This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft File: POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json) Hash identifier: hB9b3vdoy6hZRkkGquD+3NeyswKzb1vZIe8Vbx3jOvA= Subject key identifier: 50:9F:DB:99:46:F7:CD:B5:8A:AD:52:BD:EF:27:43:AC:2F:04:32:10 Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84 Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384 Certificate serial: 019AF2090F889F0DDE6DF40BDB97519414D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft Manifest number: 0FBD Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: LnOKhHlXHgf9Bc7By8RdD87CENc.roa (hash: SBq8tD3nAGx2l0m6YmZ4sb5xKbi6vLmOJJ/u4lHDzyQ=) 2: MtOebLSNSemLqQH1Qdt6lKbCdQU.roa (hash: p2mZ95DJo3RCkhalV7XQwJkDag3/z20BD18MDcr1SRU=) 3: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: kGF0EjmUoeuvW5SnxnFyZ95PfHFwJTwsDvfHGX/UEeo=) 4: qQRcQNcowo3kCSFmxOhnd54Y8jY.roa (hash: raMUt5t5W5lynqzBwroXOMjtxQgLkjALLNPiIADIJEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0f:88:9f:0d:de:6d:f4:0b:db:97:51:94:14:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384 Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=509fdb9946f7cdb58aad52bdef2743ac2f043210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:15:11:1d:6a:bf:28:03:80:75:eb:fe:3d: 25:b3:6c:0f:32:47:7a:ca:3d:58:c7:8f:2f:60:9d: 8a:89:55:51:46:90:03:94:10:df:2d:80:4b:07:eb: 0a:11:3f:b1:a5:7b:4f:23:82:55:76:63:ee:b1:2d: 11:ae:f7:48:7b:fb:b4:e2:f2:39:3d:4e:2b:05:9b: 08:21:00:ff:55:94:9c:e7:1f:d9:c1:4f:71:e6:7d: fa:aa:7c:99:87:81:6c:40:8b:d5:9f:a9:66:62:8a: 47:7f:5f:a8:0e:c9:78:01:36:75:23:e8:10:d9:98: bc:39:e1:df:77:cc:c0:5e:cd:22:8e:0b:75:72:b9: 98:0c:33:65:5d:0a:01:17:8f:0f:40:a8:69:8d:3d: 68:79:d4:26:5c:96:37:76:68:c0:f5:f5:9d:b9:13: f3:b9:5e:9b:ef:18:f4:6d:d8:c2:e3:d7:67:20:8c: 8c:ac:56:16:63:93:cd:19:26:09:06:b1:e0:d3:e1: 71:73:67:3e:73:76:67:ef:74:69:9a:55:94:f1:7e: 8d:b8:bd:1e:93:b4:ed:05:00:50:50:1c:63:db:12: c1:3a:55:c8:c8:01:13:0f:12:6f:8a:54:50:b3:35: ef:dc:68:8d:a9:65:91:83:f8:3e:bb:23:5d:ea:59: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9F:DB:99:46:F7:CD:B5:8A:AD:52:BD:EF:27:43:AC:2F:04:32:10 X509v3 Authority Key Identifier: keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:70:74:82:e2:50:51:69:b3:7a:20:cc:3a:ea:50:93:fc:5e: ec:aa:7d:26:e9:4d:76:41:93:a6:41:c9:0e:ef:da:58:c2:76: cf:67:40:58:8f:86:55:9d:ba:be:5b:18:32:76:d0:c3:36:85: d8:d3:c4:05:3c:9f:a5:65:55:20:75:54:5f:3c:9f:96:79:6f: 7d:fb:6f:9f:e2:aa:b4:29:ae:d1:35:cc:2b:ac:a4:95:37:ee: 27:97:64:f7:01:34:e9:0b:95:2e:94:53:55:01:a6:35:ed:a1: 22:b8:29:a2:ae:b7:4c:42:d1:17:ab:6d:90:9d:3f:d1:a7:81: 9d:99:fe:f3:54:7c:fd:8d:4f:17:54:ed:a9:aa:63:f6:ce:bf: 1c:9f:5c:67:d0:cb:fd:7b:27:21:a2:ed:cb:bf:ee:8b:3f:b3: 7d:a9:1c:22:cb:2c:bc:fc:7d:0c:dc:1e:5e:59:46:28:b7:8d: a7:37:0a:31:b1:72:3e:65:1b:01:89:8a:11:46:1d:23:ef:7c: 45:3c:64:bf:ae:a3:78:a8:05:7a:57:06:48:fc:0c:98:98:50: 8c:46:4e:4b:11:4a:1c:b3:c0:dd:d3:24:ee:f9:82:fb:0a:d5: 7c:c6:a3:4a:75:4b:e2:b6:6e:1e:e1:6e:25:cf:69:e6:29:de: bd:b5:d9:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQ+Inw3ebfQL25dRlBTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZTc1NjZiYjViMTllNzAwZjQ4ZTI1ZTA3NTA2YzJmMjIy ZGYzODQwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD Eyg1MDlmZGI5OTQ2ZjdjZGI1OGFhZDUyYmRlZjI3NDNhYzJmMDQzMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvMVER1qvygDgHXr/j0ls2wPMkd6 yj1Yx48vYJ2KiVVRRpADlBDfLYBLB+sKET+xpXtPI4JVdmPusS0RrvdIe/u04vI5 PU4rBZsIIQD/VZSc5x/ZwU9x5n36qnyZh4FsQIvVn6lmYopHf1+oDsl4ATZ1I+gQ 2Zi8OeHfd8zAXs0ijgt1crmYDDNlXQoBF48PQKhpjT1oedQmXJY3dmjA9fWduRPz uV6b7xj0bdjC49dnIIyMrFYWY5PNGSYJBrHg0+Fxc2c+c3Zn73RpmlWU8X6NuL0e k7TtBQBQUBxj2xLBOlXIyAETDxJvilRQszXv3GiNqWWRg/g+uyNd6llGJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCf25lG9821iq1Sve8nQ6wvBDIQMB8GA1UdIwQY MBaAFDznVmu1sZ5wD0jiXgdQbC8iLfOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTIt ODlmZjA2Zjc5NjM1LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTItODlmZjA2Zjc5NjM1 LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHB0guJQ UWmzeiDMOupQk/xe7Kp9JulNdkGTpkHJDu/aWMJ2z2dAWI+GVZ26vlsYMnbQwzaF 2NPEBTyfpWVVIHVUXzyflnlvfftvn+KqtCmu0TXMK6yklTfuJ5dk9wE06QuVLpRT VQGmNe2hIrgpoq63TELRF6ttkJ0/0aeBnZn+81R8/Y1PF1Ttqapj9s6/HJ9cZ9DL /XsnIaLty7/uiz+zfakcIsssvPx9DNweXllGKLeNpzcKMbFyPmUbAYmKEUYdI+98 RTxkv66jeKgFelcGSPwMmJhQjEZOSxFKHLPA3dMk7vmC+wrVfMajSnVL4rZuHuFu Jc9p5inevbXZ5w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:20 2025 by rpki-client