This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: dLhf6HmVPDOMyKXS1e7GcWrWoSGPjZmWWj9pHB24a28= Subject key identifier: 42:C1:FC:EA:AC:D5:B6:49:84:E1:DB:36:C8:C5:B9:45:E2:75:59:7C Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019AF0BEEB1B4A4E032F2DFC85BB1B4D1E14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0B39 Signing time: Fri 05 Dec 2025 23:00:35 +0000 Manifest this update: Fri 05 Dec 2025 23:00:35 +0000 Manifest next update: Sat 06 Dec 2025 23:00:35 +0000 Files and hashes: 1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=) 2: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=) 3: 29CwtGRC06e--CmAyy8KOuiUHAM.roa (hash: zR5RLcYSkihJ6JtnaU1t+9weCiK1A6KL+5cTWo4Xkmo=) 4: 2lfZ96EfoSxZidpJ-kV9Z-G436U.roa (hash: F82HgUa3PdEQeyTXy6bMjHBnuElJ4e46eI58r2GDkK8=) 5: 3_vCPXMxLInxH4KSM9i76JRc3wI.roa (hash: KQnR/Rw1eBymAhNe+aNyzbKPfZJwc7vaoArCKIxxfkQ=) 6: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (hash: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=) 7: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=) 8: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=) 9: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=) 10: CIRls3stTp9BOjHce35suioz25Y.crl (hash: +XA3P29QiKWnlIbdi0sLCU4IwwL/YuzQvFP8CI9t508=) 11: E41iAo-YhWo417aVu3UFCXW5I0U.roa (hash: FPYq7/mqqnQsvVNvJMzlmLszXu5+IG0MN3SMAMVazpQ=) 12: FmMgP7ha8iX2FfDMIFk9KP0qkts.roa (hash: Ro1xRk0724SJQafKJQzEcvMjFfbM36IbDNwvGX/5JdQ=) 13: Gg2fBgym98lzpgGOw525Psta200.roa (hash: ITzizygNHqGF0ltRY0tg7IiIoexFvZtpbGrKT1PyRcQ=) 14: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=) 15: IBa2FfCm0NXr_jkTnl9W4lKJHbQ.roa (hash: g/fWzUMptSij5CbXIEyMw6oyGmVps6iOuy9vK1HPOHA=) 16: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=) 17: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=) 18: OzfjIdhzh7gpL6YR6SckdfTkc-4.roa (hash: qjn8XFFM1Wpyy8tyUnVazb1P7nlXBpVe5zicqRab8VA=) 19: P1GfPpRMWO0DN1ayjFsF8s42h0U.roa (hash: 8AiPsJ46Sh6eUO7JJzaL6h8U9SkUyiDH6w5ycG2ZG0Q=) 20: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=) 21: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (hash: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=) 22: Uj8njsPYdgRZYjZt_ospB351jos.roa (hash: LYqRDwSI7zwNyZiE9YMTNwUElSgWURvGf1f5eOoJElY=) 23: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=) 24: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=) 25: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=) 26: mAJpb-FsFkz7dybYs4PeIWecwc4.roa (hash: wMuP/t1rmuAKd01y5S1TPonT58b58o5bTHyhjOQ7ywU=) 27: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=) 28: otTutevZuJ6eolnFpw2U1FHmlNA.roa (hash: MYGZzYKczjODGic9nVPSjxLsW749qLjihm8rlEBU9CQ=) 29: vLt31u2LuYunvD1Z_qD2Pny8Vm4.roa (hash: +q32KVm8qCu/bkMttiIT0OppWTKc8bPsrl6PWUt3FeI=) 30: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=) 31: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=) 32: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:eb:1b:4a:4e:03:2f:2d:fc:85:bb:1b:4d:1e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Dec 5 23:00:35 2025 GMT Not After : Dec 6 23:00:35 2025 GMT Subject: CN=42c1fceaacd5b64984e1db36c8c5b945e275597c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5c:88:28:3e:11:8a:d4:89:47:0d:78:ba:09: 79:64:72:a6:05:a4:7a:96:4c:46:c4:4e:82:ce:45: c3:83:7c:96:9a:8e:ec:47:7d:26:81:ba:d3:cc:cc: 8f:2b:56:8a:f8:43:3c:7a:69:95:06:6e:89:cc:71: 2f:c6:ee:b3:51:18:fa:a2:e7:8d:b3:0c:5c:2f:20: 06:60:d6:d5:ce:a7:2f:72:35:37:b8:4c:1c:81:3b: e0:73:56:19:51:a7:de:1a:31:13:1a:21:48:f7:8c: 0c:df:63:69:ff:4d:8d:44:54:69:de:1b:40:fe:d1: 74:41:7c:eb:69:0c:a3:24:9a:a3:d1:74:9b:53:ac: cf:ef:8c:28:a4:36:2d:23:1f:f0:cb:53:d8:df:98: ba:82:86:97:05:34:a6:ea:15:41:b8:9e:7b:52:7d: ce:db:79:ee:73:c1:5b:4e:c3:38:a3:00:9a:8c:28: 53:73:e6:43:7f:f4:43:62:0c:99:cf:27:79:71:b0: a4:9c:27:43:e9:0c:33:90:3f:7e:78:af:c6:bf:f8: fc:b1:0f:b8:35:0b:83:1c:ae:bf:43:40:62:4b:30: a7:ee:1f:bd:80:fd:d4:c2:ff:0f:90:91:50:f3:43: 4c:5d:4d:4e:f1:6c:5b:28:f7:b3:ec:f3:0f:c8:91: 40:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C1:FC:EA:AC:D5:B6:49:84:E1:DB:36:C8:C5:B9:45:E2:75:59:7C X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:60:75:9c:a2:aa:6f:f0:67:9c:97:3a:ce:e1:85:e1:12:3f: a6:7f:e1:ae:fb:a1:ae:0a:54:28:38:59:91:b4:91:ff:b6:69: 90:10:46:ec:33:45:6e:1d:91:2c:93:eb:c4:71:99:33:50:95: d5:00:47:e1:52:77:28:de:d5:e3:a0:28:82:ec:5a:e1:17:cf: f7:40:18:65:6a:94:96:48:b8:c7:b5:26:19:54:ae:2c:29:39: 60:e0:af:fc:46:a3:e8:f6:56:50:34:27:83:93:ab:33:4b:d5: 72:b6:87:3d:18:e3:bb:f2:f9:19:60:5c:16:56:6c:30:62:41: 8c:5e:dd:a6:7e:9f:64:47:46:63:13:b7:f6:5d:bb:a8:ad:85: ad:eb:0a:81:07:f5:de:3c:bb:84:34:e5:3d:de:4d:99:93:d2: cb:5e:14:eb:d6:01:f1:30:dc:99:05:d4:3d:b6:75:7f:63:a1: de:d8:69:6f:71:cf:b2:01:83:e8:98:23:e5:ae:4c:68:fc:f9: e0:39:e7:c4:72:f0:40:1b:46:57:60:2c:33:3d:5c:73:e2:1a: e9:69:c6:ce:a5:08:a0:35:cc:08:fa:61:96:89:1b:7c:c3:d2: da:9e:4f:55:96:31:9e:c9:0e:70:bf:dc:49:cf:c8:f7:97:ae: 4c:ec:24:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvusbSk4DLy38hbsbTR4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjUxMjA1MjMwMDM1WhcNMjUxMjA2MjMwMDM1WjAzMTEwLwYDVQQD Eyg0MmMxZmNlYWFjZDViNjQ5ODRlMWRiMzZjOGM1Yjk0NWUyNzU1OTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFyIKD4RitSJRw14ugl5ZHKmBaR6 lkxGxE6CzkXDg3yWmo7sR30mgbrTzMyPK1aK+EM8emmVBm6JzHEvxu6zURj6oueN swxcLyAGYNbVzqcvcjU3uEwcgTvgc1YZUafeGjETGiFI94wM32Np/02NRFRp3htA /tF0QXzraQyjJJqj0XSbU6zP74wopDYtIx/wy1PY35i6goaXBTSm6hVBuJ57Un3O 23nuc8FbTsM4owCajChTc+ZDf/RDYgyZzyd5cbCknCdD6QwzkD9+eK/Gv/j8sQ+4 NQuDHK6/Q0BiSzCn7h+9gP3Uwv8PkJFQ80NMXU1O8WxbKPez7PMPyJFAGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELB/Oqs1bZJhOHbNsjFuUXidVl8MB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2B1nKKq b/BnnJc6zuGF4RI/pn/hrvuhrgpUKDhZkbSR/7ZpkBBG7DNFbh2RLJPrxHGZM1CV 1QBH4VJ3KN7V46Aoguxa4RfP90AYZWqUlki4x7UmGVSuLCk5YOCv/Eaj6PZWUDQn g5OrM0vVcraHPRjju/L5GWBcFlZsMGJBjF7dpn6fZEdGYxO39l27qK2FresKgQf1 3jy7hDTlPd5NmZPSy14U69YB8TDcmQXUPbZ1f2Oh3thpb3HPsgGD6Jgj5a5MaPz5 4DnnxHLwQBtGV2AsMz1cc+Ia6WnGzqUIoDXMCPphlokbfMPS2p5PVZYxnskOcL/c Sc/I95euTOwkbA== -----END CERTIFICATE-----Generated at Sat Dec 6 03:58:09 2025 by rpki-client