This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json) Hash identifier: HKBuO+38qilyW/vWRPrh4d0ykaky8SJ1yt/85SPfgzo= Subject key identifier: 1B:C7:DC:26:E1:69:78:8A:26:CD:AC:CE:F7:3F:39:61:AF:6B:01:07 Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc Certificate serial: 019B56AB79149915478248F25CB84CFA8502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft Manifest number: 1799 Signing time: Thu 25 Dec 2025 18:00:36 +0000 Manifest this update: Thu 25 Dec 2025 18:00:36 +0000 Manifest next update: Fri 26 Dec 2025 18:00:36 +0000 Files and hashes: 1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=) 2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=) 3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: cLKwGyqf8NGe7ZRiXwKyhxtcUs2vZCMN9Y5n3MOoMWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:ab:79:14:99:15:47:82:48:f2:5c:b8:4c:fa:85:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc Validity Not Before: Dec 25 18:00:36 2025 GMT Not After : Dec 26 18:00:36 2025 GMT Subject: CN=1bc7dc26e169788a26cdaccef73f3961af6b0107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b6:b6:c0:95:3c:e3:6d:e4:a0:b1:1e:34:3b: 01:74:be:d5:c2:0c:9a:8b:c8:12:e1:20:52:2e:2a: e6:47:1f:7f:ec:83:b0:7d:a5:49:75:c1:b1:6d:ba: 73:0c:3e:e9:2e:6d:55:db:72:23:5f:2d:d3:bc:6c: 59:59:84:f9:06:b1:fe:31:eb:8b:3b:90:e8:a9:26: c7:cf:5e:86:ec:fd:06:c0:45:e1:da:3f:5d:89:92: 00:9c:e8:fa:f0:31:7a:4c:77:5b:3a:0c:39:3a:50: c0:56:51:16:0e:03:86:3b:3f:f2:4e:88:54:34:d2: e0:4a:21:98:49:36:c5:cc:b8:50:0e:02:cd:37:67: 50:70:b5:e7:22:84:e8:9b:f8:7e:2b:31:0e:be:95: d6:51:01:5e:eb:52:4a:f7:67:c6:bc:be:42:60:ca: 85:af:1e:68:74:78:64:56:62:5d:f9:28:ed:b1:f0: e2:36:d6:32:56:9b:dc:84:02:e2:05:09:1c:3b:d7: bb:fa:1b:c4:41:d3:eb:16:40:99:48:de:9f:4c:26: 06:96:0c:f6:50:ea:08:38:8d:a8:03:7d:7d:21:55: fe:91:de:2b:7f:8c:9b:af:2d:89:89:b1:ff:d6:b8: 7b:fc:17:89:f6:8e:2f:95:03:34:a7:34:4b:18:96: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C7:DC:26:E1:69:78:8A:26:CD:AC:CE:F7:3F:39:61:AF:6B:01:07 X509v3 Authority Key Identifier: keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:51:2f:c7:ad:2e:c3:be:d4:af:31:d8:b1:c7:f9:d3:4d:e6: fe:ad:60:37:4d:dd:0c:68:50:4a:be:07:56:bc:3c:08:91:e3: 50:71:40:42:ef:59:dd:0b:82:c2:99:25:c6:05:e6:9e:30:4b: 76:17:d9:0a:ab:6c:16:15:dc:3b:a4:3e:b6:99:8b:92:87:e8: b6:1d:f3:45:16:03:4c:6a:bc:73:3b:ab:07:97:36:71:4b:65: 9e:23:18:5e:b9:2f:c9:aa:65:99:04:14:ac:ab:c8:96:84:71: ba:8f:c6:0f:f3:09:2b:6a:51:54:f2:5d:a6:4d:c3:74:73:4f: 56:72:62:0a:c9:89:ac:93:c4:aa:e7:d8:db:ad:a5:53:50:cd: 58:ad:95:1c:0a:18:09:45:bf:a0:54:9f:da:6d:26:d3:57:be: 6e:c0:be:0d:8b:4f:ce:59:48:b8:97:b4:ed:be:7f:cd:ce:90: 8c:38:25:58:6d:5b:f1:36:86:78:8f:14:a2:e3:b4:d0:3f:1d: 66:1d:6d:d1:13:24:d0:f9:f9:5f:27:4d:e5:4c:41:a8:89:90: 7c:11:07:93:f2:26:59:76:11:ba:9a:0e:1a:38:dd:cc:f4:57: 6a:b6:6e:37:78:7b:4c:33:af:81:07:7e:e6:ae:81:92:d4:49: 3f:5a:a1:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWq3kUmRVHgkjyXLhM+oUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OGZmOTIyOWVmZDhkMTJiNDI3M2YzNDZmOGM2NDU0ZWE1 ODdlY2MwHhcNMjUxMjI1MTgwMDM2WhcNMjUxMjI2MTgwMDM2WjAzMTEwLwYDVQQD EygxYmM3ZGMyNmUxNjk3ODhhMjZjZGFjY2VmNzNmMzk2MWFmNmIwMTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7a2wJU8423koLEeNDsBdL7Vwgya i8gS4SBSLirmRx9/7IOwfaVJdcGxbbpzDD7pLm1V23IjXy3TvGxZWYT5BrH+MeuL O5DoqSbHz16G7P0GwEXh2j9diZIAnOj68DF6THdbOgw5OlDAVlEWDgOGOz/yTohU NNLgSiGYSTbFzLhQDgLNN2dQcLXnIoTom/h+KzEOvpXWUQFe61JK92fGvL5CYMqF rx5odHhkVmJd+SjtsfDiNtYyVpvchALiBQkcO9e7+hvEQdPrFkCZSN6fTCYGlgz2 UOoIOI2oA319IVX+kd4rf4ybry2JibH/1rh7/BeJ9o4vlQM0pzRLGJYxSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvH3CbhaXiKJs2szvc/OWGvawEHMB8GA1UdIwQY MBaAFKaP+SKe/Y0StCc/NG+MZFTqWH7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEt MjI3ZTIxZTY5MWU3LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEtMjI3ZTIxZTY5MWU3 LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVEvx60u w77UrzHYscf5003m/q1gN03dDGhQSr4HVrw8CJHjUHFAQu9Z3QuCwpklxgXmnjBL dhfZCqtsFhXcO6Q+tpmLkofoth3zRRYDTGq8czurB5c2cUtlniMYXrkvyaplmQQU rKvIloRxuo/GD/MJK2pRVPJdpk3DdHNPVnJiCsmJrJPEqufY262lU1DNWK2VHAoY CUW/oFSf2m0m01e+bsC+DYtPzllIuJe07b5/zc6QjDglWG1b8TaGeI8UouO00D8d Zh1t0RMk0Pn5XydN5UxBqImQfBEHk/ImWXYRupoOGjjdzPRXarZuN3h7TDOvgQd+ 5q6BktRJP1qhpQ== -----END CERTIFICATE-----Generated at Thu Dec 25 19:39:41 2025 by rpki-client