This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft File: PowYl2JPV7404PdguX8RCtW12jo.mft (raw, json) Hash identifier: WXjOSxojxEjEX7P6FNQbUz3oKtG1NlZSzXYDJ/C6v0c= Subject key identifier: EC:35:A8:10:BC:C7:AF:38:D6:C7:4C:CD:F8:E2:EA:6D:4A:90:68:F6 Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a Certificate serial: 019B424ABD942E6BC9CEEED90C8E9E7CA399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 19:02:32 +0000 Manifest this update: Sun 21 Dec 2025 19:02:32 +0000 Manifest next update: Mon 22 Dec 2025 19:02:32 +0000 Files and hashes: 1: OVYlCjQ_Ro8WMpn3BJqI8X0cXxo.roa (hash: H6KoMJLLwg7EnqHTPVQLrBI8uOBDhlfqI6yQtfWr3zo=) 2: PowYl2JPV7404PdguX8RCtW12jo.crl (hash: LaUtbwdaF90EQQ2X9+ID9+gpNAnUEpq0k6lGmlxdWJo=) 3: lFNEbA4WXa1kqpPRAFp7E-A0l2E.roa (hash: RLdKaSl14tW7ZrRmULGs2dhO8FMuiohKtUpmaqgzRYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:bd:94:2e:6b:c9:ce:ee:d9:0c:8e:9e:7c:a3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a Validity Not Before: Dec 21 19:02:32 2025 GMT Not After : Dec 22 19:02:32 2025 GMT Subject: CN=ec35a810bcc7af38d6c74ccdf8e2ea6d4a9068f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bf:45:80:8f:79:9b:c0:4f:54:09:6b:d0:5e: 6a:3a:66:05:c8:ac:85:8b:86:07:ba:37:ad:f6:0b: 01:6e:20:ee:38:7d:58:e8:8e:e0:5a:7a:b7:4d:dc: 04:1e:d7:17:b4:22:a4:70:99:9d:8f:f6:ba:95:f6: 3a:cd:8c:6c:98:ec:1e:9c:4e:0d:dd:e8:bc:8c:7b: c9:9b:c5:71:ca:f8:51:41:7f:da:36:ba:a1:2a:87: 7e:38:fe:3c:02:9c:fc:75:16:15:48:85:c2:41:5e: b3:84:d4:67:50:c6:9d:53:37:74:70:b2:01:8b:2e: ff:77:4d:23:51:ac:78:3a:23:66:9a:a6:5f:4c:3c: b0:2d:ec:4a:c4:2d:ff:b9:e9:61:45:1a:56:a0:d1: 29:7d:d2:b8:88:69:94:6f:b0:c3:ce:3c:33:28:00: f7:0b:e9:e7:ac:b8:fa:3d:03:26:da:9e:89:3c:34: 13:1b:48:a2:d2:a4:6c:f3:fe:33:1e:b5:2b:42:66: cd:82:ae:cd:5e:b2:0c:ea:be:81:52:24:6f:96:da: c3:b9:a6:73:b0:43:62:f9:e9:b1:ac:04:81:46:60: bd:ed:64:1c:83:84:da:87:23:eb:73:14:95:7b:d8: e3:d1:2c:c1:dc:d1:12:50:05:c5:03:9a:a9:78:a8: 62:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:35:A8:10:BC:C7:AF:38:D6:C7:4C:CD:F8:E2:EA:6D:4A:90:68:F6 X509v3 Authority Key Identifier: keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:16:22:51:a2:b0:41:a9:a8:fd:70:bf:55:a5:12:9b:fe:4a: 51:10:a8:e4:ec:1e:96:0c:e1:0d:18:17:1c:e2:18:0c:60:fc: 57:96:ab:4b:03:b5:9c:ce:66:74:97:7a:09:14:db:16:76:cd: 33:de:22:7e:89:b9:5e:16:a9:d1:19:a9:86:b0:7d:e2:66:fe: 14:4a:74:78:b5:7f:ba:b6:32:82:3a:26:29:cf:97:5a:c3:7d: 49:67:b1:bb:af:9c:c4:8c:3a:75:b8:18:50:92:60:c2:e5:ec: 78:34:47:1f:3e:38:7c:a0:c5:ea:6f:e2:10:be:0d:43:5f:f9: 77:19:02:8f:10:37:59:30:e3:a4:bf:a3:b3:47:8d:31:ed:07: 4e:6c:7f:81:3c:3a:96:dc:86:17:8e:f2:86:58:2f:29:4f:4d: 3a:de:22:72:e1:1f:73:72:27:75:2f:88:4a:34:06:38:67:2b: 51:40:7c:04:14:da:35:07:8f:42:b5:f9:7b:d9:5c:27:63:0a: 14:97:c8:a7:33:40:dd:ca:f9:8f:f5:3c:94:5d:aa:12:44:9d: 19:93:49:c9:d7:e4:82:cd:a5:1f:76:15:7b:1f:40:8f:b5:ef: 33:54:06:d2:f5:70:2c:d9:f1:34:f3:10:af:e7:76:e1:0f:5d: db:ff:a0:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSr2ULmvJzu7ZDI6efKOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOGMxODk3NjI0ZjU3YmUzNGUwZjc2MGI5N2YxMTBhZDVi NWRhM2EwHhcNMjUxMjIxMTkwMjMyWhcNMjUxMjIyMTkwMjMyWjAzMTEwLwYDVQQD EyhlYzM1YTgxMGJjYzdhZjM4ZDZjNzRjY2RmOGUyZWE2ZDRhOTA2OGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b9FgI95m8BPVAlr0F5qOmYFyKyF i4YHujet9gsBbiDuOH1Y6I7gWnq3TdwEHtcXtCKkcJmdj/a6lfY6zYxsmOwenE4N 3ei8jHvJm8VxyvhRQX/aNrqhKod+OP48Apz8dRYVSIXCQV6zhNRnUMadUzd0cLIB iy7/d00jUax4OiNmmqZfTDywLexKxC3/uelhRRpWoNEpfdK4iGmUb7DDzjwzKAD3 C+nnrLj6PQMm2p6JPDQTG0ii0qRs8/4zHrUrQmbNgq7NXrIM6r6BUiRvltrDuaZz sENi+emxrASBRmC97WQcg4TahyPrcxSVe9jj0SzB3NESUAXFA5qpeKhiKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOw1qBC8x6841sdMzfji6m1KkGj2MB8GA1UdIwQY MBaAFD6MGJdiT1e+NOD3YLl/EQrVtdo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81N2VhOGQtYzY4MC00MGE3LThhMjkt ZjA3NmEwOGU2MDAzLzEvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy81N2VhOGQtYzY4MC00MGE3LThhMjktZjA3NmEwOGU2MDAz LzEvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRYiUaKw Qamo/XC/VaUSm/5KURCo5OwelgzhDRgXHOIYDGD8V5arSwO1nM5mdJd6CRTbFnbN M94ifom5Xhap0RmphrB94mb+FEp0eLV/urYygjomKc+XWsN9SWexu6+cxIw6dbgY UJJgwuXseDRHHz44fKDF6m/iEL4NQ1/5dxkCjxA3WTDjpL+js0eNMe0HTmx/gTw6 ltyGF47yhlgvKU9NOt4icuEfc3IndS+ISjQGOGcrUUB8BBTaNQePQrX5e9lcJ2MK FJfIpzNA3cr5j/U8lF2qEkSdGZNJydfkgs2lH3YVex9Aj7XvM1QG0vVwLNnxNPMQ r+d24Q9d2/+gcw== -----END CERTIFICATE-----Generated at Mon Dec 22 03:44:09 2025 by rpki-client