This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json) Hash identifier: eLMl9jNblodSzio+KpJd0ZszEojY0zkgcMnzMbSUCZQ= Subject key identifier: 74:32:FD:3E:A9:FF:41:76:9B:0D:FC:B1:F8:CA:FA:C0:FF:48:CB:00 Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07 Certificate serial: 019B4091B6151BBF5D6B1BF093EBE4984785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft Manifest number: 032D Signing time: Sun 21 Dec 2025 11:00:49 +0000 Manifest this update: Sun 21 Dec 2025 11:00:49 +0000 Manifest next update: Mon 22 Dec 2025 11:00:49 +0000 Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: 9u8zUBINXv70WwWofPZWKasdGm+YXHZ447UZwBlhcWo=) 2: YxHERBDqRVzINYaZYx24sGQ5DjU.roa (hash: z9vAtTxka6hlJ3v+MIB3sxbWlZ+xxPgWCTfz3Y+M29Q=) 3: f9n1-MsvFF9hgPCEtznTrREmBS4.roa (hash: nLwX0ooKqTqap8AB7jQ/dh56XcE7TbuyoiwolR5U2oI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:b6:15:1b:bf:5d:6b:1b:f0:93:eb:e4:98:47:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07 Validity Not Before: Dec 21 11:00:49 2025 GMT Not After : Dec 22 11:00:49 2025 GMT Subject: CN=7432fd3ea9ff41769b0dfcb1f8cafac0ff48cb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:82:7d:3d:75:7b:d9:1d:9a:7d:11:81:e2:32: 62:fc:44:bb:d3:da:c4:f1:e9:86:c7:d6:f4:23:46: 26:75:e0:cd:39:83:02:3a:d1:77:dd:8f:6b:a0:8a: cc:77:8d:e6:9b:3a:1e:26:9f:3d:a7:9f:bc:a7:26: 2a:2f:87:20:5b:40:2d:cc:15:a9:e2:c8:5d:bf:a3: 1a:39:99:3e:98:d3:d3:18:15:a4:9c:15:0b:be:6a: da:88:5f:a8:1b:cb:16:ab:88:78:15:86:88:77:06: 6d:6d:b1:94:57:17:4d:46:ba:ef:3c:13:44:75:45: 92:be:11:c2:13:47:e7:03:c4:15:5f:05:7a:87:25: 85:dd:7f:92:dd:96:b4:76:fc:90:2e:67:ff:ad:1e: bf:39:60:b8:7b:4d:83:dd:41:ae:6a:5c:72:1f:e0: 29:9e:85:55:56:39:c3:99:07:6c:ab:14:35:f5:dd: 5b:bd:41:53:55:3c:94:8e:9d:1a:29:23:bd:17:67: 56:55:06:31:58:db:2a:e2:88:8e:9c:54:ad:15:98: 2a:96:73:01:29:3a:b0:58:0a:35:7a:cd:0e:bc:bc: e4:cd:32:55:54:e8:f6:16:65:59:bc:b7:94:6e:92: eb:e6:2d:42:fb:12:57:41:97:b6:24:47:fa:cc:37: 4f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:32:FD:3E:A9:FF:41:76:9B:0D:FC:B1:F8:CA:FA:C0:FF:48:CB:00 X509v3 Authority Key Identifier: keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ec:5d:fa:a6:57:71:84:85:6e:63:cb:fc:86:54:b1:78:e2: 6c:1c:08:b2:9f:7d:00:a5:56:18:01:d5:08:03:69:39:87:7c: 11:74:77:e7:5a:6d:b7:9a:60:ec:f9:cc:1e:1a:24:40:b6:6b: 23:0c:65:cf:22:57:f3:10:4d:82:ce:b3:67:a8:4d:4f:02:21: 83:11:5e:44:5a:e5:24:0b:fd:a4:4f:bb:53:2d:05:91:a5:9b: 19:0a:18:74:34:88:1f:e9:0a:43:5a:c0:4a:76:be:c7:98:d7: d1:28:03:56:82:50:54:86:22:7f:50:c7:9a:a6:25:77:fe:b5: 89:87:5a:17:52:08:c2:ec:05:52:39:2a:16:fa:39:69:32:c8: 26:04:61:13:87:0b:56:d1:d0:44:29:ad:f1:cc:c4:52:5d:65: b2:dd:23:80:d3:f7:b9:d3:e7:8b:da:8c:b5:a2:ba:c1:32:3b: ce:12:97:02:64:3b:a5:4b:bc:a8:b3:5c:1e:ec:c0:e7:65:8f: 1d:ea:b8:e7:dd:11:39:3e:d6:f2:c4:b1:70:ab:03:13:b2:dc: fa:5f:dc:4c:5b:86:c4:07:33:25:59:12:71:95:ec:af:a7:bb: b9:06:8a:ea:d7:a2:17:2c:93:6c:53:c2:84:77:a9:2a:42:51: d3:bd:eb:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkbYVG79daxvwk+vkmEeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWIzOTRhYWUwODM2ZDM0MzQxZjdhZDMxOTQ5NDc2NWFi NTZiMDcwHhcNMjUxMjIxMTEwMDQ5WhcNMjUxMjIyMTEwMDQ5WjAzMTEwLwYDVQQD Eyg3NDMyZmQzZWE5ZmY0MTc2OWIwZGZjYjFmOGNhZmFjMGZmNDhjYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIJ9PXV72R2afRGB4jJi/ES709rE 8emGx9b0I0YmdeDNOYMCOtF33Y9roIrMd43mmzoeJp89p5+8pyYqL4cgW0AtzBWp 4shdv6MaOZk+mNPTGBWknBULvmraiF+oG8sWq4h4FYaIdwZtbbGUVxdNRrrvPBNE dUWSvhHCE0fnA8QVXwV6hyWF3X+S3Za0dvyQLmf/rR6/OWC4e02D3UGualxyH+Ap noVVVjnDmQdsqxQ19d1bvUFTVTyUjp0aKSO9F2dWVQYxWNsq4oiOnFStFZgqlnMB KTqwWAo1es0OvLzkzTJVVOj2FmVZvLeUbpLr5i1C+xJXQZe2JEf6zDdPewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQy/T6p/0F2mw38sfjK+sD/SMsAMB8GA1UdIwQY MBaAFNzrOUquCDbTQ0H3rTGUlHZatWsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEt NDBjODZiMzJlYjIyLzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEtNDBjODZiMzJlYjIy LzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuxd+qZX cYSFbmPL/IZUsXjibBwIsp99AKVWGAHVCANpOYd8EXR351ptt5pg7PnMHhokQLZr IwxlzyJX8xBNgs6zZ6hNTwIhgxFeRFrlJAv9pE+7Uy0FkaWbGQoYdDSIH+kKQ1rA Sna+x5jX0SgDVoJQVIYif1DHmqYld/61iYdaF1IIwuwFUjkqFvo5aTLIJgRhE4cL VtHQRCmt8czEUl1lst0jgNP3udPni9qMtaK6wTI7zhKXAmQ7pUu8qLNcHuzA52WP Heq4590ROT7W8sSxcKsDE7Lc+l/cTFuGxAczJVkScZXsr6e7uQaK6teiFyyTbFPC hHepKkJR073rbw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:32:30 2025 by rpki-client