This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json) Hash identifier: 5Phy8+o4d14Ror/Qyt4gR4rhkp+uX/Sq1f7tCn/fujQ= Subject key identifier: 09:0A:FB:35:30:E5:46:63:9A:69:07:88:07:8F:57:B9:66:AD:E0:49 Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71 Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671 Certificate serial: 019B44375D0BEDEBD4C0DD991B7ABE72E852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft Manifest number: 0C35 Signing time: Mon 22 Dec 2025 04:00:37 +0000 Manifest this update: Mon 22 Dec 2025 04:00:37 +0000 Manifest next update: Tue 23 Dec 2025 04:00:37 +0000 Files and hashes: 1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=) 2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: lUJkAN/msrALTVchkPZB5HNDwt2+Pqh0nOmtqhCfj7k=) 3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:5d:0b:ed:eb:d4:c0:dd:99:1b:7a:be:72:e8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671 Validity Not Before: Dec 22 04:00:37 2025 GMT Not After : Dec 23 04:00:37 2025 GMT Subject: CN=090afb3530e546639a690788078f57b966ade049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:52:10:a8:6a:60:0a:8c:a0:a8:fc:30:3d: 6b:5d:79:89:30:c0:a5:6f:17:12:43:0a:d9:51:2c: 97:e8:89:94:f7:61:1d:6b:25:7d:92:2e:c4:f5:ca: f4:33:6c:e2:f9:1c:d4:74:40:d3:6f:6a:1e:07:1a: 2b:f7:01:ee:97:5f:69:d6:c0:6a:31:13:07:8a:ab: 11:5b:b2:93:25:0c:ae:9f:78:de:1e:9c:51:43:64: a3:67:96:f0:10:b1:67:3f:fb:83:c0:88:be:99:45: a5:7c:fc:f5:68:77:89:97:16:61:5d:7d:01:e7:74: f6:ee:c8:c6:fc:63:b7:1a:4b:c9:29:4a:b9:52:0d: ee:79:94:ca:67:cb:6f:da:9d:8b:fe:6d:6f:3f:fa: b4:50:4d:9d:db:34:21:4c:89:0d:00:4e:b9:20:b2: 42:7e:15:39:5d:d5:68:97:b1:b5:93:c5:23:f8:64: 0e:5f:81:ad:07:26:04:f8:db:ab:e9:d3:b8:d0:41: 4a:8a:61:6e:71:ef:a7:fa:85:bb:e8:3a:3d:fa:5c: 65:10:49:8d:dd:10:ae:38:a7:b0:f3:50:4a:3a:38: cd:6e:5c:dd:79:de:fb:75:0f:2e:17:53:19:21:c7: 82:3d:7c:c7:1c:f5:2d:8f:fc:26:ae:b4:9d:16:7f: 10:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0A:FB:35:30:E5:46:63:9A:69:07:88:07:8F:57:B9:66:AD:E0:49 X509v3 Authority Key Identifier: keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:51:78:bc:3f:47:61:0c:60:85:56:15:be:0a:55:75:50:60: 91:5d:49:02:3d:38:8a:c9:a7:c5:17:9f:55:5f:d0:0e:4e:48: 6e:59:0c:2c:18:6d:13:17:50:5c:66:7e:98:21:20:d8:7c:27: cb:2d:5f:80:07:4d:8a:2d:5a:b8:ce:a4:45:ca:0f:57:3d:d2: cc:96:16:aa:ba:f0:e1:66:2c:46:3c:de:34:70:ca:bc:d2:3e: 46:57:61:4c:d9:06:fd:87:9a:e6:f3:48:7d:82:d6:58:61:30: df:52:05:c0:a6:a5:71:58:87:f8:ea:75:88:bb:9e:ce:70:83: 68:ab:22:4d:45:1a:8f:b8:73:de:f8:54:49:23:44:7a:ff:2d: ab:7f:e4:ae:6a:7d:71:6c:47:7b:25:09:3a:5b:72:6e:32:92: 4b:6f:ad:03:e5:1f:46:6b:f1:a4:20:73:2e:54:50:07:61:90: cf:ab:6a:54:89:ba:e7:87:70:e5:b6:21:05:a2:7c:ae:33:f1: d1:fc:f3:a1:58:60:f2:91:8b:61:9a:25:78:42:df:dd:1d:f9: d7:55:4b:81:a3:32:c7:2e:5d:43:7a:e0:9e:14:ac:8c:2f:b6: e6:a7:38:39:29:f6:38:d7:43:6e:74:f3:4e:99:fa:5c:f5:1e: ae:20:87:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN10L7evUwN2ZG3q+cuhSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3 YzE2NzEwHhcNMjUxMjIyMDQwMDM3WhcNMjUxMjIzMDQwMDM3WjAzMTEwLwYDVQQD EygwOTBhZmIzNTMwZTU0NjYzOWE2OTA3ODgwNzhmNTdiOTY2YWRlMDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruNSEKhqYAqMoKj8MD1rXXmJMMCl bxcSQwrZUSyX6ImU92EdayV9ki7E9cr0M2zi+RzUdEDTb2oeBxor9wHul19p1sBq MRMHiqsRW7KTJQyun3jeHpxRQ2SjZ5bwELFnP/uDwIi+mUWlfPz1aHeJlxZhXX0B 53T27sjG/GO3GkvJKUq5Ug3ueZTKZ8tv2p2L/m1vP/q0UE2d2zQhTIkNAE65ILJC fhU5XdVol7G1k8Uj+GQOX4GtByYE+Nur6dO40EFKimFuce+n+oW76Do9+lxlEEmN 3RCuOKew81BKOjjNblzded77dQ8uF1MZIceCPXzHHPUtj/wmrrSdFn8Q5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkK+zUw5UZjmmkHiAePV7lmreBJMB8GA1UdIwQY MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt YjY0Y2FiNGJiZGZmLzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFF4vD9H YQxghVYVvgpVdVBgkV1JAj04ismnxRefVV/QDk5IblkMLBhtExdQXGZ+mCEg2Hwn yy1fgAdNii1auM6kRcoPVz3SzJYWqrrw4WYsRjzeNHDKvNI+RldhTNkG/Yea5vNI fYLWWGEw31IFwKalcViH+Op1iLueznCDaKsiTUUaj7hz3vhUSSNEev8tq3/krmp9 cWxHeyUJOltybjKSS2+tA+UfRmvxpCBzLlRQB2GQz6tqVIm654dw5bYhBaJ8rjPx 0fzzoVhg8pGLYZoleELf3R3511VLgaMyxy5dQ3rgnhSsjC+25qc4OSn2ONdDbnTz Tpn6XPUeriCHJA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:24:58 2025 by rpki-client