This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: NejeagnWCIZe9MYBoV0zGGsWqjDcwTeiDs3jy1aDK9A= Subject key identifier: 7A:A9:B1:CC:72:6D:0B:D1:11:B9:47:53:C8:4B:01:22:2A:1F:6F:ED Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019AF49BB5699A7909CF2A8EF232ADB68F76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0B3B Signing time: Sat 06 Dec 2025 17:00:36 +0000 Manifest this update: Sat 06 Dec 2025 17:00:36 +0000 Manifest next update: Sun 07 Dec 2025 17:00:36 +0000 Files and hashes: 1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=) 2: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=) 3: 29CwtGRC06e--CmAyy8KOuiUHAM.roa (hash: zR5RLcYSkihJ6JtnaU1t+9weCiK1A6KL+5cTWo4Xkmo=) 4: 2lfZ96EfoSxZidpJ-kV9Z-G436U.roa (hash: F82HgUa3PdEQeyTXy6bMjHBnuElJ4e46eI58r2GDkK8=) 5: 3_vCPXMxLInxH4KSM9i76JRc3wI.roa (hash: KQnR/Rw1eBymAhNe+aNyzbKPfZJwc7vaoArCKIxxfkQ=) 6: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (hash: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=) 7: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=) 8: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=) 9: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=) 10: CIRls3stTp9BOjHce35suioz25Y.crl (hash: biDPtmUhSGgyihdgqUfZOiC+DE2G9mhm5JaUSGekPrw=) 11: E41iAo-YhWo417aVu3UFCXW5I0U.roa (hash: FPYq7/mqqnQsvVNvJMzlmLszXu5+IG0MN3SMAMVazpQ=) 12: FmMgP7ha8iX2FfDMIFk9KP0qkts.roa (hash: Ro1xRk0724SJQafKJQzEcvMjFfbM36IbDNwvGX/5JdQ=) 13: Gg2fBgym98lzpgGOw525Psta200.roa (hash: ITzizygNHqGF0ltRY0tg7IiIoexFvZtpbGrKT1PyRcQ=) 14: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=) 15: IBa2FfCm0NXr_jkTnl9W4lKJHbQ.roa (hash: g/fWzUMptSij5CbXIEyMw6oyGmVps6iOuy9vK1HPOHA=) 16: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=) 17: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=) 18: OzfjIdhzh7gpL6YR6SckdfTkc-4.roa (hash: qjn8XFFM1Wpyy8tyUnVazb1P7nlXBpVe5zicqRab8VA=) 19: P1GfPpRMWO0DN1ayjFsF8s42h0U.roa (hash: 8AiPsJ46Sh6eUO7JJzaL6h8U9SkUyiDH6w5ycG2ZG0Q=) 20: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=) 21: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (hash: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=) 22: Uj8njsPYdgRZYjZt_ospB351jos.roa (hash: LYqRDwSI7zwNyZiE9YMTNwUElSgWURvGf1f5eOoJElY=) 23: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=) 24: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=) 25: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=) 26: mAJpb-FsFkz7dybYs4PeIWecwc4.roa (hash: wMuP/t1rmuAKd01y5S1TPonT58b58o5bTHyhjOQ7ywU=) 27: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=) 28: otTutevZuJ6eolnFpw2U1FHmlNA.roa (hash: MYGZzYKczjODGic9nVPSjxLsW749qLjihm8rlEBU9CQ=) 29: vLt31u2LuYunvD1Z_qD2Pny8Vm4.roa (hash: +q32KVm8qCu/bkMttiIT0OppWTKc8bPsrl6PWUt3FeI=) 30: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=) 31: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=) 32: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b5:69:9a:79:09:cf:2a:8e:f2:32:ad:b6:8f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Dec 6 17:00:36 2025 GMT Not After : Dec 7 17:00:36 2025 GMT Subject: CN=7aa9b1cc726d0bd111b94753c84b01222a1f6fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:59:5b:16:97:3c:f6:fd:18:05:11:bb:81: a3:ed:8d:6a:a2:1b:1a:10:4e:7f:35:05:9b:94:c1: b7:9f:f3:eb:cc:65:44:72:e8:37:36:8b:3e:c9:d0: aa:af:eb:58:aa:8c:a3:6c:cb:a0:0f:ca:73:f4:ef: b7:f0:6a:cd:ca:49:11:c4:2b:d7:6a:65:8a:91:c1: 24:9c:48:60:66:64:b8:1a:71:a2:d1:92:4f:cf:fd: 30:ac:0e:24:21:8d:d6:bf:9c:65:79:4f:ea:b1:c1: 48:b4:55:44:72:39:09:c3:b0:2e:a2:5b:7d:cd:1d: 98:33:74:0b:d9:0e:e0:e0:c4:1f:94:6c:77:04:69: 2c:1b:99:53:92:8c:65:35:e7:00:c4:81:5e:4c:96: 15:89:2c:44:98:cd:21:ac:7b:bd:50:52:54:09:86: 74:9c:db:63:f4:94:6b:9c:2b:34:c5:aa:e8:62:d3: d5:0d:4d:40:50:db:44:ca:88:ae:ef:1b:15:de:b6: e7:8a:e1:eb:e2:d6:04:79:1d:3a:99:fe:08:25:15: c5:93:4a:42:ef:fd:f0:14:a1:bd:93:b9:33:73:62: d8:36:c7:1a:8e:5c:69:cf:57:e2:a4:d4:09:25:18: a7:3e:22:3e:ec:71:b3:cd:fc:09:4d:38:37:ba:03: a7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A9:B1:CC:72:6D:0B:D1:11:B9:47:53:C8:4B:01:22:2A:1F:6F:ED X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:3f:08:ec:3d:49:05:d9:33:22:b0:43:06:35:8f:ba:f2:c6: 7f:34:42:48:19:bd:05:cc:91:69:0c:75:04:f2:4c:e1:e3:86: 5b:d4:13:4f:aa:20:5b:f2:41:b5:5b:e5:cd:6d:7e:fe:6e:1c: 74:fa:7d:ad:ed:fa:09:e0:7c:a1:96:72:91:d3:41:ca:87:15: 3b:1a:e3:ef:e8:d8:43:0c:25:34:76:d8:e6:cd:a1:0b:9d:78: 87:94:17:34:1e:cc:57:e9:93:5d:96:93:1c:cc:2e:89:75:a6: 96:e3:34:f1:8a:08:ff:22:8b:89:4c:0b:af:16:43:5c:85:20: 7c:58:00:e1:7e:68:31:59:ff:96:24:35:2f:a7:d9:7a:eb:47: bd:e5:91:5a:59:fd:03:da:86:3d:3e:40:52:7f:43:55:5a:f4: 24:0d:a7:1f:b0:19:bf:e1:a8:92:8d:b6:7d:89:38:a1:f2:ba: da:0c:83:3d:a6:c2:cf:8d:2a:87:3d:dd:41:df:c7:66:41:e8: dc:48:a5:fb:b7:d6:c6:bf:e9:b4:c2:8e:43:18:a0:09:ab:11: 14:1e:3b:4c:56:7a:ac:19:e9:7e:59:d5:50:58:7b:4b:ea:49: 33:2d:5e:99:cd:f1:13:63:ab:de:8b:18:2e:c0:5c:11:9a:dd: 5e:8b:cd:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7VpmnkJzyqO8jKtto92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjUxMjA2MTcwMDM2WhcNMjUxMjA3MTcwMDM2WjAzMTEwLwYDVQQD Eyg3YWE5YjFjYzcyNmQwYmQxMTFiOTQ3NTNjODRiMDEyMjJhMWY2ZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydNZWxaXPPb9GAURu4Gj7Y1qohsa EE5/NQWblMG3n/PrzGVEcug3Nos+ydCqr+tYqoyjbMugD8pz9O+38GrNykkRxCvX amWKkcEknEhgZmS4GnGi0ZJPz/0wrA4kIY3Wv5xleU/qscFItFVEcjkJw7Auolt9 zR2YM3QL2Q7g4MQflGx3BGksG5lTkoxlNecAxIFeTJYViSxEmM0hrHu9UFJUCYZ0 nNtj9JRrnCs0xaroYtPVDU1AUNtEyoiu7xsV3rbniuHr4tYEeR06mf4IJRXFk0pC 7/3wFKG9k7kzc2LYNscajlxpz1fipNQJJRinPiI+7HGzzfwJTTg3ugOnHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqpscxybQvREblHU8hLASIqH2/tMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdz8I7D1J BdkzIrBDBjWPuvLGfzRCSBm9BcyRaQx1BPJM4eOGW9QTT6ogW/JBtVvlzW1+/m4c dPp9re36CeB8oZZykdNByocVOxrj7+jYQwwlNHbY5s2hC514h5QXNB7MV+mTXZaT HMwuiXWmluM08YoI/yKLiUwLrxZDXIUgfFgA4X5oMVn/liQ1L6fZeutHveWRWln9 A9qGPT5AUn9DVVr0JA2nH7AZv+Goko22fYk4ofK62gyDPabCz40qhz3dQd/HZkHo 3Eil+7fWxr/ptMKOQxigCasRFB47TFZ6rBnpflnVUFh7S+pJMy1emc3xE2Or3osY LsBcEZrdXovNYw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:44:08 2025 by rpki-client