This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft File: a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft (raw, json) Hash identifier: oegyCgZemAKAlznWkBWbeqZDaFuKYiW+8QlrX/rZChU= Subject key identifier: 16:2F:CC:A9:84:66:80:61:8C:E4:5A:CB:E8:57:61:33:22:BB:CD:D0 Authority key identifier: 6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84 Certificate issuer: /CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84 Certificate serial: 019B5ABFBCFB836B85FD539A15ED5FDC5FEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft Manifest number: 15 Signing time: Fri 26 Dec 2025 13:01:13 +0000 Manifest this update: Fri 26 Dec 2025 13:01:13 +0000 Manifest next update: Sat 27 Dec 2025 13:01:13 +0000 Files and hashes: 1: a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl (hash: PL6LBFRwrMpk5n18CoDlQ0sEWGp8hC+idrDpJM9Ivjs=) 2: dLBDC1iLTbIKXYOyfQBMl0HA_jU.roa (hash: I5wGjO4N/Wo1kXfarAXSBhUoVar3me+2FCAqcTQkOj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:bc:fb:83:6b:85:fd:53:9a:15:ed:5f:dc:5f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84 Validity Not Before: Dec 26 13:01:13 2025 GMT Not After : Dec 27 13:01:13 2025 GMT Subject: CN=162fcca9846680618ce45acbe857613322bbcdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cc:d1:be:26:03:9c:38:05:17:fd:09:38:fe: 2f:00:fb:98:5b:8c:18:cc:e4:1e:f1:e7:0a:60:01: dd:ff:09:a0:53:24:f3:81:b3:44:44:2b:19:c4:a9: 18:e3:a2:f2:f5:48:51:c2:09:8c:e2:10:a7:1d:42: 6f:13:22:e1:f1:a3:a4:d1:b7:d7:3f:2c:0a:77:f9: f2:8d:d5:47:ed:60:c5:5e:c9:3b:88:32:9b:db:99: f0:67:0d:95:73:e0:4f:4d:e7:8d:68:1a:0d:fd:91: e2:bb:1b:a0:c8:79:cb:bb:31:2d:ab:fa:5f:b3:4d: 04:d8:65:39:6d:06:01:e1:fa:af:ee:37:19:9d:93: 9d:ac:6b:d8:e1:b5:0b:91:5b:22:22:d5:b3:4f:c6: 88:48:84:74:81:99:5d:d5:fd:f8:2b:ef:1e:7e:3c: 89:60:d5:d9:97:59:76:4f:14:23:99:ac:78:36:a3: e9:29:e5:1a:32:91:c4:98:fc:41:d4:94:c6:c2:1e: 8a:a2:2c:9c:dd:ee:5f:8d:31:3a:fe:c2:64:40:dc: e7:21:3f:83:93:72:71:45:2f:53:6a:d5:aa:59:13: 29:7a:4c:04:01:18:22:07:b2:8a:40:e8:a6:23:d1: c4:7d:42:7a:cf:60:04:c8:93:70:7a:7b:f6:ee:36: aa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2F:CC:A9:84:66:80:61:8C:E4:5A:CB:E8:57:61:33:22:BB:CD:D0 X509v3 Authority Key Identifier: keyid:6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:91:ec:58:5f:21:1b:49:e9:54:83:37:ac:7e:ec:15:f6:3c: a7:ba:e4:9b:c7:e9:86:ed:1f:69:d4:eb:81:ff:b0:8f:7a:2a: 9f:9e:e8:4b:cc:f8:13:f5:79:79:9d:2d:fb:08:ef:2a:f4:2f: d0:43:ba:57:03:7f:97:93:17:66:b1:6f:1e:86:80:f6:4e:df: 45:ed:10:34:e8:64:b2:65:11:87:cc:1f:a0:2f:b6:34:de:49: 56:b8:89:93:64:a6:23:d5:86:04:00:9b:2d:68:8f:60:58:36: da:bb:a7:c2:c1:97:99:7e:e0:4a:39:66:a9:5a:e2:90:6c:9e: ba:fd:a0:cd:95:2c:b3:18:19:d3:f7:be:cf:1c:b5:e7:a3:20: f9:a5:17:31:db:3a:05:9a:fe:37:8e:85:31:5f:89:63:09:4d: 08:84:7a:da:50:87:e8:8a:a9:c4:20:ef:17:68:75:1b:92:9a: d3:9f:0e:d8:0c:88:b4:fe:9c:c5:5d:9e:a3:19:57:a1:32:4e: 50:ad:f2:46:33:29:8f:88:13:f7:85:2a:0d:64:82:1b:cc:57: c4:73:ca:bc:7b:19:a9:e6:99:60:de:d4:cd:9c:a1:c9:62:77: cd:e8:58:2b:89:05:8d:96:ba:ad:97:bd:d3:01:6c:d2:e7:af: 53:e0:56:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav7z7g2uF/VOaFe1f3F/vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2QwMWRkZTNjMmFiN2ZhN2I1ODhlY2FkNGQxY2QzMTM5 N2JkODQwHhcNMjUxMjI2MTMwMTEzWhcNMjUxMjI3MTMwMTEzWjAzMTEwLwYDVQQD EygxNjJmY2NhOTg0NjY4MDYxOGNlNDVhY2JlODU3NjEzMzIyYmJjZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MzRviYDnDgFF/0JOP4vAPuYW4wY zOQe8ecKYAHd/wmgUyTzgbNERCsZxKkY46Ly9UhRwgmM4hCnHUJvEyLh8aOk0bfX PywKd/nyjdVH7WDFXsk7iDKb25nwZw2Vc+BPTeeNaBoN/ZHiuxugyHnLuzEtq/pf s00E2GU5bQYB4fqv7jcZnZOdrGvY4bULkVsiItWzT8aISIR0gZld1f34K+8efjyJ YNXZl1l2TxQjmax4NqPpKeUaMpHEmPxB1JTGwh6Koiyc3e5fjTE6/sJkQNznIT+D k3JxRS9TatWqWRMpekwEARgiB7KKQOimI9HEfUJ6z2AEyJNwenv27jaqzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYvzKmEZoBhjORay+hXYTMiu83QMB8GA1UdIwQY MBaAFGt9Ad3jwqt/p7WI7K1NHNMTl72EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMwQjNlUENxMy1udFlqc3JVMGMweE9YdllRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMGYyM2QtMWZjOS00NzFhLTgyYmQt ZmU4YWY5YTZlZmQyLzEvYTMwQjNlUENxMy1udFlqc3JVMGMweE9YdllRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yMGYyM2QtMWZjOS00NzFhLTgyYmQtZmU4YWY5YTZlZmQy LzEvYTMwQjNlUENxMy1udFlqc3JVMGMweE9YdllRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZHsWF8h G0npVIM3rH7sFfY8p7rkm8fphu0fadTrgf+wj3oqn57oS8z4E/V5eZ0t+wjvKvQv 0EO6VwN/l5MXZrFvHoaA9k7fRe0QNOhksmURh8wfoC+2NN5JVriJk2SmI9WGBACb LWiPYFg22runwsGXmX7gSjlmqVrikGyeuv2gzZUssxgZ0/e+zxy156Mg+aUXMds6 BZr+N46FMV+JYwlNCIR62lCH6IqpxCDvF2h1G5Ka058O2AyItP6cxV2eoxlXoTJO UK3yRjMpj4gT94UqDWSCG8xXxHPKvHsZqeaZYN7UzZyhyWJ3zehYK4kFjZa6rZe9 0wFs0uevU+BWlA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:28 2025 by rpki-client