This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json) Hash identifier: Aj+0+LIz3eLRLeudq08s3usyiD6nm+02SSJm41KMDOc= Subject key identifier: C6:71:2F:8E:5E:07:0E:70:F1:8A:EF:C9:B6:46:2D:3E:95:2B:BB:F5 Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18 Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18 Certificate serial: 019B38D7E8FABF5D9DA78A613D2FDAF88C17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft Manifest number: 0C09 Signing time: Fri 19 Dec 2025 23:00:32 +0000 Manifest this update: Fri 19 Dec 2025 23:00:32 +0000 Manifest next update: Sat 20 Dec 2025 23:00:32 +0000 Files and hashes: 1: AdJqJvlWVSQ_2sjUlxPnhKVvXgE.roa (hash: rvwXexvACQ2KWhkVUmfkFIN6qH1hFBVmtLOZa/tj5cA=) 2: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: GuRbSAOGkmwrecxbLM6zmc/cgh0c5T7l304ynqKUQS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d7:e8:fa:bf:5d:9d:a7:8a:61:3d:2f:da:f8:8c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18 Validity Not Before: Dec 19 23:00:32 2025 GMT Not After : Dec 20 23:00:32 2025 GMT Subject: CN=c6712f8e5e070e70f18aefc9b6462d3e952bbbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:2c:b3:a1:d4:2f:14:b6:87:26:ce:6d:ea: c8:15:76:28:4e:02:d7:62:67:38:a9:21:f4:ae:60: 54:85:4c:66:9f:ab:3a:8d:0d:34:f1:13:d2:03:ef: 63:56:de:0a:aa:6d:93:cd:94:2a:83:5a:6a:8c:d8: 64:7d:f1:20:82:f9:08:de:c0:5e:eb:48:60:1f:23: fa:fd:28:ae:32:50:ea:f8:b9:21:6d:76:2f:5c:09: 0a:b5:cd:39:a3:1c:76:10:52:5e:49:ae:bf:82:8a: 84:01:fa:ac:78:e1:f3:89:6b:89:41:1d:43:08:48: 53:7a:21:39:0c:ce:64:d6:24:4c:fe:a0:db:17:6f: 8d:43:c9:90:ba:97:c7:06:7d:b8:02:52:d8:8e:10: 1b:5b:6e:4a:0e:11:9f:ba:5b:ba:4b:00:67:9b:16: 2d:71:ab:b8:70:36:82:26:72:5f:aa:23:31:a5:37: c1:49:3a:83:35:b8:00:67:db:b9:b6:81:5f:63:fa: 40:d2:c2:a2:bf:44:0a:92:88:c5:9f:d9:ce:50:05: 40:c5:5c:16:a8:41:a6:33:3d:2d:a7:68:48:28:1a: 9b:6f:f4:68:c6:ed:70:92:e9:8c:e9:67:64:7d:6a: 81:d2:a9:33:15:e1:17:3c:8f:cc:99:e6:13:8e:4d: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:71:2F:8E:5E:07:0E:70:F1:8A:EF:C9:B6:46:2D:3E:95:2B:BB:F5 X509v3 Authority Key Identifier: keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d1:11:80:4b:c0:bc:28:30:d9:f5:4b:a6:48:ad:96:33:05: 33:76:25:92:13:50:a2:f0:50:2f:e9:25:b0:81:95:9f:58:e9: ef:76:e4:78:67:a9:ea:f8:0d:ca:39:96:bf:49:60:f6:ea:a0: 4b:f5:7f:7e:bd:8a:de:c1:3b:91:fe:84:2a:04:91:64:2b:7d: 64:d0:e7:1b:bd:e4:58:70:9f:b7:b9:29:d5:e5:05:d8:d3:ca: 39:e3:9b:ab:e5:83:39:6b:29:ef:67:c5:f9:4e:d8:f0:83:f7: f7:74:8e:a5:d5:e7:6e:92:7e:1e:66:32:e1:49:3c:67:ea:d2: 66:71:40:0d:63:2b:ef:59:1d:5e:04:85:45:68:a6:0c:f4:6b: 84:df:b1:89:b4:b8:59:6b:44:4c:17:86:28:7a:6c:c6:57:c8: 8d:1e:43:02:4d:89:80:5e:e1:5e:38:90:68:82:84:9c:44:da: 33:cc:a8:6d:a7:a2:fa:b1:4f:e9:92:5f:f1:3b:b7:46:0f:cd: 99:6a:55:0a:5c:02:7d:70:2e:96:68:e6:d1:f2:6a:f3:32:cc: a3:d5:40:3f:09:f0:34:48:94:d2:f8:54:8c:5a:e6:9d:50:37: fe:47:47:9f:db:1f:58:4e:64:90:d6:c3:50:1c:e9:0f:56:b8: 40:51:52:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs41+j6v12dp4phPS/a+IwXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZTdhMGQyZmM1N2E2N2JiMmI3ZTg1YzNlOGQ3ODE5MmJj YTBmMTgwHhcNMjUxMjE5MjMwMDMyWhcNMjUxMjIwMjMwMDMyWjAzMTEwLwYDVQQD EyhjNjcxMmY4ZTVlMDcwZTcwZjE4YWVmYzliNjQ2MmQzZTk1MmJiYmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHAss6HULxS2hybOberIFXYoTgLX Ymc4qSH0rmBUhUxmn6s6jQ008RPSA+9jVt4Kqm2TzZQqg1pqjNhkffEggvkI3sBe 60hgHyP6/SiuMlDq+LkhbXYvXAkKtc05oxx2EFJeSa6/goqEAfqseOHziWuJQR1D CEhTeiE5DM5k1iRM/qDbF2+NQ8mQupfHBn24AlLYjhAbW25KDhGfulu6SwBnmxYt cau4cDaCJnJfqiMxpTfBSTqDNbgAZ9u5toFfY/pA0sKiv0QKkojFn9nOUAVAxVwW qEGmMz0tp2hIKBqbb/Roxu1wkumM6WdkfWqB0qkzFeEXPI/MmeYTjk25jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZxL45eBw5w8YrvybZGLT6VK7v1MB8GA1UdIwQY MBaAFKTnoNL8V6Z7srfoXD6NeBkryg8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9lZzB2eFhwbnV5dC1oY1BvMTRHU3ZLRHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NmMyNzItZjc0Ni00NjI4LTk1YmMt YTYxMjZiNTQwOTRkLzEvcE9lZzB2eFhwbnV5dC1oY1BvMTRHU3ZLRHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny85NmMyNzItZjc0Ni00NjI4LTk1YmMtYTYxMjZiNTQwOTRk LzEvcE9lZzB2eFhwbnV5dC1oY1BvMTRHU3ZLRHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNERgEvA vCgw2fVLpkitljMFM3YlkhNQovBQL+klsIGVn1jp73bkeGep6vgNyjmWv0lg9uqg S/V/fr2K3sE7kf6EKgSRZCt9ZNDnG73kWHCft7kp1eUF2NPKOeObq+WDOWsp72fF +U7Y8IP393SOpdXnbpJ+HmYy4Uk8Z+rSZnFADWMr71kdXgSFRWimDPRrhN+xibS4 WWtETBeGKHpsxlfIjR5DAk2JgF7hXjiQaIKEnETaM8yobaei+rFP6ZJf8Tu3Rg/N mWpVClwCfXAulmjm0fJq8zLMo9VAPwnwNEiU0vhUjFrmnVA3/kdHn9sfWE5kkNbD UBzpD1a4QFFS2A== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:56 2025 by rpki-client