This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft File: _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json) Hash identifier: bGiO3TVSoEHJ2ENTnBhLo/Z5ScnQNXvLXBG1o+Y4LFc= Subject key identifier: F9:2D:2F:53:40:08:10:4A:93:61:B2:B8:05:C3:8D:88:51:3A:88:CD Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30 Certificate issuer: /CN=ff7d173466efbb26d2a119298bb9799a093c3230 Certificate serial: 019B59E4201F583457C60BD9258BB28065D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft Manifest number: 1411 Signing time: Fri 26 Dec 2025 09:01:21 +0000 Manifest this update: Fri 26 Dec 2025 09:01:21 +0000 Manifest next update: Sat 27 Dec 2025 09:01:21 +0000 Files and hashes: 1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: URu5CCxQsfn/CqJUNHUHSJWhY84cpEMljyCvPJhMunU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:20:1f:58:34:57:c6:0b:d9:25:8b:b2:80:65:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230 Validity Not Before: Dec 26 09:01:21 2025 GMT Not After : Dec 27 09:01:21 2025 GMT Subject: CN=f92d2f534008104a9361b2b805c38d88513a88cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:11:6d:02:7e:8c:26:0a:e1:0b:b6:bf:3c:1f: 24:91:79:fb:8e:e5:e8:75:57:e2:92:72:63:23:ab: 52:5a:01:f1:a9:71:b4:0e:0c:b8:78:82:31:09:63: 96:da:13:ad:7e:3a:bf:1c:1f:18:32:e8:60:6f:e8: 2b:2d:d6:b3:64:6a:38:7a:2f:a0:5a:59:85:af:3e: bc:2a:09:1b:45:d2:12:2e:5d:00:c3:a9:9a:17:6e: c7:29:88:6b:0a:29:c4:7e:71:c4:ae:0d:1c:1f:a6: 0c:3f:b3:97:9d:97:06:da:9e:61:0d:e7:51:e7:9c: 85:4e:c5:88:a9:87:35:cc:82:b1:33:23:80:4b:33: d3:9b:51:4d:c9:34:cb:24:0b:a9:b2:19:dd:5e:38: e4:18:64:45:67:bf:0b:6a:be:52:ae:95:03:98:e2: 78:f7:3c:85:33:9a:9d:9c:32:1e:cc:5c:40:c7:ba: d9:b4:06:fb:05:ff:81:2a:f8:c0:0e:61:36:e1:15: c5:7c:15:38:9c:5c:14:53:83:db:a2:67:97:94:f5: a5:aa:28:bf:38:80:d0:aa:c5:74:5e:8b:eb:cd:54: 57:71:92:6f:b6:ed:d3:de:92:8d:d2:8e:2e:c2:1d: e3:b1:4b:03:fc:aa:22:b8:99:7d:fa:6d:5b:c0:35: c5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2D:2F:53:40:08:10:4A:93:61:B2:B8:05:C3:8D:88:51:3A:88:CD X509v3 Authority Key Identifier: keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b0:f6:cc:73:4d:79:68:22:ee:5c:21:bb:fb:98:5a:aa:a8: 91:cf:eb:dd:33:a7:34:24:6a:c9:d2:e6:74:54:d2:49:21:87: 9b:4d:2e:1b:9c:ba:01:59:b4:d5:ce:6c:c2:97:0e:f3:ed:4b: 13:d7:42:ab:b0:f9:66:83:d3:55:41:f8:20:75:d0:e1:10:40: a9:00:37:e9:55:d6:c0:e5:86:53:de:21:df:b2:fa:0c:45:cb: b6:fb:12:f8:0a:05:60:ad:04:94:e2:bb:83:be:a1:6d:ae:ad: 3d:c2:86:42:b9:07:b0:58:68:38:e9:e9:88:b0:0d:8a:6c:92: a7:7e:40:61:ac:4d:3e:0f:15:26:fd:2c:18:81:50:fb:85:9f: ae:fd:b6:49:38:4d:d4:d7:8e:21:ff:be:2c:7f:3d:a2:79:ea: 03:4b:14:29:5d:ed:ae:af:40:2a:a5:26:23:2f:ab:37:d7:9d: 85:5b:1b:1a:a4:57:c3:0f:a5:a5:7f:9d:0e:6d:e7:a4:1f:a4: ba:d6:b0:0d:db:73:0f:f9:1e:11:7e:05:5f:b5:ad:4a:6e:ec: 7b:72:a6:57:da:53:38:71:cd:d7:7c:4c:42:a4:4f:ae:fa:56: c0:37:f2:5e:f3:59:4a:5e:26:6f:74:f9:be:55:a9:c6:c2:ff: 52:5e:f9:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5CAfWDRXxgvZJYuygGXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmN2QxNzM0NjZlZmJiMjZkMmExMTkyOThiYjk3OTlhMDkz YzMyMzAwHhcNMjUxMjI2MDkwMTIxWhcNMjUxMjI3MDkwMTIxWjAzMTEwLwYDVQQD EyhmOTJkMmY1MzQwMDgxMDRhOTM2MWIyYjgwNWMzOGQ4ODUxM2E4OGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxFtAn6MJgrhC7a/PB8kkXn7juXo dVfiknJjI6tSWgHxqXG0Dgy4eIIxCWOW2hOtfjq/HB8YMuhgb+grLdazZGo4ei+g WlmFrz68KgkbRdISLl0Aw6maF27HKYhrCinEfnHErg0cH6YMP7OXnZcG2p5hDedR 55yFTsWIqYc1zIKxMyOASzPTm1FNyTTLJAupshndXjjkGGRFZ78Lar5SrpUDmOJ4 9zyFM5qdnDIezFxAx7rZtAb7Bf+BKvjADmE24RXFfBU4nFwUU4PbomeXlPWlqii/ OIDQqsV0XovrzVRXcZJvtu3T3pKN0o4uwh3jsUsD/KoiuJl9+m1bwDXFDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPktL1NACBBKk2GyuAXDjYhROojNMB8GA1UdIwQY MBaAFP99FzRm77sm0qEZKYu5eZoJPDIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzMwWE5HYnZ1eWJTb1JrcGk3bDVtZ2s4TWpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iMTNmMDAtYWI3MS00NDM2LWI2Yjkt YmJhZGZmOGMwNTlhLzEvXzMwWE5HYnZ1eWJTb1JrcGk3bDVtZ2s4TWpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9iMTNmMDAtYWI3MS00NDM2LWI2YjktYmJhZGZmOGMwNTlh LzEvXzMwWE5HYnZ1eWJTb1JrcGk3bDVtZ2s4TWpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrD2zHNN eWgi7lwhu/uYWqqokc/r3TOnNCRqydLmdFTSSSGHm00uG5y6AVm01c5swpcO8+1L E9dCq7D5ZoPTVUH4IHXQ4RBAqQA36VXWwOWGU94h37L6DEXLtvsS+AoFYK0ElOK7 g76hba6tPcKGQrkHsFhoOOnpiLANimySp35AYaxNPg8VJv0sGIFQ+4Wfrv22SThN 1NeOIf++LH89onnqA0sUKV3trq9AKqUmIy+rN9edhVsbGqRXww+lpX+dDm3npB+k utawDdtzD/keEX4FX7WtSm7se3KmV9pTOHHN13xMQqRPrvpWwDfyXvNZSl4mb3T5 vlWpxsL/Ul75Dw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:57 2025 by rpki-client