This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft File: POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json) Hash identifier: aKpzMBlElVY2T/Vc14KqjNPnqVdOudwQunl2JyMEtTA= Subject key identifier: 12:E5:0D:8F:4B:97:CF:0C:18:E6:FC:F7:22:43:CE:67:48:A8:3F:10 Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27 Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27 Certificate serial: 019AF19B816D1A4BCDCCC69F1506EA728D8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:31 +0000 Manifest this update: Sat 06 Dec 2025 03:01:31 +0000 Manifest next update: Sun 07 Dec 2025 03:01:31 +0000 Files and hashes: 1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: QfSomec87QICQLySratzg71tuzISSvD34CMY7L1SmIc=) 2: glhaGjYvz9mGirczYGxMS81rRfI.roa (hash: cPBvD492Ea2g7PNrZgsOnSXH4CPshMieJYjaq9P+dD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:81:6d:1a:4b:cd:cc:c6:9f:15:06:ea:72:8d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27 Validity Not Before: Dec 6 03:01:31 2025 GMT Not After : Dec 7 03:01:31 2025 GMT Subject: CN=12e50d8f4b97cf0c18e6fcf72243ce6748a83f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:63:87:34:4c:7b:d7:f3:9b:e0:94:79:38:e3: 3f:c5:d9:c3:96:f8:84:1c:ff:e0:f8:c5:ba:e0:e5: ec:6b:3c:95:11:d4:f4:d6:6b:4d:92:b2:00:9c:36: 78:65:72:ff:d4:48:b9:47:9b:c9:5c:60:6b:9f:0a: a3:17:3a:fb:72:db:85:22:ce:18:96:17:b6:4b:d2: 4d:00:de:34:52:aa:73:25:72:a2:02:ae:45:51:a5: 5d:b8:fe:de:55:18:f6:b0:7b:f9:d4:07:52:3b:28: e1:3f:de:ee:5f:ce:bc:43:f4:65:c2:84:be:90:42: ec:3c:8d:fa:02:03:d7:d7:b2:84:95:6c:47:08:31: 39:35:f8:25:e8:cf:4c:c5:ec:b0:8f:6e:9f:5e:3c: e7:51:91:97:5c:20:66:93:19:11:74:bb:cd:0c:bc: 81:e5:4d:79:6a:b1:49:4e:bc:d1:5b:ee:af:94:c0: d1:79:81:aa:07:7d:c4:f0:3c:87:b1:68:31:4f:98: 5d:57:3d:c4:69:70:d3:f1:02:1c:48:50:bf:e0:68: 6d:27:f7:8b:17:bc:19:e2:4c:3b:02:bc:99:56:7a: 13:4a:4d:23:2f:a0:ee:2f:f9:f1:76:57:46:ea:1e: 70:a4:58:aa:de:b7:77:30:8e:fd:91:a7:f9:dd:76: b8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E5:0D:8F:4B:97:CF:0C:18:E6:FC:F7:22:43:CE:67:48:A8:3F:10 X509v3 Authority Key Identifier: keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f3:13:af:07:d7:64:b4:fb:bc:59:80:35:24:e2:36:3e:0d: cb:f1:6d:06:a8:bf:0f:d7:8b:5b:f0:cc:c6:e9:b7:ac:1f:ea: 9b:60:23:01:0f:ac:fb:5d:ca:a9:a9:2e:c6:a2:97:36:53:0e: 31:00:8a:7e:1b:92:b6:16:ce:aa:05:85:5c:71:ea:17:4a:df: 94:5c:7f:dd:21:f8:b7:7e:1e:2c:d9:44:a3:6a:50:a3:75:e9: 9b:dc:9f:25:0f:c5:37:a2:a5:5e:df:87:96:26:c2:34:3d:d3: f1:68:55:e9:0e:4b:d7:6a:69:be:32:78:08:7c:eb:e0:d2:de: c4:12:f0:15:75:55:30:17:f4:c6:a7:08:31:03:f6:fe:22:a5: f1:d6:3a:17:f3:87:ef:d7:ec:5a:87:8b:50:b0:5d:c4:57:9d: 52:cd:d2:b4:15:a1:4d:e5:06:44:d4:ac:4a:ec:4a:41:77:a3: 8c:09:0d:02:0a:ae:1f:c8:5e:37:11:e8:3b:87:4e:39:af:2b: ef:a8:0c:29:3a:9a:14:0e:40:84:78:7e:90:29:40:06:03:7e: 10:8f:cf:65:e1:36:cc:61:42:cb:52:15:c8:d7:5c:5c:6c:71: cb:2e:32:88:75:61:1d:34:79:8b:5a:be:73:6d:a1:e2:45:c0: 9c:36:54:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4FtGkvNzMafFQbqco2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZWIyMDUwOTg3MzJjYjkwODgyMzA0NWVmZDVkNzQwMjUw YzZiMjcwHhcNMjUxMjA2MDMwMTMxWhcNMjUxMjA3MDMwMTMxWjAzMTEwLwYDVQQD EygxMmU1MGQ4ZjRiOTdjZjBjMThlNmZjZjcyMjQzY2U2NzQ4YTgzZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimOHNEx71/Ob4JR5OOM/xdnDlviE HP/g+MW64OXsazyVEdT01mtNkrIAnDZ4ZXL/1Ei5R5vJXGBrnwqjFzr7ctuFIs4Y lhe2S9JNAN40UqpzJXKiAq5FUaVduP7eVRj2sHv51AdSOyjhP97uX868Q/RlwoS+ kELsPI36AgPX17KElWxHCDE5Nfgl6M9Mxeywj26fXjznUZGXXCBmkxkRdLvNDLyB 5U15arFJTrzRW+6vlMDReYGqB33E8DyHsWgxT5hdVz3EaXDT8QIcSFC/4GhtJ/eL F7wZ4kw7AryZVnoTSk0jL6DuL/nxdldG6h5wpFiq3rd3MI79kaf53Xa4YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLlDY9Ll88MGOb89yJDzmdIqD8QMB8GA1UdIwQY MBaAFDzrIFCYcyy5CIIwRe/V10AlDGsnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85YTQyMzgtN2Q3NC00ZWRmLWE0YjEt MjVlZDc1MDQ2YjAxLzEvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC85YTQyMzgtN2Q3NC00ZWRmLWE0YjEtMjVlZDc1MDQ2YjAx LzEvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/MTrwfX ZLT7vFmANSTiNj4Ny/FtBqi/D9eLW/DMxum3rB/qm2AjAQ+s+13KqakuxqKXNlMO MQCKfhuSthbOqgWFXHHqF0rflFx/3SH4t34eLNlEo2pQo3Xpm9yfJQ/FN6KlXt+H libCND3T8WhV6Q5L12ppvjJ4CHzr4NLexBLwFXVVMBf0xqcIMQP2/iKl8dY6F/OH 79fsWoeLULBdxFedUs3StBWhTeUGRNSsSuxKQXejjAkNAgquH8heNxHoO4dOOa8r 76gMKTqaFA5AhHh+kClABgN+EI/PZeE2zGFCy1IVyNdcXGxxyy4yiHVhHTR5i1q+ c22h4kXAnDZUpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:39 2025 by rpki-client