This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft File: 30gYvQqzvf87E_-goLSWmf4NZdg.mft (raw, json) Hash identifier: 0aIZcyns1pWBKiqImgngvnNKNNdRiKAPwknmEBRa00k= Subject key identifier: CD:61:35:9F:8C:E8:2D:A0:86:99:23:BC:BF:53:D9:38:A6:F1:C4:F2 Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8 Certificate issuer: /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8 Certificate serial: 019B2A77FA031711ECB8D92919B8542FC412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft Manifest number: 1412 Signing time: Wed 17 Dec 2025 04:01:04 +0000 Manifest this update: Wed 17 Dec 2025 04:01:04 +0000 Manifest next update: Thu 18 Dec 2025 04:01:04 +0000 Files and hashes: 1: 30gYvQqzvf87E_-goLSWmf4NZdg.crl (hash: OtmyfAb6swyCtbiczLoIlMtJ7VcH5AMPC1z5PMMAYd4=) 2: sWuySCoAeegdfWnkMuqNoxyi1Bw.roa (hash: 0K3bxqojGl6MNEviSU5eh2+DL5CKnr6TGRVYgLgGugg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:77:fa:03:17:11:ec:b8:d9:29:19:b8:54:2f:c4:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8 Validity Not Before: Dec 17 04:01:04 2025 GMT Not After : Dec 18 04:01:04 2025 GMT Subject: CN=cd61359f8ce82da0869923bcbf53d938a6f1c4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:f2:d3:7b:08:56:44:f5:55:78:43:7c:f0: 1f:7d:6b:d4:e7:6c:f6:f5:e2:f5:cb:b3:d6:76:e7: 0e:66:1f:ea:28:8c:90:95:e7:4c:52:44:17:9d:f9: 1b:ab:0e:98:15:17:8e:dc:aa:b5:a8:74:1a:bc:82: c0:4a:c8:e7:a2:7e:6c:67:72:6e:4b:95:58:4d:1d: 9c:72:e1:6d:d4:5f:41:60:e8:73:45:37:8c:ea:e6: 70:70:18:9c:56:f6:4e:0e:2a:ca:c0:da:b1:e9:d9: b9:db:f6:17:bc:f6:63:37:f9:fd:50:a3:30:b3:6c: 88:30:3e:17:c6:65:6d:24:fa:23:4b:5b:40:9f:63: 38:b9:fa:b1:ab:e5:9f:ff:bc:40:2f:03:dd:a3:9c: 2f:7b:69:26:52:81:7c:66:d9:23:8d:1b:b3:fb:c8: fd:0a:df:7f:30:92:e7:6c:e3:7f:d4:41:a4:d5:bc: 1c:26:03:f6:6f:06:19:46:74:2a:9b:9b:88:40:07: 09:63:60:f0:83:ca:36:32:7c:b1:fb:2b:e0:7e:ee: 11:39:c6:8a:d7:c6:9e:7d:7e:6b:eb:24:c4:93:69: 47:dc:c9:70:56:50:17:3e:94:ad:47:73:98:ab:f9: 12:e4:10:96:62:3c:c1:17:6b:f4:df:03:96:a4:43: 35:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:61:35:9F:8C:E8:2D:A0:86:99:23:BC:BF:53:D9:38:A6:F1:C4:F2 X509v3 Authority Key Identifier: keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:0c:57:a2:aa:c1:b7:f0:cb:a7:8d:77:91:6a:8c:2c:80:37: 21:56:3e:cb:e4:c3:ad:48:8e:91:73:c2:fb:1a:cb:0a:06:ed: 89:de:ae:2c:5f:c5:78:06:76:e0:aa:ff:5b:cc:a1:ae:a1:32: ec:03:40:43:77:1f:de:77:f5:4d:78:1c:3d:cf:b1:ad:75:35: 01:74:67:3f:ba:27:b5:62:b7:37:bb:b5:8b:4d:83:d4:1a:38: 58:ac:85:96:20:93:1d:65:c2:75:9f:f9:4b:35:85:12:51:23: 93:d7:7b:95:97:ca:8c:c9:2e:90:10:71:ca:7b:dd:62:59:18: 86:84:22:48:66:12:3c:f4:e9:80:e4:e9:51:d9:0c:9f:2f:dc: 62:80:12:67:8b:e7:81:3b:9d:90:f9:86:89:1c:f1:e0:a4:89: 30:2a:8c:c1:5a:0b:00:fb:de:62:d6:05:eb:0a:5a:54:84:3a: 2a:87:b9:15:40:a4:b2:40:1f:2c:e7:aa:f0:77:ad:7c:38:3e: 31:aa:69:fe:56:9c:b6:cc:e7:b4:6d:9b:98:43:9f:98:7e:49: dd:78:87:78:4a:7b:6f:3b:23:eb:39:a2:e6:e5:f3:f3:6d:b2: 0d:64:87:b5:14:48:85:e3:47:82:75:36:f1:63:95:23:12:eb: fa:fd:4e:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqd/oDFxHsuNkpGbhUL8QSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNDgxOGJkMGFiM2JkZmYzYjEzZmZhMGEwYjQ5Njk5ZmUw ZDY1ZDgwHhcNMjUxMjE3MDQwMTA0WhcNMjUxMjE4MDQwMTA0WjAzMTEwLwYDVQQD EyhjZDYxMzU5ZjhjZTgyZGEwODY5OTIzYmNiZjUzZDkzOGE2ZjFjNGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD/y03sIVkT1VXhDfPAffWvU52z2 9eL1y7PWducOZh/qKIyQledMUkQXnfkbqw6YFReO3Kq1qHQavILASsjnon5sZ3Ju S5VYTR2ccuFt1F9BYOhzRTeM6uZwcBicVvZODirKwNqx6dm52/YXvPZjN/n9UKMw s2yIMD4XxmVtJPojS1tAn2M4ufqxq+Wf/7xALwPdo5wve2kmUoF8ZtkjjRuz+8j9 Ct9/MJLnbON/1EGk1bwcJgP2bwYZRnQqm5uIQAcJY2Dwg8o2Mnyx+yvgfu4ROcaK 18aefX5r6yTEk2lH3MlwVlAXPpStR3OYq/kS5BCWYjzBF2v03wOWpEM1UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1hNZ+M6C2ghpkjvL9T2Tim8cTyMB8GA1UdIwQY MBaAFN9IGL0Ks73/OxP/oKC0lpn+DWXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzBnWXZRcXp2Zjg3RV8tZ29MU1dtZjROWmRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8yMDhjNTktZTQ1Yy00MmM2LTllMzct OTRjYWMxOGJiOTE2LzEvMzBnWXZRcXp2Zjg3RV8tZ29MU1dtZjROWmRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8yMDhjNTktZTQ1Yy00MmM2LTllMzctOTRjYWMxOGJiOTE2 LzEvMzBnWXZRcXp2Zjg3RV8tZ29MU1dtZjROWmRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgxXoqrB t/DLp413kWqMLIA3IVY+y+TDrUiOkXPC+xrLCgbtid6uLF/FeAZ24Kr/W8yhrqEy 7ANAQ3cf3nf1TXgcPc+xrXU1AXRnP7ontWK3N7u1i02D1Bo4WKyFliCTHWXCdZ/5 SzWFElEjk9d7lZfKjMkukBBxynvdYlkYhoQiSGYSPPTpgOTpUdkMny/cYoASZ4vn gTudkPmGiRzx4KSJMCqMwVoLAPveYtYF6wpaVIQ6Koe5FUCkskAfLOeq8HetfDg+ Mapp/lactszntG2bmEOfmH5J3XiHeEp7bzsj6zmi5uXz822yDWSHtRRIheNHgnU2 8WOVIxLr+v1O5g== -----END CERTIFICATE-----Generated at Wed Dec 17 06:13:33 2025 by rpki-client