This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: XpvCnthgM4gpx9QCDsTU1kud6hu2dl3bG/bVWFfL3Cs= Subject key identifier: 9F:0D:FF:9F:89:31:10:6C:62:D2:BA:F7:64:D6:62:1A:18:C3:B3:75 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019B07EC10370E74574641F05D13E6D4AA48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 1793 Signing time: Wed 10 Dec 2025 11:01:09 +0000 Manifest this update: Wed 10 Dec 2025 11:01:09 +0000 Manifest next update: Thu 11 Dec 2025 11:01:09 +0000 Files and hashes: 1: 4SyAKG9FRt1gAFJy5VgH5PwxTRA.roa (hash: jTSIiH7dSb5EybAsEY+n22bAiKvGllq/AuPJ12+ncpM=) 2: BPvvMmPw0v2RXdpWWHfCuRUXY28.roa (hash: xZBsJjBvf0lTF+79AIT0zRbookilcef0qHIZ5VPCKjo=) 3: BZv8sGCcNALUX5pRivC_EjiidAY.roa (hash: h2vpw3fwMWMbbCOrxK6C72hr7+aeGxdeLm1OT0QOTJY=) 4: DGiTictajwWlIqV1Y3gB4SABHrM.roa (hash: Id5c1uksWgHuNXSqMulTJtxTXfw1/TAJk3AEd7b9YRQ=) 5: Mk65rzu_RkrceH34hYZR24Obsg0.roa (hash: rTzdbjg2prHl5GqIGFCWtd1Ib91ETCuwTrOfSPbAKbI=) 6: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: ZKEVtLGveHUl1hbmFMguTQpQxX6eRG3HY97mlO6zhSo=) 7: Q7Kremg5Fgj0SfkKKXdi8FJc68I.roa (hash: wwhqLnVWip/tEomt2waPsqqsK0Xf41SfYznp1QkJ0BM=) 8: VB2zjyzRbVcAI7qwybUzZhlXV-U.roa (hash: cbrJc/4RT0HiKhNiv2HtCVB5MjAEHV6aPZtCJF7/HaM=) 9: X1dbr66OMx8eVuRSZ8erER48uAs.roa (hash: l9j9HNgD4t1BB6Qfj/f6r3E2XLI0qnP2gbU2Zj6LlXM=) 10: fScTC-RTAL4AeGIUFDXeFWgxNOU.roa (hash: LpQDvJVc9hMoS+6x9uoQSz8d+i8pdM/6GrU1p5QPkoU=) 11: gjV1b6nl-2sIdV0OViEWc13VOgw.roa (hash: YJxg+E5odCH0e5CDjaGL8I+42oC/IlpXfOKgoo/xCo4=) 12: i_vdOGwxPt-bikrKCsCq4vU6o1Y.roa (hash: Oi88txSdII7ssSiwm/zvR3/xE/bpdarLSDiFGBrNlqs=) 13: jLM5t3eg01fijHX5BZDxTUjpEGU.roa (hash: zlqEOh5qlKElj+/BR3gY6unzfRt8ygL6XM3lywwcPBU=) 14: mv1h37MzImfXhXtotGH2l6nUD-c.roa (hash: jma1UU++sReZAO/OYU5m4FrNNXuoRuTByWXR/ZHh5qk=) 15: pPSUgW-kch1wzV-mL74GjoJRYas.roa (hash: 14IsY2Pcu5B3SjJ5ycOJDXddH4w35As15arfEbi1nXc=) 16: sVq7ykDogd7cCsDF--hBK9DnjT4.roa (hash: yntzoQcvzBrX+tVilVNDQYJnh1oAW90RlNAXUQi35Kc=) 17: yUsdU2ULQpT4CaBLrnJG--v6B4k.roa (hash: nFPDGUe2wiSsXpmHy1xpSDCHB5E3thvkbalz4PA2+qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:ec:10:37:0e:74:57:46:41:f0:5d:13:e6:d4:aa:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Dec 10 11:01:09 2025 GMT Not After : Dec 11 11:01:09 2025 GMT Subject: CN=9f0dff9f8931106c62d2baf764d6621a18c3b375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:40:b0:7c:b1:f1:54:53:c9:30:05:aa:1c: cf:24:18:23:e6:e3:55:f1:58:63:dd:dd:38:04:42: 76:7e:e5:3e:58:4a:6f:3b:ba:b4:05:d6:72:b1:29: cb:f0:4b:15:9a:a3:eb:4c:f6:94:f4:6d:a3:ed:58: e8:60:f5:72:70:97:8e:a4:7d:c2:08:0d:65:8a:bf: 63:50:72:e2:04:85:07:dd:20:03:f8:fc:4b:f5:45: 96:f7:dc:a6:d1:24:2d:49:b0:0a:f1:a4:ba:4b:77: bc:1d:d3:b5:40:57:07:e2:74:af:d0:59:72:9a:27: 24:8f:f4:91:c3:9c:7f:78:3a:a4:c8:28:f7:2c:05: d6:8d:d5:23:83:41:fe:98:81:a5:03:b2:dd:13:85: 87:4a:13:ae:c0:7c:78:3c:02:04:b8:85:f9:33:85: 75:e5:6d:73:7f:d9:5a:a9:72:2d:43:98:af:9a:ee: 80:7b:54:b3:25:cc:73:06:79:1d:95:f9:8a:6d:f1: 7a:06:10:fc:21:2e:2b:1a:e2:0b:bd:2c:91:97:0d: df:4b:ff:96:89:2e:d8:bb:5a:23:a7:d4:d5:8c:72: dd:fd:e3:b2:f1:9c:ca:91:3a:43:1f:ca:1d:66:c6: fc:c5:c7:42:73:80:63:c2:ae:c4:4a:17:b1:2b:b5: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0D:FF:9F:89:31:10:6C:62:D2:BA:F7:64:D6:62:1A:18:C3:B3:75 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b3:de:0e:cd:62:0c:87:3c:02:30:a2:ea:f8:21:de:09:55: b9:fe:5c:db:61:59:07:ea:2f:75:59:84:6a:4d:38:b0:53:a4: 9e:90:0a:17:e2:47:44:9c:d6:8e:92:c5:18:b5:e6:e6:61:38: ce:c0:b7:f6:e3:0a:79:0a:d8:bc:1a:e3:0c:57:49:3a:33:73: 2c:97:76:cf:da:bc:de:0c:9d:aa:2c:f5:ad:0d:4f:9f:b2:02: 4f:df:86:e3:14:69:73:80:fd:88:88:a0:01:e2:82:5a:7a:20: eb:68:73:e8:96:a1:79:da:dc:95:cf:10:14:58:0b:80:16:5f: 9d:58:e9:e5:be:97:69:2c:07:fc:27:28:71:d6:fa:08:cb:ae: e3:c1:e3:37:66:c8:ad:b0:dc:e6:ab:7f:70:fa:be:27:9c:07: 9b:19:a9:9b:5f:e8:72:de:7e:b6:9b:86:a3:34:84:21:75:49: 4f:e5:54:b1:d4:aa:56:46:26:a4:05:ff:a0:cc:ad:1f:a6:e7: 41:a1:89:cf:00:ff:06:65:80:b8:f5:69:75:b1:3a:b5:ed:e8: 01:1b:47:0b:e2:04:94:fb:42:33:d8:7f:5b:4b:72:0e:50:28: 8a:ef:22:fc:97:8b:dd:79:d0:89:ce:e2:a7:42:3c:12:15:f2: b8:22:6f:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH7BA3DnRXRkHwXRPm1KpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjUxMjEwMTEwMTA5WhcNMjUxMjExMTEwMTA5WjAzMTEwLwYDVQQD Eyg5ZjBkZmY5Zjg5MzExMDZjNjJkMmJhZjc2NGQ2NjIxYTE4YzNiMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCdAsHyx8VRTyTAFqhzPJBgj5uNV 8Vhj3d04BEJ2fuU+WEpvO7q0BdZysSnL8EsVmqPrTPaU9G2j7VjoYPVycJeOpH3C CA1lir9jUHLiBIUH3SAD+PxL9UWW99ym0SQtSbAK8aS6S3e8HdO1QFcH4nSv0Fly mickj/SRw5x/eDqkyCj3LAXWjdUjg0H+mIGlA7LdE4WHShOuwHx4PAIEuIX5M4V1 5W1zf9laqXItQ5ivmu6Ae1SzJcxzBnkdlfmKbfF6BhD8IS4rGuILvSyRlw3fS/+W iS7Yu1ojp9TVjHLd/eOy8ZzKkTpDH8odZsb8xcdCc4Bjwq7EShexK7WrzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8N/5+JMRBsYtK692TWYhoYw7N1MB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7PeDs1i DIc8AjCi6vgh3glVuf5c22FZB+ovdVmEak04sFOknpAKF+JHRJzWjpLFGLXm5mE4 zsC39uMKeQrYvBrjDFdJOjNzLJd2z9q83gydqiz1rQ1Pn7ICT9+G4xRpc4D9iIig AeKCWnog62hz6Jahedrclc8QFFgLgBZfnVjp5b6XaSwH/Ccocdb6CMuu48HjN2bI rbDc5qt/cPq+J5wHmxmpm1/oct5+tpuGozSEIXVJT+VUsdSqVkYmpAX/oMytH6bn QaGJzwD/BmWAuPVpdbE6te3oARtHC+IElPtCM9h/W0tyDlAoiu8i/JeL3XnQic7i p0I8EhXyuCJvgA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:26:57 2025 by rpki-client