This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json) Hash identifier: aSFdzZzxenFAmo/krvVM6C4JBeGUlPmbkbWuMZUKmWU= Subject key identifier: 8F:9F:FF:28:51:63:9D:9B:CA:61:0F:ED:5F:CD:F0:7B:FF:74:0E:DD Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f Certificate serial: 019AF27663896720EAB44FD397E23B5BBAC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft Manifest number: 0D67 Signing time: Sat 06 Dec 2025 07:00:36 +0000 Manifest this update: Sat 06 Dec 2025 07:00:36 +0000 Manifest next update: Sun 07 Dec 2025 07:00:36 +0000 Files and hashes: 1: Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa (hash: K8PordojpOIplsR6Jg7NEy3mCM9e/c8OLgPeQ2xQz6M=) 2: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: 3MjItyMM45gX1oLi6iaTgRBH3cJj3JpdP96TdZgGYKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:63:89:67:20:ea:b4:4f:d3:97:e2:3b:5b:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f Validity Not Before: Dec 6 07:00:36 2025 GMT Not After : Dec 7 07:00:36 2025 GMT Subject: CN=8f9fff2851639d9bca610fed5fcdf07bff740edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1a:aa:53:fc:5a:bd:a9:b5:b1:e9:d7:ac:8d: f8:57:72:9c:36:c3:68:2a:6c:34:b8:b0:9a:14:b5: 58:2d:e6:ed:5f:8d:48:ae:61:7e:93:b8:7c:84:13: 5d:25:68:a0:ea:15:62:ba:71:45:72:28:71:d0:5a: 21:73:95:1e:e4:e0:cf:56:8f:34:66:30:c6:5f:8a: 21:54:76:bc:81:58:88:7f:6b:38:04:f4:86:ab:36: 12:00:c5:f3:96:20:59:2c:14:c6:6a:a2:51:fd:b7: 30:bb:97:a0:4b:6d:48:a8:1c:3d:5c:ac:95:a1:09: 28:3d:b4:73:96:07:0a:72:00:30:e9:a6:86:4f:9f: 3f:06:60:a2:2c:24:c9:5c:61:73:d9:15:b9:a9:fe: 8a:c4:90:98:64:fc:e7:4a:39:f3:29:32:55:29:c3: 87:cb:6b:c8:47:d4:2a:85:8d:ee:c5:06:34:0d:d2: ec:fc:96:d1:a5:60:ad:62:33:05:54:29:91:b0:2b: 8a:fa:9d:ba:d9:47:ed:0a:8e:f8:07:76:f2:43:9a: 28:d1:d2:05:6f:db:4e:0b:0c:c8:50:99:bb:ea:e6: 36:a0:d6:44:f3:48:e3:aa:ac:50:06:f7:17:d6:91: 32:c2:6e:f8:9e:6f:9e:be:07:80:c1:a2:45:ea:ac: ff:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9F:FF:28:51:63:9D:9B:CA:61:0F:ED:5F:CD:F0:7B:FF:74:0E:DD X509v3 Authority Key Identifier: keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:fc:95:23:fd:50:f5:27:80:7d:03:fe:63:a3:d1:4f:e4:2b: a1:1f:a9:12:d9:7e:39:e9:10:7d:98:f5:3c:01:ce:1e:34:cd: 40:b8:c3:c3:b6:ed:2f:45:54:fd:cf:87:06:c0:94:32:af:a3: c9:8b:2f:76:0c:91:41:e7:13:e8:b9:05:65:76:21:61:f1:4d: 27:da:93:ba:5b:d9:f4:47:e3:80:ab:d3:83:80:fc:16:27:8f: d1:d4:63:21:2d:ef:e0:86:ad:39:13:5f:62:30:3a:45:7f:6a: bb:f9:08:57:9b:44:bc:62:ce:f9:1d:70:d6:8c:33:b9:10:5a: 6a:2c:35:c0:60:5b:83:29:ec:10:db:59:97:5c:f4:35:7e:38: c3:5b:ab:1b:2d:a4:59:0e:22:8d:fb:26:35:14:30:cb:e4:23: 65:5d:80:ce:e3:ba:0d:58:49:2e:b0:cb:c5:a4:6f:b2:3a:37: a0:61:b9:c0:75:13:f4:4b:32:7d:7b:bd:b4:e2:c5:c3:35:cb: fa:7e:86:fe:96:a2:8f:a1:72:ef:4b:2f:1e:c5:90:43:f7:38: 68:fd:88:c5:cb:41:5c:c4:eb:7f:0c:c1:de:81:7a:db:e3:2b: a4:60:0b:f9:e7:21:a0:9a:74:b6:4a:b2:0a:c7:18:fd:02:73: a6:2e:65:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmOJZyDqtE/Tl+I7W7rAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOGM2Y2M0NDhmOTYzNWM1NmZmMjJiMTFjZDgwYzFhYTlj NTJkNGYwHhcNMjUxMjA2MDcwMDM2WhcNMjUxMjA3MDcwMDM2WjAzMTEwLwYDVQQD Eyg4ZjlmZmYyODUxNjM5ZDliY2E2MTBmZWQ1ZmNkZjA3YmZmNzQwZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRqqU/xavam1senXrI34V3KcNsNo Kmw0uLCaFLVYLebtX41IrmF+k7h8hBNdJWig6hViunFFcihx0Fohc5Ue5ODPVo80 ZjDGX4ohVHa8gViIf2s4BPSGqzYSAMXzliBZLBTGaqJR/bcwu5egS21IqBw9XKyV oQkoPbRzlgcKcgAw6aaGT58/BmCiLCTJXGFz2RW5qf6KxJCYZPznSjnzKTJVKcOH y2vIR9QqhY3uxQY0DdLs/JbRpWCtYjMFVCmRsCuK+p262UftCo74B3byQ5oo0dIF b9tOCwzIUJm76uY2oNZE80jjqqxQBvcX1pEywm74nm+evgeAwaJF6qz/qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+f/yhRY52bymEP7V/N8Hv/dA7dMB8GA1UdIwQY MBaAFD6MbMRI+WNcVv8isRzYDBqpxS1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTct ZDI4MTA1ZTNmMzgwLzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTctZDI4MTA1ZTNmMzgw LzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfyVI/1Q 9SeAfQP+Y6PRT+QroR+pEtl+OekQfZj1PAHOHjTNQLjDw7btL0VU/c+HBsCUMq+j yYsvdgyRQecT6LkFZXYhYfFNJ9qTulvZ9EfjgKvTg4D8FieP0dRjIS3v4IatORNf YjA6RX9qu/kIV5tEvGLO+R1w1owzuRBaaiw1wGBbgynsENtZl1z0NX44w1urGy2k WQ4ijfsmNRQwy+QjZV2AzuO6DVhJLrDLxaRvsjo3oGG5wHUT9EsyfXu9tOLFwzXL +n6G/paij6Fy70svHsWQQ/c4aP2IxctBXMTrfwzB3oF62+MrpGAL+echoJp0tkqy CscY/QJzpi5lTg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:32 2025 by rpki-client