This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json) Hash identifier: r0zU4sLaASLVmPp2yyP8/jwuVfChi/sJrWe3bk3HY5A= Subject key identifier: C3:C0:AF:C6:A5:17:95:41:15:9F:9F:C9:CA:4E:DF:6E:BF:2D:03:28 Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc Certificate serial: 019AF23F71FD4B48CB9D2F83124920CCB997 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=) 2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=) 3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: Y3pCoNtXcgd6BNYuybqHFC6+LcwP8tCdkm3tkSNvy2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:71:fd:4b:48:cb:9d:2f:83:12:49:20:cc:b9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=c3c0afc6a5179541159f9fc9ca4edf6ebf2d0328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:e6:81:a6:4a:08:6d:d7:07:e6:d1:66:b5: 3d:42:55:b2:44:9a:a6:a4:b7:97:b3:2b:10:ab:5f: 53:c2:b9:43:b2:12:72:de:68:05:a3:a2:9e:9f:9b: a2:ed:3c:3f:61:a7:02:8d:6e:a5:8f:aa:84:e5:da: 10:bb:5e:e7:4e:e8:b8:8a:7c:8e:f7:32:ee:06:0c: e0:22:78:5e:b8:e6:0d:ed:02:32:a0:29:fa:e0:54: da:66:26:ea:3f:3a:d8:eb:aa:17:87:60:40:01:bc: 95:82:5a:f8:8f:5b:08:ea:96:84:d2:81:53:d1:5d: 94:39:53:91:bc:bc:3b:b0:28:a6:c5:76:0c:2d:32: 96:bc:fd:91:dc:32:cb:75:53:f1:eb:00:23:e9:09: 57:99:6d:2f:92:e3:9b:f1:c0:78:e2:8a:ca:b2:8e: 6d:2c:a8:5f:5a:45:70:3e:ae:f1:9a:3f:2e:28:d3: ec:63:3e:62:69:14:cc:b4:67:ae:af:1f:ac:f9:bf: 1a:6d:61:1c:e7:cc:e3:ed:12:d5:4b:ca:20:0d:a7: fc:81:60:76:42:b1:7a:f3:95:6d:fc:5f:8a:cb:3a: 63:f1:b2:91:ed:93:01:ff:1d:ef:da:86:03:2c:46: 31:2f:d0:19:d3:62:0d:ba:13:a8:bb:da:2d:62:ec: f8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C0:AF:C6:A5:17:95:41:15:9F:9F:C9:CA:4E:DF:6E:BF:2D:03:28 X509v3 Authority Key Identifier: keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ef:28:44:52:5a:92:65:b8:cf:2c:41:43:d5:4e:ec:b7:c4: 7d:0b:d3:15:52:fc:3c:44:6c:e2:60:77:60:ff:81:bc:35:8f: 0f:01:46:b4:13:f8:2a:d0:83:a2:75:cb:e5:69:b6:d3:5b:51: 4e:e8:eb:e1:d6:ac:23:dd:de:b3:00:bf:7d:93:2f:a2:e3:fa: b2:89:51:50:c5:4c:f1:3e:33:a8:cc:16:fc:19:01:54:4b:a7: ea:7b:44:21:88:3e:c5:3a:2b:3d:4e:37:6c:7d:aa:68:b1:a3: 47:f3:a1:a9:5c:a7:97:18:87:ba:e5:3e:39:c1:28:82:00:9f: ca:95:46:54:5c:e5:db:6f:da:20:ff:f1:5e:ad:03:02:80:63: 3e:f1:56:16:a2:4b:6e:cc:46:19:42:13:67:57:63:bf:50:7a: 5e:09:ce:28:96:33:cb:75:6b:0e:27:8c:9c:1f:f3:63:be:8e: 5f:a8:b0:27:d8:65:0f:f5:66:ab:ec:48:ab:ee:b3:1b:b4:6f: 4a:2c:0b:10:34:58:7b:e7:be:c4:90:c9:97:1c:b3:42:bd:05: a6:13:cd:b4:34:f1:c5:c8:b9:8f:8b:dc:f0:16:78:a4:a2:21: 53:69:55:a1:b9:a4:b8:87:a7:fb:24:5d:5c:6f:af:87:ff:2d: e1:85:8b:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3H9S0jLnS+DEkkgzLmXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OGZmOTIyOWVmZDhkMTJiNDI3M2YzNDZmOGM2NDU0ZWE1 ODdlY2MwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD EyhjM2MwYWZjNmE1MTc5NTQxMTU5ZjlmYzljYTRlZGY2ZWJmMmQwMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RDmgaZKCG3XB+bRZrU9QlWyRJqm pLeXsysQq19TwrlDshJy3mgFo6Ken5ui7Tw/YacCjW6lj6qE5doQu17nTui4inyO 9zLuBgzgInheuOYN7QIyoCn64FTaZibqPzrY66oXh2BAAbyVglr4j1sI6paE0oFT 0V2UOVORvLw7sCimxXYMLTKWvP2R3DLLdVPx6wAj6QlXmW0vkuOb8cB44orKso5t LKhfWkVwPq7xmj8uKNPsYz5iaRTMtGeurx+s+b8abWEc58zj7RLVS8ogDaf8gWB2 QrF685Vt/F+Kyzpj8bKR7ZMB/x3v2oYDLEYxL9AZ02INuhOou9otYuz4zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPAr8alF5VBFZ+fycpO326/LQMoMB8GA1UdIwQY MBaAFKaP+SKe/Y0StCc/NG+MZFTqWH7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEt MjI3ZTIxZTY5MWU3LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEtMjI3ZTIxZTY5MWU3 LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALu8oRFJa kmW4zyxBQ9VO7LfEfQvTFVL8PERs4mB3YP+BvDWPDwFGtBP4KtCDonXL5Wm201tR Tujr4dasI93eswC/fZMvouP6solRUMVM8T4zqMwW/BkBVEun6ntEIYg+xTorPU43 bH2qaLGjR/OhqVynlxiHuuU+OcEoggCfypVGVFzl22/aIP/xXq0DAoBjPvFWFqJL bsxGGUITZ1djv1B6XgnOKJYzy3VrDieMnB/zY76OX6iwJ9hlD/Vmq+xIq+6zG7Rv SiwLEDRYe+e+xJDJlxyzQr0FphPNtDTxxci5j4vc8BZ4pKIhU2lVobmkuIen+yRd XG+vh/8t4YWLNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:12:09 2025 by rpki-client