This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: nHJkr4yx2B0KC0tBaMFBltpIJQur67kJBmb+ph/14h0= Subject key identifier: 45:E4:CC:5A:D1:1B:95:50:9A:2E:93:F4:49:CA:4F:D2:2D:7E:28:51 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B37FC95D4767195A1F395F10A60A28838 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 17AD Signing time: Fri 19 Dec 2025 19:00:58 +0000 Manifest this update: Fri 19 Dec 2025 19:00:58 +0000 Manifest next update: Sat 20 Dec 2025 19:00:58 +0000 Files and hashes: 1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=) 2: 0hWOevIJ1N7Gns1debgtABo6NtM.roa (hash: e/zIHM5zx9KDyIhPNc+UJKxD73hkQE5CcLLzy4jj/bw=) 3: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=) 4: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=) 5: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (hash: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=) 6: DU8r3sc4ossJcNLkYBCHA96dRpA.roa (hash: r1JwJEoiU/JtSYwyekoAXXxNXR1urkakhqMVKFaKbKU=) 7: RwaLZN3D24qbiSCNdxPzEDghRuQ.roa (hash: qOkoBLXEXIyoyxyFGdEFpZ14lfMYf3mog4DQoGo1xtU=) 8: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=) 9: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=) 10: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=) 11: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=) 12: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=) 13: aKI4K4s2w_a8uyDN7S7H6E1pZk0.roa (hash: FsEPXU+SsEkYqv+c2yVXywYULp4eiT19GoSHc/aS2BA=) 14: fMzT-5d-H7wm7UzPX4PbBLndjlo.roa (hash: QHxOUGueDky85wAcdSL/hpvn/Djtg29akovspAUAOhU=) 15: fm8_hxutG5R7-Mx8bxRlfwSrl9o.roa (hash: kSoXtSfwPkhI0yioS1Tphp5+T9BGKf4elvsAZqNw9NE=) 16: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=) 17: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: 7XhMJghqhjL47ejgOBh9nrBQvOf13vlj7gywxDfTs+I=) 18: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=) 19: nqJvOltUHqr25X4pICbwNnMi8BE.roa (hash: JYU3ifoc1BxDq4f4n/32K5vXlkFJJJ4Wepo1i/IHiM0=) 20: q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa (hash: ngAOffGRyvYQRrwPTGAOl5xDF8KPN9jghcxNAguGiMA=) 21: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (hash: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=) 22: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=) 23: uwT_a45pbwAklpIFHopzV0taehU.roa (hash: NTcCYW+9Xx1Q9IkEuPMdFETC7QdoIMG4kleJfUGWaeA=) 24: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=) 25: wQA0abh25Jj5mK6DP_9yfPh_Szw.roa (hash: Gxtu2SrKEp09RMrd8FAfjNeoZCr/XklplXKAU3GLc1A=) 26: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (hash: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=) 27: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:95:d4:76:71:95:a1:f3:95:f1:0a:60:a2:88:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Dec 19 19:00:58 2025 GMT Not After : Dec 20 19:00:58 2025 GMT Subject: CN=45e4cc5ad11b95509a2e93f449ca4fd22d7e2851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:a3:60:19:96:ba:0f:7d:01:f5:6a:ec:e9: 4a:10:43:71:95:e3:55:ec:c6:b9:c2:6e:73:22:70: ac:97:73:b6:b8:17:06:8b:07:bb:36:3f:c5:0f:b0: 5c:57:d6:a6:46:e4:af:f1:25:ef:40:b8:36:2a:0d: ba:ed:ab:af:cd:c3:4b:60:f2:7c:0e:e8:66:7c:0a: 58:3c:05:9e:d6:62:d9:15:98:66:9a:fe:f4:1c:70: 8d:96:03:c2:ec:8d:ec:97:37:e8:9c:f5:86:73:cb: aa:a9:59:4d:d4:6f:a4:e5:50:7b:08:5a:cd:8d:da: 7a:9a:58:b0:1b:62:e3:ac:2e:4e:72:09:86:3c:3e: e4:45:51:28:64:04:b0:71:62:2d:ca:be:9b:66:b9: 83:db:0a:ab:3b:5b:59:36:34:3c:54:38:8c:95:92: 51:e4:0e:54:33:28:54:a4:a4:78:f5:e9:8a:09:4e: 61:c4:dc:2d:05:c7:2f:79:ea:7b:2d:aa:b0:da:92: ab:f9:9b:2e:84:33:8c:de:59:00:f2:19:33:c9:b6: 9b:da:1f:75:7b:1c:37:50:cd:92:d1:ed:b8:8c:a2: 2f:f9:bb:1c:95:15:6d:5d:16:41:52:14:b5:06:f4: 7c:ae:ba:40:66:a7:26:16:9d:17:c4:17:cf:1c:96: 50:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E4:CC:5A:D1:1B:95:50:9A:2E:93:F4:49:CA:4F:D2:2D:7E:28:51 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2a:aa:55:5a:67:71:5c:d6:d8:6f:63:ca:0c:dd:0c:3b:07: 8d:94:2b:8c:a5:41:1a:a5:e4:26:c1:aa:d1:ab:b7:ba:4c:d6: 35:ab:da:c7:26:99:93:3f:e7:f9:06:6e:dd:02:45:1e:61:94: 95:21:ae:e2:0f:05:ed:92:6d:06:f6:02:68:26:df:e7:61:eb: 2f:47:7a:25:59:bd:70:28:8c:5a:8e:69:6e:0d:15:9d:f1:83: 4d:2f:cb:a3:e4:32:27:e7:ee:9b:2e:32:e5:27:a9:8f:c9:2c: 7b:47:4f:85:73:f1:d8:2b:f4:4d:06:22:15:6d:84:bb:39:99: bc:f6:2d:2c:e7:df:9f:ad:03:a2:10:07:94:80:a9:7b:46:98: 8e:b0:5a:fc:f9:34:e6:f5:d5:fd:c3:fd:77:48:a0:a1:ee:84: d7:4f:ea:eb:d9:34:b7:22:b4:35:07:30:4e:a0:1a:38:2a:8c: a4:f9:9c:6c:43:93:64:27:14:a1:91:a8:ff:ce:9b:a2:fe:52: 0d:69:43:09:a4:f9:17:24:75:c9:9d:ef:50:e4:7a:07:a9:7c: 0f:43:a7:ed:53:3a:ee:02:1b:2f:7b:82:24:c5:60:6d:2f:0e: 92:43:80:ad:84:69:03:de:d8:c6:de:05:7e:3b:d0:64:d3:47: 7f:6c:91:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/JXUdnGVofOV8Qpgoog4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUxMjE5MTkwMDU4WhcNMjUxMjIwMTkwMDU4WjAzMTEwLwYDVQQD Eyg0NWU0Y2M1YWQxMWI5NTUwOWEyZTkzZjQ0OWNhNGZkMjJkN2UyODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKSjYBmWug99AfVq7OlKEENxleNV 7Ma5wm5zInCsl3O2uBcGiwe7Nj/FD7BcV9amRuSv8SXvQLg2Kg267auvzcNLYPJ8 DuhmfApYPAWe1mLZFZhmmv70HHCNlgPC7I3slzfonPWGc8uqqVlN1G+k5VB7CFrN jdp6mliwG2LjrC5OcgmGPD7kRVEoZASwcWItyr6bZrmD2wqrO1tZNjQ8VDiMlZJR 5A5UMyhUpKR49emKCU5hxNwtBccveep7Laqw2pKr+ZsuhDOM3lkA8hkzybab2h91 exw3UM2S0e24jKIv+bsclRVtXRZBUhS1BvR8rrpAZqcmFp0XxBfPHJZQnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXkzFrRG5VQmi6T9EnKT9ItfihRMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSqqVVpn cVzW2G9jygzdDDsHjZQrjKVBGqXkJsGq0au3ukzWNavaxyaZkz/n+QZu3QJFHmGU lSGu4g8F7ZJtBvYCaCbf52HrL0d6JVm9cCiMWo5pbg0VnfGDTS/Lo+QyJ+fumy4y 5Sepj8kse0dPhXPx2Cv0TQYiFW2EuzmZvPYtLOffn60DohAHlICpe0aYjrBa/Pk0 5vXV/cP9d0igoe6E10/q69k0tyK0NQcwTqAaOCqMpPmcbEOTZCcUoZGo/86bov5S DWlDCaT5FyR1yZ3vUOR6B6l8D0On7VM67gIbL3uCJMVgbS8OkkOArYRpA97Yxt4F fjvQZNNHf2yRXA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:08:04 2025 by rpki-client