This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft File: PowYl2JPV7404PdguX8RCtW12jo.mft (raw, json) Hash identifier: lqnxMekvc5YymwN0eWL6XSo+rWBSjhipphA6VSEb4rs= Subject key identifier: 3C:8D:24:0A:53:3F:C5:AC:10:0B:28:5B:78:E9:6B:78:0B:53:96:E7 Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a Certificate serial: 019B19BC961660DBB7301008458552F2CF01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft Manifest number: 177A Signing time: Sat 13 Dec 2025 22:02:28 +0000 Manifest this update: Sat 13 Dec 2025 22:02:28 +0000 Manifest next update: Sun 14 Dec 2025 22:02:28 +0000 Files and hashes: 1: OVYlCjQ_Ro8WMpn3BJqI8X0cXxo.roa (hash: H6KoMJLLwg7EnqHTPVQLrBI8uOBDhlfqI6yQtfWr3zo=) 2: PowYl2JPV7404PdguX8RCtW12jo.crl (hash: ugfmuOfFtp4gzhMElPWB7vwMNzzxnPmwoae/f65qUaY=) 3: lFNEbA4WXa1kqpPRAFp7E-A0l2E.roa (hash: RLdKaSl14tW7ZrRmULGs2dhO8FMuiohKtUpmaqgzRYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:96:16:60:db:b7:30:10:08:45:85:52:f2:cf:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a Validity Not Before: Dec 13 22:02:28 2025 GMT Not After : Dec 14 22:02:28 2025 GMT Subject: CN=3c8d240a533fc5ac100b285b78e96b780b5396e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:19:6f:43:42:18:d3:9d:7c:d5:80:b1:23: ec:0a:31:6d:90:ea:48:01:41:a0:bd:79:f7:48:96: d2:20:19:96:3d:8a:67:0d:2f:d9:b9:9e:0e:8e:cb: ee:23:e4:04:c2:4b:b7:83:fd:5b:81:96:a5:b5:95: 45:44:ad:e0:72:a2:f8:80:c9:66:35:e5:02:55:f1: 80:d8:d2:06:db:7b:74:d1:1d:70:bd:c6:8e:7e:0c: c6:cc:d6:4b:4e:6a:5e:f4:35:0c:ef:2e:f4:03:c9: 97:53:8a:ff:a8:c4:60:0f:e2:a0:26:a7:7f:19:13: 26:57:12:7b:89:02:50:d8:35:05:e1:22:a3:31:c6: 3a:fa:d2:c2:24:64:36:73:49:ac:9b:29:3b:a5:6d: f5:d6:9e:15:84:91:04:78:91:15:f8:3f:70:8e:15: cd:3b:cc:ac:7e:69:8c:f7:fa:f4:7d:18:da:41:df: 71:d3:02:48:0e:3d:de:5b:6d:12:d2:24:16:0a:1a: 47:6d:f9:00:32:63:cc:20:47:c3:5d:a5:f5:4a:9a: 98:7b:dc:1d:c7:f1:f6:0d:78:18:8a:04:35:ac:fc: 2b:9a:a0:11:90:96:8f:ed:98:9f:ab:57:43:06:74: d4:b8:5f:d3:e7:75:e5:9d:e3:25:fd:0f:57:5e:8f: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8D:24:0A:53:3F:C5:AC:10:0B:28:5B:78:E9:6B:78:0B:53:96:E7 X509v3 Authority Key Identifier: keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:77:e5:69:53:ed:db:cb:7c:14:c2:47:ef:fd:a8:f8:bc:69: 17:e4:e1:67:cf:48:06:5a:82:db:a5:46:6b:c4:2b:ef:23:14: df:c4:f0:b3:9a:f4:f2:18:23:1c:d4:2a:69:f0:ab:dd:64:dd: d8:0f:38:af:34:e7:82:11:70:ad:97:ab:dc:bb:17:51:07:68: 96:60:fd:54:44:76:49:c0:97:e3:fd:66:a1:bc:6f:e5:c4:a4: 78:be:f4:17:77:9e:4c:f3:82:b8:01:08:7d:5b:bc:9a:a1:ab: 63:4f:7b:fc:7a:2f:c2:e8:42:41:0d:8c:9d:47:2a:7d:66:98: 6a:a4:54:59:a5:d3:9d:5f:21:c9:33:27:4d:84:df:ae:ec:50: 3c:b1:17:b0:1a:c4:4c:0d:19:42:c0:ca:e0:6e:33:55:50:f4: eb:a7:c7:1e:49:a7:35:d7:1a:96:6c:22:2b:1f:62:64:e7:f0: 16:a4:07:6a:4d:c2:f8:1e:86:03:c6:c0:ea:5a:7d:92:ef:d0: 1d:5a:2a:bc:81:cc:86:49:9a:26:09:35:d7:95:74:df:60:a5: 8e:ec:c6:a0:b3:f1:c9:c7:10:35:f5:7b:cc:a5:31:ee:d1:15: 25:94:f2:96:81:37:a3:25:f9:9d:32:5f:08:65:66:a7:1b:2a: b6:5c:cd:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvJYWYNu3MBAIRYVS8s8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOGMxODk3NjI0ZjU3YmUzNGUwZjc2MGI5N2YxMTBhZDVi NWRhM2EwHhcNMjUxMjEzMjIwMjI4WhcNMjUxMjE0MjIwMjI4WjAzMTEwLwYDVQQD EygzYzhkMjQwYTUzM2ZjNWFjMTAwYjI4NWI3OGU5NmI3ODBiNTM5NmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSwZb0NCGNOdfNWAsSPsCjFtkOpI AUGgvXn3SJbSIBmWPYpnDS/ZuZ4OjsvuI+QEwku3g/1bgZaltZVFRK3gcqL4gMlm NeUCVfGA2NIG23t00R1wvcaOfgzGzNZLTmpe9DUM7y70A8mXU4r/qMRgD+KgJqd/ GRMmVxJ7iQJQ2DUF4SKjMcY6+tLCJGQ2c0msmyk7pW311p4VhJEEeJEV+D9wjhXN O8ysfmmM9/r0fRjaQd9x0wJIDj3eW20S0iQWChpHbfkAMmPMIEfDXaX1SpqYe9wd x/H2DXgYigQ1rPwrmqARkJaP7Zifq1dDBnTUuF/T53XlneMl/Q9XXo9/UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyNJApTP8WsEAsoW3jpa3gLU5bnMB8GA1UdIwQY MBaAFD6MGJdiT1e+NOD3YLl/EQrVtdo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81N2VhOGQtYzY4MC00MGE3LThhMjkt ZjA3NmEwOGU2MDAzLzEvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy81N2VhOGQtYzY4MC00MGE3LThhMjktZjA3NmEwOGU2MDAz LzEvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXflaVPt 28t8FMJH7/2o+LxpF+ThZ89IBlqC26VGa8Qr7yMU38Tws5r08hgjHNQqafCr3WTd 2A84rzTnghFwrZer3LsXUQdolmD9VER2ScCX4/1mobxv5cSkeL70F3eeTPOCuAEI fVu8mqGrY097/HovwuhCQQ2MnUcqfWaYaqRUWaXTnV8hyTMnTYTfruxQPLEXsBrE TA0ZQsDK4G4zVVD066fHHkmnNdcalmwiKx9iZOfwFqQHak3C+B6GA8bA6lp9ku/Q HVoqvIHMhkmaJgk115V032CljuzGoLPxyccQNfV7zKUx7tEVJZTyloE3oyX5nTJf CGVmpxsqtlzNwQ== -----END CERTIFICATE-----Generated at Sun Dec 14 00:06:05 2025 by rpki-client