This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json) Hash identifier: X+vDnFrjRzIAt7BAV071R6uLYviW00EL3GGDhYI+eLI= Subject key identifier: F0:6A:92:D6:77:F0:10:08:C1:ED:6C:57:84:2B:D8:31:06:23:E3:2E Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 019B47023463D2CA888D06E213839287E710 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft Manifest number: 1700 Signing time: Mon 22 Dec 2025 17:01:25 +0000 Manifest this update: Mon 22 Dec 2025 17:01:25 +0000 Manifest next update: Tue 23 Dec 2025 17:01:25 +0000 Files and hashes: 1: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: 9Js64m7ehhq+Ia3F3b6K9NJXHUhjevydiPHjW2XR5Hw=) 2: 41fVJkrPbHKQA079D4QVuoSoMHA.roa (hash: sr+TybZqUtIImaDgTqztSGD1XE6oloq4BZ2M4Xpg+u0=) 3: 4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa (hash: vXT1uBYUu9e7P+u/IiXkrVdl2Zw3UbzSeW2UWFK34Jw=) 4: 6klSWkjjUTbGuPtDfN8cALab9cs.roa (hash: sdgQjkXScGhQKnR4al8+skMwfxtoqagBTslhZkfSKNY=) 5: B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa (hash: X2c/+qNKKXp5+FBng9aKxlFFZbDBWHiqkfhHgQbP6bg=) 6: C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa (hash: MAmDjDLmFQyW+O4vZbG4q4tWTwrvQlayeoQlXr+Fu/8=) 7: DJ2HKm_1c1O48zC-cc12FURV1-w.roa (hash: odPYR1sTJx4nskAcxBKfAydZplTxWpbfAnjmQhPzJX8=) 8: GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa (hash: lOFhsoN8S3GIIvzatAuS7mkyT16CCVPA77MjKa8aWWc=) 9: RZCNuFYkMVfet6khSeCWtqT4r3s.roa (hash: bz5sfARWaL0oWhzQTAMOexVtHrjfBeAF+vBi8eYpl/U=) 10: Sn1YHf-JTelJa8AbFEu9eCrJc-Y.roa (hash: 4RQ4/nSSdbUjaSMtOe+F2ienAydzSYTXwrbRmuUcEJY=) 11: UE3TFsD19f6wQr0gTHDaiwhGdqA.roa (hash: h9a9K3MMF0WQfDnzSvLb5P+n54cp7dIKew88pGDYldk=) 12: VicyF_0e_bvvcn0fKM8q40zu1n8.roa (hash: C5AQCG/2PEYP519Z6IOs4YDYOnLl0s41qulpvbJvJ4g=) 13: _HxOSGDLp42EFmYvwzkWMgsUDRc.roa (hash: ld3Ed4rdMoSUbT+R2+5BJt8zZUTSFFBqMJ22iFdBG+s=) 14: cHLxjuzlgoGDINIVaFsru4PZ9BE.roa (hash: o3eUI2kqgbIKISwJ6D+XZ6uUN50wRiiahX5yY1sTPn4=) 15: lknEfiAWsTgVxunxpJ4Cim6vi_Y.roa (hash: 9nT6QBaPn6YGSLcfszLUc2cPb60rXG8wS9MlLTeVBhw=) 16: mdB3D_zcc3ZMQewiv3J0UZ_sUlo.roa (hash: NsB59ITpkzoeK9pRuPozIMWrvt6Lae+60ChrUSCRg50=) 17: mjTSWLEuvIRJ-mDUVhSblHWE7N4.roa (hash: rmzWSKN3Yb/xA6p/q8UxEXQjDhun2rkoNnE76zOjZHo=) 18: pxtXnWk-oYZ7Qby89ddSCgu91ts.roa (hash: RB8UdezmP543bft1AFoJ1CEu6eopqGc7lCF9jSa1eTc=) 19: q74_W6xdG6goIDi1c08_8gJ6uTE.roa (hash: pxdR0KPAM6OXX14ayHaIWzZB+fjREFkJhs6uGstYGhI=) 20: r3Ck7fpoOKp57Mk1jJgw8XHWAxg.roa (hash: jDsvxvKf5uFW/4bW6b3NOwjRJy48sDgwtQTJJofZqGM=) 21: v99_kaWjoTKnpnOcBogb8Emjk4M.roa (hash: unshnZnS3tg5XPSrGj9Iy+gxnhESQoD/3z5Y8oIxogo=) 22: y38_fk_dl6De5uovg7WKuAzPolA.roa (hash: PsHTMj/SkJczqFC8znjT596YhybynG/bm1yXYsS6Cxs=) 23: z6d9djVL2RnXuevi6Ot8E8e62tc.roa (hash: o9Kh9fFp+5NbfQXFw6W0ABs1khVR+g751jXSLlxLU4c=) 24: zUeLco_9U8ifNR5PMJI3zpijW74.roa (hash: 3lduL1beP27BPGmbMBwONs6g5YeSTXx0lXyH1JulpN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:34:63:d2:ca:88:8d:06:e2:13:83:92:87:e7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Dec 22 17:01:25 2025 GMT Not After : Dec 23 17:01:25 2025 GMT Subject: CN=f06a92d677f01008c1ed6c57842bd8310623e32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6b:6d:92:85:f0:90:d6:cb:57:4c:25:20:1f: 20:7c:74:d5:91:f2:d8:fd:58:3a:7c:d9:f0:04:c3: 69:37:4f:d1:05:9a:60:f5:03:91:41:a8:ae:92:7e: b1:d8:00:95:6b:f3:99:60:76:93:f6:cc:8e:d1:14: 24:58:dc:41:05:02:e4:d9:c1:14:65:60:d7:eb:a8: cd:f0:a3:79:f8:46:9b:c7:86:fe:8a:83:6f:c7:9f: 24:57:82:a4:98:a8:8f:25:48:0d:b7:d7:70:7f:ef: 96:5c:48:42:fe:e8:07:3a:1c:c3:54:94:d8:b1:4f: 24:5e:70:38:26:7c:cb:e5:a9:aa:6b:0b:b3:5d:17: 82:f7:27:32:4b:69:5a:d1:27:e4:1d:3a:bd:5e:72: 4d:f1:57:c1:27:5f:6e:e5:2f:ed:dc:ac:a8:4c:02: ed:61:da:87:05:c6:90:78:b9:71:5a:c9:09:eb:07: bc:e0:62:2c:f5:32:8f:40:d5:bf:63:96:e6:a8:17: f5:f6:d7:60:ec:39:5f:1d:fb:75:f0:60:fd:e9:8c: 4d:31:f2:bb:fe:50:9e:97:c1:d7:00:8d:31:4b:ff: fd:ac:a8:f8:b3:78:30:12:65:b6:00:4e:ca:f1:88: 6c:91:03:10:16:2d:87:df:9e:9b:1d:8d:e7:75:00: 62:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6A:92:D6:77:F0:10:08:C1:ED:6C:57:84:2B:D8:31:06:23:E3:2E X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:fd:a4:3c:7a:a1:1a:2a:3f:e5:04:99:88:2d:94:49:4c:3c: 88:e3:2f:14:c6:a6:4f:39:77:68:5e:0b:77:c3:f3:d6:c6:af: 59:4a:91:04:4c:91:82:78:0d:38:1b:ed:84:0e:1e:5d:ee:4e: c6:93:14:53:77:f1:84:95:d5:29:14:67:1e:4d:e6:e1:ee:1a: 32:18:2b:36:90:8e:4b:e5:e3:53:4c:83:0d:a9:6d:11:aa:53: 70:a4:a7:55:cc:c9:77:5d:46:61:a8:c5:69:86:4c:a2:fc:a9: 01:63:c4:08:45:a7:9f:11:c4:88:7f:c8:98:f4:f8:a7:f2:d5: 45:bc:73:19:30:88:82:d4:0f:72:78:7b:69:89:d4:7b:80:04: cb:56:89:55:a2:df:5f:44:eb:ca:1f:e7:dd:17:f0:aa:25:6e: 1f:8d:a9:0c:a6:23:c9:34:83:ad:57:6f:d1:8e:da:ab:2a:1d: f1:c2:4e:93:e6:b1:5a:4e:e4:8e:7e:5a:f8:8d:02:1b:f7:76: a0:22:30:56:4f:cb:e2:00:e2:fd:99:af:73:a5:71:b1:2c:08: 10:fd:fb:ba:f4:06:48:66:88:3c:c3:c8:6d:75:a0:21:6b:f7: 44:00:d2:a5:d4:d5:81:02:41:fd:07:c2:65:42:06:bd:c0:d8: 7a:6a:1a:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAjRj0sqIjQbiE4OSh+cQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjUxMjIyMTcwMTI1WhcNMjUxMjIzMTcwMTI1WjAzMTEwLwYDVQQD EyhmMDZhOTJkNjc3ZjAxMDA4YzFlZDZjNTc4NDJiZDgzMTA2MjNlMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WttkoXwkNbLV0wlIB8gfHTVkfLY /Vg6fNnwBMNpN0/RBZpg9QORQaiukn6x2ACVa/OZYHaT9syO0RQkWNxBBQLk2cEU ZWDX66jN8KN5+Eabx4b+ioNvx58kV4KkmKiPJUgNt9dwf++WXEhC/ugHOhzDVJTY sU8kXnA4JnzL5amqawuzXReC9ycyS2la0SfkHTq9XnJN8VfBJ19u5S/t3KyoTALt YdqHBcaQeLlxWskJ6we84GIs9TKPQNW/Y5bmqBf19tdg7DlfHft18GD96YxNMfK7 /lCel8HXAI0xS//9rKj4s3gwEmW2AE7K8YhskQMQFi2H356bHY3ndQBi1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBqktZ38BAIwe1sV4Qr2DEGI+MuMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVP2kPHqh Gio/5QSZiC2USUw8iOMvFMamTzl3aF4Ld8Pz1savWUqRBEyRgngNOBvthA4eXe5O xpMUU3fxhJXVKRRnHk3m4e4aMhgrNpCOS+XjU0yDDaltEapTcKSnVczJd11GYajF aYZMovypAWPECEWnnxHEiH/ImPT4p/LVRbxzGTCIgtQPcnh7aYnUe4AEy1aJVaLf X0Tryh/n3RfwqiVuH42pDKYjyTSDrVdv0Y7aqyod8cJOk+axWk7kjn5a+I0CG/d2 oCIwVk/L4gDi/Zmvc6VxsSwIEP37uvQGSGaIPMPIbXWgIWv3RADSpdTVgQJB/QfC ZUIGvcDYemoaBQ== -----END CERTIFICATE-----Generated at Mon Dec 22 22:49:57 2025 by rpki-client