This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft File: POwGHF7VbcoHdT_ktbjAkNl60OE.mft (raw, json) Hash identifier: LqDsWFJCQuJl5EFoAYXLRiw2cM2Yax4K0YGEj6oGOPE= Subject key identifier: 01:85:EB:3C:34:0B:C4:4E:7D:5B:12:64:D5:2E:FA:49:80:95:FE:A1 Authority key identifier: 3C:EC:06:1C:5E:D5:6D:CA:07:75:3F:E4:B5:B8:C0:90:D9:7A:D0:E1 Certificate issuer: /CN=3cec061c5ed56dca07753fe4b5b8c090d97ad0e1 Certificate serial: 019B311EC45EAC95291B197C38BB640C4709 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft Manifest number: 0724 Signing time: Thu 18 Dec 2025 11:00:58 +0000 Manifest this update: Thu 18 Dec 2025 11:00:58 +0000 Manifest next update: Fri 19 Dec 2025 11:00:58 +0000 Files and hashes: 1: J--9FTqyd7jwis3viXw5cnMN5-o.roa (hash: DC3T7Frr+GR57cEYLFoZVlKHfiR/SiiUWqjetZEXAWY=) 2: POwGHF7VbcoHdT_ktbjAkNl60OE.crl (hash: ju2NswjGDojAFQh89+/nSpdtKQnnyivCTslsfIiuSwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:c4:5e:ac:95:29:1b:19:7c:38:bb:64:0c:47:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cec061c5ed56dca07753fe4b5b8c090d97ad0e1 Validity Not Before: Dec 18 11:00:58 2025 GMT Not After : Dec 19 11:00:58 2025 GMT Subject: CN=0185eb3c340bc44e7d5b1264d52efa498095fea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:f7:d4:b2:c9:da:65:aa:b0:9c:70:1b:7b: 4f:7a:9d:0b:f9:7e:3c:14:74:8d:d9:06:50:fd:07: 42:9b:84:4d:10:d1:44:6e:85:d1:13:af:f3:a4:b0: 53:06:7d:47:44:5a:1d:20:29:e8:73:df:cf:75:f6: 3b:4b:7d:0f:ad:4e:8e:84:4e:93:ba:84:e3:15:47: 8e:42:05:0d:53:47:47:07:9f:aa:a4:4f:43:49:eb: fe:25:d0:23:7a:f1:a0:1c:6f:61:f7:5e:91:2e:a8: b3:57:81:49:1e:0a:14:f3:be:31:21:4d:d4:86:24: 8a:6c:99:e0:56:7e:f2:70:62:68:79:03:d4:20:d1: 92:16:2f:6f:4a:b2:44:6c:5d:9a:39:0b:fa:f6:86: 9a:06:9e:68:ba:b1:93:63:cc:b1:95:32:00:18:c8: bf:b7:57:cd:7e:a3:4e:fc:27:f8:b2:5f:fc:d5:c7: b9:e5:c9:5e:02:e9:03:53:49:7d:9b:56:60:3b:32: ac:77:b7:e8:66:14:d6:a6:10:74:04:7d:d9:ce:aa: 1d:36:35:04:c1:2e:f3:0e:a9:0e:56:48:27:4d:8c: 61:29:30:63:eb:40:ce:a8:d3:c5:b7:2d:86:f8:36: 63:f2:ea:e6:34:e4:07:0b:8c:bf:60:23:56:d5:c0: 84:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:85:EB:3C:34:0B:C4:4E:7D:5B:12:64:D5:2E:FA:49:80:95:FE:A1 X509v3 Authority Key Identifier: keyid:3C:EC:06:1C:5E:D5:6D:CA:07:75:3F:E4:B5:B8:C0:90:D9:7A:D0:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:fc:70:64:f2:82:68:db:3f:5d:fc:51:e8:66:03:a4:ff:e0: 10:ed:3a:c1:03:51:8f:44:7f:e0:80:3a:26:a8:ab:f3:d7:a6: 7a:bd:a9:4c:b9:3f:f7:cb:af:03:39:1b:91:82:a7:1d:02:db: 1c:fe:3c:8b:b1:a4:bd:bf:8b:2a:20:92:1c:03:b9:56:91:02: 1a:00:15:0f:d7:eb:16:f3:2e:3b:0e:1b:b8:2c:ce:6f:52:d9: c0:65:2c:42:f2:a5:3d:b7:6f:dd:a4:11:ee:51:dc:64:f6:5e: 65:e6:55:b9:fa:08:62:81:16:f6:0c:9e:25:41:c1:b7:94:92: 09:cb:30:4b:30:eb:9a:c5:50:03:df:9f:49:da:61:3e:d6:b2: 04:96:51:33:ea:f6:6f:d2:79:36:8e:99:98:0f:69:06:ca:de: 63:3e:14:c0:75:e1:05:2a:18:e6:e3:5a:32:b8:30:c0:eb:fe: 40:3a:6b:f5:5c:43:df:eb:fa:1d:30:70:8f:ad:0c:63:9e:1c: d8:49:d7:08:da:ea:26:7d:0e:17:48:34:55:1d:fc:ec:7e:b6: 64:d4:e5:11:60:7f:18:fd:5d:3e:dd:73:d2:3a:68:a7:b8:72: 42:40:67:af:0e:03:0b:60:9c:56:fd:de:71:0f:a5:68:73:85: ba:32:89:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHsRerJUpGxl8OLtkDEcJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZWMwNjFjNWVkNTZkY2EwNzc1M2ZlNGI1YjhjMDkwZDk3 YWQwZTEwHhcNMjUxMjE4MTEwMDU4WhcNMjUxMjE5MTEwMDU4WjAzMTEwLwYDVQQD EygwMTg1ZWIzYzM0MGJjNDRlN2Q1YjEyNjRkNTJlZmE0OTgwOTVmZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlv31LLJ2mWqsJxwG3tPep0L+X48 FHSN2QZQ/QdCm4RNENFEboXRE6/zpLBTBn1HRFodICnoc9/PdfY7S30PrU6OhE6T uoTjFUeOQgUNU0dHB5+qpE9DSev+JdAjevGgHG9h916RLqizV4FJHgoU874xIU3U hiSKbJngVn7ycGJoeQPUINGSFi9vSrJEbF2aOQv69oaaBp5ourGTY8yxlTIAGMi/ t1fNfqNO/Cf4sl/81ce55cleAukDU0l9m1ZgOzKsd7foZhTWphB0BH3ZzqodNjUE wS7zDqkOVkgnTYxhKTBj60DOqNPFty2G+DZj8urmNOQHC4y/YCNW1cCEjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGF6zw0C8ROfVsSZNUu+kmAlf6hMB8GA1UdIwQY MBaAFDzsBhxe1W3KB3U/5LW4wJDZetDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE93R0hGN1ZiY29IZFRfa3RiakFrTmw2ME9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80N2Q3ZjctYjAxOS00MmU5LWJiMDgt ZDY5YzAxMzRmNWE4LzEvUE93R0hGN1ZiY29IZFRfa3RiakFrTmw2ME9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC80N2Q3ZjctYjAxOS00MmU5LWJiMDgtZDY5YzAxMzRmNWE4 LzEvUE93R0hGN1ZiY29IZFRfa3RiakFrTmw2ME9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfxwZPKC aNs/XfxR6GYDpP/gEO06wQNRj0R/4IA6Jqir89emer2pTLk/98uvAzkbkYKnHQLb HP48i7Gkvb+LKiCSHAO5VpECGgAVD9frFvMuOw4buCzOb1LZwGUsQvKlPbdv3aQR 7lHcZPZeZeZVufoIYoEW9gyeJUHBt5SSCcswSzDrmsVQA9+fSdphPtayBJZRM+r2 b9J5No6ZmA9pBsreYz4UwHXhBSoY5uNaMrgwwOv+QDpr9VxD3+v6HTBwj60MY54c 2EnXCNrqJn0OF0g0VR387H62ZNTlEWB/GP1dPt1z0jpop7hyQkBnrw4DC2CcVv3e cQ+laHOFujKJIg== -----END CERTIFICATE-----Generated at Thu Dec 18 12:43:17 2025 by rpki-client