This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft File: a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json) Hash identifier: yEny5lnqrY7xsLCZZnbZxMujnVA29Zm/M3UKfF09BfE= Subject key identifier: 8F:3D:C5:FD:52:BF:71:7D:85:CE:10:2A:D7:E5:E2:34:FB:BE:D9:0A Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1 Certificate serial: 019B2C9D3DE8A688F08137AFD78F6E576F3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft Manifest number: 120E Signing time: Wed 17 Dec 2025 14:01:00 +0000 Manifest this update: Wed 17 Dec 2025 14:01:00 +0000 Manifest next update: Thu 18 Dec 2025 14:01:00 +0000 Files and hashes: 1: 1-47yB099htuBv2m-mnsxmo5hMaE.roa (hash: glbHBbOOXucvNPZBEZEZlyBvhlSEAVVGrvhxKUG4Uz4=) 2: 5Y2NPf-2wwHQNFwN222T-_ksWjs.roa (hash: 7vHIYZQTiGeFh0mU2zpcuuX7KVBld5DcIlwlMA6in8o=) 3: St4HRjoesIgHRfExOBffE_pcBIw.roa (hash: zj7JSUVTgp8pR7SRQVxha79Is1N6T3q+JK526mfdo5s=) 4: ZRn8_lnFsXvgqivcUn4eIrUv-Ic.roa (hash: ViUiWV5ebu4waGuKqQE1IWidKaFMMzGFtUARe3tVsh4=) 5: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: 3yX36fnhUPROEJNgiNQDdybfQM/lC+2IX61ZAhLW8aw=) 6: lKdTsJ9TvIICTgPRcm3O1hlBWiM.roa (hash: py16JH9zUXcJT+HWUygN67vLSyq6kBTksveRhrIkt/k=) 7: pTwzFC29LPXNKIBj8fs94m0Kbbg.roa (hash: sPgk9WDd2v8KxrBOyyp78OiRQG9IETqQ+gnNWNn4qjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:3d:e8:a6:88:f0:81:37:af:d7:8f:6e:57:6f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1 Validity Not Before: Dec 17 14:01:00 2025 GMT Not After : Dec 18 14:01:00 2025 GMT Subject: CN=8f3dc5fd52bf717d85ce102ad7e5e234fbbed90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:32:84:ca:a0:7c:05:a8:61:3d:52:63:bc:64: ff:a5:08:d1:44:b8:db:96:1a:9f:bb:1b:b9:d9:65: 78:ad:a7:e8:9b:9b:b9:d1:5d:f4:44:f7:48:8b:33: be:53:d3:68:19:07:5b:85:4f:cb:45:b5:46:f9:4f: ec:9e:30:bf:10:84:91:2b:70:8f:48:4c:a3:f8:51: e1:9c:7c:94:03:57:ef:08:e3:56:23:7e:09:99:1d: ae:67:86:37:a7:6a:04:80:ab:75:43:da:c1:72:83: d7:eb:02:73:38:73:26:4a:31:db:f4:51:8c:f3:7b: 32:00:35:88:7d:e9:60:62:4b:62:38:b5:1b:ba:7c: 9a:fb:1c:26:c9:ab:3b:5e:04:d5:8b:0d:c5:d9:40: 05:02:c6:95:c0:4c:38:6b:68:a7:95:7f:85:a3:e9: 0e:cf:aa:f2:1c:65:a3:6e:4a:99:77:9b:b9:7a:03: de:a4:23:9e:39:2d:1e:68:3f:85:c4:6b:f4:40:56: 88:d0:f2:d0:58:b2:06:e3:de:ab:bb:1a:6f:4b:e0: 8f:47:3b:1b:57:15:70:f7:06:db:f1:21:b8:d3:ab: 41:44:fb:85:16:13:40:e0:c5:00:b9:0a:9c:af:62: ab:ec:84:c5:4d:c7:89:89:ac:49:e5:7f:ac:47:6f: 61:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3D:C5:FD:52:BF:71:7D:85:CE:10:2A:D7:E5:E2:34:FB:BE:D9:0A X509v3 Authority Key Identifier: keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:2f:a7:bb:55:2e:72:48:f6:3c:01:a1:23:bb:d5:22:fd:60: 21:98:11:45:8e:ec:e3:ae:b0:14:04:03:29:64:97:ad:d6:7e: c4:e6:02:ae:e0:9b:52:f8:5a:e5:93:c4:ad:c7:80:fa:6a:02: 6f:05:83:ab:9b:46:19:b4:1d:de:5f:97:64:36:2d:d4:ff:ea: dd:67:b3:9e:e8:ba:6b:22:7d:8c:7b:1d:3a:5d:b5:b2:03:1b: 76:35:a8:0d:92:8c:45:e2:29:70:a9:86:66:10:2d:40:94:af: a9:0f:91:32:d9:e9:9d:e0:b3:14:73:42:5b:22:32:41:a2:2a: 23:aa:6e:e5:8b:08:a5:fd:9a:89:f6:74:3e:a7:a5:90:64:3d: 31:02:09:e9:f0:53:36:f2:ea:ab:ce:01:2d:b2:c5:52:fc:4d: d0:88:39:f2:c2:4d:54:cc:ff:c5:f6:3d:73:61:85:95:37:b6: e1:09:a4:64:e3:9e:98:ba:a2:5e:99:f3:de:0f:5f:f5:e5:d3: 10:dc:03:3b:f9:c5:c8:fb:7e:9c:2e:07:44:07:48:10:69:7b: 35:09:4a:8e:9d:f4:e4:d3:50:36:5e:82:b6:e6:b2:32:f2:da: b9:1f:c9:a8:fa:1f:93:96:6e:b7:96:f8:8e:ed:40:6e:f5:22: e6:32:4d:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnT3opojwgTev149uV289MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz OGVhYzEwHhcNMjUxMjE3MTQwMTAwWhcNMjUxMjE4MTQwMTAwWjAzMTEwLwYDVQQD Eyg4ZjNkYzVmZDUyYmY3MTdkODVjZTEwMmFkN2U1ZTIzNGZiYmVkOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zKEyqB8BahhPVJjvGT/pQjRRLjb lhqfuxu52WV4rafom5u50V30RPdIizO+U9NoGQdbhU/LRbVG+U/snjC/EISRK3CP SEyj+FHhnHyUA1fvCONWI34JmR2uZ4Y3p2oEgKt1Q9rBcoPX6wJzOHMmSjHb9FGM 83syADWIfelgYktiOLUbunya+xwmyas7XgTViw3F2UAFAsaVwEw4a2inlX+Fo+kO z6ryHGWjbkqZd5u5egPepCOeOS0eaD+FxGv0QFaI0PLQWLIG496ruxpvS+CPRzsb VxVw9wbb8SG406tBRPuFFhNA4MUAuQqcr2Kr7ITFTceJiaxJ5X+sR29hlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI89xf1Sv3F9hc4QKtfl4jT7vtkKMB8GA1UdIwQY MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt MmZhZDlhMmZjM2VmLzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIi+nu1Uu ckj2PAGhI7vVIv1gIZgRRY7s466wFAQDKWSXrdZ+xOYCruCbUvha5ZPErceA+moC bwWDq5tGGbQd3l+XZDYt1P/q3Weznui6ayJ9jHsdOl21sgMbdjWoDZKMReIpcKmG ZhAtQJSvqQ+RMtnpneCzFHNCWyIyQaIqI6pu5YsIpf2aifZ0PqelkGQ9MQIJ6fBT NvLqq84BLbLFUvxN0Ig58sJNVMz/xfY9c2GFlTe24QmkZOOemLqiXpnz3g9f9eXT ENwDO/nFyPt+nC4HRAdIEGl7NQlKjp305NNQNl6CtuayMvLauR/JqPofk5Zut5b4 ju1AbvUi5jJN6Q== -----END CERTIFICATE-----Generated at Wed Dec 17 17:45:25 2025 by rpki-client