This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft File: pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json) Hash identifier: zFYKfJZJwf+LBvDGIhVEDKFoNaxn2NEmJ41vCse/asA= Subject key identifier: 16:1A:A9:2D:15:44:70:29:CC:FD:ED:64:FA:FE:A3:E4:41:19:DF:A7 Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15 Certificate issuer: /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315 Certificate serial: 019B19BB758FF65E31133261FE7C29473195 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft Manifest number: 0E61 Signing time: Sat 13 Dec 2025 22:01:14 +0000 Manifest this update: Sat 13 Dec 2025 22:01:14 +0000 Manifest next update: Sun 14 Dec 2025 22:01:14 +0000 Files and hashes: 1: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: cmj28UpxOcoy+4NovVmF1fthpjoqMAyTpRMfwzLFmos=) 2: z4rUk_E4AGcR7M7P_EXqaAGwIrE.roa (hash: vdPESCF/t7U31UD2O57fuph7iNy0Hlzj8MYZvwZ4bj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:75:8f:f6:5e:31:13:32:61:fe:7c:29:47:31:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315 Validity Not Before: Dec 13 22:01:14 2025 GMT Not After : Dec 14 22:01:14 2025 GMT Subject: CN=161aa92d15447029ccfded64fafea3e44119dfa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ec:7b:06:59:db:cf:96:e9:c1:d2:53:f9:ba: bf:ad:cf:9a:49:03:5b:22:b4:88:ac:98:2a:a9:5c: 0f:4b:d7:89:20:79:3a:f7:67:e6:62:d1:0f:cd:8a: df:1b:29:cf:fc:66:3d:03:38:e1:dc:51:ea:5e:35: b2:df:4b:89:72:45:78:2f:ae:d2:11:58:70:59:87: bc:40:3e:1d:97:ff:3b:d4:92:a1:36:39:c4:97:f9: 4c:94:b0:ad:1d:fc:07:5a:b2:28:06:94:4e:6e:69: 2c:c3:c2:f1:36:25:82:93:b5:06:8c:e4:1a:33:7e: b2:08:85:54:19:bf:71:75:05:4e:c0:96:0b:1b:c3: f0:b6:b4:d2:99:6f:42:23:0e:e2:46:50:33:54:6c: 1e:61:c5:bf:27:13:13:5e:e0:84:97:40:dd:5a:71: dd:5f:26:3d:8d:d9:19:0b:88:cb:94:f2:08:af:bf: bd:79:44:37:f5:4d:51:7a:47:ff:f5:f9:f5:9b:0b: fb:65:0e:27:21:af:2f:ea:e3:2f:e0:06:66:f5:d4: 57:4a:30:16:25:1b:32:74:09:68:aa:e7:dd:7e:46: 1f:54:ac:c5:da:76:41:4a:28:84:3a:0a:d9:7b:ca: 7a:26:b1:88:04:e1:0d:e5:12:56:6c:68:26:3c:7e: 67:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1A:A9:2D:15:44:70:29:CC:FD:ED:64:FA:FE:A3:E4:41:19:DF:A7 X509v3 Authority Key Identifier: keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c8:73:41:0e:ea:4e:1c:2e:6d:7b:ea:2a:0a:71:79:43:59: e3:2d:d1:f8:d7:1e:a5:35:4d:9b:ca:a7:f2:c1:73:14:8e:1d: f1:a0:41:e2:fe:62:68:2c:02:69:ce:d0:25:40:70:3b:bb:61: 91:b7:77:25:80:91:5f:b0:ab:cc:34:00:e4:3d:70:fc:a7:ca: b3:1e:ec:34:9f:65:4f:09:69:f7:bc:32:57:90:1f:cc:b8:6f: 75:32:d9:99:a0:46:f8:50:86:14:68:fc:e0:f5:6b:d6:f1:bc: 4a:d0:73:13:8e:ac:ce:d9:d8:da:09:2b:8a:9f:e1:59:24:52: 4a:87:07:eb:4e:f8:be:e6:41:41:a9:9f:30:59:95:45:4e:f6: 35:1d:f0:63:9e:68:57:c6:c7:b0:a3:61:d5:72:1d:43:b8:82: 91:0a:c9:02:f8:0f:83:b9:af:59:60:8c:6e:dd:b3:30:99:bb: ec:62:69:74:47:f5:bb:f9:89:a6:69:d5:a9:97:e5:ad:02:0e: 97:e2:a8:d5:6c:11:aa:e6:8f:ab:9e:86:cd:0c:1f:1f:5b:a2: 84:9e:a6:21:52:ad:37:14:e7:c9:56:f0:ab:33:41:ac:92:6b: 30:f5:59:a3:a8:f0:2d:a0:47:90:0c:87:11:1d:6d:c3:d4:94: be:a2:69:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu3WP9l4xEzJh/nwpRzGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZTc3NzdjN2FmYjdkNDM5YjQ2ZjY4MWM0YzdiZjZhODI1 MmUzMTUwHhcNMjUxMjEzMjIwMTE0WhcNMjUxMjE0MjIwMTE0WjAzMTEwLwYDVQQD EygxNjFhYTkyZDE1NDQ3MDI5Y2NmZGVkNjRmYWZlYTNlNDQxMTlkZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlux7Blnbz5bpwdJT+bq/rc+aSQNb IrSIrJgqqVwPS9eJIHk692fmYtEPzYrfGynP/GY9Azjh3FHqXjWy30uJckV4L67S EVhwWYe8QD4dl/871JKhNjnEl/lMlLCtHfwHWrIoBpRObmksw8LxNiWCk7UGjOQa M36yCIVUGb9xdQVOwJYLG8PwtrTSmW9CIw7iRlAzVGweYcW/JxMTXuCEl0DdWnHd XyY9jdkZC4jLlPIIr7+9eUQ39U1Rekf/9fn1mwv7ZQ4nIa8v6uMv4AZm9dRXSjAW JRsydAloqufdfkYfVKzF2nZBSiiEOgrZe8p6JrGIBOEN5RJWbGgmPH5n2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYaqS0VRHApzP3tZPr+o+RBGd+nMB8GA1UdIwQY MBaAFKTnd3x6+31Dm0b2gcTHv2qCUuMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80NWFkNWItM2NlMS00OGYxLWJlZjct NjQxY2ZiNmUzZDliLzEvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS80NWFkNWItM2NlMS00OGYxLWJlZjctNjQxY2ZiNmUzZDli LzEvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfchzQQ7q ThwubXvqKgpxeUNZ4y3R+NcepTVNm8qn8sFzFI4d8aBB4v5iaCwCac7QJUBwO7th kbd3JYCRX7CrzDQA5D1w/KfKsx7sNJ9lTwlp97wyV5AfzLhvdTLZmaBG+FCGFGj8 4PVr1vG8StBzE46sztnY2gkrip/hWSRSSocH6074vuZBQamfMFmVRU72NR3wY55o V8bHsKNh1XIdQ7iCkQrJAvgPg7mvWWCMbt2zMJm77GJpdEf1u/mJpmnVqZflrQIO l+Ko1WwRquaPq56GzQwfH1uihJ6mIVKtNxTnyVbwqzNBrJJrMPVZo6jwLaBHkAyH ER1tw9SUvqJpUQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:55:15 2025 by rpki-client