This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json) Hash identifier: DukDoNFpKwQJvqjxl5pUHxxNhJ67c0rgmRdVl4Ofbuo= Subject key identifier: D8:19:D6:4E:A2:29:EE:9C:CD:EF:CB:B6:FF:E9:EB:91:AF:56:2D:E6 Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc Certificate serial: 019B454A7086DAF6D482A5A2B22809D023E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 09:01:04 +0000 Manifest this update: Mon 22 Dec 2025 09:01:04 +0000 Manifest next update: Tue 23 Dec 2025 09:01:04 +0000 Files and hashes: 1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=) 2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=) 3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: fqOQHvJbN6l0MjT3GcnK64Flx0kLYLdJQvJJDB74bzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:70:86:da:f6:d4:82:a5:a2:b2:28:09:d0:23:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc Validity Not Before: Dec 22 09:01:04 2025 GMT Not After : Dec 23 09:01:04 2025 GMT Subject: CN=d819d64ea229ee9ccdefcbb6ffe9eb91af562de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:06:29:de:c9:1f:c0:9e:5c:29:dc:b3:c7: c7:3e:4a:a6:06:4c:40:b5:8f:12:b0:79:bc:c7:89: 05:73:30:17:26:07:1c:cf:50:61:15:25:31:63:c2: 15:b8:2c:b1:6c:04:3f:17:2d:bd:5b:37:02:db:1b: 99:d3:26:56:43:91:8d:09:da:26:5b:be:10:3a:90: 7d:84:17:53:62:a9:a5:5c:28:b9:66:05:32:1a:db: dd:5d:52:4c:19:93:ed:14:10:9f:59:3c:c2:92:b7: 49:76:99:d4:98:92:12:c1:95:66:a5:cf:20:15:70: 5b:ce:6d:43:0b:62:48:28:8d:58:8d:50:7c:0c:8c: 24:a7:f2:4f:64:9d:94:56:c0:2a:55:9a:83:b2:33: f3:49:58:cf:7c:aa:10:4a:e5:55:68:67:8a:07:fc: cb:14:a5:81:b7:e4:18:1b:d0:a6:83:08:66:a7:25: 1b:54:8f:31:9b:47:80:2d:07:09:a5:e5:85:e4:b9: 49:14:3f:b8:54:96:a2:c3:89:43:95:0d:71:18:3a: a6:d4:8a:f2:dc:6c:74:d9:5c:cb:ee:81:f6:30:67: 34:b5:a7:e9:97:f8:be:9c:eb:dc:71:1e:d5:fe:d8: ca:1a:a7:5b:71:ff:b1:4b:d3:e4:10:c3:fd:0e:93: 04:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:19:D6:4E:A2:29:EE:9C:CD:EF:CB:B6:FF:E9:EB:91:AF:56:2D:E6 X509v3 Authority Key Identifier: keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:1c:a8:ac:14:f2:b0:cd:43:10:cf:b0:79:3e:95:5a:e6:a8: 5c:99:e9:2e:3e:6d:e8:1c:7f:cf:3c:7e:bc:d6:7b:d9:01:df: 25:83:f7:5a:b9:59:71:a7:84:3e:f5:10:48:b5:95:16:15:b0: 08:ad:90:29:4e:93:2f:a9:7b:03:4a:eb:ac:8c:3a:67:f6:ba: df:cb:6a:88:fc:e2:99:70:4b:e7:9e:a2:b4:b3:13:e6:af:c0: 9c:1e:1f:b5:f4:be:85:c2:63:b6:c2:41:09:a6:fc:fb:87:56: 5a:77:1e:94:9c:25:08:19:e1:59:c8:16:44:95:4c:7c:76:24: 93:d6:43:7f:3d:2b:82:8c:f0:15:8c:ec:fe:38:07:e0:e0:df: b3:44:88:a4:ac:c1:85:1a:4a:be:d0:3b:6d:73:14:c9:b9:a3: d8:0b:c8:a4:b7:b3:6e:ad:66:bc:fe:d6:5f:41:07:54:26:82: 21:84:18:7d:af:e2:a0:70:ea:14:ff:58:c3:15:2d:36:b6:03: 4b:46:96:b5:f7:2b:b4:59:09:64:77:a6:c0:6d:b8:25:70:99: bd:06:7d:11:4b:27:50:d9:92:db:b5:b1:10:de:ad:a2:c1:5e: 94:a8:32:bf:67:47:f7:14:2e:e6:5f:d3:70:af:7b:ac:bf:f8: f8:13:6b:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSnCG2vbUgqWisigJ0CPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OGZmOTIyOWVmZDhkMTJiNDI3M2YzNDZmOGM2NDU0ZWE1 ODdlY2MwHhcNMjUxMjIyMDkwMTA0WhcNMjUxMjIzMDkwMTA0WjAzMTEwLwYDVQQD EyhkODE5ZDY0ZWEyMjllZTljY2RlZmNiYjZmZmU5ZWI5MWFmNTYyZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFUGKd7JH8CeXCncs8fHPkqmBkxA tY8SsHm8x4kFczAXJgccz1BhFSUxY8IVuCyxbAQ/Fy29WzcC2xuZ0yZWQ5GNCdom W74QOpB9hBdTYqmlXCi5ZgUyGtvdXVJMGZPtFBCfWTzCkrdJdpnUmJISwZVmpc8g FXBbzm1DC2JIKI1YjVB8DIwkp/JPZJ2UVsAqVZqDsjPzSVjPfKoQSuVVaGeKB/zL FKWBt+QYG9CmgwhmpyUbVI8xm0eALQcJpeWF5LlJFD+4VJaiw4lDlQ1xGDqm1Iry 3Gx02VzL7oH2MGc0tafpl/i+nOvccR7V/tjKGqdbcf+xS9PkEMP9DpMEOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgZ1k6iKe6cze/Ltv/p65GvVi3mMB8GA1UdIwQY MBaAFKaP+SKe/Y0StCc/NG+MZFTqWH7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEt MjI3ZTIxZTY5MWU3LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEtMjI3ZTIxZTY5MWU3 LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahyorBTy sM1DEM+weT6VWuaoXJnpLj5t6Bx/zzx+vNZ72QHfJYP3WrlZcaeEPvUQSLWVFhWw CK2QKU6TL6l7A0rrrIw6Z/a638tqiPzimXBL556itLMT5q/AnB4ftfS+hcJjtsJB Cab8+4dWWncelJwlCBnhWcgWRJVMfHYkk9ZDfz0rgozwFYzs/jgH4ODfs0SIpKzB hRpKvtA7bXMUybmj2AvIpLezbq1mvP7WX0EHVCaCIYQYfa/ioHDqFP9YwxUtNrYD S0aWtfcrtFkJZHemwG24JXCZvQZ9EUsnUNmS27WxEN6tosFelKgyv2dH9xQu5l/T cK97rL/4+BNrfA== -----END CERTIFICATE-----Generated at Mon Dec 22 18:58:03 2025 by rpki-client