This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json) Hash identifier: QgxSm65ReMn8jUD+L5UQrwE6q7NGO3+Ew+azGFKcsXI= Subject key identifier: 0C:D5:A2:36:45:D9:0E:B4:E4:1E:8A:18:FE:97:DF:63:42:9D:D0:27 Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71 Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671 Certificate serial: 019B405A92DC73918106188EB949B0C2CE43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft Manifest number: 0C33 Signing time: Sun 21 Dec 2025 10:00:36 +0000 Manifest this update: Sun 21 Dec 2025 10:00:36 +0000 Manifest next update: Mon 22 Dec 2025 10:00:36 +0000 Files and hashes: 1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=) 2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: j0DMFKbZf5bo1IIhs9GLhf8OnmstN46eZpcJP6NKl7U=) 3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:92:dc:73:91:81:06:18:8e:b9:49:b0:c2:ce:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671 Validity Not Before: Dec 21 10:00:36 2025 GMT Not After : Dec 22 10:00:36 2025 GMT Subject: CN=0cd5a23645d90eb4e41e8a18fe97df63429dd027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f9:1c:6f:4d:a6:25:c3:a4:26:b9:b0:5c:d8: 3b:ad:a2:74:f5:ce:fd:a3:14:38:7c:0b:3a:a5:37: 13:bc:35:ae:ef:98:6e:0d:77:45:46:9e:3a:e3:86: 86:4c:50:cd:a6:f2:7c:5d:d6:b5:66:0f:86:1b:08: 29:84:37:4a:65:42:78:fa:0c:62:a1:39:b7:47:6a: 9c:ec:0f:85:b3:2b:a6:d0:3f:52:ff:8e:12:00:9a: 71:09:8b:c8:fb:df:15:c1:a6:66:6e:51:d0:f6:00: 7c:14:a0:e4:68:a4:a9:be:c1:8b:ac:4c:f4:de:5b: 46:c9:0c:bd:d6:cc:fe:bc:f7:5a:be:5b:59:b9:d7: a0:de:8a:5a:ff:a0:4c:4b:c0:12:f4:03:5c:e0:a0: 25:b8:9a:9b:2e:8b:45:48:56:a6:cc:c0:d0:43:d5: d0:06:2b:8f:2f:49:7f:f7:2d:c7:51:d7:5f:86:6b: 13:3f:8f:f7:5b:f1:db:94:6c:b5:3b:59:e1:ba:9f: ea:b7:41:4f:0e:32:d2:53:93:a3:09:88:de:75:ba: 05:04:0f:8e:39:55:ca:65:3f:c9:c5:3e:61:56:f4: 86:d2:ba:d9:3b:c9:9b:13:b3:7c:71:e6:fa:a7:72: ab:be:7c:81:79:15:bc:08:93:f7:8c:d5:3b:48:93: 7b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D5:A2:36:45:D9:0E:B4:E4:1E:8A:18:FE:97:DF:63:42:9D:D0:27 X509v3 Authority Key Identifier: keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1b:5f:e8:24:2f:29:bc:ef:0e:7d:58:37:de:5a:91:0b:ed: d0:a4:3a:26:9e:ed:d4:45:ab:c7:d1:2e:d7:09:a3:03:11:2b: ef:be:ae:29:03:a2:26:a1:66:78:58:e2:fb:6b:49:51:89:26: 5a:3b:97:83:02:40:bc:15:94:aa:af:fc:79:f6:3e:ac:0b:fa: 2f:8d:37:89:9d:93:95:a2:bb:2c:6b:3d:e9:8e:59:33:e5:bc: a7:c4:30:8e:11:a7:85:f8:90:4b:a0:79:e0:e9:cb:30:b3:c4: b9:62:37:a1:6e:55:f1:12:3b:a9:ea:6f:bc:3e:44:b8:58:53: b0:75:c3:06:73:73:b1:a9:79:b5:c9:0d:9a:d1:e2:70:d9:5b: 37:08:71:2b:3b:23:cf:34:84:6b:00:f3:76:2f:6b:7b:6c:92: b7:67:99:ae:6d:55:18:0c:ac:83:34:60:7a:a8:4d:f0:48:da: ec:92:96:c2:6f:a1:ba:8d:52:ca:d7:55:18:2d:57:30:05:63: d3:7d:f0:6f:74:ab:b3:a4:fd:5c:2b:45:3f:c2:4e:e6:be:ef: e6:7f:07:a7:a9:73:85:00:e1:0e:5d:bb:e5:b7:5d:2d:2e:37: 35:1e:35:4c:0a:6d:09:e7:51:a3:24:a7:3d:15:03:9f:c6:d9: a7:75:b5:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWpLcc5GBBhiOuUmwws5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3 YzE2NzEwHhcNMjUxMjIxMTAwMDM2WhcNMjUxMjIyMTAwMDM2WjAzMTEwLwYDVQQD EygwY2Q1YTIzNjQ1ZDkwZWI0ZTQxZThhMThmZTk3ZGY2MzQyOWRkMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/kcb02mJcOkJrmwXNg7raJ09c79 oxQ4fAs6pTcTvDWu75huDXdFRp4644aGTFDNpvJ8Xda1Zg+GGwgphDdKZUJ4+gxi oTm3R2qc7A+Fsyum0D9S/44SAJpxCYvI+98VwaZmblHQ9gB8FKDkaKSpvsGLrEz0 3ltGyQy91sz+vPdavltZudeg3opa/6BMS8AS9ANc4KAluJqbLotFSFamzMDQQ9XQ BiuPL0l/9y3HUddfhmsTP4/3W/HblGy1O1nhup/qt0FPDjLSU5OjCYjedboFBA+O OVXKZT/JxT5hVvSG0rrZO8mbE7N8ceb6p3KrvnyBeRW8CJP3jNU7SJN78wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzVojZF2Q605B6KGP6X32NCndAnMB8GA1UdIwQY MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt YjY0Y2FiNGJiZGZmLzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxtf6CQv KbzvDn1YN95akQvt0KQ6Jp7t1EWrx9Eu1wmjAxEr776uKQOiJqFmeFji+2tJUYkm WjuXgwJAvBWUqq/8efY+rAv6L403iZ2TlaK7LGs96Y5ZM+W8p8QwjhGnhfiQS6B5 4OnLMLPEuWI3oW5V8RI7qepvvD5EuFhTsHXDBnNzsal5tckNmtHicNlbNwhxKzsj zzSEawDzdi9re2ySt2eZrm1VGAysgzRgeqhN8Eja7JKWwm+huo1SytdVGC1XMAVj 033wb3Srs6T9XCtFP8JO5r7v5n8Hp6lzhQDhDl275bddLS43NR41TAptCedRoySn PRUDn8bZp3W1JA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:14 2025 by rpki-client