This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/468e13-a3dc-4c7e-9eb3-832651e60c3b/1/PonHvJeq8NwDF2adR1GxMaqTK40.mft File: PonHvJeq8NwDF2adR1GxMaqTK40.mft (raw, json) Hash identifier: 2wtDp6Y/22OkiQC14O2+zx8lV+kAQTHXoEC64myT3Js= Subject key identifier: 06:24:D2:7E:8A:7F:75:A3:A8:74:DC:C5:44:9D:20:E3:EC:08:74:4C Authority key identifier: 3E:89:C7:BC:97:AA:F0:DC:03:17:66:9D:47:51:B1:31:AA:93:2B:8D Certificate issuer: /CN=3e89c7bc97aaf0dc0317669d4751b131aa932b8d Certificate serial: 019AF2769C82799F18C0476360957EFCB2D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PonHvJeq8NwDF2adR1GxMaqTK40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/468e13-a3dc-4c7e-9eb3-832651e60c3b/1/PonHvJeq8NwDF2adR1GxMaqTK40.mft Manifest number: 66 Signing time: Sat 06 Dec 2025 07:00:50 +0000 Manifest this update: Sat 06 Dec 2025 07:00:50 +0000 Manifest next update: Sun 07 Dec 2025 07:00:50 +0000 Files and hashes: 1: PonHvJeq8NwDF2adR1GxMaqTK40.crl (hash: 02fDfn1ctp/KyYjN3d6IWClZVpSy8zv05HWgvT9bS7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/468e13-a3dc-4c7e-9eb3-832651e60c3b/1/PonHvJeq8NwDF2adR1GxMaqTK40.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/468e13-a3dc-4c7e-9eb3-832651e60c3b/1/PonHvJeq8NwDF2adR1GxMaqTK40.mft rsync://rpki.ripe.net/repository/DEFAULT/PonHvJeq8NwDF2adR1GxMaqTK40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9c:82:79:9f:18:c0:47:63:60:95:7e:fc:b2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e89c7bc97aaf0dc0317669d4751b131aa932b8d Validity Not Before: Dec 6 07:00:50 2025 GMT Not After : Dec 7 07:00:50 2025 GMT Subject: CN=0624d27e8a7f75a3a874dcc5449d20e3ec08744c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bc:77:de:93:72:f9:05:a1:c3:8d:84:23:c7: bc:ba:18:64:3a:57:bf:bc:d2:4c:29:fd:9c:f6:f7: 52:7a:42:0e:fa:94:14:9d:de:7a:66:4f:35:a8:d0: 67:99:f1:53:1d:fa:5c:02:39:dd:c8:64:93:24:f8: 86:0f:73:ea:9a:39:2d:c6:fc:eb:72:c9:eb:a3:63: 48:af:bf:cb:41:e5:a9:f7:84:a2:40:0d:5c:63:44: cd:17:69:8b:2a:c0:2e:2e:16:b5:fc:f7:fa:c8:22: 9f:ce:27:58:7e:4c:9f:74:63:72:60:9b:90:a6:61: 33:5c:c5:cd:11:a9:d1:9d:0a:ec:ad:1b:d0:50:11: 6d:f3:e7:78:db:95:94:a1:a7:9e:b5:0b:86:1a:7d: 3d:8b:ec:1d:ec:9c:78:d5:18:06:87:de:f2:07:03: 57:b7:2c:a5:0e:09:24:c4:cf:eb:a9:e1:65:63:3b: 41:c7:58:be:cf:21:53:ca:63:52:1f:67:6f:97:c6: 4c:5c:40:95:b5:39:e3:f2:8d:ed:28:f5:39:01:22: da:b7:6b:7a:ed:fc:f2:ef:fb:ab:31:dc:5c:07:cb: 93:3f:7f:82:c8:55:cb:b3:4c:f3:ee:00:13:cd:c8: 5b:73:28:07:8a:12:46:8f:4f:ce:27:0b:b7:2a:f0: 2f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:24:D2:7E:8A:7F:75:A3:A8:74:DC:C5:44:9D:20:E3:EC:08:74:4C X509v3 Authority Key Identifier: keyid:3E:89:C7:BC:97:AA:F0:DC:03:17:66:9D:47:51:B1:31:AA:93:2B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PonHvJeq8NwDF2adR1GxMaqTK40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/468e13-a3dc-4c7e-9eb3-832651e60c3b/1/PonHvJeq8NwDF2adR1GxMaqTK40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/468e13-a3dc-4c7e-9eb3-832651e60c3b/1/PonHvJeq8NwDF2adR1GxMaqTK40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:5b:25:ca:86:da:ed:c8:ba:9e:83:b6:2f:6b:c5:36:b5:21: ff:90:db:39:8d:93:aa:41:01:f2:fc:98:cb:dd:ec:68:bc:84: eb:03:df:81:79:df:a7:9d:c8:13:c0:19:39:91:f9:c5:3f:af: 01:ab:45:e0:ed:36:c1:9c:aa:70:61:62:fd:c2:48:cc:03:c5: 31:87:ca:dc:51:78:b4:d4:4b:89:76:7a:7a:dc:34:61:18:36: 7f:d5:ae:09:2c:f7:91:64:6a:f2:67:4b:9c:60:da:c8:3a:35: 8f:c9:81:37:67:62:22:d9:af:38:ab:26:8c:07:04:d0:b4:50: 42:12:34:c5:5e:6b:20:3a:32:29:52:62:9c:2a:25:c8:ce:4d: fd:d7:00:3f:9d:58:dd:d2:35:47:8b:a7:3b:74:5c:2a:99:89: ba:d2:4a:b6:f4:f6:8e:24:57:2a:0c:8e:16:36:4e:15:ed:2d: 08:8a:ed:6d:d0:6b:10:9b:2a:12:06:42:1f:34:7d:b2:9b:32: ff:13:93:17:de:b9:fc:be:e3:5d:42:ce:fc:c5:28:90:b7:cb: c6:a9:1a:ea:8f:cb:e8:e0:ef:c8:88:ec:58:d8:89:7f:96:fd: f5:15:00:3c:45:4a:03:3d:e9:2a:6d:35:c5:10:90:90:f7:71: 7a:4f:b0:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpyCeZ8YwEdjYJV+/LLQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlODljN2JjOTdhYWYwZGMwMzE3NjY5ZDQ3NTFiMTMxYWE5 MzJiOGQwHhcNMjUxMjA2MDcwMDUwWhcNMjUxMjA3MDcwMDUwWjAzMTEwLwYDVQQD EygwNjI0ZDI3ZThhN2Y3NWEzYTg3NGRjYzU0NDlkMjBlM2VjMDg3NDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLx33pNy+QWhw42EI8e8uhhkOle/ vNJMKf2c9vdSekIO+pQUnd56Zk81qNBnmfFTHfpcAjndyGSTJPiGD3Pqmjktxvzr csnro2NIr7/LQeWp94SiQA1cY0TNF2mLKsAuLha1/Pf6yCKfzidYfkyfdGNyYJuQ pmEzXMXNEanRnQrsrRvQUBFt8+d425WUoaeetQuGGn09i+wd7Jx41RgGh97yBwNX tyylDgkkxM/rqeFlYztBx1i+zyFTymNSH2dvl8ZMXECVtTnj8o3tKPU5ASLat2t6 7fzy7/urMdxcB8uTP3+CyFXLs0zz7gATzchbcygHihJGj0/OJwu3KvAvYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYk0n6Kf3WjqHTcxUSdIOPsCHRMMB8GA1UdIwQY MBaAFD6Jx7yXqvDcAxdmnUdRsTGqkyuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG9uSHZKZXE4TndERjJhZFIxR3hNYXFUSzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80NjhlMTMtYTNkYy00YzdlLTllYjMt ODMyNjUxZTYwYzNiLzEvUG9uSHZKZXE4TndERjJhZFIxR3hNYXFUSzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80NjhlMTMtYTNkYy00YzdlLTllYjMtODMyNjUxZTYwYzNi LzEvUG9uSHZKZXE4TndERjJhZFIxR3hNYXFUSzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1slyoba 7ci6noO2L2vFNrUh/5DbOY2TqkEB8vyYy93saLyE6wPfgXnfp53IE8AZOZH5xT+v AatF4O02wZyqcGFi/cJIzAPFMYfK3FF4tNRLiXZ6etw0YRg2f9WuCSz3kWRq8mdL nGDayDo1j8mBN2diItmvOKsmjAcE0LRQQhI0xV5rIDoyKVJinColyM5N/dcAP51Y 3dI1R4unO3RcKpmJutJKtvT2jiRXKgyOFjZOFe0tCIrtbdBrEJsqEgZCHzR9spsy /xOTF965/L7jXULO/MUokLfLxqka6o/L6ODvyIjsWNiJf5b99RUAPEVKAz3pKm01 xRCQkPdxek+wSg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:25 2025 by rpki-client