This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft File: PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json) Hash identifier: puuGT9fIehU9H0ptn+GPxfonV6mSzGCIJgXDmIE/Wew= Subject key identifier: 3D:F7:62:90:85:15:AA:B5:93:81:94:77:6D:0C:36:38:2C:A3:E0:E3 Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97 Certificate issuer: /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597 Certificate serial: 019B19BB0E631A73AD76F6254F6F46A03B5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft Manifest number: 1774 Signing time: Sat 13 Dec 2025 22:00:47 +0000 Manifest this update: Sat 13 Dec 2025 22:00:47 +0000 Manifest next update: Sun 14 Dec 2025 22:00:47 +0000 Files and hashes: 1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: zqDq42Akotxk4fboTHpL5S5NvTIbA+J93ff7Wl6DoBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:0e:63:1a:73:ad:76:f6:25:4f:6f:46:a0:3b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597 Validity Not Before: Dec 13 22:00:47 2025 GMT Not After : Dec 14 22:00:47 2025 GMT Subject: CN=3df762908515aab5938194776d0c36382ca3e0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:6c:fc:1c:f0:ce:05:36:79:f8:d7:92:2f: ff:ae:df:92:9d:c5:9a:56:c1:7a:32:b3:4e:b0:91: b5:c7:c6:a1:8b:99:54:68:0d:19:7f:1a:45:f6:2b: 17:3d:2d:79:53:a1:63:f4:2e:ef:96:ac:45:cb:8f: e7:8e:d8:2e:1e:53:41:5f:cc:7f:5d:8a:36:2a:5d: 78:3d:af:f9:df:d7:46:ed:77:1a:aa:a3:1e:16:97: 6d:cf:6a:ef:f9:4d:90:d6:19:85:20:2f:12:c4:0d: 39:c7:e8:82:ac:0c:f0:de:f2:fa:ab:ce:27:b8:72: e4:98:a5:68:be:ae:cb:40:bd:be:a5:8a:18:8b:20: 97:4e:58:cb:47:f6:56:b9:c5:61:6e:69:0c:78:69: 42:12:68:07:6c:61:d9:56:78:8c:7b:ae:84:fc:bf: 79:d4:f8:32:0f:d1:9f:46:6b:6b:d4:62:d7:04:3d: fc:5f:61:f7:a6:90:36:1e:43:35:ee:35:59:08:74: 3b:07:3e:06:05:55:92:80:9b:78:f7:fc:b5:ea:e4: 49:b9:b6:cc:5d:05:0a:58:67:a7:e9:a5:71:be:2e: de:49:7b:87:d2:93:f7:4d:eb:64:a6:aa:a8:b3:7b: c0:06:d4:01:92:93:4e:31:8c:7d:fd:dc:19:1d:d1: 78:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F7:62:90:85:15:AA:B5:93:81:94:77:6D:0C:36:38:2C:A3:E0:E3 X509v3 Authority Key Identifier: keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ae:da:1e:fc:22:2f:08:a0:80:7e:f6:5b:42:89:f2:99:a7: eb:5d:b0:3e:cc:24:72:e5:9b:3d:58:9b:89:55:74:a5:3b:b3: cd:00:c6:b8:c3:04:7e:3f:33:88:a9:45:59:17:e8:f2:a1:85: ef:c5:f8:4c:41:56:55:cb:fe:85:1a:c2:f4:08:c6:6c:e2:40: b8:68:35:01:ce:5f:c4:54:ad:1a:bd:99:45:73:c6:2f:be:05: 21:4d:d9:63:59:5a:92:e8:92:ba:bc:1e:0f:f8:79:32:8c:91: 60:08:92:cf:9e:f1:94:30:c9:a1:32:e7:2c:de:d1:47:a2:1b: 1d:d6:60:ac:3a:43:ee:d1:da:6a:e2:f1:5c:d5:2d:1b:09:ea: c5:a2:30:51:7b:c9:59:de:4c:61:18:25:d6:4c:cb:5d:d0:60: 67:07:ec:47:a7:96:ee:fa:b3:9e:36:e4:94:e0:13:17:bc:eb: 94:9a:5a:91:17:47:a5:be:d3:b4:a4:07:0d:26:1b:8c:1f:85: c2:5f:ce:0c:c5:ad:9a:8a:b5:a0:35:dd:73:f0:08:c1:be:49: d0:b5:33:e9:c4:90:0a:0b:b7:fb:41:95:c9:32:07:08:53:c4: 3d:78:90:fd:f7:04:d8:e9:e7:28:f6:0f:08:67:d7:a2:93:4c: e0:3b:96:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuw5jGnOtdvYlT29GoDteMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjN2JjNmYwZDQ2NWZlZTI5NGZkNjJjODUwZGNmMzhlYzRh YzE1OTcwHhcNMjUxMjEzMjIwMDQ3WhcNMjUxMjE0MjIwMDQ3WjAzMTEwLwYDVQQD EygzZGY3NjI5MDg1MTVhYWI1OTM4MTk0Nzc2ZDBjMzYzODJjYTNlMGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6ds/BzwzgU2efjXki//rt+SncWa VsF6MrNOsJG1x8ahi5lUaA0ZfxpF9isXPS15U6Fj9C7vlqxFy4/njtguHlNBX8x/ XYo2Kl14Pa/539dG7XcaqqMeFpdtz2rv+U2Q1hmFIC8SxA05x+iCrAzw3vL6q84n uHLkmKVovq7LQL2+pYoYiyCXTljLR/ZWucVhbmkMeGlCEmgHbGHZVniMe66E/L95 1PgyD9GfRmtr1GLXBD38X2H3ppA2HkM17jVZCHQ7Bz4GBVWSgJt49/y16uRJubbM XQUKWGen6aVxvi7eSXuH0pP3Tetkpqqos3vABtQBkpNOMYx9/dwZHdF4lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD33YpCFFaq1k4GUd20MNjgso+DjMB8GA1UdIwQY MBaAFDx7xvDUZf7ilP1iyFDc847ErBWXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEh2RzhOUmxfdUtVX1dMSVVOenpqc1NzRlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNzQ1MjEtMDcxOC00NTgzLTg1M2Yt MGRiZDIzMmZkMjRlLzEvUEh2RzhOUmxfdUtVX1dMSVVOenpqc1NzRlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mNzQ1MjEtMDcxOC00NTgzLTg1M2YtMGRiZDIzMmZkMjRl LzEvUEh2RzhOUmxfdUtVX1dMSVVOenpqc1NzRlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmK7aHvwi LwiggH72W0KJ8pmn612wPswkcuWbPVibiVV0pTuzzQDGuMMEfj8ziKlFWRfo8qGF 78X4TEFWVcv+hRrC9AjGbOJAuGg1Ac5fxFStGr2ZRXPGL74FIU3ZY1lakuiSurwe D/h5MoyRYAiSz57xlDDJoTLnLN7RR6IbHdZgrDpD7tHaauLxXNUtGwnqxaIwUXvJ Wd5MYRgl1kzLXdBgZwfsR6eW7vqznjbklOATF7zrlJpakRdHpb7TtKQHDSYbjB+F wl/ODMWtmoq1oDXdc/AIwb5J0LUz6cSQCgu3+0GVyTIHCFPEPXiQ/fcE2OnnKPYP CGfXopNM4DuWkA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:38 2025 by rpki-client