This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json) Hash identifier: d29cKn+lGilkKiWznGlSlSPEtAKJ6u0dYrwUabxnGVg= Subject key identifier: 15:FA:4B:0B:D5:62:37:E1:14:D9:55:D3:E3:AC:7C:B0:A7:B3:34:AB Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 019B378E60B020B7E028BFC3DBEAD9FBA41F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft Manifest number: 16F8 Signing time: Fri 19 Dec 2025 17:00:36 +0000 Manifest this update: Fri 19 Dec 2025 17:00:36 +0000 Manifest next update: Sat 20 Dec 2025 17:00:36 +0000 Files and hashes: 1: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: UbssotM0PunG/ZUomcT7zIGp6GKqr2RPVy9fVy3Ce1Y=) 2: 41fVJkrPbHKQA079D4QVuoSoMHA.roa (hash: sr+TybZqUtIImaDgTqztSGD1XE6oloq4BZ2M4Xpg+u0=) 3: 4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa (hash: vXT1uBYUu9e7P+u/IiXkrVdl2Zw3UbzSeW2UWFK34Jw=) 4: 6klSWkjjUTbGuPtDfN8cALab9cs.roa (hash: sdgQjkXScGhQKnR4al8+skMwfxtoqagBTslhZkfSKNY=) 5: B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa (hash: X2c/+qNKKXp5+FBng9aKxlFFZbDBWHiqkfhHgQbP6bg=) 6: C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa (hash: MAmDjDLmFQyW+O4vZbG4q4tWTwrvQlayeoQlXr+Fu/8=) 7: DJ2HKm_1c1O48zC-cc12FURV1-w.roa (hash: odPYR1sTJx4nskAcxBKfAydZplTxWpbfAnjmQhPzJX8=) 8: GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa (hash: lOFhsoN8S3GIIvzatAuS7mkyT16CCVPA77MjKa8aWWc=) 9: RZCNuFYkMVfet6khSeCWtqT4r3s.roa (hash: bz5sfARWaL0oWhzQTAMOexVtHrjfBeAF+vBi8eYpl/U=) 10: Sn1YHf-JTelJa8AbFEu9eCrJc-Y.roa (hash: 4RQ4/nSSdbUjaSMtOe+F2ienAydzSYTXwrbRmuUcEJY=) 11: UE3TFsD19f6wQr0gTHDaiwhGdqA.roa (hash: h9a9K3MMF0WQfDnzSvLb5P+n54cp7dIKew88pGDYldk=) 12: VicyF_0e_bvvcn0fKM8q40zu1n8.roa (hash: C5AQCG/2PEYP519Z6IOs4YDYOnLl0s41qulpvbJvJ4g=) 13: _HxOSGDLp42EFmYvwzkWMgsUDRc.roa (hash: ld3Ed4rdMoSUbT+R2+5BJt8zZUTSFFBqMJ22iFdBG+s=) 14: cHLxjuzlgoGDINIVaFsru4PZ9BE.roa (hash: o3eUI2kqgbIKISwJ6D+XZ6uUN50wRiiahX5yY1sTPn4=) 15: lknEfiAWsTgVxunxpJ4Cim6vi_Y.roa (hash: 9nT6QBaPn6YGSLcfszLUc2cPb60rXG8wS9MlLTeVBhw=) 16: mdB3D_zcc3ZMQewiv3J0UZ_sUlo.roa (hash: NsB59ITpkzoeK9pRuPozIMWrvt6Lae+60ChrUSCRg50=) 17: mjTSWLEuvIRJ-mDUVhSblHWE7N4.roa (hash: rmzWSKN3Yb/xA6p/q8UxEXQjDhun2rkoNnE76zOjZHo=) 18: pxtXnWk-oYZ7Qby89ddSCgu91ts.roa (hash: RB8UdezmP543bft1AFoJ1CEu6eopqGc7lCF9jSa1eTc=) 19: q74_W6xdG6goIDi1c08_8gJ6uTE.roa (hash: pxdR0KPAM6OXX14ayHaIWzZB+fjREFkJhs6uGstYGhI=) 20: r3Ck7fpoOKp57Mk1jJgw8XHWAxg.roa (hash: jDsvxvKf5uFW/4bW6b3NOwjRJy48sDgwtQTJJofZqGM=) 21: v99_kaWjoTKnpnOcBogb8Emjk4M.roa (hash: unshnZnS3tg5XPSrGj9Iy+gxnhESQoD/3z5Y8oIxogo=) 22: y38_fk_dl6De5uovg7WKuAzPolA.roa (hash: PsHTMj/SkJczqFC8znjT596YhybynG/bm1yXYsS6Cxs=) 23: z6d9djVL2RnXuevi6Ot8E8e62tc.roa (hash: o9Kh9fFp+5NbfQXFw6W0ABs1khVR+g751jXSLlxLU4c=) 24: zUeLco_9U8ifNR5PMJI3zpijW74.roa (hash: 3lduL1beP27BPGmbMBwONs6g5YeSTXx0lXyH1JulpN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:60:b0:20:b7:e0:28:bf:c3:db:ea:d9:fb:a4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Dec 19 17:00:36 2025 GMT Not After : Dec 20 17:00:36 2025 GMT Subject: CN=15fa4b0bd56237e114d955d3e3ac7cb0a7b334ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9c:6b:d4:bf:66:5e:38:84:24:a8:d1:b6:00: 3c:28:ea:99:7e:79:e7:ec:45:1b:dd:75:5c:b4:bf: a9:67:fb:69:61:b2:21:47:c1:7b:d1:b5:48:5f:73: 1f:0e:82:db:eb:ac:29:50:eb:c4:6b:bb:83:c1:a5: e8:3d:c4:29:b8:46:bb:72:dd:b4:cb:f2:61:66:95: 3e:69:ce:47:1c:af:a0:3b:4c:7d:5b:f0:be:40:4b: dc:83:e8:70:fd:93:7f:f5:e5:da:f2:01:a7:78:62: ee:b6:f6:6a:57:41:c2:03:f2:14:af:3e:6e:04:0d: 67:46:24:a3:c7:4e:40:2e:36:ae:32:ac:58:f5:43: f4:55:00:9b:3e:a5:8e:f9:60:6f:28:88:c3:3d:2c: ea:a4:b9:a7:e3:7a:ec:5f:fd:8b:f8:84:a3:f9:0d: fd:91:97:bf:2d:2c:70:c0:30:fd:e5:0b:20:d1:16: 80:78:53:7d:48:ba:4d:67:3e:fe:d3:93:c2:69:2b: c3:fc:bc:7a:96:fc:8b:46:a5:a1:7b:50:74:f8:70: d3:12:4d:e6:bd:3b:c6:a1:64:91:a8:5d:f2:91:50: 89:d9:56:16:91:fa:e9:3e:49:04:44:0d:68:b4:51: b6:01:42:c9:8b:b4:50:c1:16:d0:e9:3e:b9:68:1b: 1f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FA:4B:0B:D5:62:37:E1:14:D9:55:D3:E3:AC:7C:B0:A7:B3:34:AB X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b0:62:37:41:b3:e5:49:37:54:43:15:6f:6a:9e:64:d6:7e: 14:eb:40:e9:9e:04:19:ce:37:5f:4d:c8:25:f4:d7:06:32:19: 46:00:b5:d6:93:6d:b3:4c:71:82:0d:cd:c7:cf:a8:d3:70:85: a0:d5:ba:3b:9d:0e:94:51:ab:95:ae:0b:72:ac:2b:59:e6:f3: 90:37:f0:46:cc:56:7b:25:71:66:0e:44:37:b1:52:b9:db:5b: 1f:41:c2:6f:a0:6a:ba:0a:4b:50:84:8d:5e:98:42:a2:dc:f0: dd:6d:b3:e5:9d:b5:6a:eb:d1:97:06:a2:8d:bd:25:66:af:de: e9:f3:db:b2:32:ec:92:08:e7:7c:80:3a:f7:51:1f:08:1a:d3: 52:5f:4e:81:7d:39:dd:52:da:e9:ab:02:22:03:55:06:6d:d0: ef:18:fa:f0:02:05:c8:ba:90:6d:ef:3b:88:03:e7:06:c6:1a: 74:6c:aa:a2:d8:5d:40:51:16:92:e9:0f:8a:eb:06:bd:7b:30: 7c:0c:6f:c1:50:80:da:b1:75:bb:39:4e:00:48:f9:b9:fe:38: dd:36:80:86:c1:7e:1b:c0:72:4c:5f:95:73:64:e5:75:f3:a4: 4c:21:3e:e6:35:36:71:02:59:91:c5:40:a8:44:3d:21:28:42: c9:96:be:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jmCwILfgKL/D2+rZ+6QfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjUxMjE5MTcwMDM2WhcNMjUxMjIwMTcwMDM2WjAzMTEwLwYDVQQD EygxNWZhNGIwYmQ1NjIzN2UxMTRkOTU1ZDNlM2FjN2NiMGE3YjMzNGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Zxr1L9mXjiEJKjRtgA8KOqZfnnn 7EUb3XVctL+pZ/tpYbIhR8F70bVIX3MfDoLb66wpUOvEa7uDwaXoPcQpuEa7ct20 y/JhZpU+ac5HHK+gO0x9W/C+QEvcg+hw/ZN/9eXa8gGneGLutvZqV0HCA/IUrz5u BA1nRiSjx05ALjauMqxY9UP0VQCbPqWO+WBvKIjDPSzqpLmn43rsX/2L+ISj+Q39 kZe/LSxwwDD95Qsg0RaAeFN9SLpNZz7+05PCaSvD/Lx6lvyLRqWhe1B0+HDTEk3m vTvGoWSRqF3ykVCJ2VYWkfrpPkkERA1otFG2AULJi7RQwRbQ6T65aBsfNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBX6SwvVYjfhFNlV0+OsfLCnszSrMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLBiN0Gz 5Uk3VEMVb2qeZNZ+FOtA6Z4EGc43X03IJfTXBjIZRgC11pNts0xxgg3Nx8+o03CF oNW6O50OlFGrla4LcqwrWebzkDfwRsxWeyVxZg5EN7FSudtbH0HCb6BqugpLUISN XphCotzw3W2z5Z21auvRlwaijb0lZq/e6fPbsjLskgjnfIA691EfCBrTUl9OgX05 3VLa6asCIgNVBm3Q7xj68AIFyLqQbe87iAPnBsYadGyqothdQFEWkukPiusGvXsw fAxvwVCA2rF1uzlOAEj5uf443TaAhsF+G8ByTF+Vc2TldfOkTCE+5jU2cQJZkcVA qEQ9IShCyZa+/g== -----END CERTIFICATE-----Generated at Sat Dec 20 02:57:09 2025 by rpki-client