This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft File: 30bUnMNHZ_jQJK_yla1qky55FeA.mft (raw, json) Hash identifier: sd20e08+4OoL+7e0016KAnKImTLx0BPR7XyFHrDrAE8= Subject key identifier: 14:D9:5F:FF:79:2D:A6:B6:72:92:FB:5B:5A:42:3E:F9:DF:44:86:73 Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0 Certificate issuer: /CN=df46d49cc34767f8d024aff295ad6a932e7915e0 Certificate serial: 019BFCF84045313FB12F35A76A4AEC2B5FBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft Manifest number: 0ACA Signing time: Tue 27 Jan 2026 01:01:26 +0000 Manifest this update: Tue 27 Jan 2026 01:01:26 +0000 Manifest next update: Wed 28 Jan 2026 01:01:26 +0000 Files and hashes: 1: 30bUnMNHZ_jQJK_yla1qky55FeA.crl (hash: 7StAwnpEE2J2NggMU9/2++8ydzEZhG5f3ArvDLtM+X4=) 2: rE_1H-00uBo7a6gc1UV-KaxbXpk.roa (hash: Nok0K6EfIgHcNFE45GfXNSKdGaLmBIALv0MixqWr//8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 01:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:40:45:31:3f:b1:2f:35:a7:6a:4a:ec:2b:5f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0 Validity Not Before: Jan 27 01:01:26 2026 GMT Not After : Jan 28 01:01:26 2026 GMT Subject: CN=14d95fff792da6b67292fb5b5a423ef9df448673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:53:ee:25:93:83:85:68:4a:5e:7b:e3:fc: 54:1f:10:59:6c:10:9c:e4:14:e1:de:44:df:9c:55: 34:39:1a:55:44:cd:a0:d1:19:71:64:70:82:e9:18: e8:6d:7b:78:69:14:dd:7b:59:e6:e7:c8:60:f8:42: 88:59:b6:b6:71:25:18:f1:99:2a:c0:54:44:f3:49: f4:ca:d2:ad:28:ca:94:c6:cb:68:d6:d4:4c:90:39: 46:77:2a:73:1e:ad:a2:99:da:11:42:28:e8:23:81: 7c:e1:94:23:59:bf:07:f6:f9:96:10:2e:9e:be:5b: 28:a3:c7:57:0d:0d:90:97:b8:57:bb:5f:a4:bd:b2: 77:0d:5e:08:5a:ad:3b:e3:e3:06:f1:67:b4:91:91: 91:37:20:a4:0b:63:87:c4:a0:44:eb:53:10:49:b4: 69:01:32:6c:20:70:be:dc:47:8b:5d:4a:bb:9a:4d: dc:3d:49:3a:d3:98:a2:63:f3:4d:71:d1:79:ae:d5: f3:b0:10:38:0d:cd:8e:8e:90:06:df:96:92:23:b1: 26:66:f0:2e:c5:2a:6b:db:74:98:44:6a:45:5e:a2: 97:33:67:59:49:5d:00:d8:82:d0:72:fb:c4:08:10: cc:05:4f:3d:24:69:b7:d9:b1:f5:76:9b:9d:89:33: 79:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D9:5F:FF:79:2D:A6:B6:72:92:FB:5B:5A:42:3E:F9:DF:44:86:73 X509v3 Authority Key Identifier: keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:41:23:f6:fc:d6:38:20:b3:48:25:f2:f3:52:bc:49:02:62: c3:ef:63:9d:3a:a1:f6:8d:78:e5:ef:ce:f4:33:6f:4a:a2:62: e9:6c:6d:35:04:9c:ac:cd:c1:d0:7f:43:21:a5:26:2a:cc:7b: 54:b7:97:cd:93:ae:24:17:4b:a5:0e:33:3a:59:61:35:44:06: 27:90:b5:3e:31:84:6a:55:a2:92:07:cc:32:e1:a4:8f:63:0c: 25:be:2e:0e:e1:19:01:a8:cb:de:e5:dc:88:1d:c3:ed:c0:24: 96:7b:8a:f1:08:4c:1d:59:8c:18:3d:6d:c3:62:1b:2e:5f:cd: bc:7c:4d:78:3b:96:33:fe:06:f2:cb:f5:2f:a2:20:7f:66:81: b1:22:e0:90:77:fb:bb:2b:64:c0:f2:94:49:7e:af:d0:3a:e1: 46:d4:fb:ca:ce:48:e2:fc:bc:10:11:e8:6d:9c:ed:1b:f5:54: 71:14:0c:05:51:9b:4d:09:c4:94:90:0a:4d:c4:19:f1:ee:fd: eb:9b:0b:ec:aa:e8:80:f0:c8:0b:53:fc:b5:91:76:66:c1:e9: 54:06:94:8c:b3:8a:d7:61:c9:87:98:c1:29:f7:eb:d8:36:4d: d7:dd:9b:7d:e6:38:3c:99:ac:7e:bf:b8:02:1a:ce:10:c3:60: 80:6a:ff:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+EBFMT+xLzWnakrsK1++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNDZkNDljYzM0NzY3ZjhkMDI0YWZmMjk1YWQ2YTkzMmU3 OTE1ZTAwHhcNMjYwMTI3MDEwMTI2WhcNMjYwMTI4MDEwMTI2WjAzMTEwLwYDVQQD EygxNGQ5NWZmZjc5MmRhNmI2NzI5MmZiNWI1YTQyM2VmOWRmNDQ4NjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoNT7iWTg4VoSl574/xUHxBZbBCc 5BTh3kTfnFU0ORpVRM2g0RlxZHCC6RjobXt4aRTde1nm58hg+EKIWba2cSUY8Zkq wFRE80n0ytKtKMqUxsto1tRMkDlGdypzHq2imdoRQijoI4F84ZQjWb8H9vmWEC6e vlsoo8dXDQ2Ql7hXu1+kvbJ3DV4IWq074+MG8We0kZGRNyCkC2OHxKBE61MQSbRp ATJsIHC+3EeLXUq7mk3cPUk605iiY/NNcdF5rtXzsBA4Dc2OjpAG35aSI7EmZvAu xSpr23SYRGpFXqKXM2dZSV0A2ILQcvvECBDMBU89JGm32bH1dpudiTN5xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTZX/95Laa2cpL7W1pCPvnfRIZzMB8GA1UdIwQY MBaAFN9G1JzDR2f40CSv8pWtapMueRXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzBiVW5NTkhaX2pRSktfeWxhMXFreTU1RmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My85Yjk3M2QtMWYyZi00Yzc3LTlkZDAt MWY3MzIwNDZiNzRjLzEvMzBiVW5NTkhaX2pRSktfeWxhMXFreTU1RmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My85Yjk3M2QtMWYyZi00Yzc3LTlkZDAtMWY3MzIwNDZiNzRj LzEvMzBiVW5NTkhaX2pRSktfeWxhMXFreTU1RmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUEj9vzW OCCzSCXy81K8SQJiw+9jnTqh9o145e/O9DNvSqJi6WxtNQScrM3B0H9DIaUmKsx7 VLeXzZOuJBdLpQ4zOllhNUQGJ5C1PjGEalWikgfMMuGkj2MMJb4uDuEZAajL3uXc iB3D7cAklnuK8QhMHVmMGD1tw2IbLl/NvHxNeDuWM/4G8sv1L6Igf2aBsSLgkHf7 uytkwPKUSX6v0DrhRtT7ys5I4vy8EBHobZztG/VUcRQMBVGbTQnElJAKTcQZ8e79 65sL7KrogPDIC1P8tZF2ZsHpVAaUjLOK12HJh5jBKffr2DZN192bfeY4PJmsfr+4 AhrOEMNggGr/8A== -----END CERTIFICATE-----Generated at Tue Jan 27 11:16:13 2026 by rpki-client