This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft File: x24D_30L_eMoOcKP7IHGJ1wE0z8.mft (raw, json) Hash identifier: l5w+q920FziP03Kc3dCxalIQSphlA53/pkvjHKZQKWI= Subject key identifier: B8:2A:86:86:82:CF:B2:16:AA:90:BC:D6:68:45:33:A9:71:6D:C0:47 Authority key identifier: C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F Certificate issuer: /CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f Certificate serial: 019AF61C3CB216803CEDA3F3372058091EE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 00:00:36 +0000 Manifest this update: Sun 07 Dec 2025 00:00:36 +0000 Manifest next update: Mon 08 Dec 2025 00:00:36 +0000 Files and hashes: 1: N35ogLyeBi2BuFWlUXcGcxqHzqk.roa (hash: KCN204MjqT3ieOgIgu9cP0A/BCFFBOWU+ExI90E1Oec=) 2: gMMT4CFkCWRYtDrF3UxIZfPsxKc.roa (hash: 2/OhbtZSnC9mHzUn7UoTXNOmX1wP26fthpipUmjf41Y=) 3: x24D_30L_eMoOcKP7IHGJ1wE0z8.crl (hash: 9e9F0H8TDSO0e75sVegqy5Tueja2WL57X/FO1aSornY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:3c:b2:16:80:3c:ed:a3:f3:37:20:58:09:1e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f Validity Not Before: Dec 7 00:00:36 2025 GMT Not After : Dec 8 00:00:36 2025 GMT Subject: CN=b82a868682cfb216aa90bcd6684533a9716dc047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:df:f6:ff:47:46:1e:19:90:df:0d:21:1f: 07:f0:5d:f3:0e:a9:08:91:48:1d:3c:c4:d1:19:d0: c5:e7:c8:49:70:e2:56:7b:66:78:89:3d:76:94:92: 9b:6e:b8:90:56:0b:8a:e6:47:ce:b0:a9:b3:c4:da: 96:9d:23:c4:32:e0:15:52:65:eb:1d:e3:98:49:11: 64:5b:f9:be:63:aa:c7:5d:1d:d1:10:aa:62:71:36: 0e:8b:cf:56:9a:30:06:00:2b:12:a9:fd:9c:4b:a3: 19:30:f7:68:a4:6a:06:f5:f4:9e:82:fb:7d:e6:3b: de:f3:c4:93:cc:34:63:e4:1b:9e:2f:81:e3:65:52: 76:10:fb:49:80:2f:75:b4:33:59:40:74:4e:47:d4: 5c:e4:96:bd:6b:ae:8c:c6:8a:be:29:8b:21:06:df: 71:10:0e:5c:73:67:e6:ab:72:40:7e:f1:6e:f0:c8: 2b:e3:be:05:98:b7:7b:a6:ad:cb:92:fc:4e:31:b8: d9:73:93:8e:3e:57:2a:fb:89:17:54:7c:65:10:72: 49:ff:16:44:56:16:1d:16:00:e0:8c:29:37:d5:69: e5:3c:ba:c3:3b:b3:a3:64:c0:81:17:1e:49:c7:57: 85:6a:8f:52:e6:05:6d:ad:c9:fa:6f:4c:09:b7:25: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2A:86:86:82:CF:B2:16:AA:90:BC:D6:68:45:33:A9:71:6D:C0:47 X509v3 Authority Key Identifier: keyid:C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:fe:e5:20:e7:b4:ec:1e:35:15:e5:ab:c0:98:ce:bb:b4:74: 1a:d7:df:1a:7d:af:22:e5:85:d4:a0:ea:7e:bc:3a:ca:8f:9b: 60:8a:9f:01:53:8b:d1:60:5d:26:5f:92:96:83:d9:b5:de:b1: 6d:78:00:f2:32:c7:8a:cd:b2:fb:b4:63:3b:d3:c1:b0:43:c9: 64:78:09:4d:03:92:ae:16:11:6d:55:bb:e0:44:b2:66:ca:91: 94:6c:0f:46:9e:7d:1f:fb:fd:3f:bc:a6:b3:44:3f:f3:80:2c: f7:1d:9a:d0:b2:a4:e7:19:c0:a4:1f:fd:7d:6d:1f:54:e4:8b: fc:12:5e:8e:0f:65:a6:ee:c4:60:a1:aa:32:24:82:60:76:21: 36:d2:cd:27:f9:f0:ee:51:f2:4d:63:78:a9:83:a0:3b:2e:19: a4:bf:af:fb:98:87:19:7f:bc:5d:6f:08:1e:d0:d2:e6:b6:3a: 09:83:78:6c:0a:79:7a:a2:ae:8a:d9:c5:72:d1:66:d7:05:3d: 23:2e:66:ba:22:cd:53:9b:60:bf:80:71:03:05:4d:7e:31:8c: 85:68:5e:5b:48:13:40:2f:e8:0c:16:1c:c5:5b:d5:00:7c:06: 63:88:06:ea:dd:fc:55:45:b2:f5:83:fd:8e:32:18:15:d9:20: c0:b7:c7:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HDyyFoA87aPzNyBYCR7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmUwM2ZmN2QwYmZkZTMyODM5YzI4ZmVjODFjNjI3NWMw NGQzM2YwHhcNMjUxMjA3MDAwMDM2WhcNMjUxMjA4MDAwMDM2WjAzMTEwLwYDVQQD EyhiODJhODY4NjgyY2ZiMjE2YWE5MGJjZDY2ODQ1MzNhOTcxNmRjMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBHf9v9HRh4ZkN8NIR8H8F3zDqkI kUgdPMTRGdDF58hJcOJWe2Z4iT12lJKbbriQVguK5kfOsKmzxNqWnSPEMuAVUmXr HeOYSRFkW/m+Y6rHXR3REKpicTYOi89WmjAGACsSqf2cS6MZMPdopGoG9fSegvt9 5jve88STzDRj5BueL4HjZVJ2EPtJgC91tDNZQHROR9Rc5Ja9a66Mxoq+KYshBt9x EA5cc2fmq3JAfvFu8Mgr474FmLd7pq3LkvxOMbjZc5OOPlcq+4kXVHxlEHJJ/xZE VhYdFgDgjCk31WnlPLrDO7OjZMCBFx5Jx1eFao9S5gVtrcn6b0wJtyXorQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgqhoaCz7IWqpC81mhFM6lxbcBHMB8GA1UdIwQY MBaAFMduA/99C/3jKDnCj+yBxidcBNM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zMzQ3ZjctNTI1OS00MjM4LWFkYjYt ODM1ZGUwZjU4OTJlLzEveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8zMzQ3ZjctNTI1OS00MjM4LWFkYjYtODM1ZGUwZjU4OTJl LzEveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlv7lIOe0 7B41FeWrwJjOu7R0GtffGn2vIuWF1KDqfrw6yo+bYIqfAVOL0WBdJl+SloPZtd6x bXgA8jLHis2y+7RjO9PBsEPJZHgJTQOSrhYRbVW74ESyZsqRlGwPRp59H/v9P7ym s0Q/84As9x2a0LKk5xnApB/9fW0fVOSL/BJejg9lpu7EYKGqMiSCYHYhNtLNJ/nw 7lHyTWN4qYOgOy4ZpL+v+5iHGX+8XW8IHtDS5rY6CYN4bAp5eqKuitnFctFm1wU9 Iy5muiLNU5tgv4BxAwVNfjGMhWheW0gTQC/oDBYcxVvVAHwGY4gG6t38VUWy9YP9 jjIYFdkgwLfHeA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:16 2025 by rpki-client