This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft File: h30YEASPQ3IFBuTBgg9v4I_3ym4.mft (raw, json) Hash identifier: DIv2U90VJf+hLHAkYhmrfjrwwXX918Ytg/MzFsdKR5A= Subject key identifier: F8:28:E2:12:22:2E:F4:62:5C:B0:09:9E:A4:C2:DC:27:4F:25:9E:19 Authority key identifier: 87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E Certificate issuer: /CN=877d1810048f43720506e4c1820f6fe08ff7ca6e Certificate serial: 019B5976BE472357853FB21D1D3CCA0D745C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft Manifest number: 0D31 Signing time: Fri 26 Dec 2025 07:01:52 +0000 Manifest this update: Fri 26 Dec 2025 07:01:52 +0000 Manifest next update: Sat 27 Dec 2025 07:01:52 +0000 Files and hashes: 1: BUF7f1UtiJtn_Bvl19qd2EwX0QQ.roa (hash: aqc2Xj2T1ZitA4dQvOlzNWa0gg3kBqNbkLQxtT41W0I=) 2: h30YEASPQ3IFBuTBgg9v4I_3ym4.crl (hash: ySuV2i+Wn46wyVK48+N+Ad6VMnBYZP+shQDvynEaEj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:be:47:23:57:85:3f:b2:1d:1d:3c:ca:0d:74:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=877d1810048f43720506e4c1820f6fe08ff7ca6e Validity Not Before: Dec 26 07:01:52 2025 GMT Not After : Dec 27 07:01:52 2025 GMT Subject: CN=f828e212222ef4625cb0099ea4c2dc274f259e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:63:fc:07:ec:f2:52:f3:ab:c6:3a:94:ca:c5: 42:c6:07:7f:df:8e:58:a3:77:67:23:bb:ae:f1:36: f6:16:ab:8f:e0:50:52:c6:4a:14:b4:96:29:4e:dd: a1:34:76:71:bd:1e:6e:56:10:47:d7:c9:c3:76:df: bd:95:fb:cf:47:7b:36:10:cf:7f:ed:c1:6b:76:bf: a0:7a:b5:fa:c3:2c:b9:0c:6b:0e:87:aa:b1:98:aa: 7d:22:83:de:cd:58:c7:e0:8a:99:76:07:08:ed:25: 14:2a:cf:2c:a5:10:88:4e:ee:b7:48:b5:93:40:6f: 0f:7c:16:db:b2:4d:cf:91:59:91:ed:a5:ff:46:f5: 93:94:f5:b3:cb:95:d7:44:ab:5b:61:89:67:82:dc: 8f:55:e4:7b:ff:ee:a5:7c:58:ec:f7:d0:44:ab:2c: a6:5b:12:3f:91:ff:cb:cf:24:6d:17:77:97:52:9b: 7f:4c:1d:a2:e4:ff:c5:fc:67:ff:14:22:b3:3f:84: 62:30:7b:c4:67:ff:88:6f:23:cd:0a:21:9c:bc:ac: 38:e6:e9:64:da:e8:95:31:a7:60:14:b2:ab:4b:5e: a8:1c:1a:3d:bf:6a:65:78:9d:83:8c:3a:ab:b9:35: 47:52:58:74:39:a7:8a:e5:6e:92:a3:6a:8b:ac:3e: db:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:28:E2:12:22:2E:F4:62:5C:B0:09:9E:A4:C2:DC:27:4F:25:9E:19 X509v3 Authority Key Identifier: keyid:87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:cb:ab:7d:26:d2:56:aa:62:cf:9a:12:e9:5c:27:e1:6f:d1: 12:1d:d9:df:2b:b0:60:39:75:bd:ea:83:c1:56:08:3b:11:af: f6:b2:ba:0f:57:cf:0f:17:64:64:6f:e3:dc:2b:90:b1:0d:88: 6b:56:17:4a:0c:cb:11:dc:4c:67:27:1b:0d:f4:37:a1:29:49: 87:bb:e5:81:ef:8f:2d:19:f4:01:e4:03:10:87:75:db:e1:e3: 7d:da:42:8c:20:9d:a5:4d:f4:08:a8:66:ae:ff:db:ea:1f:6f: 51:90:93:18:6f:7d:69:1f:bd:0f:6a:47:6f:35:44:41:fc:fd: a4:45:bf:0b:41:c8:1b:c0:7a:66:60:e8:b2:6e:b7:f3:e1:a5: a6:08:a1:25:3b:17:cd:f7:6b:d3:b6:3b:36:ae:27:53:8a:4a: 15:ed:a6:6f:aa:ef:7d:f6:4f:78:50:d9:9c:5b:d7:79:75:53: 2a:04:6c:1d:92:62:55:51:48:10:9b:33:74:c5:14:59:6e:e2: 39:21:25:d1:f5:bc:03:7b:0a:c2:de:38:83:db:34:7c:f4:a7: eb:41:01:6c:72:b4:c9:95:d6:ae:27:9c:33:80:61:a0:d3:23: 12:56:6f:a7:04:75:5b:92:da:f5:30:f8:72:01:3c:a8:e8:26: a1:dc:05:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdr5HI1eFP7IdHTzKDXRcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3N2QxODEwMDQ4ZjQzNzIwNTA2ZTRjMTgyMGY2ZmUwOGZm N2NhNmUwHhcNMjUxMjI2MDcwMTUyWhcNMjUxMjI3MDcwMTUyWjAzMTEwLwYDVQQD EyhmODI4ZTIxMjIyMmVmNDYyNWNiMDA5OWVhNGMyZGMyNzRmMjU5ZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12P8B+zyUvOrxjqUysVCxgd/345Y o3dnI7uu8Tb2FquP4FBSxkoUtJYpTt2hNHZxvR5uVhBH18nDdt+9lfvPR3s2EM9/ 7cFrdr+gerX6wyy5DGsOh6qxmKp9IoPezVjH4IqZdgcI7SUUKs8spRCITu63SLWT QG8PfBbbsk3PkVmR7aX/RvWTlPWzy5XXRKtbYYlngtyPVeR7/+6lfFjs99BEqyym WxI/kf/LzyRtF3eXUpt/TB2i5P/F/Gf/FCKzP4RiMHvEZ/+IbyPNCiGcvKw45ulk 2uiVMadgFLKrS16oHBo9v2pleJ2DjDqruTVHUlh0OaeK5W6So2qLrD7b4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgo4hIiLvRiXLAJnqTC3CdPJZ4ZMB8GA1UdIwQY MBaAFId9GBAEj0NyBQbkwYIPb+CP98puMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kMzM3N2EtOGQzOC00MjM1LWFhNzMt N2U4OWI3MjAxOTBkLzEvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9kMzM3N2EtOGQzOC00MjM1LWFhNzMtN2U4OWI3MjAxOTBk LzEvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMurfSbS Vqpiz5oS6Vwn4W/REh3Z3yuwYDl1veqDwVYIOxGv9rK6D1fPDxdkZG/j3CuQsQ2I a1YXSgzLEdxMZycbDfQ3oSlJh7vlge+PLRn0AeQDEId12+HjfdpCjCCdpU30CKhm rv/b6h9vUZCTGG99aR+9D2pHbzVEQfz9pEW/C0HIG8B6ZmDosm638+GlpgihJTsX zfdr07Y7Nq4nU4pKFe2mb6rvffZPeFDZnFvXeXVTKgRsHZJiVVFIEJszdMUUWW7i OSEl0fW8A3sKwt44g9s0fPSn60EBbHK0yZXWriecM4BhoNMjElZvpwR1W5La9TD4 cgE8qOgmodwFrg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:00 2025 by rpki-client