This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft File: _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json) Hash identifier: T+tI72eupzLjUzMy9oGtLd1TPXc9ZusVbXpfI4/Ness= Subject key identifier: C0:60:FF:49:3B:86:97:EE:D7:2A:E7:F9:36:22:7B:BC:2C:DD:86:9A Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30 Certificate issuer: /CN=ff7d173466efbb26d2a119298bb9799a093c3230 Certificate serial: 019AF19B6257B82FF4D33EA8FE11602A0EC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft Manifest number: 13DB Signing time: Sat 06 Dec 2025 03:01:23 +0000 Manifest this update: Sat 06 Dec 2025 03:01:23 +0000 Manifest next update: Sun 07 Dec 2025 03:01:23 +0000 Files and hashes: 1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: HGsIwHObHyU6jHOIZatDV+QLVjNn2i1Mg453ix0juq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:62:57:b8:2f:f4:d3:3e:a8:fe:11:60:2a:0e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230 Validity Not Before: Dec 6 03:01:23 2025 GMT Not After : Dec 7 03:01:23 2025 GMT Subject: CN=c060ff493b8697eed72ae7f936227bbc2cdd869a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:e6:5c:47:ce:38:8f:49:4e:f1:6b:66:a9: f8:43:0a:41:a1:48:98:1f:8d:9d:bf:22:b6:cf:8b: c8:d9:3c:4c:cc:19:06:68:98:56:3e:4f:de:9d:93: 95:c2:89:12:b8:aa:82:62:22:9d:a7:44:a8:27:f4: 55:ac:ad:f1:d9:50:32:f7:1c:00:0e:be:73:75:3a: 49:db:1e:bb:ad:d7:6f:0d:36:ac:65:46:7c:3e:1a: 2c:a1:d9:66:46:26:b0:63:66:db:07:c2:69:3f:29: 21:f5:d0:20:bb:dd:3c:a4:af:8f:f3:a5:46:31:4d: 6b:b3:e2:69:81:36:64:e4:d3:f4:1e:4c:28:ed:e6: 9c:07:ad:86:3f:06:65:79:98:fa:80:72:0d:62:29: f1:c7:f2:a8:3a:1f:05:65:c7:0f:15:7c:1e:38:1a: 5f:18:f0:22:0e:1e:61:20:52:b9:6e:a1:a1:26:dc: 8e:b0:e1:6e:a5:87:ca:19:84:c1:3b:62:4d:d6:9d: f7:4c:ce:96:d1:63:c5:57:12:d8:d6:a3:5e:ae:8f: f1:d5:3f:45:91:ee:03:fa:6f:0d:fe:a3:8c:4d:c6: 51:91:88:e0:59:5b:54:b5:5c:14:93:b5:f0:dc:d3: ef:26:d6:56:f1:29:fd:73:dc:ac:f9:a8:85:71:f3: 7c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:60:FF:49:3B:86:97:EE:D7:2A:E7:F9:36:22:7B:BC:2C:DD:86:9A X509v3 Authority Key Identifier: keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4c:14:16:f2:3e:ed:c3:a8:73:64:f1:e1:fd:68:ef:8e:4e: 8a:47:49:a5:38:2c:e0:ed:1a:c5:33:51:2b:64:25:6c:8d:b6: 02:3d:05:97:a2:35:b6:7b:13:4f:6f:9a:2a:6a:6f:2e:a8:5f: b9:da:d0:aa:15:37:4b:28:33:54:38:d1:19:9e:41:37:7b:27: 0e:5e:9d:dd:6b:4d:34:ec:da:d0:70:b7:1c:47:19:64:82:00: b2:18:89:88:ef:fd:ae:c5:d4:92:3c:5c:21:cd:a4:3d:0c:7d: c0:84:cc:e1:ed:f2:02:31:ff:17:bf:7a:1b:54:d7:18:76:1f: fc:45:e9:db:2d:ee:37:19:08:a3:2f:15:e1:41:ee:18:c6:81: fb:a0:7c:54:8d:b8:37:01:bc:14:88:bc:95:0f:78:cc:eb:62: f8:a4:03:db:ae:65:da:5f:3b:8a:f6:7c:2a:b8:71:de:fb:da: a1:9b:04:6f:8d:5e:69:6f:4f:78:34:4f:50:6f:bb:7b:10:a6: ec:9c:af:65:6b:05:ca:4d:50:33:2b:04:df:29:61:26:3c:2f: 4d:17:0a:7a:09:29:61:ee:44:f8:01:ff:bf:6c:8c:13:88:ce: 8f:bb:bb:93:e8:59:6d:a1:b4:ca:42:d6:80:c5:68:5a:c9:55: 57:b8:bc:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2JXuC/00z6o/hFgKg7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmN2QxNzM0NjZlZmJiMjZkMmExMTkyOThiYjk3OTlhMDkz YzMyMzAwHhcNMjUxMjA2MDMwMTIzWhcNMjUxMjA3MDMwMTIzWjAzMTEwLwYDVQQD EyhjMDYwZmY0OTNiODY5N2VlZDcyYWU3ZjkzNjIyN2JiYzJjZGQ4NjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmrmXEfOOI9JTvFrZqn4QwpBoUiY H42dvyK2z4vI2TxMzBkGaJhWPk/enZOVwokSuKqCYiKdp0SoJ/RVrK3x2VAy9xwA Dr5zdTpJ2x67rddvDTasZUZ8PhosodlmRiawY2bbB8JpPykh9dAgu908pK+P86VG MU1rs+JpgTZk5NP0Hkwo7eacB62GPwZleZj6gHINYinxx/KoOh8FZccPFXweOBpf GPAiDh5hIFK5bqGhJtyOsOFupYfKGYTBO2JN1p33TM6W0WPFVxLY1qNero/x1T9F ke4D+m8N/qOMTcZRkYjgWVtUtVwUk7Xw3NPvJtZW8Sn9c9ys+aiFcfN8XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBg/0k7hpfu1yrn+TYie7ws3YaaMB8GA1UdIwQY MBaAFP99FzRm77sm0qEZKYu5eZoJPDIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzMwWE5HYnZ1eWJTb1JrcGk3bDVtZ2s4TWpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iMTNmMDAtYWI3MS00NDM2LWI2Yjkt YmJhZGZmOGMwNTlhLzEvXzMwWE5HYnZ1eWJTb1JrcGk3bDVtZ2s4TWpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9iMTNmMDAtYWI3MS00NDM2LWI2YjktYmJhZGZmOGMwNTlh LzEvXzMwWE5HYnZ1eWJTb1JrcGk3bDVtZ2s4TWpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0wUFvI+ 7cOoc2Tx4f1o745OikdJpTgs4O0axTNRK2QlbI22Aj0Fl6I1tnsTT2+aKmpvLqhf udrQqhU3SygzVDjRGZ5BN3snDl6d3WtNNOza0HC3HEcZZIIAshiJiO/9rsXUkjxc Ic2kPQx9wITM4e3yAjH/F796G1TXGHYf/EXp2y3uNxkIoy8V4UHuGMaB+6B8VI24 NwG8FIi8lQ94zOti+KQD265l2l87ivZ8Krhx3vvaoZsEb41eaW9PeDRPUG+7exCm 7JyvZWsFyk1QMysE3ylhJjwvTRcKegkpYe5E+AH/v2yME4jOj7u7k+hZbaG0ykLW gMVoWslVV7i8Hg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:11:24 2025 by rpki-client