This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json) Hash identifier: BWx6zNxi5K5hcDv7Dst6FqO4Q/w66bqd107IEwFiUbA= Subject key identifier: D5:13:82:14:00:93:C5:1A:EF:11:CC:AC:08:D3:AB:C6:3A:E2:6D:23 Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f Certificate serial: 019B4B4C4101C24A650F2F682EF9DFD2100C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft Manifest number: 0D95 Signing time: Tue 23 Dec 2025 13:00:46 +0000 Manifest this update: Tue 23 Dec 2025 13:00:46 +0000 Manifest next update: Wed 24 Dec 2025 13:00:46 +0000 Files and hashes: 1: Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa (hash: K8PordojpOIplsR6Jg7NEy3mCM9e/c8OLgPeQ2xQz6M=) 2: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: 3z7b06tQcuuL0v6siU6BVJJUMwb+uUl/BuGx4/GfbdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:41:01:c2:4a:65:0f:2f:68:2e:f9:df:d2:10:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f Validity Not Before: Dec 23 13:00:46 2025 GMT Not After : Dec 24 13:00:46 2025 GMT Subject: CN=d51382140093c51aef11ccac08d3abc63ae26d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:65:7e:dd:35:4c:e0:14:95:86:d4:0a:6a: 42:0f:e5:65:42:db:50:a2:b2:53:0e:6c:c1:0b:1c: 8c:48:ab:26:a4:4b:02:73:d0:35:0d:46:01:a6:f7: 86:f4:4f:c9:79:2a:9b:1c:25:44:e8:5d:0d:8c:6b: 6b:44:5d:46:9e:ad:f9:81:e9:0a:07:d0:f4:02:20: e7:b1:38:01:4a:d8:05:f3:7a:e9:c2:e9:b8:ff:86: 19:f2:50:53:87:cb:e2:3a:07:78:f0:9c:a5:9f:6f: 0a:5f:c5:5e:e2:5d:87:0c:90:ee:9b:15:08:b5:dc: dc:b3:32:aa:08:19:16:71:67:89:62:3b:f0:5e:42: fe:e8:5d:af:65:53:88:98:d7:13:2f:02:c4:d6:8a: dc:51:1a:ae:9d:52:a9:68:5e:13:0c:96:2c:04:45: f4:b0:cc:2f:50:74:3a:9f:07:5c:23:54:41:79:05: 2e:99:dc:25:4d:d4:ea:f1:89:f5:c9:13:44:7f:47: 75:69:a6:98:64:43:19:9b:b8:4f:2c:71:a1:c0:81: 57:20:ad:77:25:02:11:7b:c6:85:41:ce:9f:ae:69: df:04:f1:da:b3:81:91:59:2a:15:08:64:cf:52:57: 0d:e2:11:be:d3:09:8c:02:89:38:2a:c0:93:77:28: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:13:82:14:00:93:C5:1A:EF:11:CC:AC:08:D3:AB:C6:3A:E2:6D:23 X509v3 Authority Key Identifier: keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:7a:0f:db:41:2c:1a:09:2d:3f:f6:b4:54:c4:06:9b:ff:ea: 6d:4e:d8:01:58:11:84:60:ad:df:d5:c9:d5:01:39:57:8f:ca: 39:99:8f:69:6f:54:2b:f4:88:2f:ec:d3:d1:70:be:55:61:fa: b6:11:75:89:41:7a:28:96:1b:fe:27:08:02:31:82:ee:86:24: cb:40:d6:18:c1:57:9d:d0:54:65:f6:67:66:55:48:f7:36:ef: 1f:c1:d8:27:73:b0:1d:93:7b:4f:b9:73:0f:16:26:45:ed:ff: fd:fb:22:f1:0c:43:e8:e7:2b:01:7e:5a:e0:1b:3f:2d:fa:9b: 5b:60:17:37:58:31:f3:82:30:1f:b0:75:64:70:95:8d:ef:b8: ba:e3:ff:1e:fd:77:30:08:df:4d:03:8c:30:0c:b5:3a:73:6f: 35:dc:3f:06:cc:97:2a:5b:7b:49:18:2f:07:03:d6:50:ec:c3: f4:43:a2:af:99:52:60:15:a4:08:d8:68:af:c5:cf:5e:d9:5d: 86:03:b4:cc:ef:3f:9a:5c:36:3e:36:8f:12:86:60:59:87:0b: 92:a8:5f:33:c6:a0:a9:63:30:ec:db:89:31:70:d9:b2:02:79: 4e:ee:b1:11:4f:3d:9f:85:e6:33:f1:67:29:70:da:5a:88:7b: bb:98:a4:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTEEBwkplDy9oLvnf0hAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOGM2Y2M0NDhmOTYzNWM1NmZmMjJiMTFjZDgwYzFhYTlj NTJkNGYwHhcNMjUxMjIzMTMwMDQ2WhcNMjUxMjI0MTMwMDQ2WjAzMTEwLwYDVQQD EyhkNTEzODIxNDAwOTNjNTFhZWYxMWNjYWMwOGQzYWJjNjNhZTI2ZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo01lft01TOAUlYbUCmpCD+VlQttQ orJTDmzBCxyMSKsmpEsCc9A1DUYBpveG9E/JeSqbHCVE6F0NjGtrRF1Gnq35gekK B9D0AiDnsTgBStgF83rpwum4/4YZ8lBTh8viOgd48Jyln28KX8Ve4l2HDJDumxUI tdzcszKqCBkWcWeJYjvwXkL+6F2vZVOImNcTLwLE1orcURqunVKpaF4TDJYsBEX0 sMwvUHQ6nwdcI1RBeQUumdwlTdTq8Yn1yRNEf0d1aaaYZEMZm7hPLHGhwIFXIK13 JQIRe8aFQc6frmnfBPHas4GRWSoVCGTPUlcN4hG+0wmMAok4KsCTdyi5fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUTghQAk8Ua7xHMrAjTq8Y64m0jMB8GA1UdIwQY MBaAFD6MbMRI+WNcVv8isRzYDBqpxS1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTct ZDI4MTA1ZTNmMzgwLzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTctZDI4MTA1ZTNmMzgw LzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXoP20Es GgktP/a0VMQGm//qbU7YAVgRhGCt39XJ1QE5V4/KOZmPaW9UK/SIL+zT0XC+VWH6 thF1iUF6KJYb/icIAjGC7oYky0DWGMFXndBUZfZnZlVI9zbvH8HYJ3OwHZN7T7lz DxYmRe3//fsi8QxD6OcrAX5a4Bs/LfqbW2AXN1gx84IwH7B1ZHCVje+4uuP/Hv13 MAjfTQOMMAy1OnNvNdw/BsyXKlt7SRgvBwPWUOzD9EOir5lSYBWkCNhor8XPXtld hgO0zO8/mlw2PjaPEoZgWYcLkqhfM8agqWMw7NuJMXDZsgJ5Tu6xEU89n4XmM/Fn KXDaWoh7u5ikUg== -----END CERTIFICATE-----Generated at Tue Dec 23 16:23:36 2025 by rpki-client