This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft File: Q30oDLTq6BVqd9_no__F_UtNv6o.mft (raw, json) Hash identifier: DUHz1XVJSU0/G4eyoq9JAFtsze0gxl74j7rECx4Q5hA= Subject key identifier: B8:A3:2E:32:23:C3:C9:E2:34:46:6F:45:2E:34:54:98:A6:FB:84:F6 Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa Certificate serial: 019B262D1622D3309BB9C017C2DECAEB191F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft Manifest number: 0D6C Signing time: Tue 16 Dec 2025 08:00:47 +0000 Manifest this update: Tue 16 Dec 2025 08:00:47 +0000 Manifest next update: Wed 17 Dec 2025 08:00:47 +0000 Files and hashes: 1: NUMGApw0ZIudlY6CbxaMIi5m3Sw.roa (hash: sPPFfl9rDy2r8PN0vy1ncdAusR2ktn2BYpHhqH/9HPU=) 2: Q30oDLTq6BVqd9_no__F_UtNv6o.crl (hash: ga3xYG1nC3kcjpQ+aKjuM9I7Or1HDTNpbq9oFCpYHRQ=) 3: qmdW7QDQZDPCWqHqKcF3JA5rms0.roa (hash: ctHCP/FM4qoA2M0yYjlwR9ihsYeU5a4WMdFfP2zXVeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:16:22:d3:30:9b:b9:c0:17:c2:de:ca:eb:19:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa Validity Not Before: Dec 16 08:00:47 2025 GMT Not After : Dec 17 08:00:47 2025 GMT Subject: CN=b8a32e3223c3c9e234466f452e345498a6fb84f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:c7:f2:c9:35:84:5a:de:10:e0:50:77:18: dd:d0:7b:37:ec:2b:73:29:76:87:75:52:03:5d:f5: 80:34:23:5c:a1:5d:8f:e5:2e:4c:f7:5f:16:70:05: 38:af:e3:0f:a1:c6:24:cd:a0:90:ac:d2:3a:c4:62: 66:0d:bd:f6:96:7a:df:ea:5a:3f:33:51:ee:98:8d: 55:f7:ea:34:bc:e6:c7:86:7f:73:f6:e4:f0:29:b8: 4b:5c:08:df:a6:d0:c2:54:20:29:c0:e5:50:9f:16: e9:e3:02:91:ee:e3:fd:d1:90:27:1b:2e:d8:91:58: 53:91:a7:c4:c7:54:b3:63:cf:8f:1b:80:a2:f0:96: 7f:4c:68:b2:62:3d:9f:33:a4:22:dd:41:44:27:a0: 5e:e3:8d:29:b2:0a:85:a3:74:f4:fc:5a:e4:c2:59: 35:79:63:27:0c:a2:97:0b:70:fe:e7:7b:4a:48:c6: 1e:ed:b1:4d:05:e8:ad:09:ab:87:31:40:9a:89:dc: 3b:b2:0a:04:25:b0:52:84:fa:e6:f9:d4:87:bb:d5: 52:87:44:a6:6b:13:1b:a0:3e:da:80:dc:79:82:c3: 73:cb:3b:e9:e1:20:db:8e:79:1e:4e:c2:f4:3f:1c: d7:c8:18:30:61:28:b3:5e:c3:46:6e:b0:49:e6:1e: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A3:2E:32:23:C3:C9:E2:34:46:6F:45:2E:34:54:98:A6:FB:84:F6 X509v3 Authority Key Identifier: keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:95:12:0c:53:96:da:bf:a9:b9:ba:c6:20:fc:eb:03:17:ba: c1:a3:a7:1d:1d:32:47:a7:49:38:37:4e:1b:82:89:1d:da:1e: 0c:2d:d2:32:2e:a5:d5:0b:4d:b9:39:20:68:f8:0d:a5:df:0f: 8b:9c:64:70:2f:36:a7:b2:23:f0:b7:6d:23:81:e1:d9:9f:da: 46:27:23:f3:d6:fa:7d:0b:1f:44:9c:e5:4a:65:48:a6:f6:f4: ef:3b:59:88:ba:13:6d:15:92:6b:34:94:2e:97:16:15:4d:cf: fc:f6:00:59:9d:b6:67:6e:fe:7b:ae:78:e7:b8:36:bd:e3:3c: 2b:88:92:c2:b8:6e:20:aa:0f:e1:59:90:bc:00:2e:1d:8e:7c: 9e:69:e9:70:6e:81:bc:f7:32:94:ff:fc:ca:f9:b0:58:a2:dc: 18:e2:08:27:fd:dd:e2:4e:64:91:fb:d0:29:f9:d0:22:74:50: c2:cd:42:63:a2:f6:7b:1a:16:fc:c8:b7:0d:2f:cb:02:89:ee: 5d:94:da:ab:cb:a6:e7:cd:aa:39:e6:51:97:15:92:e1:e9:15: 8e:d8:05:76:f9:ee:b4:d9:8a:d9:41:76:7b:ff:20:cb:8c:b3: 6e:fd:5a:09:3c:74:0d:9b:58:9f:e3:48:3c:6b:7d:c0:e1:11: 2c:bb:95:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLRYi0zCbucAXwt7K6xkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzN2QyODBjYjRlYWU4MTU2YTc3ZGZlN2EzZmZjNWZkNGI0 ZGJmYWEwHhcNMjUxMjE2MDgwMDQ3WhcNMjUxMjE3MDgwMDQ3WjAzMTEwLwYDVQQD EyhiOGEzMmUzMjIzYzNjOWUyMzQ0NjZmNDUyZTM0NTQ5OGE2ZmI4NGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhzH8sk1hFreEOBQdxjd0Hs37Ctz KXaHdVIDXfWANCNcoV2P5S5M918WcAU4r+MPocYkzaCQrNI6xGJmDb32lnrf6lo/ M1HumI1V9+o0vObHhn9z9uTwKbhLXAjfptDCVCApwOVQnxbp4wKR7uP90ZAnGy7Y kVhTkafEx1SzY8+PG4Ci8JZ/TGiyYj2fM6Qi3UFEJ6Be440psgqFo3T0/Frkwlk1 eWMnDKKXC3D+53tKSMYe7bFNBeitCauHMUCaidw7sgoEJbBShPrm+dSHu9VSh0Sm axMboD7agNx5gsNzyzvp4SDbjnkeTsL0PxzXyBgwYSizXsNGbrBJ5h42XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLijLjIjw8niNEZvRS40VJim+4T2MB8GA1UdIwQY MBaAFEN9KAy06ugVanff56P/xf1LTb+qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80YjkzNTMtYjcwZC00MDhiLWE4Yjct ZWM1MGRhYWQ4MmY3LzEvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80YjkzNTMtYjcwZC00MDhiLWE4YjctZWM1MGRhYWQ4MmY3 LzEvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5USDFOW 2r+pubrGIPzrAxe6waOnHR0yR6dJODdOG4KJHdoeDC3SMi6l1QtNuTkgaPgNpd8P i5xkcC82p7Ij8LdtI4Hh2Z/aRicj89b6fQsfRJzlSmVIpvb07ztZiLoTbRWSazSU LpcWFU3P/PYAWZ22Z27+e65457g2veM8K4iSwrhuIKoP4VmQvAAuHY58nmnpcG6B vPcylP/8yvmwWKLcGOIIJ/3d4k5kkfvQKfnQInRQws1CY6L2exoW/Mi3DS/LAonu XZTaq8um582qOeZRlxWS4ekVjtgFdvnutNmK2UF2e/8gy4yzbv1aCTx0DZtYn+NI PGt9wOERLLuVdQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:22:56 2025 by rpki-client