This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft File: pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json) Hash identifier: XU2LvKGdGNnUphx2oGQfVmojvx3qN8yVT8BrNmDqNnU= Subject key identifier: 32:3A:9D:EB:8A:32:6C:B7:8E:40:7D:88:C7:BE:FA:1A:23:E7:60:27 Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9 Certificate issuer: /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9 Certificate serial: 019AF1D1C247774D2089266D014D085B5322 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft Manifest number: 04B2 Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: smweIdJcV6dPk/anJecJkZKxJ4EiNsuvR6fsULaBGmE=) 2: tBiDEoWCGA8hVhVgwo9Iim47EzY.roa (hash: zWjGkV/pdnISeY0gGiXKGa4SNljWX+62ouYMUIE3qx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c2:47:77:4d:20:89:26:6d:01:4d:08:5b:53:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9 Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=323a9deb8a326cb78e407d88c7befa1a23e76027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5d:56:fe:ca:aa:84:e2:9a:c6:39:46:7d:0d: b5:94:aa:c6:ea:45:5c:84:ec:f8:d4:8b:2c:c9:25: c3:1a:38:83:57:8c:8b:ff:89:5c:cb:ff:5b:b2:ad: 1f:7b:1a:a0:9d:37:2b:74:d0:10:40:b9:34:b2:75: 66:b3:01:b9:8a:80:13:a0:00:9e:da:31:4d:6f:61: eb:1f:0e:b0:80:78:a5:e1:03:53:1c:87:73:5a:a0: 95:c8:8b:c6:81:5a:55:ff:ba:8e:e6:c3:49:b1:31: 75:f6:ab:90:ee:f4:15:0b:c5:1c:35:f4:4c:17:dd: 2f:f7:4f:e5:a1:fc:a1:ed:d5:9a:d0:6f:54:6f:f8: d9:e3:28:40:b9:1a:42:79:09:1c:82:33:a2:c7:13: 28:df:f3:33:eb:6b:bf:b4:de:2c:25:17:47:ce:4f: 97:87:33:26:c5:c5:af:ee:c2:30:00:0f:62:f4:a6: 80:21:35:e3:5c:84:32:35:b7:9e:05:d5:dc:26:54: 0d:f8:18:75:0d:93:d7:54:12:15:fe:31:8d:66:2a: 50:f9:e2:fc:1e:a4:89:51:e9:24:0d:f1:5b:0a:28: 11:08:cd:d1:47:b0:cc:70:e7:e0:47:fd:9e:d1:29: d1:f6:30:c1:54:b2:2c:45:f8:88:99:6c:60:1e:42: 02:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3A:9D:EB:8A:32:6C:B7:8E:40:7D:88:C7:BE:FA:1A:23:E7:60:27 X509v3 Authority Key Identifier: keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:2f:38:f2:d1:99:0a:5f:fc:23:21:6e:bc:13:4f:9f:7b:a8: ec:ea:73:4d:51:dc:ba:1f:c5:34:49:34:12:28:46:bb:c4:d5: 28:58:5d:fe:d5:84:f6:11:91:14:60:e4:7a:6a:12:af:c6:fd: dc:7d:f5:d1:f0:1c:ca:c3:c7:dd:59:dc:41:b7:f1:71:3d:c6: 8e:b2:d3:e9:dd:1a:f5:fa:38:a9:82:5b:a2:8a:c1:00:31:ac: fd:03:91:2c:18:f4:e3:92:99:92:31:b1:78:59:67:4e:9f:15: 50:24:06:18:47:65:ce:1d:57:e1:72:06:fc:32:97:98:44:16: ea:4b:cb:52:70:89:7f:13:f9:58:b0:fe:e3:90:89:ac:68:32: 68:d5:e8:87:b7:05:89:6c:b8:cf:b9:1c:7e:dd:f2:4a:72:65: 6b:2c:cc:11:22:5b:07:50:b7:73:2f:2f:ad:00:0b:11:75:e4: f2:e9:be:f6:94:0c:96:0c:d6:96:13:40:21:0b:ff:13:23:f1: c1:92:f2:42:73:87:2d:45:51:ff:40:64:1b:d2:d3:e2:7d:8d: 09:7a:2f:32:14:0a:57:c5:be:22:43:29:24:fa:43:a1:80:9a: 6a:d4:21:e2:48:e7:4e:1e:d6:c2:5f:9f:1b:e7:17:f8:80:0b: f1:f6:15:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cJHd00giSZtAU0IW1MiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZWI4ZWI3YjRiNjJlZDEyNTRmMDA1NjRlMDNjNDA2N2Fi ZmJmYzkwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD EygzMjNhOWRlYjhhMzI2Y2I3OGU0MDdkODhjN2JlZmExYTIzZTc2MDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl1W/sqqhOKaxjlGfQ21lKrG6kVc hOz41IssySXDGjiDV4yL/4lcy/9bsq0fexqgnTcrdNAQQLk0snVmswG5ioAToACe 2jFNb2HrHw6wgHil4QNTHIdzWqCVyIvGgVpV/7qO5sNJsTF19quQ7vQVC8UcNfRM F90v90/lofyh7dWa0G9Ub/jZ4yhAuRpCeQkcgjOixxMo3/Mz62u/tN4sJRdHzk+X hzMmxcWv7sIwAA9i9KaAITXjXIQyNbeeBdXcJlQN+Bh1DZPXVBIV/jGNZipQ+eL8 HqSJUekkDfFbCigRCM3RR7DMcOfgR/2e0SnR9jDBVLIsRfiImWxgHkICJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDI6neuKMmy3jkB9iMe++hoj52AnMB8GA1UdIwQY MBaAFKTrjre0ti7RJU8AVk4DxAZ6v7/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE91T3Q3UzJMdEVsVHdCV1RnUEVCbnFfdjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xMmMzZTgtOWMwMS00NTViLWIxODEt ZjRkN2ZkZWJmMDRkLzEvcE91T3Q3UzJMdEVsVHdCV1RnUEVCbnFfdjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8xMmMzZTgtOWMwMS00NTViLWIxODEtZjRkN2ZkZWJmMDRk LzEvcE91T3Q3UzJMdEVsVHdCV1RnUEVCbnFfdjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiC848tGZ Cl/8IyFuvBNPn3uo7OpzTVHcuh/FNEk0EihGu8TVKFhd/tWE9hGRFGDkemoSr8b9 3H310fAcysPH3VncQbfxcT3GjrLT6d0a9fo4qYJboorBADGs/QORLBj045KZkjGx eFlnTp8VUCQGGEdlzh1X4XIG/DKXmEQW6kvLUnCJfxP5WLD+45CJrGgyaNXoh7cF iWy4z7kcft3ySnJlayzMESJbB1C3cy8vrQALEXXk8um+9pQMlgzWlhNAIQv/EyPx wZLyQnOHLUVR/0BkG9LT4n2NCXovMhQKV8W+IkMpJPpDoYCaatQh4kjnTh7Wwl+f G+cX+IAL8fYVbw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:14 2025 by rpki-client