This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json) Hash identifier: M1re3u9yLc8aHBa2tJEDzYrLVIXeQczNa5QcABd6Edo= Subject key identifier: A7:A1:FA:13:D2:64:7D:88:07:2F:02:B6:0C:31:8A:D6:30:3A:6A:DB Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f Certificate serial: 019B269AE9C57A3B0939EC647D89D5096A02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft Manifest number: 0D82 Signing time: Tue 16 Dec 2025 10:00:44 +0000 Manifest this update: Tue 16 Dec 2025 10:00:44 +0000 Manifest next update: Wed 17 Dec 2025 10:00:44 +0000 Files and hashes: 1: Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa (hash: K8PordojpOIplsR6Jg7NEy3mCM9e/c8OLgPeQ2xQz6M=) 2: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: pXBcBDvf4yAuQ3BYme1+WTz890823HVOnES6yNoC7pE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9a:e9:c5:7a:3b:09:39:ec:64:7d:89:d5:09:6a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f Validity Not Before: Dec 16 10:00:44 2025 GMT Not After : Dec 17 10:00:44 2025 GMT Subject: CN=a7a1fa13d2647d88072f02b60c318ad6303a6adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:0d:6e:7a:31:bb:d3:66:85:e0:c3:38:06: e7:d0:0d:48:53:92:8f:15:d1:2c:d4:e1:44:a2:b0: ad:3a:35:d8:87:39:01:13:0e:32:ac:db:d9:26:7d: 7d:9a:7b:56:d6:49:f6:cd:91:58:52:96:da:ae:54: 1f:6c:99:8e:ce:b3:36:a1:55:e3:3a:19:8f:40:bc: 00:29:30:41:bc:b0:10:63:47:49:33:24:21:1b:07: e0:db:76:1f:69:ab:da:f3:15:92:07:99:ba:b3:03: 7e:28:cf:f9:fa:1c:16:14:c4:dc:b6:9c:3a:d3:69: b3:8f:11:4a:5c:64:49:09:f4:5e:86:26:8a:6c:7e: f3:21:f4:10:4c:0e:30:77:fa:e8:0a:a4:f4:0d:71: 1d:90:bc:9a:d8:87:99:21:bb:a9:50:b4:0d:2a:c2: cd:e2:72:cf:48:84:97:1d:95:f6:95:1b:02:ae:a9: 0e:e5:c6:cf:4c:0a:cc:1c:56:ff:7c:f1:f7:1d:e6: 96:e2:0d:77:52:a6:cf:27:c1:b6:86:16:75:73:e3: e6:73:43:93:26:d8:fb:79:20:d3:61:f8:a7:24:e4: 0b:ba:72:a0:b5:b2:a3:f8:e9:67:c2:a5:48:62:fc: 2a:e0:bf:9c:e0:a0:d5:9d:c1:bb:70:88:86:a9:9e: b4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A1:FA:13:D2:64:7D:88:07:2F:02:B6:0C:31:8A:D6:30:3A:6A:DB X509v3 Authority Key Identifier: keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:bf:47:ae:00:5e:c3:66:5b:fb:6a:f6:42:68:9a:09:2e:a2: d3:bc:c6:0c:ea:1b:e5:10:d9:48:28:08:a4:6a:34:f7:80:13: dc:d5:75:96:f8:34:8f:0b:56:56:7e:0c:af:b4:a3:b4:8d:4d: 2e:a3:3b:3b:23:44:cd:54:fe:b2:13:b2:fc:60:3a:08:31:9b: 40:80:e4:65:47:13:5b:39:fa:b3:84:00:e6:26:16:9c:9e:3e: 67:fa:48:f7:22:3f:50:fa:b9:eb:b8:11:d1:cb:1b:06:ad:54: 0d:b4:64:b2:37:f3:84:c8:ae:45:8b:68:c1:83:8a:c9:c0:10: b1:f1:60:6a:af:2f:d7:03:ac:29:00:37:e4:f2:23:02:c0:13: b0:cf:bc:e4:ee:21:b7:f6:ba:bb:c0:4d:1c:0d:de:64:1a:c6: 60:f1:47:55:9f:14:88:8b:a5:4e:80:61:71:12:ca:2c:96:21: 98:d7:4f:b1:e8:c7:a1:65:b0:a7:a8:d0:32:34:ee:6d:87:89: 66:d3:b9:9d:21:d7:04:7e:4a:a5:1a:a2:80:9a:81:02:9b:3e: f7:56:3a:d9:86:64:59:46:aa:30:62:a4:b7:4d:41:bd:c8:0d: 5e:46:57:28:67:11:06:d9:e9:59:4d:7d:12:0e:ab:82:6c:b1: ff:45:06:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmmunFejsJOexkfYnVCWoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOGM2Y2M0NDhmOTYzNWM1NmZmMjJiMTFjZDgwYzFhYTlj NTJkNGYwHhcNMjUxMjE2MTAwMDQ0WhcNMjUxMjE3MTAwMDQ0WjAzMTEwLwYDVQQD EyhhN2ExZmExM2QyNjQ3ZDg4MDcyZjAyYjYwYzMxOGFkNjMwM2E2YWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUgNbnoxu9NmheDDOAbn0A1IU5KP FdEs1OFEorCtOjXYhzkBEw4yrNvZJn19mntW1kn2zZFYUpbarlQfbJmOzrM2oVXj OhmPQLwAKTBBvLAQY0dJMyQhGwfg23Yfaava8xWSB5m6swN+KM/5+hwWFMTctpw6 02mzjxFKXGRJCfRehiaKbH7zIfQQTA4wd/roCqT0DXEdkLya2IeZIbupULQNKsLN 4nLPSISXHZX2lRsCrqkO5cbPTArMHFb/fPH3HeaW4g13UqbPJ8G2hhZ1c+Pmc0OT Jtj7eSDTYfinJOQLunKgtbKj+OlnwqVIYvwq4L+c4KDVncG7cIiGqZ60qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeh+hPSZH2IBy8CtgwxitYwOmrbMB8GA1UdIwQY MBaAFD6MbMRI+WNcVv8isRzYDBqpxS1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTct ZDI4MTA1ZTNmMzgwLzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTctZDI4MTA1ZTNmMzgw LzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEL9HrgBe w2Zb+2r2QmiaCS6i07zGDOob5RDZSCgIpGo094AT3NV1lvg0jwtWVn4Mr7SjtI1N LqM7OyNEzVT+shOy/GA6CDGbQIDkZUcTWzn6s4QA5iYWnJ4+Z/pI9yI/UPq567gR 0csbBq1UDbRksjfzhMiuRYtowYOKycAQsfFgaq8v1wOsKQA35PIjAsATsM+85O4h t/a6u8BNHA3eZBrGYPFHVZ8UiIulToBhcRLKLJYhmNdPsejHoWWwp6jQMjTubYeJ ZtO5nSHXBH5KpRqigJqBAps+91Y62YZkWUaqMGKkt01BvcgNXkZXKGcRBtnpWU19 Eg6rgmyx/0UGhQ== -----END CERTIFICATE-----Generated at Tue Dec 16 16:56:25 2025 by rpki-client