This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json) Hash identifier: diwg+xvPAKOG3aPhN9TGO6/vpgRyqf1wAvprWuX1JUE= Subject key identifier: BE:DD:41:6D:9B:5E:3B:D8:D4:31:2B:F4:8F:10:5A:AF:83:40:C9:C6 Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84 Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784 Certificate serial: 019AF5AF2120DC70F664CBBF1AD0561D4FB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft Manifest number: 12F2 Signing time: Sat 06 Dec 2025 22:01:26 +0000 Manifest this update: Sat 06 Dec 2025 22:01:26 +0000 Manifest next update: Sun 07 Dec 2025 22:01:26 +0000 Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: xiThwYuku7N/Sy93t/+asQ42DZZaHpRd5IHEfP7iEDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:21:20:dc:70:f6:64:cb:bf:1a:d0:56:1d:4f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784 Validity Not Before: Dec 6 22:01:26 2025 GMT Not After : Dec 7 22:01:26 2025 GMT Subject: CN=bedd416d9b5e3bd8d4312bf48f105aaf8340c9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:2a:c8:cc:a5:e6:ca:f8:a1:38:72:ba:81: 0e:f0:50:9e:e6:0c:0a:ca:77:61:48:1a:e8:c9:a5: b5:d0:a0:60:fb:07:e7:71:90:49:6c:63:8a:ec:12: 70:2b:db:24:75:2b:b7:54:9b:3e:ab:3c:cc:46:94: e9:8a:69:3f:0c:6e:69:cb:f1:31:d9:38:bb:f6:c9: be:ed:8d:69:c3:cf:d4:3e:f5:c5:28:e1:0d:b8:28: 53:aa:2d:1d:bc:96:25:ad:10:dc:35:19:58:d2:93: 55:cc:df:d9:23:92:75:63:d5:52:df:10:97:fa:9d: 7b:ec:f3:43:eb:5e:be:97:ee:75:5e:57:81:c9:5d: c4:30:34:0d:46:00:64:4c:cd:a9:e8:56:f3:60:6a: a6:d7:b5:2c:b8:21:c8:c1:20:48:5e:64:6a:a5:cf: e7:b9:44:f7:25:84:d9:3b:80:8b:67:b8:98:c5:5a: f4:01:95:61:43:fb:84:37:01:9d:01:fa:42:6d:5d: 61:cc:9a:ea:28:48:bf:18:ac:2e:5e:df:f9:d6:30: f9:a4:1b:04:c0:8b:3e:1c:3c:70:02:4b:5d:b6:ed: 45:8a:c2:29:2e:3f:f7:4f:af:42:36:05:8d:3d:df: 62:b0:c0:d5:97:8e:bd:44:92:bf:2b:9c:3c:00:73: ac:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DD:41:6D:9B:5E:3B:D8:D4:31:2B:F4:8F:10:5A:AF:83:40:C9:C6 X509v3 Authority Key Identifier: keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:01:b6:25:d8:00:80:37:74:f6:9f:93:14:ef:0e:e8:32:29: 07:52:79:8a:35:55:0b:e9:29:54:0a:5e:56:4a:24:2a:67:1d: 43:07:83:5d:86:17:92:72:90:b2:c6:97:d4:a8:2e:53:61:a3: 49:b4:03:a9:87:2c:ac:fa:72:b9:b2:0a:d8:8d:ff:c9:01:91: c3:8f:2c:0d:98:d4:c3:39:af:26:be:ab:e9:12:f9:7b:2a:14: c2:56:45:64:29:3a:e5:88:9c:16:53:f9:f6:c9:6c:0a:23:fa: 11:87:c4:c0:3a:2a:35:24:3f:ec:d2:a8:18:6d:c7:14:71:d1: 56:16:63:5f:b3:77:7e:ff:69:2f:b9:ff:34:e0:21:07:f3:71: 10:1f:7d:56:61:03:b8:b8:10:4b:18:55:e2:d5:4d:57:d3:02: 90:b7:68:ef:d0:f1:71:db:30:fd:de:4a:cc:ce:61:dd:66:4d: 12:ec:4f:70:e2:e2:8e:91:dd:1b:ff:fa:33:e6:20:4f:e0:1e: 7d:89:62:bd:2e:b6:5c:86:a2:8c:a5:a5:78:8e:0f:fe:e9:dc: aa:8a:f5:9d:c7:cd:05:f2:cd:1e:64:96:cc:ae:10:55:13:ea: 23:fd:e3:21:de:31:ec:71:53:aa:29:b7:a2:ce:7e:3f:21:2b: b7:f0:af:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ryEg3HD2ZMu/GtBWHU+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNDJhOTUyYWY2Zjg0ZjI5ZjFkMWIxZWU5NzQxYjA1NzI4 Njg3ODQwHhcNMjUxMjA2MjIwMTI2WhcNMjUxMjA3MjIwMTI2WjAzMTEwLwYDVQQD EyhiZWRkNDE2ZDliNWUzYmQ4ZDQzMTJiZjQ4ZjEwNWFhZjgzNDBjOWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps4qyMyl5sr4oThyuoEO8FCe5gwK yndhSBroyaW10KBg+wfncZBJbGOK7BJwK9skdSu3VJs+qzzMRpTpimk/DG5py/Ex 2Ti79sm+7Y1pw8/UPvXFKOENuChTqi0dvJYlrRDcNRlY0pNVzN/ZI5J1Y9VS3xCX +p177PND616+l+51XleByV3EMDQNRgBkTM2p6FbzYGqm17UsuCHIwSBIXmRqpc/n uUT3JYTZO4CLZ7iYxVr0AZVhQ/uENwGdAfpCbV1hzJrqKEi/GKwuXt/51jD5pBsE wIs+HDxwAktdtu1FisIpLj/3T69CNgWNPd9isMDVl469RJK/K5w8AHOsxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7dQW2bXjvY1DEr9I8QWq+DQMnGMB8GA1UdIwQY MBaAFN9CqVKvb4Tynx0bHul0GwVyhoeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kM2NhMDQtOWU4OC00YmZiLWJlNWYt ZDIyODg1MjViMDg3LzEvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9kM2NhMDQtOWU4OC00YmZiLWJlNWYtZDIyODg1MjViMDg3 LzEvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAG2JdgA gDd09p+TFO8O6DIpB1J5ijVVC+kpVApeVkokKmcdQweDXYYXknKQssaX1KguU2Gj SbQDqYcsrPpyubIK2I3/yQGRw48sDZjUwzmvJr6r6RL5eyoUwlZFZCk65YicFlP5 9slsCiP6EYfEwDoqNSQ/7NKoGG3HFHHRVhZjX7N3fv9pL7n/NOAhB/NxEB99VmED uLgQSxhV4tVNV9MCkLdo79Dxcdsw/d5KzM5h3WZNEuxPcOLijpHdG//6M+YgT+Ae fYlivS62XIaijKWleI4P/uncqor1ncfNBfLNHmSWzK4QVRPqI/3jId4x7HFTqim3 os5+PyErt/CvUg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:55:58 2025 by rpki-client