This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft File: POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json) Hash identifier: oEygKD3h/1iA3K9af48vuN8IQcLXnNbfxhPBfONY9lw= Subject key identifier: DE:33:80:9C:F3:BB:C9:77:24:C6:CA:C1:0C:C7:51:39:F7:FC:04:F8 Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27 Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27 Certificate serial: 019B522A32A5EF30E4BD19401F86602A331F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 21:00:55 +0000 Manifest this update: Wed 24 Dec 2025 21:00:55 +0000 Manifest next update: Thu 25 Dec 2025 21:00:55 +0000 Files and hashes: 1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: +YYD1mrANGpVZqG67qoAb77FabeCDrCUzAbl1fBw7OM=) 2: glhaGjYvz9mGirczYGxMS81rRfI.roa (hash: cPBvD492Ea2g7PNrZgsOnSXH4CPshMieJYjaq9P+dD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:32:a5:ef:30:e4:bd:19:40:1f:86:60:2a:33:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27 Validity Not Before: Dec 24 21:00:55 2025 GMT Not After : Dec 25 21:00:55 2025 GMT Subject: CN=de33809cf3bbc97724c6cac10cc75139f7fc04f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:da:a9:65:b6:6b:02:27:c1:b0:54:94:5e:85: 12:a3:30:a7:b7:cd:33:1c:f1:b4:48:d3:75:8a:ca: 0c:3c:c2:22:b6:a3:d7:84:94:25:0a:32:77:bc:59: 86:a0:c8:55:03:e9:a5:0a:10:06:d2:41:fe:5b:ef: 77:fd:5b:39:73:a3:68:3c:66:6e:87:95:3f:9d:43: f1:8b:0a:5c:49:34:19:42:be:9e:48:7e:23:ce:ba: 77:44:6e:9b:96:3b:19:fd:c1:71:68:f1:f2:de:d6: c3:e6:d1:46:f8:56:03:d2:be:e9:bd:06:3d:10:bc: 74:c6:aa:c7:9b:05:32:7d:30:e5:e4:61:e3:22:0d: 01:65:1e:34:b8:35:fc:fa:03:92:d2:b8:34:db:ed: 1d:8a:90:68:6f:29:52:e4:ee:71:cf:b6:b5:47:48: 1b:64:09:ad:fa:95:e4:be:1c:56:78:c3:32:e5:37: 54:2f:76:a1:8e:4b:03:43:bc:4a:94:85:e0:30:9b: 78:20:1b:99:0f:b4:69:86:ce:26:d0:69:9d:1b:45: 19:ac:87:81:ff:eb:a4:34:d6:a9:49:88:98:0d:17: 2a:63:8f:b5:08:f7:9f:e2:5b:d5:fd:10:95:e1:08: 0b:a2:88:6c:e4:82:5f:32:49:02:da:06:32:83:67: 35:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:33:80:9C:F3:BB:C9:77:24:C6:CA:C1:0C:C7:51:39:F7:FC:04:F8 X509v3 Authority Key Identifier: keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:9f:33:10:cf:14:6e:ad:5d:15:3f:6b:6b:53:0b:d9:4b:8c: 51:13:8b:b0:2a:f3:2b:96:a6:33:a4:46:3a:f3:39:15:58:d0: a7:21:45:a7:2b:18:df:4f:0d:fa:35:96:68:22:f0:04:07:d4: a9:54:1a:47:5f:26:32:4a:2e:e1:94:c2:35:e8:5f:01:4c:f3: 16:eb:a4:b0:2e:b0:1e:6d:5d:0e:ea:d9:e7:e6:a4:83:0a:48: 5d:76:ce:41:96:cd:3e:58:b4:8b:e6:33:c3:ee:bf:a9:3a:58: a7:15:d1:3d:8f:a4:83:c4:c1:d1:c0:f1:f0:9e:89:74:1f:c6: 6f:bc:d9:15:e3:4f:c3:f6:be:a8:7b:f2:b1:65:69:3c:8d:c9: 5a:30:38:8a:e4:e1:d3:5d:79:67:ae:3b:18:41:b9:d0:e1:98: 6a:bb:0e:63:0b:32:99:a6:1d:10:ff:50:0d:8c:36:04:d3:88: bf:4b:d2:7f:21:55:1d:a0:0b:db:8e:63:11:d7:44:c6:90:65: 29:32:a5:68:59:56:14:53:ff:a8:27:bf:80:a5:16:1a:6a:6e: 3a:f9:d9:35:c3:1e:d0:10:e4:e1:dd:e9:21:9c:45:81:4b:cf: 5a:a7:fe:2d:ae:05:b1:fa:5c:65:71:f0:e4:a8:e1:69:d5:d7: 3b:9c:7d:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKjKl7zDkvRlAH4ZgKjMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZWIyMDUwOTg3MzJjYjkwODgyMzA0NWVmZDVkNzQwMjUw YzZiMjcwHhcNMjUxMjI0MjEwMDU1WhcNMjUxMjI1MjEwMDU1WjAzMTEwLwYDVQQD EyhkZTMzODA5Y2YzYmJjOTc3MjRjNmNhYzEwY2M3NTEzOWY3ZmMwNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptqpZbZrAifBsFSUXoUSozCnt80z HPG0SNN1isoMPMIitqPXhJQlCjJ3vFmGoMhVA+mlChAG0kH+W+93/Vs5c6NoPGZu h5U/nUPxiwpcSTQZQr6eSH4jzrp3RG6bljsZ/cFxaPHy3tbD5tFG+FYD0r7pvQY9 ELx0xqrHmwUyfTDl5GHjIg0BZR40uDX8+gOS0rg02+0dipBobylS5O5xz7a1R0gb ZAmt+pXkvhxWeMMy5TdUL3ahjksDQ7xKlIXgMJt4IBuZD7Rphs4m0GmdG0UZrIeB /+ukNNapSYiYDRcqY4+1CPef4lvV/RCV4QgLoohs5IJfMkkC2gYyg2c13QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4zgJzzu8l3JMbKwQzHUTn3/AT4MB8GA1UdIwQY MBaAFDzrIFCYcyy5CIIwRe/V10AlDGsnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85YTQyMzgtN2Q3NC00ZWRmLWE0YjEt MjVlZDc1MDQ2YjAxLzEvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC85YTQyMzgtN2Q3NC00ZWRmLWE0YjEtMjVlZDc1MDQ2YjAx LzEvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo58zEM8U bq1dFT9ra1ML2UuMUROLsCrzK5amM6RGOvM5FVjQpyFFpysY308N+jWWaCLwBAfU qVQaR18mMkou4ZTCNehfAUzzFuuksC6wHm1dDurZ5+akgwpIXXbOQZbNPli0i+Yz w+6/qTpYpxXRPY+kg8TB0cDx8J6JdB/Gb7zZFeNPw/a+qHvysWVpPI3JWjA4iuTh 0115Z647GEG50OGYarsOYwsymaYdEP9QDYw2BNOIv0vSfyFVHaAL245jEddExpBl KTKlaFlWFFP/qCe/gKUWGmpuOvnZNcMe0BDk4d3pIZxFgUvPWqf+La4FsfpcZXHw 5KjhadXXO5x9SA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:36:35 2025 by rpki-client