This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json) Hash identifier: iHKmECDHtsQBcqRulBHTey0F+6E0hhMRw/fDXUrJwZc= Subject key identifier: FF:11:5A:CC:42:3A:3E:A1:21:3C:1B:D7:41:84:20:7A:F4:7E:1C:87 Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 019AF5E5987B0B23F52CAFDC9FBAC4F8F255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft Manifest number: 16D6 Signing time: Sat 06 Dec 2025 23:00:55 +0000 Manifest this update: Sat 06 Dec 2025 23:00:55 +0000 Manifest next update: Sun 07 Dec 2025 23:00:55 +0000 Files and hashes: 1: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: nTq2jDCSVgoteRh5imW/l8iYV/9YCfYcooKcsvN52hs=) 2: 41fVJkrPbHKQA079D4QVuoSoMHA.roa (hash: sr+TybZqUtIImaDgTqztSGD1XE6oloq4BZ2M4Xpg+u0=) 3: 4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa (hash: vXT1uBYUu9e7P+u/IiXkrVdl2Zw3UbzSeW2UWFK34Jw=) 4: 6klSWkjjUTbGuPtDfN8cALab9cs.roa (hash: sdgQjkXScGhQKnR4al8+skMwfxtoqagBTslhZkfSKNY=) 5: B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa (hash: X2c/+qNKKXp5+FBng9aKxlFFZbDBWHiqkfhHgQbP6bg=) 6: C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa (hash: MAmDjDLmFQyW+O4vZbG4q4tWTwrvQlayeoQlXr+Fu/8=) 7: DJ2HKm_1c1O48zC-cc12FURV1-w.roa (hash: odPYR1sTJx4nskAcxBKfAydZplTxWpbfAnjmQhPzJX8=) 8: GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa (hash: lOFhsoN8S3GIIvzatAuS7mkyT16CCVPA77MjKa8aWWc=) 9: RZCNuFYkMVfet6khSeCWtqT4r3s.roa (hash: bz5sfARWaL0oWhzQTAMOexVtHrjfBeAF+vBi8eYpl/U=) 10: Sn1YHf-JTelJa8AbFEu9eCrJc-Y.roa (hash: 4RQ4/nSSdbUjaSMtOe+F2ienAydzSYTXwrbRmuUcEJY=) 11: UE3TFsD19f6wQr0gTHDaiwhGdqA.roa (hash: h9a9K3MMF0WQfDnzSvLb5P+n54cp7dIKew88pGDYldk=) 12: VicyF_0e_bvvcn0fKM8q40zu1n8.roa (hash: C5AQCG/2PEYP519Z6IOs4YDYOnLl0s41qulpvbJvJ4g=) 13: _HxOSGDLp42EFmYvwzkWMgsUDRc.roa (hash: ld3Ed4rdMoSUbT+R2+5BJt8zZUTSFFBqMJ22iFdBG+s=) 14: cHLxjuzlgoGDINIVaFsru4PZ9BE.roa (hash: o3eUI2kqgbIKISwJ6D+XZ6uUN50wRiiahX5yY1sTPn4=) 15: lknEfiAWsTgVxunxpJ4Cim6vi_Y.roa (hash: 9nT6QBaPn6YGSLcfszLUc2cPb60rXG8wS9MlLTeVBhw=) 16: mdB3D_zcc3ZMQewiv3J0UZ_sUlo.roa (hash: NsB59ITpkzoeK9pRuPozIMWrvt6Lae+60ChrUSCRg50=) 17: mjTSWLEuvIRJ-mDUVhSblHWE7N4.roa (hash: rmzWSKN3Yb/xA6p/q8UxEXQjDhun2rkoNnE76zOjZHo=) 18: pxtXnWk-oYZ7Qby89ddSCgu91ts.roa (hash: RB8UdezmP543bft1AFoJ1CEu6eopqGc7lCF9jSa1eTc=) 19: q74_W6xdG6goIDi1c08_8gJ6uTE.roa (hash: pxdR0KPAM6OXX14ayHaIWzZB+fjREFkJhs6uGstYGhI=) 20: r3Ck7fpoOKp57Mk1jJgw8XHWAxg.roa (hash: jDsvxvKf5uFW/4bW6b3NOwjRJy48sDgwtQTJJofZqGM=) 21: v99_kaWjoTKnpnOcBogb8Emjk4M.roa (hash: unshnZnS3tg5XPSrGj9Iy+gxnhESQoD/3z5Y8oIxogo=) 22: y38_fk_dl6De5uovg7WKuAzPolA.roa (hash: PsHTMj/SkJczqFC8znjT596YhybynG/bm1yXYsS6Cxs=) 23: z6d9djVL2RnXuevi6Ot8E8e62tc.roa (hash: o9Kh9fFp+5NbfQXFw6W0ABs1khVR+g751jXSLlxLU4c=) 24: zUeLco_9U8ifNR5PMJI3zpijW74.roa (hash: 3lduL1beP27BPGmbMBwONs6g5YeSTXx0lXyH1JulpN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:98:7b:0b:23:f5:2c:af:dc:9f:ba:c4:f8:f2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Dec 6 23:00:55 2025 GMT Not After : Dec 7 23:00:55 2025 GMT Subject: CN=ff115acc423a3ea1213c1bd74184207af47e1c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:31:b7:3a:15:40:e6:4d:b1:ec:04:56:a2:0e: bd:25:9e:fa:0d:db:c5:69:e6:e8:8a:b6:db:2d:43: 4b:32:fc:c4:66:a6:f2:d6:c1:b5:27:6f:62:bd:91: e7:e2:00:d3:50:f1:0d:60:a0:1e:a9:fb:77:de:32: ec:6d:31:62:71:46:19:2e:78:61:6f:cb:23:cf:a0: 43:c1:80:41:33:f2:c2:b6:91:19:05:04:2f:b1:ec: 67:c7:2e:92:64:bd:7a:71:50:ab:6a:6b:26:dd:69: 58:2d:2f:59:ea:3d:61:19:54:a1:91:b1:b3:8d:ae: cc:6b:fc:da:2e:7d:15:9a:6f:f0:3a:ad:12:5e:f7: 28:84:64:00:ee:a8:f6:70:ee:88:5a:ed:15:6a:8a: 8e:3c:14:b5:a4:bd:56:a4:b8:a9:05:d6:0b:a0:be: e2:84:e5:a5:fb:c5:b0:b7:28:80:54:b2:53:65:78: b2:ff:d1:e2:72:b8:e2:fd:d9:d2:aa:cf:1c:79:f7: 89:ca:41:16:30:b7:2a:82:62:4c:a9:b1:e7:1c:12: f6:15:ff:84:a6:ba:d3:a1:d1:e8:64:95:a8:08:23: c3:44:33:09:08:24:c7:9a:a0:b0:be:bf:6a:3f:21: 6e:2d:ed:aa:5f:0f:c6:0d:66:5c:fb:eb:19:a3:cf: ee:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:11:5A:CC:42:3A:3E:A1:21:3C:1B:D7:41:84:20:7A:F4:7E:1C:87 X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:38:98:31:5a:72:5c:68:6b:f0:5a:3c:38:73:41:43:bf:af: 2d:ec:58:40:6a:32:aa:3d:10:60:91:90:71:e3:2a:74:17:c0: 79:e6:61:51:cf:35:d3:fb:08:c6:d4:7e:e8:eb:e2:d9:c9:63: c5:91:9e:9b:44:e0:b8:63:14:78:3a:2e:3d:9a:d2:22:85:ea: 6d:bb:9b:70:cf:34:02:7e:87:0b:17:c4:18:11:6e:e6:16:34: c7:2e:f0:45:7a:26:39:07:bd:f2:cf:73:c5:6b:ed:be:51:fd: 28:bc:19:72:12:49:6b:ab:2a:54:04:61:2c:14:bc:87:2a:fa: 0a:bb:58:a2:ec:bb:de:00:75:27:ce:b2:4f:a5:89:bc:13:2d: 41:57:a2:9e:7e:7e:a7:c2:19:37:cc:66:b0:07:d5:5c:22:73: 03:7b:aa:67:7d:d4:3c:ed:dc:4a:ce:23:50:71:e1:3b:b6:e4: 11:b4:9b:38:00:cd:99:77:8d:c9:65:bb:7f:54:9f:14:f8:90: 3f:57:0f:9f:53:1d:86:8c:89:e9:a6:07:ef:10:2f:1c:0c:33: 9e:64:3b:c8:45:ec:cd:e1:be:01:a2:04:e9:fd:06:31:f5:54: ba:68:14:b2:c4:82:34:2a:77:04:c8:61:86:ee:99:62:12:4a: 49:1b:33:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15Zh7CyP1LK/cn7rE+PJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjUxMjA2MjMwMDU1WhcNMjUxMjA3MjMwMDU1WjAzMTEwLwYDVQQD EyhmZjExNWFjYzQyM2EzZWExMjEzYzFiZDc0MTg0MjA3YWY0N2UxYzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDG3OhVA5k2x7ARWog69JZ76DdvF aeboirbbLUNLMvzEZqby1sG1J29ivZHn4gDTUPENYKAeqft33jLsbTFicUYZLnhh b8sjz6BDwYBBM/LCtpEZBQQvsexnxy6SZL16cVCramsm3WlYLS9Z6j1hGVShkbGz ja7Ma/zaLn0Vmm/wOq0SXvcohGQA7qj2cO6IWu0VaoqOPBS1pL1WpLipBdYLoL7i hOWl+8WwtyiAVLJTZXiy/9Hicrji/dnSqs8cefeJykEWMLcqgmJMqbHnHBL2Ff+E prrTodHoZJWoCCPDRDMJCCTHmqCwvr9qPyFuLe2qXw/GDWZc++sZo8/uPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8RWsxCOj6hITwb10GEIHr0fhyHMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvTiYMVpy XGhr8Fo8OHNBQ7+vLexYQGoyqj0QYJGQceMqdBfAeeZhUc810/sIxtR+6Ovi2clj xZGem0TguGMUeDouPZrSIoXqbbubcM80An6HCxfEGBFu5hY0xy7wRXomOQe98s9z xWvtvlH9KLwZchJJa6sqVARhLBS8hyr6CrtYouy73gB1J86yT6WJvBMtQVeinn5+ p8IZN8xmsAfVXCJzA3uqZ33UPO3cSs4jUHHhO7bkEbSbOADNmXeNyWW7f1SfFPiQ P1cPn1MdhoyJ6aYH7xAvHAwznmQ7yEXszeG+AaIE6f0GMfVUumgUssSCNCp3BMhh hu6ZYhJKSRszhA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:13:49 2025 by rpki-client