This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json) Hash identifier: x0dHbX3vnfUNd/IRSPWXuDAolAXzPIhdZLMVMyhcCX4= Subject key identifier: 4C:09:B3:E2:46:E5:B1:22:A4:68:B2:05:6E:B9:4E:B7:E2:42:1E:E3 Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07 Certificate serial: 019B089059AF688AF161D31D5A5B2B7185A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft Manifest number: 0310 Signing time: Wed 10 Dec 2025 14:00:36 +0000 Manifest this update: Wed 10 Dec 2025 14:00:36 +0000 Manifest next update: Thu 11 Dec 2025 14:00:36 +0000 Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: PedTMsfQ9l6aUhLRVec9GiuyskOOJkiOUYYmZ1iVZm4=) 2: YxHERBDqRVzINYaZYx24sGQ5DjU.roa (hash: z9vAtTxka6hlJ3v+MIB3sxbWlZ+xxPgWCTfz3Y+M29Q=) 3: f9n1-MsvFF9hgPCEtznTrREmBS4.roa (hash: nLwX0ooKqTqap8AB7jQ/dh56XcE7TbuyoiwolR5U2oI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:90:59:af:68:8a:f1:61:d3:1d:5a:5b:2b:71:85:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07 Validity Not Before: Dec 10 14:00:36 2025 GMT Not After : Dec 11 14:00:36 2025 GMT Subject: CN=4c09b3e246e5b122a468b2056eb94eb7e2421ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:54:85:fe:3b:a2:b6:3d:0e:15:66:b3:11:e6: 71:21:70:e4:6a:9e:b3:55:9a:54:4a:3c:fb:10:8a: d1:9d:0f:8e:ca:35:85:6f:67:f2:e6:15:65:61:6b: 6d:30:2c:90:19:88:c8:0c:6a:01:e4:41:85:74:8c: f6:bc:b8:ab:ba:e9:00:98:06:98:19:5b:69:04:b6: 95:2d:8a:2f:40:81:4e:2d:a4:a8:e6:ea:c0:e9:ff: 10:82:d6:b8:bf:f4:8b:7d:69:bd:be:37:a0:20:21: 5f:9d:05:5e:71:32:d1:e4:ea:05:09:e7:6e:40:1c: e1:f2:9e:4a:36:7a:c3:e5:d5:05:ed:49:7b:bd:28: 85:d6:b7:3a:92:65:33:5f:e0:25:07:6b:5c:94:6a: 96:89:5b:e8:01:4f:91:ac:5c:51:4e:f6:ff:72:e6: 9d:48:ae:1d:94:ba:7c:da:cd:17:0a:b0:1a:2f:5d: 7a:62:b5:28:7c:67:63:d4:77:47:80:c6:b5:09:3c: 51:13:a0:72:ad:1f:a3:33:d0:20:9d:5b:ec:01:9e: cd:ef:2e:d2:46:7b:04:6d:89:a4:9f:d3:cf:c1:82: 24:09:2c:d3:4a:61:23:ff:cc:61:65:d6:ee:68:29: 76:f0:a4:96:bc:89:1e:5c:33:ed:c8:6b:d7:88:71: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:09:B3:E2:46:E5:B1:22:A4:68:B2:05:6E:B9:4E:B7:E2:42:1E:E3 X509v3 Authority Key Identifier: keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:39:ef:b7:d9:72:8c:02:73:bf:cb:36:22:7c:a8:9a:63:f9: ba:a6:81:fc:0f:bf:53:23:db:a1:32:f7:79:d1:b7:68:c0:4a: 2d:76:d6:65:c4:54:5c:95:85:06:9b:4e:eb:0a:b0:33:54:35: 8e:41:65:7a:a8:f5:d8:45:f0:55:fa:98:20:1c:70:8a:a1:a9: 20:a7:f5:18:8d:48:bb:c1:c4:0e:68:76:8c:00:80:e2:8e:a8: ca:0f:1d:62:c7:eb:b6:eb:10:a9:e6:ad:85:48:2a:ff:35:5b: e4:b6:ee:fe:9b:f3:80:12:0a:ba:cc:c8:b6:4a:56:6e:84:8c: bf:ba:b6:46:e3:e9:f9:80:f2:1e:14:41:39:cb:8f:82:ec:9c: 83:62:c1:02:26:7f:f5:04:6a:4e:1a:3b:2b:c6:b0:73:22:87: b4:d0:60:36:fa:bf:5f:11:5b:44:4f:fc:0b:14:0c:94:ba:56: 79:eb:92:00:18:8e:21:02:b4:02:5c:f0:95:bd:b8:9c:59:38: ab:56:32:b8:0d:ca:96:2a:39:5b:fd:f0:c9:50:f0:3e:50:83: 3d:37:4d:6a:aa:e7:53:6f:ab:5c:a1:91:2a:40:1e:1d:30:47: 72:05:56:3c:9c:47:d1:d0:7d:66:54:22:09:5b:f1:a1:e0:90: ae:4e:57:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIkFmvaIrxYdMdWlsrcYWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWIzOTRhYWUwODM2ZDM0MzQxZjdhZDMxOTQ5NDc2NWFi NTZiMDcwHhcNMjUxMjEwMTQwMDM2WhcNMjUxMjExMTQwMDM2WjAzMTEwLwYDVQQD Eyg0YzA5YjNlMjQ2ZTViMTIyYTQ2OGIyMDU2ZWI5NGViN2UyNDIxZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1SF/juitj0OFWazEeZxIXDkap6z VZpUSjz7EIrRnQ+OyjWFb2fy5hVlYWttMCyQGYjIDGoB5EGFdIz2vLiruukAmAaY GVtpBLaVLYovQIFOLaSo5urA6f8Qgta4v/SLfWm9vjegICFfnQVecTLR5OoFCedu QBzh8p5KNnrD5dUF7Ul7vSiF1rc6kmUzX+AlB2tclGqWiVvoAU+RrFxRTvb/cuad SK4dlLp82s0XCrAaL116YrUofGdj1HdHgMa1CTxRE6ByrR+jM9AgnVvsAZ7N7y7S RnsEbYmkn9PPwYIkCSzTSmEj/8xhZdbuaCl28KSWvIkeXDPtyGvXiHF/+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwJs+JG5bEipGiyBW65TrfiQh7jMB8GA1UdIwQY MBaAFNzrOUquCDbTQ0H3rTGUlHZatWsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEt NDBjODZiMzJlYjIyLzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEtNDBjODZiMzJlYjIy LzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATnvt9ly jAJzv8s2InyommP5uqaB/A+/UyPboTL3edG3aMBKLXbWZcRUXJWFBptO6wqwM1Q1 jkFleqj12EXwVfqYIBxwiqGpIKf1GI1Iu8HEDmh2jACA4o6oyg8dYsfrtusQqeat hUgq/zVb5Lbu/pvzgBIKuszItkpWboSMv7q2RuPp+YDyHhRBOcuPguycg2LBAiZ/ 9QRqTho7K8awcyKHtNBgNvq/XxFbRE/8CxQMlLpWeeuSABiOIQK0Alzwlb24nFk4 q1YyuA3Klio5W/3wyVDwPlCDPTdNaqrnU2+rXKGRKkAeHTBHcgVWPJxH0dB9ZlQi CVvxoeCQrk5XnQ== -----END CERTIFICATE-----Generated at Wed Dec 10 18:46:07 2025 by rpki-client