This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json) Hash identifier: A00DOCwEP40v9STVtNiLawpcI9LGX/r60xXiPcJk+0E= Subject key identifier: A6:B7:45:71:93:49:EB:04:D0:2F:B9:FC:D6:35:14:CD:D7:C3:37:9D Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f Certificate serial: 019B3DC76575D8B9ACD0F401F1222ACD8B7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft Manifest number: 0D8E Signing time: Sat 20 Dec 2025 22:00:36 +0000 Manifest this update: Sat 20 Dec 2025 22:00:36 +0000 Manifest next update: Sun 21 Dec 2025 22:00:36 +0000 Files and hashes: 1: Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa (hash: K8PordojpOIplsR6Jg7NEy3mCM9e/c8OLgPeQ2xQz6M=) 2: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: gg52102jY4uQmLok+KDNLjP26E/+esDhrTyXyq5hbJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:65:75:d8:b9:ac:d0:f4:01:f1:22:2a:cd:8b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f Validity Not Before: Dec 20 22:00:36 2025 GMT Not After : Dec 21 22:00:36 2025 GMT Subject: CN=a6b745719349eb04d02fb9fcd63514cdd7c3379d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:e1:4e:d8:85:59:e9:d2:25:d9:c7:0a:32: 96:1f:7b:d6:2a:f7:6e:4c:29:10:a5:14:f5:01:11: a8:63:11:28:ce:9f:30:fe:e1:df:64:88:c2:62:86: 2f:ee:53:8b:77:a2:02:04:a9:21:57:6a:c4:db:72: 6c:dc:50:90:b7:d4:dc:ed:a8:a9:f4:56:b8:e7:54: 49:98:42:e6:ff:b7:b5:5c:34:43:31:56:af:20:cf: 17:82:95:c5:c9:36:52:c2:c0:76:7d:db:b1:ed:4d: 71:91:42:2d:4f:1c:69:6b:19:2a:62:b2:f2:38:d9: 64:52:56:12:55:1d:2e:34:7d:c0:f4:09:f8:e3:6a: 65:0d:03:c2:d7:fa:4e:f3:f3:11:6b:dc:90:93:30: a5:e1:92:0d:21:55:f9:d9:00:9e:43:10:b9:ad:40: 53:8e:a5:9a:d0:ad:30:8a:61:bc:16:06:0b:a6:62: 53:6d:3f:cb:39:de:c0:9e:7a:ac:ee:12:ca:a8:e1: 41:2e:1d:f8:ef:00:2a:35:6d:67:ea:42:b3:9a:c4: b4:22:a8:dd:9c:d1:6f:fa:77:31:8f:fa:e8:3f:5b: ed:84:f7:53:f5:23:39:a6:2a:e7:26:e5:ea:9d:36: 6b:9b:0c:7f:0a:e3:08:02:dd:e0:93:26:92:3f:1b: c4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B7:45:71:93:49:EB:04:D0:2F:B9:FC:D6:35:14:CD:D7:C3:37:9D X509v3 Authority Key Identifier: keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d6:ee:f2:c1:34:cf:0e:24:cf:9a:1c:65:b9:03:a5:99:2f: 4e:ed:62:99:45:4a:81:89:fa:27:21:34:df:21:a6:50:9f:f6: 9f:a9:71:76:ed:ee:69:39:df:2a:ac:f0:07:ac:89:69:e8:61: 18:52:79:85:b5:c7:0c:27:b2:a2:e1:54:9c:bb:f8:2a:27:09: ff:eb:87:db:98:7c:e3:2c:cf:17:26:82:57:a9:44:ec:07:e5: 79:71:8d:bb:3a:d6:c4:d4:c9:73:c2:3f:80:93:f7:6c:4a:14: dc:92:ef:ae:21:de:ae:fb:96:af:f5:53:ab:04:e5:b6:a3:33: ad:ce:c9:dc:7f:8b:46:98:db:37:81:a2:38:17:24:8c:62:b3: 6b:bb:59:ff:7f:8f:a7:b8:84:04:84:ce:42:e7:3d:20:97:c1: 9e:10:b9:20:17:65:ef:bd:9d:24:5d:42:b6:a8:4d:ea:c4:26: 72:02:0f:f2:3e:7c:85:44:f2:b3:eb:0e:8a:06:7b:96:62:c5: 60:e2:b2:d1:9a:4e:4c:ec:7d:84:e4:1a:52:2d:e6:d2:74:1b: 27:cd:eb:70:da:4b:7b:4b:10:22:94:19:0a:56:03:03:2c:59: 29:e7:b8:61:68:e9:8c:31:6e:5b:86:22:60:db:70:79:6e:de: 51:38:cf:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x2V12Lms0PQB8SIqzYt7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOGM2Y2M0NDhmOTYzNWM1NmZmMjJiMTFjZDgwYzFhYTlj NTJkNGYwHhcNMjUxMjIwMjIwMDM2WhcNMjUxMjIxMjIwMDM2WjAzMTEwLwYDVQQD EyhhNmI3NDU3MTkzNDllYjA0ZDAyZmI5ZmNkNjM1MTRjZGQ3YzMzNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkbhTtiFWenSJdnHCjKWH3vWKvdu TCkQpRT1ARGoYxEozp8w/uHfZIjCYoYv7lOLd6ICBKkhV2rE23Js3FCQt9Tc7aip 9Fa451RJmELm/7e1XDRDMVavIM8XgpXFyTZSwsB2fdux7U1xkUItTxxpaxkqYrLy ONlkUlYSVR0uNH3A9An442plDQPC1/pO8/MRa9yQkzCl4ZINIVX52QCeQxC5rUBT jqWa0K0wimG8FgYLpmJTbT/LOd7Annqs7hLKqOFBLh347wAqNW1n6kKzmsS0Iqjd nNFv+ncxj/roP1vthPdT9SM5pirnJuXqnTZrmwx/CuMIAt3gkyaSPxvE7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKa3RXGTSesE0C+5/NY1FM3XwzedMB8GA1UdIwQY MBaAFD6MbMRI+WNcVv8isRzYDBqpxS1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTct ZDI4MTA1ZTNmMzgwLzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTctZDI4MTA1ZTNmMzgw LzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9bu8sE0 zw4kz5ocZbkDpZkvTu1imUVKgYn6JyE03yGmUJ/2n6lxdu3uaTnfKqzwB6yJaehh GFJ5hbXHDCeyouFUnLv4KicJ/+uH25h84yzPFyaCV6lE7AfleXGNuzrWxNTJc8I/ gJP3bEoU3JLvriHervuWr/VTqwTltqMzrc7J3H+LRpjbN4GiOBckjGKza7tZ/3+P p7iEBITOQuc9IJfBnhC5IBdl772dJF1CtqhN6sQmcgIP8j58hUTys+sOigZ7lmLF YOKy0ZpOTOx9hOQaUi3m0nQbJ83rcNpLe0sQIpQZClYDAyxZKee4YWjpjDFuW4Yi YNtweW7eUTjPeQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:23:19 2025 by rpki-client