This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft File: phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft (raw, json) Hash identifier: NmS9BAKzR0numEH2dU3zuevcUAg1E4EMF8NV6a9WlhQ= Subject key identifier: BC:5D:C5:7E:EE:A2:EB:C4:25:8B:8D:3C:F4:A1:76:4C:F0:1F:69:C3 Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA Certificate issuer: /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa Certificate serial: 019B348D449C1363F8A6AF68BA8F139C8A35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft Manifest number: 02AA Signing time: Fri 19 Dec 2025 03:00:31 +0000 Manifest this update: Fri 19 Dec 2025 03:00:31 +0000 Manifest next update: Sat 20 Dec 2025 03:00:31 +0000 Files and hashes: 1: TOxCM6S_arlfToUA479zh5nkrJo.roa (hash: vJ1XssSgRtqMk/Uwgd5Thnwzm2ARorFtzVtt1LqNVUg=) 2: phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl (hash: +g/A32PgGLw6zMNtrNEkCsv6vT6ONaZS07eXK1meTAQ=) 3: vnrJw0_RXF_3eNlI4J759GvRvbQ.roa (hash: Eb6f4bJUmWLqH0E5jlnZq5oby6oYj5i5BTlzMbxWrPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:44:9c:13:63:f8:a6:af:68:ba:8f:13:9c:8a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa Validity Not Before: Dec 19 03:00:31 2025 GMT Not After : Dec 20 03:00:31 2025 GMT Subject: CN=bc5dc57eeea2ebc4258b8d3cf4a1764cf01f69c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:04:e1:46:de:e8:16:1f:1a:ed:02:9a:ad: 19:e8:ad:81:16:4b:26:cf:28:7f:bf:66:ed:0f:51: 7d:83:ac:ba:dd:0e:24:2a:56:83:d9:24:32:93:bb: cb:0a:74:96:01:39:23:fb:e1:5e:db:02:bc:a6:af: ce:cd:f1:e3:6a:eb:02:85:28:c6:37:14:43:c6:8e: f5:ad:14:69:a7:f6:8b:cd:d9:52:92:78:ad:52:60: e6:ba:28:7a:f5:9e:9f:a9:bc:f5:3a:52:ed:1c:50: e6:72:ab:b3:62:b4:d3:1f:98:83:7e:93:4c:c1:aa: db:c3:b5:65:79:2e:fc:f1:5e:ab:ac:70:70:9c:6e: 36:4b:bf:db:92:f3:ee:1e:69:d2:2b:e2:dd:9d:48: bb:88:ef:81:e5:58:7f:b6:4a:ca:f9:80:9e:c8:33: 78:2e:71:cc:f8:43:f7:6e:c3:2b:22:50:03:13:e7: ee:6b:04:36:46:16:d0:12:83:1e:b0:25:0a:46:6f: 7b:d8:63:d5:74:4c:3e:39:6d:aa:d0:79:c8:30:7f: 59:0f:83:68:75:c3:85:59:5c:f8:02:40:2a:5a:4f: 73:d0:16:4a:28:6d:ba:fc:60:42:bf:9d:fb:28:a4: 42:05:2b:85:5e:ec:f6:1d:86:56:0e:14:c3:9c:c3: ac:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5D:C5:7E:EE:A2:EB:C4:25:8B:8D:3C:F4:A1:76:4C:F0:1F:69:C3 X509v3 Authority Key Identifier: keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:40:f7:b8:0d:35:1d:5c:5b:13:39:88:65:61:d1:2f:4d:5c: 2d:a7:c7:86:4a:e6:89:dc:e3:11:a0:16:4b:d5:d9:3c:95:c6: 6e:fe:92:fe:4a:79:2a:ab:3f:cf:79:01:b6:27:1f:8c:db:30: 25:f5:f9:4d:ec:ba:a7:e6:28:bb:42:46:66:f5:3d:88:31:48: 61:8a:1b:25:ba:bb:fd:0f:73:23:4a:1e:3c:a7:ec:9e:e3:10: 26:28:35:71:a7:ca:30:85:b9:20:a7:d7:8d:9a:38:e4:93:96: b0:91:7b:7c:d0:cf:09:4f:d6:f4:de:c6:24:c5:ea:d3:5b:e4: 69:8a:8a:c6:e8:3a:5e:d3:06:9d:5b:f1:eb:a7:4a:4d:14:93: 95:32:d3:7d:ad:32:33:5c:a9:0f:96:33:fa:03:e9:1c:fc:49: 61:b0:62:b4:46:e0:77:b5:3f:71:5c:1a:3f:1e:56:cf:41:b5: 5a:4f:c0:a7:7a:28:5c:75:00:ea:3b:46:55:08:8c:37:72:d1: 67:5d:34:76:6d:28:e0:65:cb:78:0a:db:cf:e4:2b:59:c0:b9: c7:de:e2:60:fc:2e:e1:2d:ca:cf:bd:cc:42:d9:f1:67:24:4b: 78:b0:b7:31:57:05:e0:bd:38:3f:44:d3:b3:4d:12:61:f4:bd: fe:4d:fc:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jUScE2P4pq9ouo8TnIo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MTYyMTAyZTVhM2MwYWVlYWI2M2MyMWVkOTJhODA1ODI2 ZGI3YWEwHhcNMjUxMjE5MDMwMDMxWhcNMjUxMjIwMDMwMDMxWjAzMTEwLwYDVQQD EyhiYzVkYzU3ZWVlYTJlYmM0MjU4YjhkM2NmNGExNzY0Y2YwMWY2OWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr90E4Ube6BYfGu0Cmq0Z6K2BFksm zyh/v2btD1F9g6y63Q4kKlaD2SQyk7vLCnSWATkj++Fe2wK8pq/OzfHjausChSjG NxRDxo71rRRpp/aLzdlSknitUmDmuih69Z6fqbz1OlLtHFDmcquzYrTTH5iDfpNM warbw7VleS788V6rrHBwnG42S7/bkvPuHmnSK+LdnUi7iO+B5Vh/tkrK+YCeyDN4 LnHM+EP3bsMrIlADE+fuawQ2RhbQEoMesCUKRm972GPVdEw+OW2q0HnIMH9ZD4No dcOFWVz4AkAqWk9z0BZKKG26/GBCv537KKRCBSuFXuz2HYZWDhTDnMOs7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxdxX7uouvEJYuNPPShdkzwH2nDMB8GA1UdIwQY MBaAFKYWIQLlo8Cu6rY8Ie2SqAWCbbeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGIt OWNlZTc3YmM1MjIyLzEvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGItOWNlZTc3YmM1MjIy LzEvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkD3uA01 HVxbEzmIZWHRL01cLafHhkrmidzjEaAWS9XZPJXGbv6S/kp5Kqs/z3kBticfjNsw JfX5Tey6p+You0JGZvU9iDFIYYobJbq7/Q9zI0oePKfsnuMQJig1cafKMIW5IKfX jZo45JOWsJF7fNDPCU/W9N7GJMXq01vkaYqKxug6XtMGnVvx66dKTRSTlTLTfa0y M1ypD5Yz+gPpHPxJYbBitEbgd7U/cVwaPx5Wz0G1Wk/Ap3ooXHUA6jtGVQiMN3LR Z100dm0o4GXLeArbz+QrWcC5x97iYPwu4S3Kz73MQtnxZyRLeLC3MVcF4L04P0TT s00SYfS9/k38BA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:48:32 2025 by rpki-client