This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft File: pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json) Hash identifier: a5zYC6QiMib5KOp75SR/B+xaEVFAXfuDlJsPLw06c/M= Subject key identifier: F6:53:81:2D:B4:37:FC:09:94:2C:30:1F:D3:1C:3B:7E:35:37:97:57 Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64 Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164 Certificate serial: 019B32684994BD4BF7DE48285CFCEEBAD5BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft Manifest number: 1799 Signing time: Thu 18 Dec 2025 17:00:53 +0000 Manifest this update: Thu 18 Dec 2025 17:00:53 +0000 Manifest next update: Fri 19 Dec 2025 17:00:53 +0000 Files and hashes: 1: Kiv_IviKdC8pR128g7W0wceOpJ0.roa (hash: 50AAjX5lYU+hq4n12QkFVtcpqB6XzbZl6EuH3DlX6GI=) 2: O_qQBhVPe-lhoDKH0xP6ZLUmsAc.roa (hash: vu+grp6AJx6fVYcuWsQuJ7+juO2NiGJWuGAUCa5tGZs=) 3: dDDN-pm8MlP2fOpMtU7-mmZpLLc.roa (hash: GvJAp02zQtdWF4HXdYEMtMpvRfe1B4IDC0v2UHRYRus=) 4: kEWIZIp3fGY-KVqozb7d7-QMIuc.roa (hash: L3fmE7U8zD+tZ/ANMEm2Wevq9RhCHsMPy3iz467v0Hg=) 5: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: L5vEDj632jZnu4MpnF4F8/zk3oWT3iLKAZLbhjaA27Y=) 6: uU8hg8XfSe6mwX3ueW5oYDrRF0Q.roa (hash: UINusGV6ey+o0z0wW+D1a6Sa38oHaCWzK5v34NCpA+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:49:94:bd:4b:f7:de:48:28:5c:fc:ee:ba:d5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164 Validity Not Before: Dec 18 17:00:53 2025 GMT Not After : Dec 19 17:00:53 2025 GMT Subject: CN=f653812db437fc09942c301fd31c3b7e35379757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7f:78:f8:91:61:85:45:bc:93:a8:4c:a7:39: 4e:3f:42:30:be:29:ac:6d:d0:2e:a6:e2:af:9d:98: 8d:ad:01:a4:d1:7f:44:a9:3f:af:24:d4:2d:f5:30: 69:e1:f5:f8:6e:7b:9a:77:f8:65:55:12:ef:98:92: 78:55:fe:db:ac:08:d7:f9:33:e5:00:7c:95:40:01: 65:8b:04:7d:d6:0a:1a:77:e9:72:e2:e8:c4:f6:45: 91:34:57:91:f9:27:86:ae:a3:6a:96:6b:e7:11:7a: 25:53:2c:45:84:df:c1:65:a3:88:22:de:a3:41:e6: a0:8c:00:0d:3f:86:29:cd:cc:98:f0:36:4b:b2:0d: 9d:55:4d:1f:0c:4d:92:32:d2:42:18:4f:e2:ba:63: 0c:19:97:88:b4:8c:c7:70:e6:48:fb:df:64:93:92: a7:37:cf:e1:68:d6:15:72:a9:cb:ce:67:4f:84:1a: 83:05:e4:96:d9:c2:d6:1e:32:d2:06:56:32:ce:4b: 32:f8:0e:1b:4f:43:c2:2c:66:ab:de:94:b3:86:90: 0b:21:0f:39:e5:05:37:c3:4b:8f:2a:21:7c:e8:15: 87:52:d6:2c:b7:c0:d3:d5:e5:1e:1b:58:9f:f0:62: 07:af:4c:04:e2:12:e0:5a:17:ac:37:a0:94:54:28: 88:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:53:81:2D:B4:37:FC:09:94:2C:30:1F:D3:1C:3B:7E:35:37:97:57 X509v3 Authority Key Identifier: keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:02:bc:c9:35:82:34:cc:0d:fc:f8:42:f1:57:2c:8d:4d:9c: e0:57:91:65:0c:aa:03:3e:1a:f7:3f:de:9c:e0:0d:51:25:67: 69:a8:0a:95:52:ea:02:f3:e0:4b:f2:2d:75:82:72:16:a6:b9: 0e:dd:34:76:4e:91:22:6f:0c:fb:9d:63:c7:fd:e6:68:1a:4d: 48:2b:33:3b:7f:52:b2:82:a7:43:17:bc:8c:74:b9:a9:c1:e2: aa:f5:8b:bd:b7:d0:0d:a8:23:bb:62:e2:2e:96:22:c5:2b:f8: 5b:db:cd:a1:af:42:b7:cf:b1:8b:dd:e5:60:33:34:9d:56:53: 5a:85:3f:c2:73:6b:1f:ef:91:d1:95:35:3f:ae:c7:cf:66:59: 34:79:4b:98:46:da:75:b6:81:b6:01:94:56:f3:59:25:47:46: 95:c5:ba:0a:c8:e5:73:c9:d0:a6:ce:39:d9:d5:a2:04:65:03: dd:a4:da:54:02:64:ea:ec:09:d6:97:cf:fb:7b:94:2d:bc:85: 44:af:f2:42:7a:f4:23:31:0f:ac:be:b2:41:35:d9:50:19:8f: 6d:e2:65:c7:7c:95:cb:03:55:e4:5c:d0:27:3f:6e:42:fb:ef: 99:ab:7c:0c:76:66:d9:6e:af:dd:b7:1b:96:17:dc:ff:38:58: e0:4a:cf:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaEmUvUv33kgoXPzuutW6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl NzUxNjQwHhcNMjUxMjE4MTcwMDUzWhcNMjUxMjE5MTcwMDUzWjAzMTEwLwYDVQQD EyhmNjUzODEyZGI0MzdmYzA5OTQyYzMwMWZkMzFjM2I3ZTM1Mzc5NzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2394+JFhhUW8k6hMpzlOP0Iwvims bdAupuKvnZiNrQGk0X9EqT+vJNQt9TBp4fX4bnuad/hlVRLvmJJ4Vf7brAjX+TPl AHyVQAFliwR91goad+ly4ujE9kWRNFeR+SeGrqNqlmvnEXolUyxFhN/BZaOIIt6j QeagjAANP4YpzcyY8DZLsg2dVU0fDE2SMtJCGE/iumMMGZeItIzHcOZI+99kk5Kn N8/haNYVcqnLzmdPhBqDBeSW2cLWHjLSBlYyzksy+A4bT0PCLGar3pSzhpALIQ85 5QU3w0uPKiF86BWHUtYst8DT1eUeG1if8GIHr0wE4hLgWhesN6CUVCiIDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZTgS20N/wJlCwwH9McO341N5dXMB8GA1UdIwQY MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt M2U1OWNlNDQ1YjFjLzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwK8yTWC NMwN/PhC8VcsjU2c4FeRZQyqAz4a9z/enOANUSVnaagKlVLqAvPgS/ItdYJyFqa5 Dt00dk6RIm8M+51jx/3maBpNSCszO39SsoKnQxe8jHS5qcHiqvWLvbfQDagju2Li LpYixSv4W9vNoa9Ct8+xi93lYDM0nVZTWoU/wnNrH++R0ZU1P67Hz2ZZNHlLmEba dbaBtgGUVvNZJUdGlcW6Csjlc8nQps452dWiBGUD3aTaVAJk6uwJ1pfP+3uULbyF RK/yQnr0IzEPrL6yQTXZUBmPbeJlx3yVywNV5FzQJz9uQvvvmat8DHZm2W6v3bcb lhfc/zhY4ErPRw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:54:45 2025 by rpki-client