This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft File: pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json) Hash identifier: 49PvxZRReSsFYx3TUhWU6Jr8tIVKdejMbKkQS99AcWg= Subject key identifier: 62:5F:D2:88:16:92:AF:00:DC:5A:44:75:2E:DA:97:00:58:4D:D4:6B Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9 Certificate issuer: /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9 Certificate serial: 019B2BC1E59D96F15F4A3464AA7B4FC30C57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft Manifest number: 04D0 Signing time: Wed 17 Dec 2025 10:01:26 +0000 Manifest this update: Wed 17 Dec 2025 10:01:26 +0000 Manifest next update: Thu 18 Dec 2025 10:01:26 +0000 Files and hashes: 1: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: gnGC8Ia/ogReUDAd+5wALhjM7sb0w9EXEZIRkyZqJGA=) 2: tBiDEoWCGA8hVhVgwo9Iim47EzY.roa (hash: zWjGkV/pdnISeY0gGiXKGa4SNljWX+62ouYMUIE3qx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:e5:9d:96:f1:5f:4a:34:64:aa:7b:4f:c3:0c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9 Validity Not Before: Dec 17 10:01:26 2025 GMT Not After : Dec 18 10:01:26 2025 GMT Subject: CN=625fd2881692af00dc5a44752eda9700584dd46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e3:c4:49:53:57:6b:d2:06:db:27:16:e0:6e: 24:72:7f:e0:ab:81:e8:e6:3e:1b:6e:86:03:10:d2: 61:7e:83:25:e4:7d:93:ca:8d:3e:82:ab:34:83:ec: 82:3a:1c:7c:22:71:e2:04:33:dd:a5:b5:ff:15:02: 16:05:52:c6:17:f1:be:d8:b6:75:57:3f:43:70:b9: 3b:bc:2f:4c:7b:20:6c:d0:5e:89:e9:6f:68:ff:34: 3d:40:2e:87:18:18:4f:ae:0d:dd:c4:8e:6f:01:df: 85:0f:cf:02:a5:e4:c1:3b:67:f8:9a:35:78:ab:0a: 9f:38:0a:85:46:31:7e:9a:b3:02:cd:96:45:8d:7b: 4b:ae:51:cc:ec:25:f2:8d:44:b2:41:ce:a0:45:c7: c2:a5:ab:85:87:c6:77:f3:ba:e8:62:d6:fe:aa:60: 73:ab:d6:07:93:a3:80:b9:db:42:b8:c5:43:bf:87: 5f:60:6c:61:2f:12:d4:22:dc:f7:1c:11:c4:3a:35: 7c:a2:26:98:1d:a4:65:26:45:32:09:6f:57:7b:4f: 49:cb:d6:67:6f:81:99:d7:aa:94:f3:1f:d5:f6:06: 35:21:8d:81:6b:79:eb:8e:fb:6e:0b:4e:ab:10:be: be:1b:43:16:2e:f0:6d:ce:37:4e:fd:44:93:50:9f: 0b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5F:D2:88:16:92:AF:00:DC:5A:44:75:2E:DA:97:00:58:4D:D4:6B X509v3 Authority Key Identifier: keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ab:41:ec:97:92:29:1f:60:ed:70:f2:1a:ac:4d:a2:45:f8: fc:9e:4a:3a:45:9e:b3:66:8f:e9:d9:0c:d1:f2:ca:8e:f1:aa: 23:dc:9d:d2:b1:33:6b:29:d2:24:cd:bb:dd:af:63:ee:90:ab: 1a:65:a6:97:ec:5e:14:ee:d2:de:28:14:98:a1:7a:a8:a9:84: 95:1c:55:6c:1d:5d:6d:6e:de:64:63:3c:c1:d8:71:7e:cc:ec: 7a:47:50:5c:4b:81:9f:31:5a:40:2f:52:b2:87:d8:0b:f9:5f: 1d:3d:ab:c6:c7:4f:26:bd:5d:08:7c:1f:ad:0d:8b:80:d2:3c: a3:da:f8:58:06:84:fa:51:14:b7:68:5f:56:18:09:53:e8:54: d4:61:d3:5d:e8:e4:98:b6:e8:e2:ce:23:d3:cb:19:90:fd:92: dd:b7:ee:ff:9e:8b:25:fa:4f:e1:86:ce:99:3c:33:ca:4f:7b: 5a:b4:65:78:68:3a:1b:5d:3a:c1:66:af:e3:27:a1:78:ce:e0: e7:c1:22:53:aa:37:13:f5:50:7a:94:fe:53:12:e4:0f:19:48: 17:c2:88:48:64:f4:5e:23:aa:84:34:3a:4f:cf:64:9a:88:17: 5b:79:de:a3:af:bb:2a:d9:dd:c3:e5:20:ad:fd:07:97:f7:4d: c2:e8:7a:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrweWdlvFfSjRkqntPwwxXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZWI4ZWI3YjRiNjJlZDEyNTRmMDA1NjRlMDNjNDA2N2Fi ZmJmYzkwHhcNMjUxMjE3MTAwMTI2WhcNMjUxMjE4MTAwMTI2WjAzMTEwLwYDVQQD Eyg2MjVmZDI4ODE2OTJhZjAwZGM1YTQ0NzUyZWRhOTcwMDU4NGRkNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmePESVNXa9IG2ycW4G4kcn/gq4Ho 5j4bboYDENJhfoMl5H2Tyo0+gqs0g+yCOhx8InHiBDPdpbX/FQIWBVLGF/G+2LZ1 Vz9DcLk7vC9MeyBs0F6J6W9o/zQ9QC6HGBhPrg3dxI5vAd+FD88CpeTBO2f4mjV4 qwqfOAqFRjF+mrMCzZZFjXtLrlHM7CXyjUSyQc6gRcfCpauFh8Z387roYtb+qmBz q9YHk6OAudtCuMVDv4dfYGxhLxLUItz3HBHEOjV8oiaYHaRlJkUyCW9Xe09Jy9Zn b4GZ16qU8x/V9gY1IY2Ba3nrjvtuC06rEL6+G0MWLvBtzjdO/USTUJ8LGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJf0ogWkq8A3FpEdS7alwBYTdRrMB8GA1UdIwQY MBaAFKTrjre0ti7RJU8AVk4DxAZ6v7/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE91T3Q3UzJMdEVsVHdCV1RnUEVCbnFfdjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xMmMzZTgtOWMwMS00NTViLWIxODEt ZjRkN2ZkZWJmMDRkLzEvcE91T3Q3UzJMdEVsVHdCV1RnUEVCbnFfdjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8xMmMzZTgtOWMwMS00NTViLWIxODEtZjRkN2ZkZWJmMDRk LzEvcE91T3Q3UzJMdEVsVHdCV1RnUEVCbnFfdjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6tB7JeS KR9g7XDyGqxNokX4/J5KOkWes2aP6dkM0fLKjvGqI9yd0rEzaynSJM273a9j7pCr GmWml+xeFO7S3igUmKF6qKmElRxVbB1dbW7eZGM8wdhxfszsekdQXEuBnzFaQC9S sofYC/lfHT2rxsdPJr1dCHwfrQ2LgNI8o9r4WAaE+lEUt2hfVhgJU+hU1GHTXejk mLbo4s4j08sZkP2S3bfu/56LJfpP4YbOmTwzyk97WrRleGg6G106wWav4yeheM7g 58EiU6o3E/VQepT+UxLkDxlIF8KISGT0XiOqhDQ6T89kmogXW3neo6+7Ktndw+Ug rf0Hl/dNwuh6LQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:47:59 2025 by rpki-client