: +yawWNLk/xZmEr6Cl/TnEv5bfKYQ1iXW557QxkoHa6A=) 5: pjx3rNTZc8zgxWfuwXBOXgS3sqk.roa (hash: WRGBj9YhrJQ6r6myfQ5P/R+NIt879XmbiNbiLcGeJP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:71:8d:63:c8:8e:6e:a2:b1:26:c9:c8:50:67:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2 Validity Not Before: Dec 11 20:00:45 2025 GMT Not After : Dec 12 20:00:45 2025 GMT Subject: CN=5f4a17dc54eb95fa008c38bf3e104ab0baf4bb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2e:36:46:5e:3b:00:24:14:d6:79:c3:2b:a9: f8:b1:e1:8e:cb:f7:34:c6:26:87:d0:1c:ce:00:c3: 3d:73:14:9b:3c:07:80:ba:d9:51:5d:ce:35:a7:c7: 7e:3f:23:a5:70:7c:4f:72:8f:44:f1:f0:76:4a:a2: e2:e9:a0:92:cb:60:56:43:a9:cf:ca:ec:0e:b7:11: 12:fc:4a:4a:08:05:7d:7d:1d:29:a3:a7:be:f6:3d: e6:b7:61:2c:7d:8d:d5:e8:2e:90:a4:a9:a5:db:14: b4:d7:26:54:c8:ef:8c:a4:e2:7c:90:29:5b:6a:3c: 7e:f1:b3:a7:9d:87:c1:51:7c:0c:6a:79:71:de:7d: 14:94:46:64:3c:68:5e:bb:40:37:de:09:fa:3d:ea: 87:62:76:54:c1:ba:1a:02:a8:6d:62:01:1d:0d:9e: 77:9e:d0:36:ce:5b:43:8b:69:d4:62:7b:0f:08:bd: 35:97:0f:e5:58:e4:e9:39:9e:28:91:3a:a6:51:79: c5:c6:67:53:d5:98:13:33:53:e0:47:df:05:df:68: bb:19:2e:0a:8b:6d:51:a8:54:3c:c0:72:a3:53:61: 06:b2:35:5b:6a:ba:80:15:e9:5d:3a:ef:c8:fd:e0: 5a:02:3e:ff:29:dc:55:a1:ba:08:ac:37:a5:49:9f: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4A:17:DC:54:EB:95:FA:00:8C:38:BF:3E:10:4A:B0:BA:F4:BB:59 X509v3 Authority Key Identifier: keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:af:0a:76:5b:aa:ea:c0:6d:22:91:6b:74:98:53:13:1c:41: c0:ff:6b:c3:0b:4d:55:24:85:9e:c3:13:40:82:49:4c:92:f1: 0f:e0:2a:80:d7:c1:8b:7f:fb:58:28:19:18:8c:a3:41:12:66: 92:57:ed:64:21:f4:27:46:1e:b2:f4:b2:8b:dc:a5:54:dc:d6: 16:65:e6:ab:32:5d:fa:17:78:de:72:cd:79:7d:bb:68:2f:fd: 03:d6:30:60:86:23:8c:71:e4:66:9d:96:dd:b7:63:3f:e0:ba: 3e:72:79:b6:5f:e1:31:c3:f7:19:f2:5d:79:39:63:9a:dc:11: cd:b3:dd:73:ee:35:f0:d9:50:09:4a:91:4d:7b:0b:17:a0:cb: 85:4a:26:2a:3a:52:ae:e9:c5:d3:a5:3a:e5:77:82:cd:7f:67: 51:02:29:3c:c5:0b:9e:51:25:49:04:a5:3d:ed:27:66:fd:42: c9:ec:2b:4e:f9:42:7d:d7:97:0b:20:dd:07:34:2b:d3:f8:21: 61:34:8c:2a:59:0d:51:a1:14:f8:13:bc:36:55:69:cc:18:de: 9e:4b:64:6b:16:59:5f:35:82:84:a2:32:8b:cc:75:10:da:2c: 43:c4:a8:69:10:26:cb:de:07:15:e6:19:b5:46:3b:47:6a:96: 72:12:6d:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAHGNY8iObqKxJsnIUGdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Zjg0MzYwMDNkMzc2MDIwMjZiNjU1MzE3NTVjYThmY2Qz MWJlZDIwHhcNMjUxMjExMjAwMDQ1WhcNMjUxMjEyMjAwMDQ1WjAzMTEwLwYDVQQD Eyg1ZjRhMTdkYzU0ZWI5NWZhMDA4YzM4YmYzZTEwNGFiMGJhZjRiYjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9C42Rl47ACQU1nnDK6n4seGOy/c0 xiaH0BzOAMM9cxSbPAeAutlRXc41p8d+PyOlcHxPco9E8fB2SqLi6aCSy2BWQ6nP yuwOtxES/EpKCAV9fR0po6e+9j3mt2EsfY3V6C6QpKml2xS01yZUyO+MpOJ8kClb ajx+8bOnnYfBUXwManlx3n0UlEZkPGheu0A33gn6PeqHYnZUwboaAqhtYgEdDZ53 ntA2zltDi2nUYnsPCL01lw/lWOTpOZ4okTqmUXnFxmdT1ZgTM1PgR98F32i7GS4K i21RqFQ8wHKjU2EGsjVbarqAFeldOu/I/eBaAj7/KdxVoboIrDelSZ9KLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9KF9xU65X6AIw4vz4QSrC69LtZMB8GA1UdIwQY MBaAFKT4Q2AD03YCAmtlUxdVyo/NMb7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQt MjdiZjgzY2RlZDZiLzEvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQtMjdiZjgzY2RlZDZi LzEvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeK8Kdluq 6sBtIpFrdJhTExxBwP9rwwtNVSSFnsMTQIJJTJLxD+AqgNfBi3/7WCgZGIyjQRJm klftZCH0J0YesvSyi9ylVNzWFmXmqzJd+hd43nLNeX27aC/9A9YwYIYjjHHkZp2W 3bdjP+C6PnJ5tl/hMcP3GfJdeTljmtwRzbPdc+418NlQCUqRTXsLF6DLhUomKjpS runF06U65XeCzX9nUQIpPMULnlElSQSlPe0nZv1CyewrTvlCfdeXCyDdBzQr0/gh YTSMKlkNUaEU+BO8NlVpzBjenktkaxZZXzWChKIyi8x1ENosQ8SoaRAmy94HFeYZ tUY7R2qWchJtmQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:19:21 2025 by rpki-client