This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json) Hash identifier: KndbW/vp9rXTTv6XHNVY3sQFSShfDvfGx9vrd1f4atQ= Subject key identifier: 92:D5:4A:9D:69:C1:87:C7:3B:48:E2:AF:50:80:E6:BD:8F:F0:96:B2 Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07 Certificate serial: 019B4C2801B45822CCF66B2A2AFF780D7E9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft Manifest number: 0333 Signing time: Tue 23 Dec 2025 17:00:48 +0000 Manifest this update: Tue 23 Dec 2025 17:00:48 +0000 Manifest next update: Wed 24 Dec 2025 17:00:48 +0000 Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: /WRwak9eiqWc4/kSMrMUSLswJ0+qZaTAmSlVLU4yPqs=) 2: YxHERBDqRVzINYaZYx24sGQ5DjU.roa (hash: z9vAtTxka6hlJ3v+MIB3sxbWlZ+xxPgWCTfz3Y+M29Q=) 3: f9n1-MsvFF9hgPCEtznTrREmBS4.roa (hash: nLwX0ooKqTqap8AB7jQ/dh56XcE7TbuyoiwolR5U2oI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:01:b4:58:22:cc:f6:6b:2a:2a:ff:78:0d:7e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07 Validity Not Before: Dec 23 17:00:48 2025 GMT Not After : Dec 24 17:00:48 2025 GMT Subject: CN=92d54a9d69c187c73b48e2af5080e6bd8ff096b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:f5:cc:c0:75:5b:63:ab:4d:0b:e5:ef:44: 26:e4:ea:8e:f7:a0:4c:57:18:40:fa:29:63:65:b2: 4c:54:20:8d:e0:8c:0a:6d:13:64:5e:46:78:cf:d8: d1:75:5d:8e:88:98:25:03:6c:2a:02:33:31:04:a0: 1e:24:1e:5a:d1:2e:12:89:74:f2:0c:3d:0e:c2:74: fd:bd:ab:13:4d:90:d3:74:de:2c:25:03:b8:01:a0: f1:52:98:2a:f2:56:a7:64:18:39:7e:a7:bf:a0:5c: 59:9a:8e:f4:ce:87:aa:04:c2:14:11:eb:f6:ff:13: 9c:cd:64:8a:6c:af:b5:06:3a:54:7b:64:b1:49:27: 98:ed:b5:f8:89:31:3a:74:86:a7:6e:8b:8c:2f:20: 17:9f:be:4f:26:4e:f9:55:73:04:15:9c:f1:f7:2f: a9:e5:6f:f2:d2:e5:ac:9a:5e:df:72:f2:e0:21:dc: 87:ce:3f:88:3a:21:cd:b4:ce:5e:52:ff:a6:e2:91: 64:38:cc:8e:c2:76:f0:a4:f5:ab:43:3f:6c:02:4a: d9:21:87:ee:5e:4b:1c:e2:14:40:c2:6f:e1:73:c1: 58:4b:17:b5:d5:32:e9:df:c6:81:8b:be:59:27:69: de:b9:85:fa:16:16:27:51:ca:89:68:c7:90:6c:59: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D5:4A:9D:69:C1:87:C7:3B:48:E2:AF:50:80:E6:BD:8F:F0:96:B2 X509v3 Authority Key Identifier: keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ff:a6:a4:b1:3a:6c:02:05:c2:fd:69:49:13:3d:6f:74:1e: d6:9d:cc:6b:26:c9:5f:16:47:f0:59:9c:e2:38:cb:e0:6e:e6: bf:ad:5e:5d:0a:c8:c4:b4:73:12:70:22:21:b7:79:e0:c7:6d: 87:0a:d2:a3:26:4d:e2:7f:f4:dc:c0:00:fb:22:80:31:52:8c: f9:5e:a4:8c:e1:5b:b5:1d:52:5c:49:b7:43:94:b4:13:3a:5e: 4e:e6:ac:c6:4d:29:1f:1d:67:1f:83:b6:91:27:78:b7:4f:93: 94:99:62:a3:5e:0c:a6:5f:00:2c:f0:57:da:3a:70:a2:6d:ec: 64:26:8a:9b:81:77:5b:63:76:2f:92:06:8a:85:85:36:66:50: 99:22:d4:14:7b:2f:14:ed:f6:6c:16:bd:27:bb:34:a9:f4:53: 5d:ae:f4:b1:a4:93:af:57:c2:94:b0:9e:a4:ce:4d:29:22:29: f1:58:1e:b6:42:1a:83:e7:bf:2b:08:3e:e7:c1:d3:1e:5c:ae: ca:55:a4:af:2f:9a:e5:ae:e3:25:b6:89:23:77:07:9c:4a:99: d1:0f:a8:e2:85:af:13:fa:25:dd:7a:e7:bc:68:38:29:37:46: 20:b6:69:8f:c2:56:77:f9:0c:33:66:7d:b3:91:af:13:11:df: 9d:64:ed:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKAG0WCLM9msqKv94DX6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWIzOTRhYWUwODM2ZDM0MzQxZjdhZDMxOTQ5NDc2NWFi NTZiMDcwHhcNMjUxMjIzMTcwMDQ4WhcNMjUxMjI0MTcwMDQ4WjAzMTEwLwYDVQQD Eyg5MmQ1NGE5ZDY5YzE4N2M3M2I0OGUyYWY1MDgwZTZiZDhmZjA5NmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeb1zMB1W2OrTQvl70Qm5OqO96BM VxhA+iljZbJMVCCN4IwKbRNkXkZ4z9jRdV2OiJglA2wqAjMxBKAeJB5a0S4SiXTy DD0OwnT9vasTTZDTdN4sJQO4AaDxUpgq8lanZBg5fqe/oFxZmo70zoeqBMIUEev2 /xOczWSKbK+1BjpUe2SxSSeY7bX4iTE6dIanbouMLyAXn75PJk75VXMEFZzx9y+p 5W/y0uWsml7fcvLgIdyHzj+IOiHNtM5eUv+m4pFkOMyOwnbwpPWrQz9sAkrZIYfu Xksc4hRAwm/hc8FYSxe11TLp38aBi75ZJ2neuYX6FhYnUcqJaMeQbFl4pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLVSp1pwYfHO0jir1CA5r2P8JayMB8GA1UdIwQY MBaAFNzrOUquCDbTQ0H3rTGUlHZatWsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEt NDBjODZiMzJlYjIyLzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEtNDBjODZiMzJlYjIy LzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdP+mpLE6 bAIFwv1pSRM9b3Qe1p3MaybJXxZH8Fmc4jjL4G7mv61eXQrIxLRzEnAiIbd54Mdt hwrSoyZN4n/03MAA+yKAMVKM+V6kjOFbtR1SXEm3Q5S0EzpeTuasxk0pHx1nH4O2 kSd4t0+TlJlio14Mpl8ALPBX2jpwom3sZCaKm4F3W2N2L5IGioWFNmZQmSLUFHsv FO32bBa9J7s0qfRTXa70saSTr1fClLCepM5NKSIp8VgetkIag+e/Kwg+58HTHlyu ylWkry+a5a7jJbaJI3cHnEqZ0Q+o4oWvE/ol3XrnvGg4KTdGILZpj8JWd/kMM2Z9 s5GvExHfnWTtDg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:33:24 2025 by rpki-client