This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: vh+EN/r/wfnEPxOVVRCxP9D4ez96cxtFytpWu+jpowY= Subject key identifier: 52:45:02:EA:5B:65:7C:76:65:E5:E0:FD:1A:3D:56:2B:DE:08:54:2C Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B360DEEB1042578963C36C2009EF7A7EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0B61 Signing time: Fri 19 Dec 2025 10:00:41 +0000 Manifest this update: Fri 19 Dec 2025 10:00:41 +0000 Manifest next update: Sat 20 Dec 2025 10:00:41 +0000 Files and hashes: 1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=) 2: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=) 3: 29CwtGRC06e--CmAyy8KOuiUHAM.roa (hash: zR5RLcYSkihJ6JtnaU1t+9weCiK1A6KL+5cTWo4Xkmo=) 4: 2lfZ96EfoSxZidpJ-kV9Z-G436U.roa (hash: F82HgUa3PdEQeyTXy6bMjHBnuElJ4e46eI58r2GDkK8=) 5: 3_vCPXMxLInxH4KSM9i76JRc3wI.roa (hash: KQnR/Rw1eBymAhNe+aNyzbKPfZJwc7vaoArCKIxxfkQ=) 6: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=) 7: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=) 8: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=) 9: CIRls3stTp9BOjHce35suioz25Y.crl (hash: p7jgDz7j/OYsRq0gVYsbl6emqmo3LL4OOq1YotESP9w=) 10: FmMgP7ha8iX2FfDMIFk9KP0qkts.roa (hash: Ro1xRk0724SJQafKJQzEcvMjFfbM36IbDNwvGX/5JdQ=) 11: Gg2fBgym98lzpgGOw525Psta200.roa (hash: ITzizygNHqGF0ltRY0tg7IiIoexFvZtpbGrKT1PyRcQ=) 12: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=) 13: IBa2FfCm0NXr_jkTnl9W4lKJHbQ.roa (hash: g/fWzUMptSij5CbXIEyMw6oyGmVps6iOuy9vK1HPOHA=) 14: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=) 15: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=) 16: OzfjIdhzh7gpL6YR6SckdfTkc-4.roa (hash: qjn8XFFM1Wpyy8tyUnVazb1P7nlXBpVe5zicqRab8VA=) 17: P1GfPpRMWO0DN1ayjFsF8s42h0U.roa (hash: 8AiPsJ46Sh6eUO7JJzaL6h8U9SkUyiDH6w5ycG2ZG0Q=) 18: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=) 19: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (hash: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=) 20: Uj8njsPYdgRZYjZt_ospB351jos.roa (hash: LYqRDwSI7zwNyZiE9YMTNwUElSgWURvGf1f5eOoJElY=) 21: WC4_lYuHTpurPHxx7xXCOV8C_8Q.roa (hash: zkwNLP7Zeu7wTnylhn80zQ1yae5lpu3lo409yeFDOOA=) 22: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=) 23: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=) 24: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=) 25: mAJpb-FsFkz7dybYs4PeIWecwc4.roa (hash: wMuP/t1rmuAKd01y5S1TPonT58b58o5bTHyhjOQ7ywU=) 26: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=) 27: otTutevZuJ6eolnFpw2U1FHmlNA.roa (hash: MYGZzYKczjODGic9nVPSjxLsW749qLjihm8rlEBU9CQ=) 28: trDoW8Z1MRhTv9tOyYS210O7SJY.roa (hash: K9LbB6jGwB7Ef2NtyGyqBKGz0fJaUjDAkk88RRrAaWQ=) 29: vLt31u2LuYunvD1Z_qD2Pny8Vm4.roa (hash: +q32KVm8qCu/bkMttiIT0OppWTKc8bPsrl6PWUt3FeI=) 30: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=) 31: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=) 32: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0d:ee:b1:04:25:78:96:3c:36:c2:00:9e:f7:a7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Dec 19 10:00:41 2025 GMT Not After : Dec 20 10:00:41 2025 GMT Subject: CN=524502ea5b657c7665e5e0fd1a3d562bde08542c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:56:b2:1b:03:0e:f3:a0:df:fc:e3:69:4b: f3:21:6f:7a:02:7f:c8:37:c6:b7:c5:6b:ab:f2:45: c1:59:4f:1d:eb:c7:9e:24:3c:71:e6:42:60:2d:3e: d5:e7:e1:12:3b:de:59:8b:59:a7:a2:85:8f:c0:46: fd:da:11:35:01:f3:4d:cc:d8:f1:60:d9:14:48:5b: bc:a4:be:46:42:61:5c:96:a4:b4:9a:51:36:02:b0: b3:14:07:2c:c7:8e:7e:0c:ba:be:e5:09:9d:e4:c5: 5c:15:73:d2:08:c4:1a:8e:22:b0:56:d4:32:db:2c: ae:e6:07:25:e9:da:bc:06:0c:02:52:56:cf:26:8e: 2d:f4:68:0e:dc:59:da:dd:bd:dd:fd:23:b1:c2:16: 6a:e9:74:c8:19:80:30:bb:02:7f:f6:10:a3:ab:fa: be:09:0c:5f:48:9c:fb:7e:bc:5d:d9:d1:a4:f8:a3: 2f:ba:8c:9c:ad:4f:97:6c:0e:a4:53:e1:9d:54:e1: fe:59:55:f8:ae:03:24:f5:50:66:70:6b:52:7e:a8: 02:2f:8b:4f:f1:5b:5b:41:36:2e:db:0f:bd:c3:0e: 9c:3e:31:5c:51:bf:75:f6:bd:94:d3:0c:cb:bb:9f: d8:e3:3b:67:a9:0b:17:18:2a:dd:85:4e:08:eb:de: f8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:45:02:EA:5B:65:7C:76:65:E5:E0:FD:1A:3D:56:2B:DE:08:54:2C X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f5:08:2e:e6:b3:75:01:88:51:1d:46:2c:e4:7a:0e:f3:e9: a9:f1:0a:55:af:fa:f4:2c:17:78:fb:97:28:28:b1:ad:30:40: e6:01:ad:a0:ac:4d:9b:c2:9a:72:60:f7:33:0c:d9:74:9a:ee: dd:ec:43:43:17:e0:6b:d3:c7:ae:3f:ec:ee:1f:2d:8d:e4:30: ca:5f:79:1c:27:67:88:c6:1e:5b:8c:c2:cd:24:e6:e0:ad:06: 92:55:09:98:f8:28:b0:5d:95:f4:11:88:9a:fd:ac:67:97:26: 4d:b6:bf:0f:9b:0b:72:14:d5:55:12:b5:20:ad:2f:9a:2a:24: 82:74:19:0c:6b:95:0e:d0:f8:f6:d4:b6:b7:4c:dd:a2:7d:8f: 0b:fb:18:49:bb:4c:71:dd:3b:31:32:87:23:0f:99:c4:c6:11: 88:af:5a:e6:16:0b:ac:6f:28:19:dc:29:8a:fa:01:22:8f:f0: 65:67:f2:54:d7:52:90:93:69:ba:1a:37:4e:17:43:0d:90:71: c5:39:7f:73:a9:a8:90:d9:15:6a:ec:a0:e1:e5:68:1e:76:90: da:f0:c2:1b:fa:24:87:34:0e:af:67:f1:ab:18:32:ca:4c:27: a1:73:41:f5:8f:da:c9:9c:19:84:16:b6:af:5d:26:45:fc:b8: f5:5b:78:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2De6xBCV4ljw2wgCe96fvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjUxMjE5MTAwMDQxWhcNMjUxMjIwMTAwMDQxWjAzMTEwLwYDVQQD Eyg1MjQ1MDJlYTViNjU3Yzc2NjVlNWUwZmQxYTNkNTYyYmRlMDg1NDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r9WshsDDvOg3/zjaUvzIW96An/I N8a3xWur8kXBWU8d68eeJDxx5kJgLT7V5+ESO95Zi1mnooWPwEb92hE1AfNNzNjx YNkUSFu8pL5GQmFclqS0mlE2ArCzFAcsx45+DLq+5Qmd5MVcFXPSCMQajiKwVtQy 2yyu5gcl6dq8BgwCUlbPJo4t9GgO3Fna3b3d/SOxwhZq6XTIGYAwuwJ/9hCjq/q+ CQxfSJz7frxd2dGk+KMvuoycrU+XbA6kU+GdVOH+WVX4rgMk9VBmcGtSfqgCL4tP 8VtbQTYu2w+9ww6cPjFcUb919r2U0wzLu5/Y4ztnqQsXGCrdhU4I69745wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJFAupbZXx2ZeXg/Ro9ViveCFQsMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPUILuaz dQGIUR1GLOR6DvPpqfEKVa/69CwXePuXKCixrTBA5gGtoKxNm8KacmD3MwzZdJru 3exDQxfga9PHrj/s7h8tjeQwyl95HCdniMYeW4zCzSTm4K0GklUJmPgosF2V9BGI mv2sZ5cmTba/D5sLchTVVRK1IK0vmiokgnQZDGuVDtD49tS2t0zdon2PC/sYSbtM cd07MTKHIw+ZxMYRiK9a5hYLrG8oGdwpivoBIo/wZWfyVNdSkJNpuho3ThdDDZBx xTl/c6mokNkVauyg4eVoHnaQ2vDCG/okhzQOr2fxqxgyykwnoXNB9Y/ayZwZhBa2 r10mRfy49Vt4HA== -----END CERTIFICATE-----Generated at Fri Dec 19 19:51:41 2025 by rpki-client