This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json) Hash identifier: zPApLruQjqdvunfR6pILsy6BgoJf1qkhAfqZUXkGD2I= Subject key identifier: 8F:B6:44:E3:A6:40:50:D7:A1:A8:76:EB:85:FA:5F:87:F6:31:24:88 Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84 Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784 Certificate serial: 019B1A6074AB49891AB7ABFEBC00F4F67799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft Manifest number: 1305 Signing time: Sun 14 Dec 2025 01:01:27 +0000 Manifest this update: Sun 14 Dec 2025 01:01:27 +0000 Manifest next update: Mon 15 Dec 2025 01:01:27 +0000 Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: IMKdvjnRVdzczVrum+gwwv6a1dnVQLTwneeE9OF5Ck8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:60:74:ab:49:89:1a:b7:ab:fe:bc:00:f4:f6:77:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784 Validity Not Before: Dec 14 01:01:27 2025 GMT Not After : Dec 15 01:01:27 2025 GMT Subject: CN=8fb644e3a64050d7a1a876eb85fa5f87f6312488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:fd:6e:e7:21:08:37:f3:30:73:4f:2a:62: 0e:7e:81:01:18:49:9d:c7:c2:95:4c:ca:46:27:ec: cf:87:99:85:21:70:23:7f:51:cd:be:76:1c:c7:1f: 6d:01:13:cd:e6:7c:fc:b4:6d:8e:f4:6c:31:31:87: 6e:99:66:23:44:be:22:58:4c:75:f0:6b:60:94:b8: 50:5c:43:dc:47:90:f9:b4:e3:d3:d4:96:98:b3:ea: 6a:eb:a9:25:2a:33:b4:b5:54:0a:93:e5:c4:eb:c0: 53:41:37:b0:22:14:1f:cc:2e:f6:e0:7c:01:fb:b4: 09:49:39:15:4c:cc:20:8c:56:9c:3b:b0:1c:1f:9c: 82:6c:72:f5:14:07:26:d8:a3:19:3d:f8:6d:87:7b: 50:19:5f:e6:3d:0b:e8:53:9e:63:31:3a:fe:ed:c2: a2:ce:bf:98:bc:f5:87:0c:c1:71:60:ed:7b:70:bc: e5:34:4c:a2:12:f5:76:3a:c3:a8:a5:5b:92:50:ff: 9e:db:ce:45:b9:ff:55:82:8c:1d:f7:ff:0b:d7:6d: 7d:c4:c2:fb:e9:e6:0e:a9:77:bd:50:46:48:5d:dc: f8:ad:6b:74:a6:6e:52:6c:b1:0d:b6:1c:67:78:f3: e7:7a:b8:40:c6:80:b4:9c:b7:94:af:23:57:7b:3f: 25:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B6:44:E3:A6:40:50:D7:A1:A8:76:EB:85:FA:5F:87:F6:31:24:88 X509v3 Authority Key Identifier: keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f1:f1:6c:21:d5:dd:37:b1:12:91:58:32:69:ac:c2:4c:6b: 40:87:98:84:43:46:a9:3a:8b:f7:d1:3c:a9:82:52:35:6b:23: af:cb:3c:2f:c8:15:d5:a3:0f:73:d9:da:0f:4e:72:60:d1:24: e6:03:be:58:5b:a9:37:dc:98:7b:ff:f9:bc:95:a9:26:e5:a9: c6:c4:d9:5e:d1:ef:f3:e4:ab:94:6e:7c:51:d9:4e:27:f2:e0: 0f:c5:99:7e:7c:6b:dd:e8:b1:83:90:08:43:28:f2:bc:2f:f9: 3f:b3:1f:fc:87:c6:a1:42:89:22:46:58:89:8e:2b:42:54:e8: 5a:3d:71:8f:f6:7b:12:2f:ca:8a:e4:96:60:fc:20:ce:ab:ee: ec:97:e0:2e:7b:4b:8b:48:e8:3f:1e:76:57:9a:4e:0e:bb:5b: b9:16:e1:06:4a:69:f8:63:ca:50:54:27:6f:68:a0:c8:03:2d: 66:b5:00:61:c9:5f:8e:01:39:24:d6:cc:ba:0e:2b:db:2a:87: 5e:1c:51:23:5d:3b:ad:2e:dc:03:e4:ab:ef:c0:1f:f5:96:e4: 98:e0:1b:2a:50:b2:3b:2d:96:49:ca:ae:44:fb:44:43:e4:d7: 3b:a9:91:cd:fc:cb:6d:eb:eb:2c:f9:e9:c1:78:e5:32:4b:06: a4:39:ea:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaYHSrSYkat6v+vAD09neZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNDJhOTUyYWY2Zjg0ZjI5ZjFkMWIxZWU5NzQxYjA1NzI4 Njg3ODQwHhcNMjUxMjE0MDEwMTI3WhcNMjUxMjE1MDEwMTI3WjAzMTEwLwYDVQQD Eyg4ZmI2NDRlM2E2NDA1MGQ3YTFhODc2ZWI4NWZhNWY4N2Y2MzEyNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYz9buchCDfzMHNPKmIOfoEBGEmd x8KVTMpGJ+zPh5mFIXAjf1HNvnYcxx9tARPN5nz8tG2O9GwxMYdumWYjRL4iWEx1 8GtglLhQXEPcR5D5tOPT1JaYs+pq66klKjO0tVQKk+XE68BTQTewIhQfzC724HwB +7QJSTkVTMwgjFacO7AcH5yCbHL1FAcm2KMZPfhth3tQGV/mPQvoU55jMTr+7cKi zr+YvPWHDMFxYO17cLzlNEyiEvV2OsOopVuSUP+e285Fuf9Vgowd9/8L1219xML7 6eYOqXe9UEZIXdz4rWt0pm5SbLENthxnePPnerhAxoC0nLeUryNXez8l8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+2ROOmQFDXoah264X6X4f2MSSIMB8GA1UdIwQY MBaAFN9CqVKvb4Tynx0bHul0GwVyhoeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kM2NhMDQtOWU4OC00YmZiLWJlNWYt ZDIyODg1MjViMDg3LzEvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9kM2NhMDQtOWU4OC00YmZiLWJlNWYtZDIyODg1MjViMDg3 LzEvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvHxbCHV 3TexEpFYMmmswkxrQIeYhENGqTqL99E8qYJSNWsjr8s8L8gV1aMPc9naD05yYNEk 5gO+WFupN9yYe//5vJWpJuWpxsTZXtHv8+SrlG58UdlOJ/LgD8WZfnxr3eixg5AI QyjyvC/5P7Mf/IfGoUKJIkZYiY4rQlToWj1xj/Z7Ei/KiuSWYPwgzqvu7JfgLntL i0joPx52V5pODrtbuRbhBkpp+GPKUFQnb2igyAMtZrUAYclfjgE5JNbMug4r2yqH XhxRI107rS7cA+Sr78Af9ZbkmOAbKlCyOy2WScquRPtEQ+TXO6mRzfzLbevrLPnp wXjlMksGpDnq+Q== -----END CERTIFICATE-----Generated at Sun Dec 14 05:34:37 2025 by rpki-client