This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json) Hash identifier: zCVLihnRHlyvVindGaZx8jIM3NzFzRllHRxVW/GROEc= Subject key identifier: F5:45:38:F5:8D:7D:C3:CE:2D:1C:8C:97:FB:E5:FE:7D:3F:92:E0:D8 Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc Certificate serial: 019B4B15581713527590D0280E2457D8456A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 12:00:48 +0000 Manifest this update: Tue 23 Dec 2025 12:00:48 +0000 Manifest next update: Wed 24 Dec 2025 12:00:48 +0000 Files and hashes: 1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=) 2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=) 3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: wi5ZAZ9eUZsj4zcxzK/rgfq8eryzejf/H1hbrh/XZTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:58:17:13:52:75:90:d0:28:0e:24:57:d8:45:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc Validity Not Before: Dec 23 12:00:48 2025 GMT Not After : Dec 24 12:00:48 2025 GMT Subject: CN=f54538f58d7dc3ce2d1c8c97fbe5fe7d3f92e0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:36:56:13:d2:15:4d:85:20:35:98:51:f5:b4: 92:f1:a0:27:0f:c9:6e:54:b1:07:2c:d0:4c:4d:55: 94:59:bd:e6:5e:f0:34:9a:ff:bf:5d:39:45:59:a0: 94:a0:fc:e4:75:ef:51:1c:32:57:40:ca:06:c6:58: 69:cf:14:a9:70:8d:4c:20:58:61:55:ea:d1:04:91: 00:77:db:89:01:8e:af:71:72:2d:02:75:80:b0:41: 95:f2:6b:8c:6f:56:c5:1b:69:2a:93:7f:56:ad:cc: 3c:cb:e1:04:6e:66:31:45:c5:1a:be:14:bb:c3:52: b5:46:c2:98:bb:93:d9:df:cc:1f:0d:8d:76:d3:25: 24:e8:2a:39:b0:51:30:8b:45:cb:7c:ef:df:67:06: 4c:9a:91:41:42:d1:fa:93:4b:f9:90:11:48:9b:30: f3:77:2c:24:eb:85:31:0f:db:7b:27:d4:c0:aa:75: 02:0f:60:9f:ba:16:8c:05:a8:c2:db:87:27:94:65: a2:e3:8b:0d:af:e6:a3:67:66:f8:86:64:59:a5:8b: 40:93:b7:e7:f6:35:28:9d:3c:1e:c3:0c:7f:65:ea: 5b:85:2a:af:53:96:aa:59:96:44:47:de:14:dc:93: ff:d3:7d:05:bf:69:d2:d7:2f:47:73:2d:fe:05:f5: 96:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:45:38:F5:8D:7D:C3:CE:2D:1C:8C:97:FB:E5:FE:7D:3F:92:E0:D8 X509v3 Authority Key Identifier: keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:35:db:e9:c8:b5:e4:65:e8:da:78:fd:0e:9a:48:32:de:47: b9:92:e0:57:7f:54:ff:05:3b:9e:a6:ba:89:8b:68:cb:6e:64: 3e:e8:66:21:00:7f:3e:00:33:a5:27:30:a8:2c:a0:f2:4a:c2: e5:95:fc:dd:37:61:fd:c7:b1:48:dc:c4:01:8a:d0:f1:57:9e: 79:47:19:6d:1a:a7:4e:7d:97:d1:15:46:1d:a1:41:79:8a:1c: 03:4b:c2:3e:2f:e7:55:e5:ca:6e:64:13:a2:40:41:45:b9:f4: 7a:a3:12:9e:5f:a2:cf:68:83:11:58:23:ec:d0:e2:d8:1c:02: 04:fb:0c:f6:6c:bd:58:30:62:c6:e4:79:ca:b3:42:b9:36:42: 94:82:9f:1a:9e:f5:1e:02:2a:b7:66:75:91:53:18:f8:08:4b: 6a:4a:20:f0:17:a6:d4:2c:e5:ed:94:39:89:56:5a:d2:be:f8: 56:a1:4d:c6:19:30:96:e6:4d:d7:51:89:09:ee:1c:b5:f6:b9: 27:26:09:c5:c3:a1:1a:19:ce:7b:0f:c9:85:23:cc:40:92:26: 89:d3:7e:61:ee:12:94:72:98:00:b7:bf:de:62:7b:6d:2c:63: fd:6d:ff:32:97:42:5d:c9:4b:36:21:5c:2c:db:67:b2:b3:f7: 7b:ca:48:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFVgXE1J1kNAoDiRX2EVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OGZmOTIyOWVmZDhkMTJiNDI3M2YzNDZmOGM2NDU0ZWE1 ODdlY2MwHhcNMjUxMjIzMTIwMDQ4WhcNMjUxMjI0MTIwMDQ4WjAzMTEwLwYDVQQD EyhmNTQ1MzhmNThkN2RjM2NlMmQxYzhjOTdmYmU1ZmU3ZDNmOTJlMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zZWE9IVTYUgNZhR9bSS8aAnD8lu VLEHLNBMTVWUWb3mXvA0mv+/XTlFWaCUoPzkde9RHDJXQMoGxlhpzxSpcI1MIFhh VerRBJEAd9uJAY6vcXItAnWAsEGV8muMb1bFG2kqk39Wrcw8y+EEbmYxRcUavhS7 w1K1RsKYu5PZ38wfDY120yUk6Co5sFEwi0XLfO/fZwZMmpFBQtH6k0v5kBFImzDz dywk64UxD9t7J9TAqnUCD2CfuhaMBajC24cnlGWi44sNr+ajZ2b4hmRZpYtAk7fn 9jUonTwewwx/ZepbhSqvU5aqWZZER94U3JP/030Fv2nS1y9Hcy3+BfWWlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVFOPWNfcPOLRyMl/vl/n0/kuDYMB8GA1UdIwQY MBaAFKaP+SKe/Y0StCc/NG+MZFTqWH7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEt MjI3ZTIxZTY5MWU3LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEtMjI3ZTIxZTY5MWU3 LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjXb6ci1 5GXo2nj9DppIMt5HuZLgV39U/wU7nqa6iYtoy25kPuhmIQB/PgAzpScwqCyg8krC 5ZX83Tdh/cexSNzEAYrQ8VeeeUcZbRqnTn2X0RVGHaFBeYocA0vCPi/nVeXKbmQT okBBRbn0eqMSnl+iz2iDEVgj7NDi2BwCBPsM9my9WDBixuR5yrNCuTZClIKfGp71 HgIqt2Z1kVMY+AhLakog8Bem1Czl7ZQ5iVZa0r74VqFNxhkwluZN11GJCe4ctfa5 JyYJxcOhGhnOew/JhSPMQJImidN+Ye4SlHKYALe/3mJ7bSxj/W3/MpdCXclLNiFc LNtnsrP3e8pIOg== -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:03 2025 by rpki-client