This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: 6WLohYbUKIVhxD+4z8Hg6lMacNNhUhTuLZWqlwnClxg= Subject key identifier: 30:4A:CF:7F:D1:EC:6F:05:F0:B6:BC:24:74:3C:EF:AF:40:38:BE:66 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019B364500AC82D542E19088F2FFF79BBDD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 17AB Signing time: Fri 19 Dec 2025 11:00:50 +0000 Manifest this update: Fri 19 Dec 2025 11:00:50 +0000 Manifest next update: Sat 20 Dec 2025 11:00:50 +0000 Files and hashes: 1: 4SyAKG9FRt1gAFJy5VgH5PwxTRA.roa (hash: jTSIiH7dSb5EybAsEY+n22bAiKvGllq/AuPJ12+ncpM=) 2: BPvvMmPw0v2RXdpWWHfCuRUXY28.roa (hash: xZBsJjBvf0lTF+79AIT0zRbookilcef0qHIZ5VPCKjo=) 3: BZv8sGCcNALUX5pRivC_EjiidAY.roa (hash: h2vpw3fwMWMbbCOrxK6C72hr7+aeGxdeLm1OT0QOTJY=) 4: DGiTictajwWlIqV1Y3gB4SABHrM.roa (hash: Id5c1uksWgHuNXSqMulTJtxTXfw1/TAJk3AEd7b9YRQ=) 5: Mk65rzu_RkrceH34hYZR24Obsg0.roa (hash: rTzdbjg2prHl5GqIGFCWtd1Ib91ETCuwTrOfSPbAKbI=) 6: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: rA7epYrrb+nsDEotTJyMUI8J5VkL1Fsljy7br5ZjRIY=) 7: Q7Kremg5Fgj0SfkKKXdi8FJc68I.roa (hash: wwhqLnVWip/tEomt2waPsqqsK0Xf41SfYznp1QkJ0BM=) 8: VB2zjyzRbVcAI7qwybUzZhlXV-U.roa (hash: cbrJc/4RT0HiKhNiv2HtCVB5MjAEHV6aPZtCJF7/HaM=) 9: X1dbr66OMx8eVuRSZ8erER48uAs.roa (hash: l9j9HNgD4t1BB6Qfj/f6r3E2XLI0qnP2gbU2Zj6LlXM=) 10: fScTC-RTAL4AeGIUFDXeFWgxNOU.roa (hash: LpQDvJVc9hMoS+6x9uoQSz8d+i8pdM/6GrU1p5QPkoU=) 11: gjV1b6nl-2sIdV0OViEWc13VOgw.roa (hash: YJxg+E5odCH0e5CDjaGL8I+42oC/IlpXfOKgoo/xCo4=) 12: i_vdOGwxPt-bikrKCsCq4vU6o1Y.roa (hash: Oi88txSdII7ssSiwm/zvR3/xE/bpdarLSDiFGBrNlqs=) 13: jLM5t3eg01fijHX5BZDxTUjpEGU.roa (hash: zlqEOh5qlKElj+/BR3gY6unzfRt8ygL6XM3lywwcPBU=) 14: mv1h37MzImfXhXtotGH2l6nUD-c.roa (hash: jma1UU++sReZAO/OYU5m4FrNNXuoRuTByWXR/ZHh5qk=) 15: pPSUgW-kch1wzV-mL74GjoJRYas.roa (hash: 14IsY2Pcu5B3SjJ5ycOJDXddH4w35As15arfEbi1nXc=) 16: sVq7ykDogd7cCsDF--hBK9DnjT4.roa (hash: yntzoQcvzBrX+tVilVNDQYJnh1oAW90RlNAXUQi35Kc=) 17: yUsdU2ULQpT4CaBLrnJG--v6B4k.roa (hash: nFPDGUe2wiSsXpmHy1xpSDCHB5E3thvkbalz4PA2+qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:00:ac:82:d5:42:e1:90:88:f2:ff:f7:9b:bd:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Dec 19 11:00:50 2025 GMT Not After : Dec 20 11:00:50 2025 GMT Subject: CN=304acf7fd1ec6f05f0b6bc24743cefaf4038be66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c3:da:b0:e6:71:40:9c:09:18:63:b8:60:98: 4f:57:7d:d2:23:df:e4:61:13:72:23:fc:88:39:b5: cd:4c:cc:b9:7c:1b:b2:ac:2e:ab:b5:ca:83:c8:2b: 03:cf:c3:c2:d5:78:b0:c7:ed:ce:c2:22:70:0e:7c: 5b:03:ef:8a:66:4d:fb:e8:f4:1e:14:e4:fa:00:52: 49:01:11:b2:3d:11:cc:55:ad:5c:76:f5:f1:4c:21: 10:b2:04:16:d6:2e:ad:45:80:f6:72:81:75:50:ec: a4:48:22:db:bb:79:bd:0a:bd:20:e4:db:a3:68:20: b0:7d:b0:32:f7:f4:0a:e7:ab:31:c5:3a:df:da:cc: f4:54:70:5d:8c:94:c8:da:a1:8f:d6:3d:cf:aa:9e: 12:27:8c:26:69:e2:18:fa:ef:1f:52:6b:80:ef:33: 59:8c:5a:0b:92:b7:f3:41:51:c5:bd:7d:96:2e:c2: 94:b6:23:97:31:35:5a:5c:64:3f:ba:af:88:ed:17: a3:56:00:7b:74:7e:03:f8:e1:76:1d:f4:6e:25:26: 7d:cb:b4:1c:5b:5c:99:71:1a:9a:dc:7d:76:c2:f4: a9:0c:36:59:7e:d4:f9:14:9f:99:f9:5c:11:a3:a5: c7:12:4c:07:f5:37:f0:f2:8b:f4:1a:cc:44:4f:20: a7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4A:CF:7F:D1:EC:6F:05:F0:B6:BC:24:74:3C:EF:AF:40:38:BE:66 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c6:5a:d7:a2:bc:38:db:98:1d:69:d8:62:de:6c:d6:0f:b4: 0c:b4:64:cd:be:d8:c3:55:2a:37:c4:3b:43:7a:7f:ac:ad:c8: 75:73:94:ff:e8:d7:7c:88:b3:c4:26:df:da:e0:c3:18:e7:3c: d3:30:e5:26:21:d8:a6:76:ea:f6:c2:3a:f6:05:90:e2:14:28: 3c:43:97:07:85:0f:70:0f:0f:4a:13:72:b3:91:ee:b1:31:97: ef:18:c0:00:de:9c:6b:70:2f:4c:66:6f:a9:7a:e7:15:cf:9b: cd:3e:97:1f:ac:ef:d8:40:4f:b3:dc:20:c3:1b:ab:0a:b5:11: 76:d6:5b:d6:f5:2b:c4:65:8a:ad:1e:3b:1a:b1:c2:b4:0d:8e: eb:d5:a0:09:95:69:1f:c1:1f:40:6c:ea:cf:2c:00:39:84:2c: 5b:d3:0e:fc:d8:65:c9:bc:7b:50:63:98:f0:37:0f:2e:43:ad: 8c:de:01:4b:08:52:1e:80:6f:76:45:53:91:7e:30:26:7b:74: 2a:49:21:60:34:83:37:d4:28:d3:9b:39:83:b7:ef:6a:f2:32: ab:80:be:1f:a2:22:4f:73:4b:82:2c:11:8d:68:9a:64:f0:1d: a2:be:99:c8:bb:9c:b1:01:ab:14:b3:93:e9:a2:f8:b8:5b:e8: cb:27:85:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RQCsgtVC4ZCI8v/3m73XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjUxMjE5MTEwMDUwWhcNMjUxMjIwMTEwMDUwWjAzMTEwLwYDVQQD EygzMDRhY2Y3ZmQxZWM2ZjA1ZjBiNmJjMjQ3NDNjZWZhZjQwMzhiZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8PasOZxQJwJGGO4YJhPV33SI9/k YRNyI/yIObXNTMy5fBuyrC6rtcqDyCsDz8PC1Xiwx+3OwiJwDnxbA++KZk376PQe FOT6AFJJARGyPRHMVa1cdvXxTCEQsgQW1i6tRYD2coF1UOykSCLbu3m9Cr0g5Nuj aCCwfbAy9/QK56sxxTrf2sz0VHBdjJTI2qGP1j3Pqp4SJ4wmaeIY+u8fUmuA7zNZ jFoLkrfzQVHFvX2WLsKUtiOXMTVaXGQ/uq+I7RejVgB7dH4D+OF2HfRuJSZ9y7Qc W1yZcRqa3H12wvSpDDZZftT5FJ+Z+VwRo6XHEkwH9Tfw8ov0GsxETyCnOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBKz3/R7G8F8La8JHQ8769AOL5mMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcZa16K8 ONuYHWnYYt5s1g+0DLRkzb7Yw1UqN8Q7Q3p/rK3IdXOU/+jXfIizxCbf2uDDGOc8 0zDlJiHYpnbq9sI69gWQ4hQoPEOXB4UPcA8PShNys5HusTGX7xjAAN6ca3AvTGZv qXrnFc+bzT6XH6zv2EBPs9wgwxurCrURdtZb1vUrxGWKrR47GrHCtA2O69WgCZVp H8EfQGzqzywAOYQsW9MO/Nhlybx7UGOY8DcPLkOtjN4BSwhSHoBvdkVTkX4wJnt0 KkkhYDSDN9Qo05s5g7fvavIyq4C+H6IiT3NLgiwRjWiaZPAdor6ZyLucsQGrFLOT 6aL4uFvoyyeFIg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:14:11 2025 by rpki-client