This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft File: pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json) Hash identifier: uc/+3BjCf7iRGsnoZCaRRtd9BC0hYECasJMXRjonQiY= Subject key identifier: 24:02:96:03:F4:96:56:33:2E:7F:A5:DA:74:BB:11:80:C4:B2:F7:BA Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9 Certificate issuer: /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9 Certificate serial: 019B5A1B163BB73C733B84B69B3D23E27FD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft Manifest number: 04E8 Signing time: Fri 26 Dec 2025 10:01:23 +0000 Manifest this update: Fri 26 Dec 2025 10:01:23 +0000 Manifest next update: Sat 27 Dec 2025 10:01:23 +0000 Files and hashes: 1: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: E51Y+AMiWLWY26Sk9lkXbqDdPZFMjNpOLnAuWNnXjUs=) 2: tBiDEoWCGA8hVhVgwo9Iim47EzY.roa (hash: zWjGkV/pdnISeY0gGiXKGa4SNljWX+62ouYMUIE3qx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:16:3b:b7:3c:73:3b:84:b6:9b:3d:23:e2:7f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9 Validity Not Before: Dec 26 10:01:23 2025 GMT Not After : Dec 27 10:01:23 2025 GMT Subject: CN=24029603f49656332e7fa5da74bb1180c4b2f7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fb:8a:16:c3:b2:78:a7:53:78:92:01:67:d7: 73:c9:1a:ad:99:66:e3:e0:1e:4b:a1:a5:12:55:56: 98:7b:9c:e3:89:fd:1a:4f:e5:ac:61:00:31:ae:4f: 4c:70:74:62:e4:72:24:20:09:8e:1a:34:a1:5d:b3: 08:a8:a2:c2:74:f4:cd:41:43:50:5c:5b:d4:14:3a: 1d:44:77:a4:16:e8:dd:a4:bb:81:00:6d:4f:04:a1: 7c:d5:4a:d7:81:f7:a9:a0:a8:83:b2:a5:f7:46:8a: 34:4a:b8:dc:d1:b1:68:ab:eb:6b:d7:09:9d:cb:89: 13:33:02:96:b1:7c:f7:34:21:a8:8e:3b:39:01:37: b0:28:f8:f1:28:d9:4f:e4:5a:de:5d:94:1f:5c:6a: 7e:43:0f:5f:86:a2:58:07:4a:a0:4a:e7:ae:24:d0: 78:c3:66:52:b1:7e:3e:e4:ba:c6:3f:f2:2b:ca:b6: 00:6d:f4:64:c7:c6:59:c4:b8:db:f4:a4:8f:d2:67: c4:fd:73:40:b5:43:82:37:1a:a4:e6:5d:d8:c2:63: fc:9e:e0:99:e2:4e:1e:b9:12:dd:26:53:d3:9f:9e: bc:a2:83:ab:70:ed:01:73:40:e5:67:35:9f:29:d1: aa:14:27:83:f2:ab:68:b3:2c:a0:60:0b:d8:8e:ea: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:02:96:03:F4:96:56:33:2E:7F:A5:DA:74:BB:11:80:C4:B2:F7:BA X509v3 Authority Key Identifier: keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ef:16:00:9c:f9:b6:49:5f:fb:a7:b8:e1:38:04:dc:b6:5b: e7:ed:e6:05:b4:ce:aa:32:b1:e9:75:a5:00:af:4f:8e:03:c3: 4d:05:cf:8c:fc:e7:9a:9c:ae:e0:57:24:c0:67:e0:7c:2b:c1: 3b:29:38:62:8d:cb:c5:bd:b7:cf:93:ed:66:fb:c1:23:a0:dd: 6e:d0:a0:23:9b:af:2e:cb:d9:89:36:bc:f8:29:7a:bc:2b:82: 22:24:50:92:d1:7a:34:bd:ad:4d:8a:64:a1:7c:a1:be:ed:65: 1c:c0:14:7e:0a:63:16:38:93:9a:38:92:50:c4:1b:8d:2f:9f: 6a:19:4f:02:82:6e:fa:1b:08:75:cc:30:fc:46:6d:1d:92:53: 32:7f:2d:60:71:0c:44:2f:ed:4b:66:88:31:8f:ec:fb:6b:65: 7e:89:dd:a5:e9:94:68:51:49:5e:00:78:41:cc:b6:46:9c:a8: 34:06:2f:23:13:1a:f5:2b:99:e1:95:c9:ce:07:34:a3:82:60: 0b:cb:85:cb:d2:72:a2:85:eb:c5:cf:19:22:00:56:bc:65:20: 46:d1:f6:0b:15:67:e4:c7:8f:ae:1f:7c:e5:01:3d:e3:69:84: 8c:0e:90:63:f3:e5:55:8d:a2:37:1f:8a:42:de:8d:78:62:45: 1f:f0:33:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGxY7tzxzO4S2mz0j4n/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZWI4ZWI3YjRiNjJlZDEyNTRmMDA1NjRlMDNjNDA2N2Fi ZmJmYzkwHhcNMjUxMjI2MTAwMTIzWhcNMjUxMjI3MTAwMTIzWjAzMTEwLwYDVQQD EygyNDAyOTYwM2Y0OTY1NjMzMmU3ZmE1ZGE3NGJiMTE4MGM0YjJmN2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fuKFsOyeKdTeJIBZ9dzyRqtmWbj 4B5LoaUSVVaYe5zjif0aT+WsYQAxrk9McHRi5HIkIAmOGjShXbMIqKLCdPTNQUNQ XFvUFDodRHekFujdpLuBAG1PBKF81UrXgfepoKiDsqX3Roo0Srjc0bFoq+tr1wmd y4kTMwKWsXz3NCGojjs5ATewKPjxKNlP5FreXZQfXGp+Qw9fhqJYB0qgSueuJNB4 w2ZSsX4+5LrGP/IryrYAbfRkx8ZZxLjb9KSP0mfE/XNAtUOCNxqk5l3YwmP8nuCZ 4k4euRLdJlPTn568ooOrcO0Bc0DlZzWfKdGqFCeD8qtosyygYAvYjuqnuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQClgP0llYzLn+l2nS7EYDEsve6MB8GA1UdIwQY MBaAFKTrjre0ti7RJU8AVk4DxAZ6v7/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE91T3Q3UzJMdEVsVHdCV1RnUEVCbnFfdjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xMmMzZTgtOWMwMS00NTViLWIxODEt ZjRkN2ZkZWJmMDRkLzEvcE91T3Q3UzJMdEVsVHdCV1RnUEVCbnFfdjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8xMmMzZTgtOWMwMS00NTViLWIxODEtZjRkN2ZkZWJmMDRk LzEvcE91T3Q3UzJMdEVsVHdCV1RnUEVCbnFfdjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnO8WAJz5 tklf+6e44TgE3LZb5+3mBbTOqjKx6XWlAK9PjgPDTQXPjPznmpyu4FckwGfgfCvB Oyk4Yo3Lxb23z5PtZvvBI6DdbtCgI5uvLsvZiTa8+Cl6vCuCIiRQktF6NL2tTYpk oXyhvu1lHMAUfgpjFjiTmjiSUMQbjS+fahlPAoJu+hsIdcww/EZtHZJTMn8tYHEM RC/tS2aIMY/s+2tlfondpemUaFFJXgB4Qcy2RpyoNAYvIxMa9SuZ4ZXJzgc0o4Jg C8uFy9JyooXrxc8ZIgBWvGUgRtH2CxVn5MePrh985QE942mEjA6QY/PlVY2iNx+K Qt6NeGJFH/Azlg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:49 2025 by rpki-client