This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: ClilykD2QUBRjzXPHAzWK/VjE0I7BZ9AYdD8mIQH8rw= Subject key identifier: 09:85:9E:8F:0B:BD:E9:22:11:E3:4E:73:60:89:05:99:41:C5:ED:7B Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019AEE2CD7E33AFFC679750459F2B787DFA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 186D Signing time: Fri 05 Dec 2025 11:01:47 +0000 Manifest this update: Fri 05 Dec 2025 11:01:47 +0000 Manifest next update: Sat 06 Dec 2025 11:01:47 +0000 Files and hashes: 1: 1-MHL7FCFOo3d5SBfZqVAq6OGUKg.roa (hash: JKX+6uz7j+QIFz/PbhY8E7/mwj5YSnWWxlrzu1hhuDY=) 2: 1f-9tUF1QCZIsfJt2ipW4khRx9g.roa (hash: qvsbL3ItSjRr+HrTxGxdX6hRWDpLj1yz143EUSJxB+k=) 3: 25NziVTx-Lz9txTSQZBkSrAUGTw.roa (hash: 4eHXeIS/+/q1uLQaBtoURFO7E/Md64lid2PQOJ70S4g=) 4: 4Z2hCqyh6BmW90Ph3YJgbvH-8Kw.roa (hash: Ir4hBZQ+f+lKLqxyAW+VSZk1PLwye846E8VymHnnxpk=) 5: 58pgEzEV4itxzFdqyuzKp1koy9E.roa (hash: tH6QFOaJ/p4keTuKKE46gn/xyoU7W70E/+/4aSveeLE=) 6: 8nsB2P0ggwqXvoNDODV6DOqtJz4.roa (hash: JlDiWPppoyrLKRplxZxZXaqKBF7T+Di52eh0wgNrrbo=) 7: AGmA39KwwTaMo71xV9rDHmreSZs.roa (hash: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=) 8: CfW3XQtgzqoTsNgygaqBk_IDaAg.roa (hash: wtkzLwYk8AqxMNlbCH9foq6LUUygaTWoJr2pbzB17hI=) 9: DfUSjPi2INTZBxoOQDwjln-TPKA.roa (hash: /ysoks/fge7Q4Y/49e0Xa6J+sfHs/2M2DRhW7QPhPZM=) 10: G-6qJAbYc1mXlsY2h-ViLS7Je-0.roa (hash: XwKTSRhNczLWX76Yb7IP0/HJfhDx29EPeE3hdNZ4K+s=) 11: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (hash: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=) 12: KrudkOICJ6o23J172JFVZgrTE8Q.roa (hash: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=) 13: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (hash: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=) 14: PWojxW9iXS1jgfgbFPdUQeVZND0.roa (hash: YToPlOG2G4JuPFJzGtMhxZmKt4Yh4oO1yAxhQTyQoC8=) 15: Q-cb4AjNFoWCznmTrkTd9_2MtQ8.roa (hash: 2USY3xNUmziDvmtALMRGKfhIKkZceNSRez2thcTQVsI=) 16: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (hash: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=) 17: VHARbjmRGA2iFnJKjKjZy-WzcPs.roa (hash: OjH/Rh5sSPUY3jwuvNkEft7qNA+738Oz4tbphGiFxzc=) 18: XQSdpYywXniH-4RrFE8ADb_IkFg.roa (hash: p9OQSem/8VfhwT/7ja70OsbXAHFO0qdQ0IRvRySU44M=) 19: Yo1yRImGU_G1MONfoe4nlQj4yM4.roa (hash: OjIAaD7BSbnZ62LZQPcicsjwlkflnbNeuXfNLm2u9yA=) 20: acgWZk7QsmW2aj_bCsaJjnM5BPc.roa (hash: HUCf1r1zAbFUe3WPNLagsH4LPR/2P6TikCHZR4iIaH0=) 21: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: /K6Tcw+Cr67dDL89qOl+eFZoKf4qBl2GCdTp9lX4Vgs=) 22: fFDNE0jBCsbuSwHbNND790VHIUs.roa (hash: b2he0HY8iZ5ebk1T/0G0aRJSFCMcs4PxhlyzHEE/x2Q=) 23: hHcyNgOmxrhkn3DhNfaigHX94g8.roa (hash: B65e/+ApHFBG2pXE/i7USQDriRyCgT5A9AG/tPBTPh8=) 24: pVdfXUwosJ8KsorkaZco4tqDBa8.roa (hash: Lt1k5lM1qRumIXSyRVec7p+24rwON9jxZ+FAtlLGexw=) 25: qpXqPI2Lm4U2S7PWScdAxzqLkns.roa (hash: Bzilqha0faSvo6uHWLbDknjpYoOKZ5PiVLmh9/Jq3LE=) 26: tFKx2W0hVUngD8acE4McZx87sLc.roa (hash: lGDNoZz2KcU43imZSTSiOsd4WfNE56Crra/N3mYFU1E=) 27: tc7szezkYqgXsem-emQpM9XcR9c.roa (hash: O2yXB3yzO1tbqMoeSHRvGfT3YmTyzVXNjGllWoLMqq0=) 28: uZfvttHeYCpTmwGtvthls2GR6Mk.roa (hash: +oUNgtgeFHW/Ao/Yv6Zmwz+f8VUM2x/qnI4Y2b/e5es=) 29: ur6JY6LTt9bSdFyx_2wS6ELsIzA.roa (hash: b219K+gQY2uaL3+siADKQhZv8ifl18rx5LHYKsxXYxA=) 30: ydJ8-HccROHTkUHZ94Nh2xqwGKs.roa (hash: 5jg17zFL+w2Qub3GdrheBJMuQFL1rKAkrWJtLe0JMeU=) 31: zLZPib2q4N-wxUBLghJm8S0LpmI.roa (hash: zwKUjOOpiqrym9HQMr4/mJ1TtSF5ArH6j4HJ3LWd0ZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:2c:d7:e3:3a:ff:c6:79:75:04:59:f2:b7:87:df:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Dec 5 11:01:47 2025 GMT Not After : Dec 6 11:01:47 2025 GMT Subject: CN=09859e8f0bbde92211e34e736089059941c5ed7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:92:d4:8b:d9:eb:99:52:fd:68:21:9d:de:89: 88:63:3f:50:bd:2b:61:10:7b:b0:4f:93:3d:22:5e: 53:48:0a:6d:45:59:19:1f:8b:62:76:04:11:85:01: 99:f8:c7:fe:4e:1f:ce:62:cb:3e:0a:b9:bf:ac:42: 1c:01:df:ef:d6:9c:f3:bb:44:e2:66:79:97:53:a4: d6:90:07:be:b7:d4:ab:59:8b:c1:69:a2:53:f2:6d: ca:fb:ee:c1:ef:18:b6:77:16:41:94:d6:4b:39:36: f1:a5:4e:d5:46:f8:1d:92:b2:25:48:0b:bc:39:2b: da:4b:3b:8e:51:d3:8f:c2:fe:c0:4f:6d:d8:6d:5a: 55:7a:69:5f:70:88:33:05:35:a4:41:71:98:71:c0: d5:f9:5c:de:9d:5e:30:02:79:74:51:08:8d:ed:c6: 88:63:53:4b:1a:34:06:6c:4e:e5:36:cc:ca:d1:77: 63:0b:87:e6:58:4e:9b:f0:a8:13:a6:69:5c:30:08: ac:69:cd:8a:7d:df:12:67:fb:57:45:2a:7a:ac:27: 28:7e:66:de:2f:6d:2d:8d:b7:01:f0:ef:90:d9:94: 84:24:dd:18:87:3f:e2:9e:20:b2:44:e4:91:9b:c7: bd:1f:42:7e:d8:08:d5:bd:c2:1b:41:0c:c8:5d:e5: 3a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:85:9E:8F:0B:BD:E9:22:11:E3:4E:73:60:89:05:99:41:C5:ED:7B X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:78:29:85:4b:aa:6d:e9:81:f4:5e:a0:63:7c:de:8d:e6:96: 7d:29:c7:2e:f9:d5:93:fb:a3:ca:c5:32:08:cb:05:15:35:43: 51:02:50:2d:36:ce:95:c0:ef:07:23:7c:c4:d2:b2:56:8d:38: d1:40:f3:07:5d:13:b6:c1:ff:7f:34:e5:e3:44:88:99:1d:6a: 61:96:85:3f:b4:48:0a:3c:2d:c1:d9:96:a0:6e:36:44:b4:30: 82:23:15:26:44:b4:ec:ce:73:00:5e:2e:3e:6f:0b:d2:20:8c: 0b:23:1c:4d:e3:e7:d9:05:92:b2:de:ae:0b:84:31:2f:39:d5: 3d:09:c2:f8:ad:75:0f:21:47:b6:f8:0e:a7:bf:5c:80:05:12: 55:7b:13:81:36:29:c0:a6:9a:70:70:64:1d:aa:c0:4c:7d:b3: e7:dd:6e:6c:f6:9d:6b:cb:1b:e9:a7:10:6f:fc:76:c8:00:7a: da:5a:46:bd:8a:df:98:d6:95:28:4e:65:5d:87:69:88:67:d9: 07:2a:9f:1a:de:d3:c3:5a:c8:fa:d5:29:28:e9:6f:7f:e5:57: b5:66:e0:bb:3e:f4:3b:62:38:a8:77:6c:50:80:19:0e:22:d3: cf:63:5c:6a:ef:92:26:51:d1:c4:4e:7b:8b:c8:f6:48:7f:7e: 49:61:f4:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZruLNfjOv/GeXUEWfK3h9+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjUxMjA1MTEwMTQ3WhcNMjUxMjA2MTEwMTQ3WjAzMTEwLwYDVQQD EygwOTg1OWU4ZjBiYmRlOTIyMTFlMzRlNzM2MDg5MDU5OTQxYzVlZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5LUi9nrmVL9aCGd3omIYz9QvSth EHuwT5M9Il5TSAptRVkZH4tidgQRhQGZ+Mf+Th/OYss+Crm/rEIcAd/v1pzzu0Ti ZnmXU6TWkAe+t9SrWYvBaaJT8m3K++7B7xi2dxZBlNZLOTbxpU7VRvgdkrIlSAu8 OSvaSzuOUdOPwv7AT23YbVpVemlfcIgzBTWkQXGYccDV+VzenV4wAnl0UQiN7caI Y1NLGjQGbE7lNszK0XdjC4fmWE6b8KgTpmlcMAisac2Kfd8SZ/tXRSp6rCcofmbe L20tjbcB8O+Q2ZSEJN0Yhz/iniCyROSRm8e9H0J+2AjVvcIbQQzIXeU6AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmFno8LvekiEeNOc2CJBZlBxe17MB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAangphUuq bemB9F6gY3zejeaWfSnHLvnVk/ujysUyCMsFFTVDUQJQLTbOlcDvByN8xNKyVo04 0UDzB10TtsH/fzTl40SImR1qYZaFP7RICjwtwdmWoG42RLQwgiMVJkS07M5zAF4u Pm8L0iCMCyMcTePn2QWSst6uC4QxLznVPQnC+K11DyFHtvgOp79cgAUSVXsTgTYp wKaacHBkHarATH2z591ubPada8sb6acQb/x2yAB62lpGvYrfmNaVKE5lXYdpiGfZ ByqfGt7Tw1rI+tUpKOlvf+VXtWbguz70O2I4qHdsUIAZDiLTz2Ncau+SJlHRxE57 i8j2SH9+SWH0qg== -----END CERTIFICATE-----Generated at Fri Dec 5 12:48:55 2025 by rpki-client