This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft File: 30gYvQqzvf87E_-goLSWmf4NZdg.mft (raw, json) Hash identifier: vIR7GUyeFV47u11k0fpwYHH0MGyjnDylZbTK43hTT7c= Subject key identifier: 63:BD:A5:F6:F4:8E:D4:E4:4D:11:27:34:06:CE:7C:B8:46:B6:3D:1C Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8 Certificate issuer: /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8 Certificate serial: 019AF276D9B63D3F68CACE48DDAD4E1B9CC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft Manifest number: 13F5 Signing time: Sat 06 Dec 2025 07:01:06 +0000 Manifest this update: Sat 06 Dec 2025 07:01:06 +0000 Manifest next update: Sun 07 Dec 2025 07:01:06 +0000 Files and hashes: 1: 30gYvQqzvf87E_-goLSWmf4NZdg.crl (hash: A/+fR4gIva6+u3/PVYZtgVkWww0MKTuKeA7/aXKMvdI=) 2: sWuySCoAeegdfWnkMuqNoxyi1Bw.roa (hash: 0K3bxqojGl6MNEviSU5eh2+DL5CKnr6TGRVYgLgGugg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d9:b6:3d:3f:68:ca:ce:48:dd:ad:4e:1b:9c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8 Validity Not Before: Dec 6 07:01:06 2025 GMT Not After : Dec 7 07:01:06 2025 GMT Subject: CN=63bda5f6f48ed4e44d11273406ce7cb846b63d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:d6:6a:80:1f:46:75:78:8b:a7:68:9b:cc: 62:03:81:e8:b6:bc:72:3c:b5:88:c3:95:68:3f:4f: 5d:7f:91:fb:f7:a9:c3:fa:aa:9f:ed:91:53:8d:5f: 1c:c0:fb:4d:8d:c9:e7:e4:23:20:27:26:e7:98:b0: 1f:47:0b:2c:b2:be:a3:bb:59:b5:6a:be:bb:dc:90: db:1d:e1:58:48:98:b2:79:be:f5:2c:ae:32:ee:49: bc:51:de:7f:59:05:33:3b:b5:ec:24:8b:20:4d:e2: d6:ce:d5:14:7d:ce:b4:c4:a4:4e:38:b4:6b:1e:f4: 74:8d:15:1a:f5:ef:05:23:0f:53:f6:a2:cc:20:39: 01:2f:2d:1d:1e:12:4d:78:61:94:19:36:48:84:5d: ac:b6:00:3e:6a:bf:c4:1b:4d:8d:8c:78:07:13:06: 12:06:28:16:54:c1:89:94:33:a3:9a:5d:ad:ae:9f: 86:f6:2e:cb:b0:da:24:d1:79:43:14:bb:20:f1:ec: 35:61:b6:0b:62:dd:e4:7c:26:6a:39:11:18:63:ed: 8f:97:52:a7:23:61:ec:9f:d2:3c:1a:7d:d5:39:ef: 66:56:b8:a0:a0:87:5a:2e:20:7e:7a:43:89:51:f5: 82:c7:52:2c:6a:80:b5:d1:ed:a5:c9:cf:7b:d2:f2: d8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BD:A5:F6:F4:8E:D4:E4:4D:11:27:34:06:CE:7C:B8:46:B6:3D:1C X509v3 Authority Key Identifier: keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:01:4e:6f:b9:43:98:fd:f9:55:07:1c:79:fc:2e:6c:a6:74: 27:b2:7d:b3:95:29:4a:e1:b4:1b:59:db:88:d4:7b:67:4c:9f: 6e:ed:f9:0b:4f:d8:8f:b2:a6:c5:39:7c:fe:91:64:74:59:99: 91:2b:c2:2a:f0:cc:03:91:12:c8:6d:b1:6e:b6:4f:46:7d:0c: af:08:7f:84:ca:e5:62:2c:51:0c:d3:0c:3b:ba:72:43:6f:17: 70:43:8c:c1:fb:10:16:ab:36:06:a4:41:26:d3:69:e6:1e:0f: 5b:18:9d:01:5d:82:85:93:14:09:65:dc:a6:5c:64:b8:af:75: 1f:f8:ac:ad:c3:8a:82:c1:01:41:62:94:ce:b7:c7:a1:dc:ac: 5c:6a:fa:a6:77:bd:00:45:4f:47:5d:da:86:70:70:0e:c4:08: f4:09:f8:53:27:0e:d1:d2:8b:bb:a3:95:31:ed:ab:b3:c2:99: 8a:01:bb:f0:9a:5b:a9:d6:1e:3a:70:f9:3d:2e:e8:3f:43:15: 27:3c:61:eb:f1:06:5d:d1:7e:1d:18:a2:7f:a1:d3:14:ac:4b: 8a:85:84:33:94:33:bf:0a:85:c9:78:96:95:0a:39:3a:72:09: d8:16:a3:c3:6a:16:ed:04:6a:4f:b4:b8:57:72:1e:9d:b3:15: 3e:bd:4b:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtm2PT9oys5I3a1OG5zHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNDgxOGJkMGFiM2JkZmYzYjEzZmZhMGEwYjQ5Njk5ZmUw ZDY1ZDgwHhcNMjUxMjA2MDcwMTA2WhcNMjUxMjA3MDcwMTA2WjAzMTEwLwYDVQQD Eyg2M2JkYTVmNmY0OGVkNGU0NGQxMTI3MzQwNmNlN2NiODQ2YjYzZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDrWaoAfRnV4i6dom8xiA4Hotrxy PLWIw5VoP09df5H796nD+qqf7ZFTjV8cwPtNjcnn5CMgJybnmLAfRwsssr6ju1m1 ar673JDbHeFYSJiyeb71LK4y7km8Ud5/WQUzO7XsJIsgTeLWztUUfc60xKROOLRr HvR0jRUa9e8FIw9T9qLMIDkBLy0dHhJNeGGUGTZIhF2stgA+ar/EG02NjHgHEwYS BigWVMGJlDOjml2trp+G9i7LsNok0XlDFLsg8ew1YbYLYt3kfCZqOREYY+2Pl1Kn I2Hsn9I8Gn3VOe9mVrigoIdaLiB+ekOJUfWCx1IsaoC10e2lyc970vLYIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO9pfb0jtTkTREnNAbOfLhGtj0cMB8GA1UdIwQY MBaAFN9IGL0Ks73/OxP/oKC0lpn+DWXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzBnWXZRcXp2Zjg3RV8tZ29MU1dtZjROWmRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8yMDhjNTktZTQ1Yy00MmM2LTllMzct OTRjYWMxOGJiOTE2LzEvMzBnWXZRcXp2Zjg3RV8tZ29MU1dtZjROWmRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8yMDhjNTktZTQ1Yy00MmM2LTllMzctOTRjYWMxOGJiOTE2 LzEvMzBnWXZRcXp2Zjg3RV8tZ29MU1dtZjROWmRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwFOb7lD mP35VQccefwubKZ0J7J9s5UpSuG0G1nbiNR7Z0yfbu35C0/Yj7KmxTl8/pFkdFmZ kSvCKvDMA5ESyG2xbrZPRn0Mrwh/hMrlYixRDNMMO7pyQ28XcEOMwfsQFqs2BqRB JtNp5h4PWxidAV2ChZMUCWXcplxkuK91H/isrcOKgsEBQWKUzrfHodysXGr6pne9 AEVPR13ahnBwDsQI9An4UycO0dKLu6OVMe2rs8KZigG78JpbqdYeOnD5PS7oP0MV Jzxh6/EGXdF+HRiif6HTFKxLioWEM5QzvwqFyXiWlQo5OnIJ2Bajw2oW7QRqT7S4 V3IenbMVPr1LBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:24 2025 by rpki-client