This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft File: 30bUnMNHZ_jQJK_yla1qky55FeA.mft (raw, json) Hash identifier: 7JygBepaSc+YXmUbdaLrjMNdQBIbPHwPK+NwlOvk4Sw= Subject key identifier: A8:9C:AE:DF:E3:15:60:E6:FA:ED:D1:AA:98:7C:28:D4:C3:9C:4C:B5 Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0 Certificate issuer: /CN=df46d49cc34767f8d024aff295ad6a932e7915e0 Certificate serial: 019AF577F55E60899D31CFD23DED077C2D02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft Manifest number: 0A41 Signing time: Sat 06 Dec 2025 21:01:10 +0000 Manifest this update: Sat 06 Dec 2025 21:01:10 +0000 Manifest next update: Sun 07 Dec 2025 21:01:10 +0000 Files and hashes: 1: 30bUnMNHZ_jQJK_yla1qky55FeA.crl (hash: vOSg9z+51wGlQztdpw6NMjjWhFa/WDYe4o5hdHiWCLM=) 2: ZqG9ZXQwlRQgv2SuPLTOJwS07bA.roa (hash: JZgT3iIXQIZJHifSbhHNXa/qOoNcRciphxipRif7+Xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:f5:5e:60:89:9d:31:cf:d2:3d:ed:07:7c:2d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0 Validity Not Before: Dec 6 21:01:10 2025 GMT Not After : Dec 7 21:01:10 2025 GMT Subject: CN=a89caedfe31560e6faedd1aa987c28d4c39c4cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a4:44:1f:7c:e2:e6:e9:e9:0c:b5:c2:47:da: 65:3c:86:be:fd:2d:80:3d:65:e2:de:af:3f:e3:61: 46:45:4e:af:26:99:13:70:c3:c8:98:78:23:e0:55: 0e:8c:1e:7d:75:49:9a:f6:8e:96:9c:d0:94:d9:1b: f9:db:f3:87:ab:7c:dd:1b:f6:ff:85:56:fb:57:10: e8:84:c4:cf:05:b6:3f:f7:a2:f0:ff:f5:b8:c4:09: c2:44:1a:4d:15:80:7a:a4:04:b4:04:c6:d5:12:2e: 33:68:27:26:d6:70:48:79:e8:e8:4e:05:61:ab:33: f2:46:f3:cf:0c:84:92:64:bc:fb:7e:92:a8:36:40: 26:10:dc:b8:b4:ed:de:38:b3:ec:ff:4b:96:86:02: 5e:79:13:d3:b7:ea:d3:35:04:62:f0:37:6a:af:f3: 9f:86:10:8c:cc:12:b8:46:17:f3:30:d5:d6:b9:2f: a3:51:e5:ea:c7:7c:c6:e4:ff:ed:75:16:36:1e:8c: c5:dc:78:18:ad:cc:c8:1e:21:60:d4:f2:9a:66:78: 4e:14:93:e3:20:49:39:af:71:ce:2e:20:05:8d:a5: b2:d8:7d:cd:ae:5e:d2:40:4c:1b:15:3a:30:ed:22: 15:72:ac:03:7d:e0:f6:5a:bb:5f:bf:5d:cd:3b:a2: f6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9C:AE:DF:E3:15:60:E6:FA:ED:D1:AA:98:7C:28:D4:C3:9C:4C:B5 X509v3 Authority Key Identifier: keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:8c:e1:91:e1:87:f9:d3:1c:49:db:9b:7c:15:4d:92:b4:1d: c5:4c:49:f0:b8:f8:10:76:7e:90:e0:c2:80:c6:2e:29:90:3f: 53:f4:be:f2:fe:c6:0d:55:9a:07:f8:1b:83:15:16:0d:ae:55: d8:18:ca:e0:56:84:5d:0a:9c:c5:a3:01:f4:15:09:26:1a:c4: c2:78:62:b4:d0:18:de:0b:3f:a4:6b:91:5f:c4:29:18:2f:b8: 81:98:a4:5d:68:c7:ca:c4:59:6f:67:db:3d:25:c4:c8:67:ea: 76:24:24:15:2a:11:e9:79:8c:cb:15:7b:29:f1:f3:aa:57:77: 0a:85:1e:66:f7:ee:eb:eb:2d:03:45:ae:97:b3:1d:e7:d2:ce: db:5d:d2:5b:86:ad:7b:fd:85:f0:dc:b2:2c:5b:20:4d:25:ba: 0e:07:80:33:50:19:14:e0:26:8b:96:98:e0:b6:9a:7f:80:63: 3a:ad:f7:d4:39:08:3e:bf:15:cc:f3:88:98:a6:10:78:fc:85: 61:32:05:a4:2a:43:90:70:82:e8:6c:11:da:f5:7b:53:ab:9f: 96:70:de:5c:c4:5b:1b:6e:78:5f:a2:ea:ac:27:df:0e:84:d5: 2e:95:08:05:96:a0:c4:75:97:82:d9:11:bd:16:46:49:85:0c: ba:e1:69:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d/VeYImdMc/SPe0HfC0CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNDZkNDljYzM0NzY3ZjhkMDI0YWZmMjk1YWQ2YTkzMmU3 OTE1ZTAwHhcNMjUxMjA2MjEwMTEwWhcNMjUxMjA3MjEwMTEwWjAzMTEwLwYDVQQD EyhhODljYWVkZmUzMTU2MGU2ZmFlZGQxYWE5ODdjMjhkNGMzOWM0Y2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqREH3zi5unpDLXCR9plPIa+/S2A PWXi3q8/42FGRU6vJpkTcMPImHgj4FUOjB59dUma9o6WnNCU2Rv52/OHq3zdG/b/ hVb7VxDohMTPBbY/96Lw//W4xAnCRBpNFYB6pAS0BMbVEi4zaCcm1nBIeejoTgVh qzPyRvPPDISSZLz7fpKoNkAmENy4tO3eOLPs/0uWhgJeeRPTt+rTNQRi8Ddqr/Of hhCMzBK4RhfzMNXWuS+jUeXqx3zG5P/tdRY2HozF3HgYrczIHiFg1PKaZnhOFJPj IEk5r3HOLiAFjaWy2H3Nrl7SQEwbFTow7SIVcqwDfeD2Wrtfv13NO6L2UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKicrt/jFWDm+u3Rqph8KNTDnEy1MB8GA1UdIwQY MBaAFN9G1JzDR2f40CSv8pWtapMueRXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzBiVW5NTkhaX2pRSktfeWxhMXFreTU1RmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My85Yjk3M2QtMWYyZi00Yzc3LTlkZDAt MWY3MzIwNDZiNzRjLzEvMzBiVW5NTkhaX2pRSktfeWxhMXFreTU1RmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My85Yjk3M2QtMWYyZi00Yzc3LTlkZDAtMWY3MzIwNDZiNzRj LzEvMzBiVW5NTkhaX2pRSktfeWxhMXFreTU1RmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4zhkeGH +dMcSdubfBVNkrQdxUxJ8Lj4EHZ+kODCgMYuKZA/U/S+8v7GDVWaB/gbgxUWDa5V 2BjK4FaEXQqcxaMB9BUJJhrEwnhitNAY3gs/pGuRX8QpGC+4gZikXWjHysRZb2fb PSXEyGfqdiQkFSoR6XmMyxV7KfHzqld3CoUeZvfu6+stA0Wul7Md59LO213SW4at e/2F8NyyLFsgTSW6DgeAM1AZFOAmi5aY4Laaf4BjOq331DkIPr8VzPOImKYQePyF YTIFpCpDkHCC6GwR2vV7U6uflnDeXMRbG254X6LqrCffDoTVLpUIBZagxHWXgtkR vRZGSYUMuuFp8g== -----END CERTIFICATE-----Generated at Sun Dec 7 04:20:36 2025 by rpki-client