This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft File: pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json) Hash identifier: M3sqyBbQP6E6Q2jwWougX5AhYAJzEPjH9LXVVpXLDHI= Subject key identifier: 00:74:E1:01:1E:F3:44:44:F0:D8:B5:A9:3D:DF:FE:2B:53:4E:0F:1F Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15 Certificate issuer: /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315 Certificate serial: 019B066C028E5D9FB85644D515E6EC76BEEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft Manifest number: 0E57 Signing time: Wed 10 Dec 2025 04:01:40 +0000 Manifest this update: Wed 10 Dec 2025 04:01:40 +0000 Manifest next update: Thu 11 Dec 2025 04:01:40 +0000 Files and hashes: 1: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: UHCqZS1zeyiCHrAqzjOFX4ZbEPUReYvU20PcXfPBXvw=) 2: z4rUk_E4AGcR7M7P_EXqaAGwIrE.roa (hash: vdPESCF/t7U31UD2O57fuph7iNy0Hlzj8MYZvwZ4bj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6c:02:8e:5d:9f:b8:56:44:d5:15:e6:ec:76:be:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315 Validity Not Before: Dec 10 04:01:40 2025 GMT Not After : Dec 11 04:01:40 2025 GMT Subject: CN=0074e1011ef34444f0d8b5a93ddffe2b534e0f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:50:98:d0:7d:14:c6:7d:14:af:a6:7c:eb: 4f:a1:95:ab:a9:a4:02:32:f3:bf:c3:48:73:34:24: 51:a3:0b:91:c3:62:a1:1e:25:8d:fd:c7:5b:c4:69: 83:3b:89:99:7c:ad:33:c8:da:f4:8c:19:e8:47:3e: 05:56:2d:c2:87:ac:ec:4b:87:c3:02:06:0b:c8:08: f1:1b:99:e4:f6:8d:5e:d4:bc:8a:d4:7c:34:ef:c9: 89:34:af:e0:41:2b:1e:85:ff:1a:67:70:c5:61:f5: 24:19:74:a6:10:53:b8:0c:5b:27:95:8f:65:af:3f: ef:48:b3:8a:0f:d3:2a:a5:8c:c4:d1:15:5b:09:ae: 0c:00:7a:10:1f:07:80:5a:21:ed:4b:4f:c6:55:f5: ac:94:50:fc:0e:d1:a4:97:03:2b:d7:26:0a:84:41: 4c:93:96:db:c9:42:e9:3f:9d:84:2a:29:e3:af:4e: 96:4e:75:b5:25:4c:03:27:6e:af:a4:0b:b7:84:03: cf:25:71:c3:43:85:8f:2d:f5:de:8f:a1:ae:20:ea: 08:f1:1d:86:37:0f:55:cb:e9:5c:39:af:3c:4f:0f: 45:87:38:04:60:d5:27:7f:97:9d:b6:6e:f4:e5:58: 8a:20:38:24:0c:ab:9a:40:67:cc:3b:fd:9a:e5:c5: cc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:74:E1:01:1E:F3:44:44:F0:D8:B5:A9:3D:DF:FE:2B:53:4E:0F:1F X509v3 Authority Key Identifier: keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:56:8f:04:47:06:81:3f:af:13:89:b6:cc:db:ff:5e:e5:9a: fa:01:19:ea:67:f5:e8:a3:f3:d9:d6:fb:6c:21:61:bc:de:52: d6:16:43:00:6b:9a:69:6d:43:0a:fc:83:5b:98:cc:03:a7:90: 34:b3:32:0b:dc:16:19:c9:dc:cf:e9:0d:2e:8b:76:1e:9d:32: ff:22:ad:4f:d4:64:c9:af:c3:a1:fa:34:7a:9a:a5:d0:81:b7: ba:84:df:95:3b:da:ef:11:72:17:36:d7:56:9f:bc:91:a1:e6: 00:f6:20:cf:8f:7d:1a:18:3d:20:2e:07:f7:63:bb:a4:67:31: 32:fa:21:4b:d0:64:a1:cd:d1:ff:5e:a4:74:3c:8a:40:5c:f2: b8:bb:f3:87:54:3e:6a:14:ec:aa:e7:de:93:4b:fd:09:db:3b: 82:90:08:10:74:b3:a5:c9:a6:3e:51:04:86:3c:7c:87:4c:f2: 7b:cd:5c:c8:2b:8b:d0:8f:5d:8d:27:7e:50:0a:e9:ba:95:00: ba:90:3b:1b:78:24:04:5b:7c:d8:c8:81:df:2f:86:60:4f:57: 26:e7:1d:9a:4b:87:24:a5:f1:c3:b1:83:a9:29:5f:dc:1d:69: 17:56:63:0f:36:b5:29:1a:ac:66:0f:ca:cf:58:fb:57:24:04: 9b:dd:fd:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGbAKOXZ+4VkTVFebsdr7uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZTc3NzdjN2FmYjdkNDM5YjQ2ZjY4MWM0YzdiZjZhODI1 MmUzMTUwHhcNMjUxMjEwMDQwMTQwWhcNMjUxMjExMDQwMTQwWjAzMTEwLwYDVQQD EygwMDc0ZTEwMTFlZjM0NDQ0ZjBkOGI1YTkzZGRmZmUyYjUzNGUwZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK5QmNB9FMZ9FK+mfOtPoZWrqaQC MvO/w0hzNCRRowuRw2KhHiWN/cdbxGmDO4mZfK0zyNr0jBnoRz4FVi3Ch6zsS4fD AgYLyAjxG5nk9o1e1LyK1Hw078mJNK/gQSsehf8aZ3DFYfUkGXSmEFO4DFsnlY9l rz/vSLOKD9MqpYzE0RVbCa4MAHoQHweAWiHtS0/GVfWslFD8DtGklwMr1yYKhEFM k5bbyULpP52EKinjr06WTnW1JUwDJ26vpAu3hAPPJXHDQ4WPLfXej6GuIOoI8R2G Nw9Vy+lcOa88Tw9FhzgEYNUnf5edtm705ViKIDgkDKuaQGfMO/2a5cXMCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAB04QEe80RE8Ni1qT3f/itTTg8fMB8GA1UdIwQY MBaAFKTnd3x6+31Dm0b2gcTHv2qCUuMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80NWFkNWItM2NlMS00OGYxLWJlZjct NjQxY2ZiNmUzZDliLzEvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS80NWFkNWItM2NlMS00OGYxLWJlZjctNjQxY2ZiNmUzZDli LzEvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVaPBEcG gT+vE4m2zNv/XuWa+gEZ6mf16KPz2db7bCFhvN5S1hZDAGuaaW1DCvyDW5jMA6eQ NLMyC9wWGcncz+kNLot2Hp0y/yKtT9Rkya/Dofo0epql0IG3uoTflTva7xFyFzbX Vp+8kaHmAPYgz499Ghg9IC4H92O7pGcxMvohS9Bkoc3R/16kdDyKQFzyuLvzh1Q+ ahTsqufek0v9Cds7gpAIEHSzpcmmPlEEhjx8h0zye81cyCuL0I9djSd+UArpupUA upA7G3gkBFt82MiB3y+GYE9XJucdmkuHJKXxw7GDqSlf3B1pF1ZjDza1KRqsZg/K z1j7VyQEm939hA== -----END CERTIFICATE-----Generated at Wed Dec 10 11:34:55 2025 by rpki-client