This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft File: PowYl2JPV7404PdguX8RCtW12jo.mft (raw, json) Hash identifier: 8+gRLTRJPp7fc9crEh7P9W8GOode6HYcNjFX45bYW9A= Subject key identifier: 4D:9B:EA:DB:05:F5:D5:0C:AE:A7:F5:44:70:70:FB:16:72:E0:69:69 Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a Certificate serial: 019B4438FA5B4F45BCCD400665A276C73F42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 04:02:23 +0000 Manifest this update: Mon 22 Dec 2025 04:02:23 +0000 Manifest next update: Tue 23 Dec 2025 04:02:23 +0000 Files and hashes: 1: OVYlCjQ_Ro8WMpn3BJqI8X0cXxo.roa (hash: H6KoMJLLwg7EnqHTPVQLrBI8uOBDhlfqI6yQtfWr3zo=) 2: PowYl2JPV7404PdguX8RCtW12jo.crl (hash: I/JjIxp/6hHG1hbBOuL3Yyg4qFoBrc2G7r7AtjaQaWg=) 3: lFNEbA4WXa1kqpPRAFp7E-A0l2E.roa (hash: RLdKaSl14tW7ZrRmULGs2dhO8FMuiohKtUpmaqgzRYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:fa:5b:4f:45:bc:cd:40:06:65:a2:76:c7:3f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a Validity Not Before: Dec 22 04:02:23 2025 GMT Not After : Dec 23 04:02:23 2025 GMT Subject: CN=4d9beadb05f5d50caea7f5447070fb1672e06969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b5:78:b2:92:f9:6f:72:a8:1a:4f:74:7d:f6: a0:29:3a:c6:a7:12:29:7f:2f:69:9a:65:23:c5:9a: 46:bc:50:32:cd:7e:f7:f9:53:9e:af:60:d9:a4:3a: 99:fd:f9:14:21:4b:72:6e:0c:42:e2:14:0a:66:ab: 22:5c:9c:8a:c5:ef:fa:c1:73:4e:ba:49:8c:56:7d: 54:92:13:33:0e:59:99:94:50:10:a5:f1:cb:8b:a7: 6e:b9:74:ea:8b:54:b6:8f:81:f7:70:e1:aa:42:af: af:ca:59:a7:df:c2:b4:5b:16:3b:f7:44:44:38:14: e1:e8:36:ca:5f:23:55:c1:0c:b3:e0:7c:ca:38:97: 45:aa:e4:91:52:c7:cc:6a:53:1f:6e:75:a1:cc:f4: 9f:20:fb:8b:4c:97:44:8a:d0:e4:2d:73:1f:ce:86: 9f:d1:3b:d7:83:83:f7:66:e3:87:ea:b3:4e:53:3a: 82:7b:5b:19:55:fd:c4:2b:12:54:07:6e:ed:fa:17: 57:f3:88:aa:c4:31:a4:b1:5c:36:81:e7:e5:26:f9: 7a:14:4e:72:33:11:14:36:9b:eb:b6:10:e8:90:df: 81:1c:e1:00:67:26:75:77:28:de:e4:69:ad:7a:81: 57:05:e0:0e:6d:d5:9a:92:30:7d:d2:ec:6e:90:bc: a7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9B:EA:DB:05:F5:D5:0C:AE:A7:F5:44:70:70:FB:16:72:E0:69:69 X509v3 Authority Key Identifier: keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:55:8a:17:14:fe:0b:3f:e0:3f:84:70:13:19:ed:75:02:cf: 0a:c3:96:4e:1d:13:18:0f:77:aa:8d:22:e7:7c:0b:0f:6e:8b: 0d:eb:b8:97:49:0e:99:ff:0e:bc:32:bc:bb:46:58:2e:f1:d2: 6f:cd:9e:a7:09:a2:3d:62:55:d7:b5:db:8d:83:b9:d1:8e:99: 52:6c:df:54:0d:96:00:5d:5a:89:de:85:e5:25:a9:01:62:08: 0d:d1:a9:e4:d8:68:fc:14:5c:ce:d3:6c:f3:43:b1:76:6e:18: b3:39:bb:b1:52:57:ec:28:63:83:46:fd:48:dd:5e:4a:55:cd: c1:7c:b8:3b:4b:f5:ce:bc:ce:5d:2f:b8:34:45:05:8d:2f:32: 39:61:21:80:2a:f1:63:b2:7c:41:8d:48:5f:71:2c:e9:79:e0: 64:b2:11:fe:1d:a3:45:bf:13:b3:2a:db:eb:ea:a3:69:6b:d2: d6:5b:45:3b:ee:ea:ad:8a:8e:59:73:9b:53:df:f3:cb:b0:7e: d9:76:a2:0a:a1:be:20:97:3f:3d:b1:61:77:f5:62:e2:05:41: 10:86:ac:48:6b:1c:f0:1c:90:18:79:2e:42:fc:92:43:aa:58: f5:5d:a6:b2:72:1c:30:c1:b5:3a:2a:d1:ce:a5:9b:0c:ec:8b: 6e:4e:5f:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOPpbT0W8zUAGZaJ2xz9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOGMxODk3NjI0ZjU3YmUzNGUwZjc2MGI5N2YxMTBhZDVi NWRhM2EwHhcNMjUxMjIyMDQwMjIzWhcNMjUxMjIzMDQwMjIzWjAzMTEwLwYDVQQD Eyg0ZDliZWFkYjA1ZjVkNTBjYWVhN2Y1NDQ3MDcwZmIxNjcyZTA2OTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbV4spL5b3KoGk90ffagKTrGpxIp fy9pmmUjxZpGvFAyzX73+VOer2DZpDqZ/fkUIUtybgxC4hQKZqsiXJyKxe/6wXNO ukmMVn1UkhMzDlmZlFAQpfHLi6duuXTqi1S2j4H3cOGqQq+vylmn38K0WxY790RE OBTh6DbKXyNVwQyz4HzKOJdFquSRUsfMalMfbnWhzPSfIPuLTJdEitDkLXMfzoaf 0TvXg4P3ZuOH6rNOUzqCe1sZVf3EKxJUB27t+hdX84iqxDGksVw2geflJvl6FE5y MxEUNpvrthDokN+BHOEAZyZ1dyje5GmteoFXBeAObdWakjB90uxukLynjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2b6tsF9dUMrqf1RHBw+xZy4GlpMB8GA1UdIwQY MBaAFD6MGJdiT1e+NOD3YLl/EQrVtdo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81N2VhOGQtYzY4MC00MGE3LThhMjkt ZjA3NmEwOGU2MDAzLzEvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy81N2VhOGQtYzY4MC00MGE3LThhMjktZjA3NmEwOGU2MDAz LzEvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1lWKFxT+ Cz/gP4RwExntdQLPCsOWTh0TGA93qo0i53wLD26LDeu4l0kOmf8OvDK8u0ZYLvHS b82epwmiPWJV17XbjYO50Y6ZUmzfVA2WAF1aid6F5SWpAWIIDdGp5Nho/BRcztNs 80Oxdm4Yszm7sVJX7Chjg0b9SN1eSlXNwXy4O0v1zrzOXS+4NEUFjS8yOWEhgCrx Y7J8QY1IX3Es6XngZLIR/h2jRb8Tsyrb6+qjaWvS1ltFO+7qrYqOWXObU9/zy7B+ 2XaiCqG+IJc/PbFhd/Vi4gVBEIasSGsc8ByQGHkuQvySQ6pY9V2msnIcMMG1OirR zqWbDOyLbk5fnA== -----END CERTIFICATE-----Generated at Mon Dec 22 05:46:17 2025 by rpki-client