This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft File: mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft (raw, json) Hash identifier: DTP56/R6gsHghTi12T7uRrWA3A1dqtyQ+8y8TZ4/QEo= Subject key identifier: 1F:F3:81:92:83:BB:27:12:43:D5:79:47:A9:E7:6A:07:6A:5E:2C:84 Authority key identifier: 98:F3:88:BF:A6:65:BB:84:67:FD:5C:DC:D2:C3:32:7E:C7:F2:7F:EC Certificate issuer: /CN=98f388bfa665bb8467fd5cdcd2c3327ec7f27fec Certificate serial: 019AF19B1CC3B94239C49AEE4D99A0A1F6F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft Manifest number: 036A Signing time: Sat 06 Dec 2025 03:01:05 +0000 Manifest this update: Sat 06 Dec 2025 03:01:05 +0000 Manifest next update: Sun 07 Dec 2025 03:01:05 +0000 Files and hashes: 1: B56y44YODLvIaK63HQtFyfRwg6M.roa (hash: gj5T46CEfqmvf3lZZB8Zxjkv61wJPVASA1iw+kPG+SU=) 2: mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl (hash: Il5DXb1g+Xkh0UyLkEsP18IqNndud7uT5CrZcH3KEQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1c:c3:b9:42:39:c4:9a:ee:4d:99:a0:a1:f6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98f388bfa665bb8467fd5cdcd2c3327ec7f27fec Validity Not Before: Dec 6 03:01:05 2025 GMT Not After : Dec 7 03:01:05 2025 GMT Subject: CN=1ff3819283bb271243d57947a9e76a076a5e2c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4d:9b:ef:8a:12:57:5c:58:8f:a6:36:3a:b8: 75:76:1a:97:5e:08:bd:88:74:98:30:ef:c2:d1:e7: 47:be:ce:33:db:fc:7c:06:92:48:a2:b0:ae:f6:dc: 77:b2:34:5d:88:5e:41:ed:a6:c7:7b:e6:28:2d:36: 0a:2d:33:ea:7c:8a:36:e6:8e:df:85:1a:97:c8:5e: c4:20:aa:39:94:7b:0d:7b:9b:16:75:0e:e5:3b:6f: 27:17:10:18:65:d6:b2:ab:94:3e:bb:15:2c:10:49: 13:f1:67:d3:e8:bc:3f:cf:ae:00:8b:45:4e:f2:80: b1:c3:93:0d:44:b1:10:14:02:d1:db:37:4c:c6:1f: 82:a5:1a:ca:50:0d:44:90:ae:50:01:ee:ec:86:a2: 42:83:f0:99:85:ca:ed:3a:55:50:9b:94:aa:50:3b: c9:c6:8e:fa:19:13:57:81:91:71:83:06:04:25:88: 80:2a:bd:eb:3d:12:8c:89:af:b9:12:9d:b8:26:36: ba:3a:f8:20:69:04:a1:57:6c:b4:2f:30:42:bb:78: df:72:24:4c:d6:5b:dc:6c:51:ed:1f:86:50:94:f2: 6c:e8:bd:4f:3c:14:58:e9:1e:a9:95:e7:73:8b:02: d6:f2:87:c6:6f:5c:e9:4f:f1:ca:19:ba:66:b0:13: 80:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F3:81:92:83:BB:27:12:43:D5:79:47:A9:E7:6A:07:6A:5E:2C:84 X509v3 Authority Key Identifier: keyid:98:F3:88:BF:A6:65:BB:84:67:FD:5C:DC:D2:C3:32:7E:C7:F2:7F:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:0b:47:8d:31:4e:2f:c0:e8:87:4d:bc:b0:51:94:eb:70:12: d8:28:31:8f:49:d5:ba:21:85:46:19:7e:f7:ef:2a:c0:29:a3: 24:e8:b1:f5:64:91:ee:3e:98:31:e1:2b:e1:b6:b8:66:71:57: ea:32:14:fd:10:be:eb:64:01:fb:2b:ad:44:64:9a:fb:8a:ee: d6:6b:92:7d:45:89:3b:41:17:ec:90:51:70:c9:76:5c:c7:47: 79:38:e4:4b:61:d0:b8:f5:7f:61:1b:b0:ac:63:83:8c:fe:f3: 76:e8:84:44:7c:92:12:7c:c7:65:55:00:7f:6b:d8:c9:47:a5: 6a:7c:78:33:3b:ee:9a:4f:77:58:45:a7:55:0f:11:b6:62:c0: 54:45:67:ac:d5:91:04:f2:e2:fb:b0:72:54:34:94:a9:87:f7: d4:87:41:9b:ea:ab:a3:f9:1f:70:74:b4:24:15:40:74:0f:23: f5:11:eb:cd:79:46:e5:78:74:2e:88:70:b0:5d:09:0b:8f:7d: 35:ea:cd:d0:32:39:93:ac:58:93:6f:f8:55:e4:b9:09:c5:19: 81:a0:00:90:4c:ad:fc:52:e6:cd:58:57:21:cc:7a:c2:ea:e1: 22:6d:1b:e3:a7:25:13:cd:bf:f1:68:72:7f:96:5d:77:4e:71: d7:2b:64:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxzDuUI5xJruTZmgofbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZjM4OGJmYTY2NWJiODQ2N2ZkNWNkY2QyYzMzMjdlYzdm MjdmZWMwHhcNMjUxMjA2MDMwMTA1WhcNMjUxMjA3MDMwMTA1WjAzMTEwLwYDVQQD EygxZmYzODE5MjgzYmIyNzEyNDNkNTc5NDdhOWU3NmEwNzZhNWUyYzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk2b74oSV1xYj6Y2Orh1dhqXXgi9 iHSYMO/C0edHvs4z2/x8BpJIorCu9tx3sjRdiF5B7abHe+YoLTYKLTPqfIo25o7f hRqXyF7EIKo5lHsNe5sWdQ7lO28nFxAYZdayq5Q+uxUsEEkT8WfT6Lw/z64Ai0VO 8oCxw5MNRLEQFALR2zdMxh+CpRrKUA1EkK5QAe7shqJCg/CZhcrtOlVQm5SqUDvJ xo76GRNXgZFxgwYEJYiAKr3rPRKMia+5Ep24Jja6OvggaQShV2y0LzBCu3jfciRM 1lvcbFHtH4ZQlPJs6L1PPBRY6R6pledziwLW8ofGb1zpT/HKGbpmsBOA5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/zgZKDuycSQ9V5R6nnagdqXiyEMB8GA1UdIwQY MBaAFJjziL+mZbuEZ/1c3NLDMn7H8n/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVBPSXY2Wmx1NFJuX1Z6YzBzTXlmc2Z5Zi13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZmZiOWMtN2Q0NC00Y2Y3LTg0ZWQt MmY0YWE0NWNiNWVjLzEvbVBPSXY2Wmx1NFJuX1Z6YzBzTXlmc2Z5Zi13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82ZmZiOWMtN2Q0NC00Y2Y3LTg0ZWQtMmY0YWE0NWNiNWVj LzEvbVBPSXY2Wmx1NFJuX1Z6YzBzTXlmc2Z5Zi13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgtHjTFO L8Doh028sFGU63AS2Cgxj0nVuiGFRhl+9+8qwCmjJOix9WSR7j6YMeEr4ba4ZnFX 6jIU/RC+62QB+yutRGSa+4ru1muSfUWJO0EX7JBRcMl2XMdHeTjkS2HQuPV/YRuw rGODjP7zduiERHySEnzHZVUAf2vYyUelanx4Mzvumk93WEWnVQ8RtmLAVEVnrNWR BPLi+7ByVDSUqYf31IdBm+qro/kfcHS0JBVAdA8j9RHrzXlG5Xh0LohwsF0JC499 NerN0DI5k6xYk2/4VeS5CcUZgaAAkEyt/FLmzVhXIcx6wurhIm0b46clE82/8Why f5Zdd05x1ytkWg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:16 2025 by rpki-client