This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft File: 30bUnMNHZ_jQJK_yla1qky55FeA.mft (raw, json) Hash identifier: ioyFgHVSL7Uz+f9j9KsZO9wxioV6BamRbRKYXaSj09U= Subject key identifier: 31:72:54:DB:5B:8C:36:65:2F:8D:D9:AC:55:FB:A9:9A:5C:0A:B5:8F Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0 Certificate issuer: /CN=df46d49cc34767f8d024aff295ad6a932e7915e0 Certificate serial: 019B0E93442AA2F9BC84477D7E0714CF7A3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft Manifest number: 0A4E Signing time: Thu 11 Dec 2025 18:01:30 +0000 Manifest this update: Thu 11 Dec 2025 18:01:30 +0000 Manifest next update: Fri 12 Dec 2025 18:01:30 +0000 Files and hashes: 1: 30bUnMNHZ_jQJK_yla1qky55FeA.crl (hash: ZHuqSWuNvbuX8h3y4qx7LdiSvgDaJkbjGSqY3olyMWg=) 2: ZqG9ZXQwlRQgv2SuPLTOJwS07bA.roa (hash: JZgT3iIXQIZJHifSbhHNXa/qOoNcRciphxipRif7+Xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:44:2a:a2:f9:bc:84:47:7d:7e:07:14:cf:7a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0 Validity Not Before: Dec 11 18:01:30 2025 GMT Not After : Dec 12 18:01:30 2025 GMT Subject: CN=317254db5b8c36652f8dd9ac55fba99a5c0ab58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:48:0a:76:a7:53:a8:7c:60:32:6d:8c:2e:42: 3b:db:e8:2b:c1:09:ec:db:14:4d:88:72:6e:e0:b6: 5d:f4:17:ad:a1:d3:a4:39:4d:68:97:e4:cb:d1:58: 90:79:91:da:1e:85:f2:8b:ea:ad:18:3d:e9:c1:de: bb:aa:b5:ea:57:92:94:05:51:55:09:93:81:2c:a5: 2b:f6:aa:bc:58:ac:8a:c1:b7:f5:97:bb:c8:6f:57: bd:dd:74:9c:d6:57:a1:5d:ee:c5:1d:bb:01:97:b8: 17:8b:d0:01:af:1b:46:c2:04:2e:a9:72:49:ff:81: 12:dd:ef:39:b4:97:ba:32:23:9b:64:bb:60:b4:e0: 7d:3c:93:cc:90:7f:97:6f:ca:16:51:69:8b:87:ee: 1b:69:40:40:44:b8:c1:b6:1b:b0:12:9e:85:9e:c3: 8e:04:18:8d:41:62:57:bc:0c:d1:35:83:22:d8:77: c4:94:43:42:17:63:ca:70:a4:9a:fb:19:a9:50:67: 5d:7b:5d:df:8c:57:ec:c4:63:3b:50:a8:2f:1e:77: fc:23:10:27:81:ed:99:58:f0:62:23:36:a5:ed:0b: b7:6b:5e:ef:17:b3:1a:a8:fc:ba:22:c5:51:7e:08: 43:ca:45:34:1c:e0:5b:6a:79:11:b4:dd:84:47:8f: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:72:54:DB:5B:8C:36:65:2F:8D:D9:AC:55:FB:A9:9A:5C:0A:B5:8F X509v3 Authority Key Identifier: keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3b:5b:6e:ce:84:e6:d7:08:ab:91:93:8a:50:b7:49:43:c2: 2a:3c:b1:0f:b0:23:64:dd:93:d3:38:12:7f:93:65:3c:19:3b: 09:85:e3:1c:90:0a:32:1c:e3:a3:28:63:aa:50:ae:be:d2:59: 8c:80:26:0f:17:b7:3b:f0:55:51:73:15:4e:b2:9e:5c:d1:63: 29:cc:21:38:03:f5:e7:d7:8a:38:7f:97:8f:01:6c:c9:e0:fa: fc:04:bc:a4:b6:b5:1f:df:30:72:4c:ef:de:38:da:36:b9:31: 63:78:dc:4f:e7:53:69:97:15:b6:97:32:81:a7:42:e5:0d:23: 8c:60:78:8c:01:b9:71:83:71:bc:01:f9:76:01:6e:2c:db:fd: e7:6b:25:39:7f:9d:31:a3:16:de:97:ca:06:fc:81:f7:e5:16: ab:f0:78:64:f7:18:80:13:56:8a:19:bc:61:b8:1d:32:c3:4e: 24:fb:22:a3:33:06:80:7a:2e:ef:03:50:8d:aa:c6:a9:74:6f: 21:e2:87:22:8e:56:56:ac:67:51:2c:0c:b9:cb:60:03:3f:67: c6:68:a1:df:0b:97:00:27:5b:5a:d4:7f:c8:23:3a:6b:4c:7e: ab:72:52:39:20:a2:01:f8:07:22:89:b0:e6:19:96:6d:65:a7: d3:62:6a:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk0Qqovm8hEd9fgcUz3o+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNDZkNDljYzM0NzY3ZjhkMDI0YWZmMjk1YWQ2YTkzMmU3 OTE1ZTAwHhcNMjUxMjExMTgwMTMwWhcNMjUxMjEyMTgwMTMwWjAzMTEwLwYDVQQD EygzMTcyNTRkYjViOGMzNjY1MmY4ZGQ5YWM1NWZiYTk5YTVjMGFiNThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UgKdqdTqHxgMm2MLkI72+grwQns 2xRNiHJu4LZd9BetodOkOU1ol+TL0ViQeZHaHoXyi+qtGD3pwd67qrXqV5KUBVFV CZOBLKUr9qq8WKyKwbf1l7vIb1e93XSc1lehXe7FHbsBl7gXi9ABrxtGwgQuqXJJ /4ES3e85tJe6MiObZLtgtOB9PJPMkH+Xb8oWUWmLh+4baUBARLjBthuwEp6FnsOO BBiNQWJXvAzRNYMi2HfElENCF2PKcKSa+xmpUGdde13fjFfsxGM7UKgvHnf8IxAn ge2ZWPBiIzal7Qu3a17vF7MaqPy6IsVRfghDykU0HOBbankRtN2ER49BRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFyVNtbjDZlL43ZrFX7qZpcCrWPMB8GA1UdIwQY MBaAFN9G1JzDR2f40CSv8pWtapMueRXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzBiVW5NTkhaX2pRSktfeWxhMXFreTU1RmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My85Yjk3M2QtMWYyZi00Yzc3LTlkZDAt MWY3MzIwNDZiNzRjLzEvMzBiVW5NTkhaX2pRSktfeWxhMXFreTU1RmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My85Yjk3M2QtMWYyZi00Yzc3LTlkZDAtMWY3MzIwNDZiNzRj LzEvMzBiVW5NTkhaX2pRSktfeWxhMXFreTU1RmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDtbbs6E 5tcIq5GTilC3SUPCKjyxD7AjZN2T0zgSf5NlPBk7CYXjHJAKMhzjoyhjqlCuvtJZ jIAmDxe3O/BVUXMVTrKeXNFjKcwhOAP159eKOH+XjwFsyeD6/AS8pLa1H98wckzv 3jjaNrkxY3jcT+dTaZcVtpcygadC5Q0jjGB4jAG5cYNxvAH5dgFuLNv952slOX+d MaMW3pfKBvyB9+UWq/B4ZPcYgBNWihm8YbgdMsNOJPsiozMGgHou7wNQjarGqXRv IeKHIo5WVqxnUSwMuctgAz9nxmih3wuXACdbWtR/yCM6a0x+q3JSOSCiAfgHIomw 5hmWbWWn02Jquw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:06:08 2025 by rpki-client