This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json) Hash identifier: pmHltOWA30f5OSpiWCj66ILdSOZH1LgePzKLOrWfWIA= Subject key identifier: 24:77:9E:5D:CE:44:C0:01:B4:99:7F:18:29:3D:C5:F6:9A:21:D1:32 Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26 Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726 Certificate serial: 019B3BA2B1232B49644942C4ECECCC693493 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft Manifest number: 0B78 Signing time: Sat 20 Dec 2025 12:01:16 +0000 Manifest this update: Sat 20 Dec 2025 12:01:16 +0000 Manifest next update: Sun 21 Dec 2025 12:01:16 +0000 Files and hashes: 1: J_w-klg8Fz7usxtg6f6kBplmW2Q.roa (hash: wSUiP/GQT3afkhYb4zAVk2weNrXx80BBBUvY2crSbB8=) 2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: lw9HKOEiAfvlMXb1CZY+Bkp9+94FyeL1e2iAJPTdidk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:b1:23:2b:49:64:49:42:c4:ec:ec:cc:69:34:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726 Validity Not Before: Dec 20 12:01:16 2025 GMT Not After : Dec 21 12:01:16 2025 GMT Subject: CN=24779e5dce44c001b4997f18293dc5f69a21d132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e6:27:36:c8:87:12:12:d0:78:09:fa:09:16: d5:5a:65:4a:23:4f:3a:21:92:07:7a:a4:f4:19:63: a4:d7:cd:3e:8d:a5:6b:3c:e5:40:48:ca:a5:f2:5f: ce:d9:12:9d:4a:43:c2:97:e0:b3:5d:29:b5:47:37: b4:0f:28:f1:3d:c0:52:39:2f:44:7e:71:7f:64:0a: 20:eb:85:1b:44:c2:c7:d9:06:27:11:cb:ea:6d:5c: 36:4e:7f:47:6b:b9:1b:56:9d:16:f8:bf:3a:89:99: ae:20:fd:5d:f1:0e:86:85:f7:d3:b6:43:66:c9:5e: dd:df:6c:1a:0e:fa:cd:5f:18:77:82:d8:64:ab:14: e6:b9:96:e6:c6:4c:6a:c6:02:7b:94:a7:3a:35:ad: 0d:8f:47:57:82:24:73:56:49:95:00:71:c2:13:ab: 23:a4:62:80:19:38:82:7d:97:aa:e8:75:dd:75:ef: 79:38:ba:a9:8c:88:33:af:33:f7:a8:60:47:6a:7e: 51:9c:2a:8f:92:c7:a6:c4:0f:8e:80:e0:2e:26:d8: be:ca:3d:41:9d:66:bd:b1:5e:58:fb:57:78:03:5f: 77:41:96:b4:d0:88:37:80:e1:8b:27:fa:15:70:9e: 57:c4:c3:28:9d:d5:ba:6b:92:d8:c6:e3:4c:bf:a6: 9c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:77:9E:5D:CE:44:C0:01:B4:99:7F:18:29:3D:C5:F6:9A:21:D1:32 X509v3 Authority Key Identifier: keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:77:d8:5d:11:f5:f3:d3:9f:b9:0a:8a:0d:83:27:4c:af:84: 1d:83:79:d0:f0:f7:9c:08:0f:e5:fd:34:cd:d2:24:3c:db:fd: cd:f3:c2:8b:bb:88:71:c0:ba:79:8c:82:6d:3d:3b:e1:bd:84: 17:0a:82:b1:6f:05:71:65:97:26:9a:3e:bc:94:3a:1e:6f:85: 6b:9f:96:5f:44:00:20:9e:7f:fc:50:f1:6b:30:a2:c7:a8:d5: a8:ae:16:b7:ac:3a:b0:a8:24:3b:2a:96:e2:e9:1e:bf:ea:59: 57:35:48:7d:f2:6c:e6:19:92:d1:e0:4d:82:8f:d3:e3:a0:8f: b1:a8:e5:bc:77:54:d5:fd:8c:6c:ae:20:e8:30:a7:74:c8:e4: 64:e0:07:a4:a1:64:9a:8a:72:03:af:72:77:b5:74:44:0a:bc: 9a:e0:27:a6:78:c5:6e:da:21:9e:40:62:1f:2f:6d:98:00:6c: 89:0b:5a:dd:2e:de:1f:dd:18:e7:7b:fe:bf:54:9a:5f:de:40: a1:72:f9:cc:fa:be:a2:0e:e4:cf:2b:80:67:f6:61:d6:b3:36: 4e:4c:e6:a9:3d:16:67:88:3a:f4:c0:be:93:03:c5:33:51:16: d8:8c:0a:31:66:98:10:2b:05:b3:75:dd:2c:7c:fc:5a:c1:ec: 39:2e:9d:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7orEjK0lkSULE7OzMaTSTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZWI5ZWI1NTQ3YzdmNWYxYWFmYzBhZGExNDA4MDU0MTk2 MTg3MjYwHhcNMjUxMjIwMTIwMTE2WhcNMjUxMjIxMTIwMTE2WjAzMTEwLwYDVQQD EygyNDc3OWU1ZGNlNDRjMDAxYjQ5OTdmMTgyOTNkYzVmNjlhMjFkMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuYnNsiHEhLQeAn6CRbVWmVKI086 IZIHeqT0GWOk180+jaVrPOVASMql8l/O2RKdSkPCl+CzXSm1Rze0DyjxPcBSOS9E fnF/ZAog64UbRMLH2QYnEcvqbVw2Tn9Ha7kbVp0W+L86iZmuIP1d8Q6GhffTtkNm yV7d32waDvrNXxh3gthkqxTmuZbmxkxqxgJ7lKc6Na0Nj0dXgiRzVkmVAHHCE6sj pGKAGTiCfZeq6HXdde95OLqpjIgzrzP3qGBHan5RnCqPksemxA+OgOAuJti+yj1B nWa9sV5Y+1d4A193QZa00Ig3gOGLJ/oVcJ5XxMMondW6a5LYxuNMv6acLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCR3nl3ORMABtJl/GCk9xfaaIdEyMB8GA1UdIwQY MBaAFKTrnrVUfH9fGq/AraFAgFQZYYcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80Y2Q3MmQtZDhhNS00NmNlLTg2NzQt MGQyMjIzMmMzNGEwLzEvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80Y2Q3MmQtZDhhNS00NmNlLTg2NzQtMGQyMjIzMmMzNGEw LzEvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnfYXRH1 89OfuQqKDYMnTK+EHYN50PD3nAgP5f00zdIkPNv9zfPCi7uIccC6eYyCbT074b2E FwqCsW8FcWWXJpo+vJQ6Hm+Fa5+WX0QAIJ5//FDxazCix6jVqK4Wt6w6sKgkOyqW 4ukev+pZVzVIffJs5hmS0eBNgo/T46CPsajlvHdU1f2MbK4g6DCndMjkZOAHpKFk mopyA69yd7V0RAq8muAnpnjFbtohnkBiHy9tmABsiQta3S7eH90Y53v+v1SaX95A oXL5zPq+og7kzyuAZ/Zh1rM2TkzmqT0WZ4g69MC+kwPFM1EW2IwKMWaYECsFs3Xd LHz8WsHsOS6dow== -----END CERTIFICATE-----Generated at Sat Dec 20 15:09:10 2025 by rpki-client