This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft File: a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json) Hash identifier: uqrtl/WhZrFIT22lzzZfkY2X4mtwK+xH/ajYFf0+NXc= Subject key identifier: 88:AB:B8:1F:CA:7E:00:A6:84:39:7F:32:77:ED:08:18:7F:35:52:EA Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1 Certificate serial: 019B24E3ECB41C63AB43FB5AD06EE6E3F544 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft Manifest number: 120A Signing time: Tue 16 Dec 2025 02:01:15 +0000 Manifest this update: Tue 16 Dec 2025 02:01:15 +0000 Manifest next update: Wed 17 Dec 2025 02:01:15 +0000 Files and hashes: 1: 1-47yB099htuBv2m-mnsxmo5hMaE.roa (hash: glbHBbOOXucvNPZBEZEZlyBvhlSEAVVGrvhxKUG4Uz4=) 2: 5Y2NPf-2wwHQNFwN222T-_ksWjs.roa (hash: 7vHIYZQTiGeFh0mU2zpcuuX7KVBld5DcIlwlMA6in8o=) 3: St4HRjoesIgHRfExOBffE_pcBIw.roa (hash: zj7JSUVTgp8pR7SRQVxha79Is1N6T3q+JK526mfdo5s=) 4: ZRn8_lnFsXvgqivcUn4eIrUv-Ic.roa (hash: ViUiWV5ebu4waGuKqQE1IWidKaFMMzGFtUARe3tVsh4=) 5: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: l1qABtNs0gZ9J0ElsZyotSoJEEMjDX6FbTKICB8w2Bo=) 6: lKdTsJ9TvIICTgPRcm3O1hlBWiM.roa (hash: py16JH9zUXcJT+HWUygN67vLSyq6kBTksveRhrIkt/k=) 7: pTwzFC29LPXNKIBj8fs94m0Kbbg.roa (hash: sPgk9WDd2v8KxrBOyyp78OiRQG9IETqQ+gnNWNn4qjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:ec:b4:1c:63:ab:43:fb:5a:d0:6e:e6:e3:f5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1 Validity Not Before: Dec 16 02:01:15 2025 GMT Not After : Dec 17 02:01:15 2025 GMT Subject: CN=88abb81fca7e00a684397f3277ed08187f3552ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:61:c1:56:b6:96:37:c3:84:24:9b:1d:06: 4e:e1:cb:d2:0f:98:48:06:37:1f:f4:b2:b7:04:e6: 31:33:4e:e1:2f:56:b6:81:fe:d6:8d:3f:3f:d1:93: af:0f:2c:43:29:5e:b0:82:32:86:2a:62:89:40:b9: d5:bf:9c:0a:4f:96:3e:7b:10:27:fd:49:6d:00:3d: 48:bc:f5:db:f8:ca:e8:87:b8:38:5a:3c:40:dd:a2: 4c:a3:e6:a9:01:7d:38:de:b1:3f:4d:c3:1e:13:94: fd:33:7f:44:17:1a:60:fb:df:7e:86:4f:cc:39:dc: 8b:11:27:0b:19:c9:46:43:a3:15:59:b5:f6:2f:69: 2e:e7:df:d9:6d:e2:ea:78:b7:8e:77:48:86:b1:9f: 5e:bd:65:6a:8d:aa:48:91:c6:73:b8:e0:2e:61:a2: a3:36:c0:5a:e2:d2:a5:82:9c:4c:69:b1:4a:aa:2c: 75:ea:7c:37:67:7a:26:40:e9:25:65:9d:0c:a9:e7: 30:39:0b:79:bf:91:21:78:13:52:b4:e9:ed:9d:ab: 26:fd:10:91:64:4d:57:96:61:6c:49:bb:15:00:4d: f8:e7:c6:1f:66:af:4c:25:2d:a7:31:4c:1e:f2:38: 99:e6:c3:eb:55:25:42:a2:63:6a:79:c1:ec:15:a0: 1a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AB:B8:1F:CA:7E:00:A6:84:39:7F:32:77:ED:08:18:7F:35:52:EA X509v3 Authority Key Identifier: keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d9:3e:27:0f:0e:a9:d2:d6:15:3d:9f:4c:56:4f:4a:4c:1c: d4:ae:10:1c:6d:42:51:61:40:7b:18:dc:ec:3f:af:5c:a2:d3: b7:e4:10:a2:f3:09:9b:34:fa:09:61:45:f3:94:d9:b9:ec:4a: c3:9e:ca:49:9a:be:ed:94:bd:2a:f2:c4:e5:3c:ee:12:4a:47: 80:18:32:7d:a5:38:24:93:47:f5:0f:59:b3:b4:bd:82:30:03: f6:00:33:f0:df:c1:34:47:32:c9:ca:f5:58:fa:64:cc:3f:15: c1:1a:2a:12:fd:38:7f:a4:cd:8a:a8:4c:3b:79:5e:5f:a2:1c: d0:4c:1a:96:da:57:98:26:c4:5a:ce:5a:a0:24:1b:cc:8c:c3: 3d:15:f9:8f:d3:01:df:70:d8:fa:49:1c:30:a9:ab:fe:b5:e9: ce:8e:02:7d:3d:cf:a1:ac:3d:8d:be:56:63:7f:5e:91:e9:85: 5a:70:b7:e5:af:35:d5:4a:9a:67:47:e6:ae:6b:7e:97:28:53: a9:45:cb:ad:ab:da:e1:47:42:08:4a:65:01:1d:01:86:52:1f: df:29:8c:8a:a3:c7:79:6b:61:05:df:37:5b:62:34:c2:c4:fa: 66:68:6f:54:e5:06:c8:f2:a7:4e:16:dc:06:88:47:ac:88:9d: a6:0f:c1:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk4+y0HGOrQ/ta0G7m4/VEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz OGVhYzEwHhcNMjUxMjE2MDIwMTE1WhcNMjUxMjE3MDIwMTE1WjAzMTEwLwYDVQQD Eyg4OGFiYjgxZmNhN2UwMGE2ODQzOTdmMzI3N2VkMDgxODdmMzU1MmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXlhwVa2ljfDhCSbHQZO4cvSD5hI Bjcf9LK3BOYxM07hL1a2gf7WjT8/0ZOvDyxDKV6wgjKGKmKJQLnVv5wKT5Y+exAn /UltAD1IvPXb+Mroh7g4WjxA3aJMo+apAX043rE/TcMeE5T9M39EFxpg+99+hk/M OdyLEScLGclGQ6MVWbX2L2ku59/ZbeLqeLeOd0iGsZ9evWVqjapIkcZzuOAuYaKj NsBa4tKlgpxMabFKqix16nw3Z3omQOklZZ0MqecwOQt5v5EheBNStOntnasm/RCR ZE1XlmFsSbsVAE3458YfZq9MJS2nMUwe8jiZ5sPrVSVComNqecHsFaAa2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiruB/KfgCmhDl/MnftCBh/NVLqMB8GA1UdIwQY MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt MmZhZDlhMmZjM2VmLzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNk+Jw8O qdLWFT2fTFZPSkwc1K4QHG1CUWFAexjc7D+vXKLTt+QQovMJmzT6CWFF85TZuexK w57KSZq+7ZS9KvLE5TzuEkpHgBgyfaU4JJNH9Q9Zs7S9gjAD9gAz8N/BNEcyycr1 WPpkzD8VwRoqEv04f6TNiqhMO3leX6Ic0EwaltpXmCbEWs5aoCQbzIzDPRX5j9MB 33DY+kkcMKmr/rXpzo4CfT3Poaw9jb5WY39ekemFWnC35a811UqaZ0fmrmt+lyhT qUXLrava4UdCCEplAR0BhlIf3ymMiqPHeWthBd83W2I0wsT6ZmhvVOUGyPKnThbc BohHrIidpg/BQQ== -----END CERTIFICATE-----Generated at Tue Dec 16 08:59:22 2025 by rpki-client