This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft File: poXxkUzrGSIcVjGTAn1FNFAzrV8.mft (raw, json) Hash identifier: E96AUaqIeCDJPf//DJXS/0hWBJopE21v7GkckVDowBk= Subject key identifier: 93:C7:F9:42:B5:33:04:85:FF:05:50:DB:76:BB:F3:10:A9:2E:DE:04 Authority key identifier: A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F Certificate issuer: /CN=a685f1914ceb19221c563193027d45345033ad5f Certificate serial: 019B3EA36BCD651B054F647A5156042671C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft Manifest number: 03CC Signing time: Sun 21 Dec 2025 02:00:55 +0000 Manifest this update: Sun 21 Dec 2025 02:00:55 +0000 Manifest next update: Mon 22 Dec 2025 02:00:55 +0000 Files and hashes: 1: TCiOUS2lOe-d-inEeAtaNF22X3k.roa (hash: H5jxU1+mIYAsjzlbjYeTvSFiOWLCAxpo86ZAHMuzEhY=) 2: poXxkUzrGSIcVjGTAn1FNFAzrV8.crl (hash: gVzSgct1ov6IQIRlauao2JgqOaw/fIHU09fJkXE77Ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:6b:cd:65:1b:05:4f:64:7a:51:56:04:26:71:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a685f1914ceb19221c563193027d45345033ad5f Validity Not Before: Dec 21 02:00:55 2025 GMT Not After : Dec 22 02:00:55 2025 GMT Subject: CN=93c7f942b5330485ff0550db76bbf310a92ede04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:6d:e3:a4:1b:a6:0d:b7:d7:39:3b:c4:a3: f4:03:04:74:2b:a3:1b:47:39:60:02:ae:98:85:96: c3:7a:bc:ce:7a:1b:3d:12:0b:65:14:33:09:6b:01: 18:2b:65:02:34:40:43:8d:3d:46:9b:7c:b6:b3:42: d5:a4:f2:2b:fb:a5:35:76:af:15:70:c9:29:47:ac: 6c:3c:b3:72:cf:eb:6b:00:81:a8:46:ef:31:a1:9e: 07:4a:22:e7:e3:39:e4:a1:4b:9f:12:45:c8:5e:a8: 08:9e:0b:6b:c3:fb:5a:66:c9:6a:36:b5:73:78:00: f9:c0:7d:51:6d:97:45:57:8c:25:18:1d:41:aa:ca: bf:ea:19:b8:0b:89:83:1f:14:d9:84:15:a2:0c:64: dd:16:6f:b3:7f:4c:09:d7:63:bb:66:1e:ed:22:9a: b8:67:1d:55:5f:38:a9:8f:ed:50:e1:7d:d3:fe:35: 77:bd:73:1f:29:a0:88:16:a7:f8:27:2e:06:21:5d: e9:1e:2e:30:ad:a7:2a:fc:3a:93:c6:bc:55:01:d7: bb:57:47:1c:5b:09:e2:d7:8f:80:e8:65:23:de:5f: 76:1c:3f:b7:c3:0a:e6:eb:4b:8e:99:9c:ac:22:6e: 94:ee:30:58:df:c6:7f:f2:c8:99:1e:63:32:51:23: 91:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C7:F9:42:B5:33:04:85:FF:05:50:DB:76:BB:F3:10:A9:2E:DE:04 X509v3 Authority Key Identifier: keyid:A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:a0:96:22:59:b1:78:2c:87:ec:b4:be:c7:d9:9a:60:7c:9d: bf:22:61:0e:e7:49:0d:9d:1d:16:9e:f3:d9:fb:3e:c9:54:5b: 1e:70:cd:eb:2b:58:bd:3b:df:b4:da:7f:53:ad:9e:75:ba:88: 63:d9:b8:d5:68:29:bc:48:e2:a4:f7:7e:a4:0f:34:8b:8c:2a: 50:9f:5b:62:ec:b6:c6:ed:2a:75:67:ed:a4:7c:83:6d:ae:5c: 00:77:18:cc:fa:16:20:ee:ec:e4:81:18:b4:ac:67:c7:3b:c7: b9:de:eb:cf:38:bd:cf:6c:af:ba:23:4d:9f:cf:62:78:d4:95: aa:13:20:8c:76:ae:1d:f6:ee:96:30:3a:74:fd:f5:c2:f0:8e: 9b:dc:85:eb:94:e0:d2:55:1e:4c:49:d1:48:2e:6e:21:3d:98: 20:0d:09:3b:10:bb:b9:83:25:a5:87:84:a3:e2:54:0a:c9:27: 41:40:fc:99:a6:7b:48:9c:e9:87:f0:d5:0d:2b:df:e2:c3:c2: e0:ce:07:a2:e3:0d:ef:ee:31:fe:43:f8:ac:10:4e:64:00:d8: bd:f3:9f:0a:16:be:11:ca:ac:62:3e:3a:14:64:66:02:16:f3: a5:48:23:96:23:d5:da:60:17:99:55:ce:3b:2f:99:a5:66:c9: 4c:28:12:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o2vNZRsFT2R6UVYEJnHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2ODVmMTkxNGNlYjE5MjIxYzU2MzE5MzAyN2Q0NTM0NTAz M2FkNWYwHhcNMjUxMjIxMDIwMDU1WhcNMjUxMjIyMDIwMDU1WjAzMTEwLwYDVQQD Eyg5M2M3Zjk0MmI1MzMwNDg1ZmYwNTUwZGI3NmJiZjMxMGE5MmVkZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Vt46Qbpg231zk7xKP0AwR0K6Mb RzlgAq6YhZbDerzOehs9EgtlFDMJawEYK2UCNEBDjT1Gm3y2s0LVpPIr+6U1dq8V cMkpR6xsPLNyz+trAIGoRu8xoZ4HSiLn4znkoUufEkXIXqgIngtrw/taZslqNrVz eAD5wH1RbZdFV4wlGB1Bqsq/6hm4C4mDHxTZhBWiDGTdFm+zf0wJ12O7Zh7tIpq4 Zx1VXzipj+1Q4X3T/jV3vXMfKaCIFqf4Jy4GIV3pHi4wracq/DqTxrxVAde7V0cc Wwni14+A6GUj3l92HD+3wwrm60uOmZysIm6U7jBY38Z/8siZHmMyUSORWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPH+UK1MwSF/wVQ23a78xCpLt4EMB8GA1UdIwQY MBaAFKaF8ZFM6xkiHFYxkwJ9RTRQM61fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xOTg2MmMtZjdkNC00ZjRmLWE4ZGQt MWViYzUwZGNlZDQ5LzEvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8xOTg2MmMtZjdkNC00ZjRmLWE4ZGQtMWViYzUwZGNlZDQ5 LzEvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt6CWIlmx eCyH7LS+x9maYHydvyJhDudJDZ0dFp7z2fs+yVRbHnDN6ytYvTvftNp/U62edbqI Y9m41WgpvEjipPd+pA80i4wqUJ9bYuy2xu0qdWftpHyDba5cAHcYzPoWIO7s5IEY tKxnxzvHud7rzzi9z2yvuiNNn89ieNSVqhMgjHauHfbuljA6dP31wvCOm9yF65Tg 0lUeTEnRSC5uIT2YIA0JOxC7uYMlpYeEo+JUCsknQUD8maZ7SJzph/DVDSvf4sPC 4M4HouMN7+4x/kP4rBBOZADYvfOfCha+EcqsYj46FGRmAhbzpUgjliPV2mAXmVXO Oy+ZpWbJTCgSAQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:51:23 2025 by rpki-client