This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json) Hash identifier: w5EwdkOAIPV0lxa/2jv6688Uo0gXg3dPCX75purvexA= Subject key identifier: 1F:AE:7F:2E:D0:35:B9:E1:BC:6F:0E:27:63:2E:7A:C3:4E:80:A6:8D Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07 Certificate serial: 019B51F3252C88CB7FCEE1EA67F6F1F41550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft Manifest number: 0336 Signing time: Wed 24 Dec 2025 20:00:47 +0000 Manifest this update: Wed 24 Dec 2025 20:00:47 +0000 Manifest next update: Thu 25 Dec 2025 20:00:47 +0000 Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: g1mE+Ql95EDdr9w0arZ/6EJ7ujToRSrB1DlJEIoz/r8=) 2: YxHERBDqRVzINYaZYx24sGQ5DjU.roa (hash: z9vAtTxka6hlJ3v+MIB3sxbWlZ+xxPgWCTfz3Y+M29Q=) 3: f9n1-MsvFF9hgPCEtznTrREmBS4.roa (hash: nLwX0ooKqTqap8AB7jQ/dh56XcE7TbuyoiwolR5U2oI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:25:2c:88:cb:7f:ce:e1:ea:67:f6:f1:f4:15:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07 Validity Not Before: Dec 24 20:00:47 2025 GMT Not After : Dec 25 20:00:47 2025 GMT Subject: CN=1fae7f2ed035b9e1bc6f0e27632e7ac34e80a68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:59:23:88:e0:18:39:02:b4:2d:19:05:f6:82: 6e:1c:9b:1a:78:1b:7f:e1:01:83:b2:29:2f:73:2a: 67:6b:b1:0a:69:76:03:44:46:11:73:5b:94:25:3c: c9:3a:68:80:39:b3:2e:62:aa:07:30:12:61:2b:cb: 4b:26:2b:ac:33:4a:6d:8b:0f:3f:8f:8a:ca:dc:a3: c4:b4:42:76:50:3d:bc:46:67:e8:fc:79:9d:26:be: 38:3e:2f:0f:98:f1:3e:db:de:bd:ff:f6:84:b9:0f: 80:d4:c8:a1:c9:a3:44:e7:69:d2:93:f2:c9:85:e6: 9d:73:d9:3f:92:2b:ff:29:5d:dd:58:5d:28:7c:ad: da:e6:1e:7a:3d:9f:bf:f2:fb:e3:1e:6f:b3:9a:d0: 25:a9:64:03:90:59:7b:06:54:c0:c7:2f:89:5a:19: 19:1f:89:6e:15:07:da:5a:18:2c:65:3f:12:b8:f2: ca:0d:20:6d:04:7c:68:a4:2f:58:85:6e:3c:20:69: c4:0f:a8:58:1a:37:b8:ca:d2:db:d5:fd:3e:bc:8c: 77:e7:32:a4:0a:72:33:9c:6e:2c:74:58:dc:ca:5e: d6:95:ad:2d:8a:ae:ed:4b:58:ab:f5:73:02:85:e6: af:de:4c:42:bc:c0:47:50:a2:62:ae:c8:a8:3a:37: 2f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AE:7F:2E:D0:35:B9:E1:BC:6F:0E:27:63:2E:7A:C3:4E:80:A6:8D X509v3 Authority Key Identifier: keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:06:82:f1:9f:f2:43:4d:76:36:ac:27:b7:36:7a:c0:cb:10: 29:87:1e:27:fa:98:02:78:b9:0c:c4:84:4e:05:5d:0c:f0:2c: 23:9a:4e:a2:06:cc:18:02:22:f0:83:11:fd:93:5e:19:ab:b9: 12:dc:01:60:1b:3d:94:66:cc:2b:06:87:ff:0c:af:e5:a8:a7: 43:d9:64:51:90:29:45:ce:30:83:dd:d3:1f:64:d3:1b:e3:6f: b9:a6:75:b3:f7:79:fe:80:86:92:4f:de:88:0f:39:f3:4e:bc: 22:04:72:8e:c2:61:22:f5:d2:f4:fb:31:81:24:bd:2c:ca:4a: b5:18:b0:1c:12:0c:be:b9:25:11:47:fa:b5:56:86:ee:f2:eb: f4:b7:b9:8a:e2:a7:3f:7d:df:56:79:ae:31:61:da:ea:c3:71: 28:7b:ce:e9:20:10:ae:f8:92:e2:24:65:c1:96:ab:e9:9b:68: 1d:ee:a6:d9:82:71:d6:d1:24:5b:2b:d8:52:1b:d5:1b:ff:6c: 14:e4:4e:5a:39:b5:90:75:ed:00:2a:89:d8:16:9d:9f:ee:0c: a8:39:5c:98:9d:22:03:1b:0b:e1:75:9b:83:da:e6:9f:15:b5: 5c:f0:97:63:59:cc:22:d9:4f:ac:ce:f4:ee:04:57:41:f0:c2: 26:2e:61:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8yUsiMt/zuHqZ/bx9BVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWIzOTRhYWUwODM2ZDM0MzQxZjdhZDMxOTQ5NDc2NWFi NTZiMDcwHhcNMjUxMjI0MjAwMDQ3WhcNMjUxMjI1MjAwMDQ3WjAzMTEwLwYDVQQD EygxZmFlN2YyZWQwMzViOWUxYmM2ZjBlMjc2MzJlN2FjMzRlODBhNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlkjiOAYOQK0LRkF9oJuHJsaeBt/ 4QGDsikvcypna7EKaXYDREYRc1uUJTzJOmiAObMuYqoHMBJhK8tLJiusM0ptiw8/ j4rK3KPEtEJ2UD28Rmfo/HmdJr44Pi8PmPE+2969//aEuQ+A1MihyaNE52nSk/LJ headc9k/kiv/KV3dWF0ofK3a5h56PZ+/8vvjHm+zmtAlqWQDkFl7BlTAxy+JWhkZ H4luFQfaWhgsZT8SuPLKDSBtBHxopC9YhW48IGnED6hYGje4ytLb1f0+vIx35zKk CnIznG4sdFjcyl7Wla0tiq7tS1ir9XMCheav3kxCvMBHUKJirsioOjcv7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+ufy7QNbnhvG8OJ2MuesNOgKaNMB8GA1UdIwQY MBaAFNzrOUquCDbTQ0H3rTGUlHZatWsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEt NDBjODZiMzJlYjIyLzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEtNDBjODZiMzJlYjIy LzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAaC8Z/y Q012NqwntzZ6wMsQKYceJ/qYAni5DMSETgVdDPAsI5pOogbMGAIi8IMR/ZNeGau5 EtwBYBs9lGbMKwaH/wyv5ainQ9lkUZApRc4wg93TH2TTG+NvuaZ1s/d5/oCGkk/e iA858068IgRyjsJhIvXS9PsxgSS9LMpKtRiwHBIMvrklEUf6tVaG7vLr9Le5iuKn P33fVnmuMWHa6sNxKHvO6SAQrviS4iRlwZar6ZtoHe6m2YJx1tEkWyvYUhvVG/9s FOROWjm1kHXtACqJ2Badn+4MqDlcmJ0iAxsL4XWbg9rmnxW1XPCXY1nMItlPrM70 7gRXQfDCJi5hUA== -----END CERTIFICATE-----Generated at Thu Dec 25 00:58:03 2025 by rpki-client