This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft File: s30V5DRw7wodxwEHQ5P-cPLfjQY.mft (raw, json) Hash identifier: +Gxf8VNiKVSjW6dtKBNXccRBs3xjmSji0SJmyTBYMxQ= Subject key identifier: 0A:6B:F8:71:A6:34:09:D0:9E:34:03:80:B6:34:75:52:A8:A4:A6:52 Authority key identifier: B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06 Certificate issuer: /CN=b37d15e43470ef0a1dc701074393fe70f2df8d06 Certificate serial: 019AF61C35F75611A48B7C13EE5C2A872151 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft Manifest number: 0828 Signing time: Sun 07 Dec 2025 00:00:34 +0000 Manifest this update: Sun 07 Dec 2025 00:00:34 +0000 Manifest next update: Mon 08 Dec 2025 00:00:34 +0000 Files and hashes: 1: htjbCi_8qWneZo93vjbuIGh7N8U.roa (hash: g/IDR+6xEAPBW47ZPcz7WOY/otLteI/yTBnpVyBmbgA=) 2: s30V5DRw7wodxwEHQ5P-cPLfjQY.crl (hash: DHMaTw9uQx2Gnek46GB7WAQblmNxw5M1L/9vLFc/WW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:35:f7:56:11:a4:8b:7c:13:ee:5c:2a:87:21:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37d15e43470ef0a1dc701074393fe70f2df8d06 Validity Not Before: Dec 7 00:00:34 2025 GMT Not After : Dec 8 00:00:34 2025 GMT Subject: CN=0a6bf871a63409d09e340380b6347552a8a4a652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9a:52:60:08:76:c6:89:ae:eb:86:73:e2:24: 7e:e2:8c:12:8e:df:76:ea:10:ef:13:cb:f4:12:51: 32:dc:5a:9a:db:3e:b1:cc:8b:8a:9e:dc:49:e4:b3: 85:34:a9:71:a0:a2:c0:03:04:c0:98:13:53:c9:b9: ce:bc:f7:c7:d5:52:f9:f1:80:dd:bf:ab:f4:1a:aa: 16:af:87:20:53:65:06:de:a0:61:c5:15:63:6c:2f: 52:04:04:a7:a7:b4:fe:48:ca:c2:8e:e1:e9:28:dd: ab:51:ba:0b:30:f3:61:ba:af:20:03:cc:8f:31:b3: 09:4b:65:45:fd:29:68:5d:6a:9b:6e:f3:30:7e:af: c3:d0:ba:fa:de:67:5a:92:c7:ae:eb:18:91:9c:40: 83:2c:c4:84:77:7d:33:ad:5e:79:1b:a3:0d:d1:19: 7f:de:3a:23:2c:3d:25:cf:a5:ea:38:17:21:1e:ee: f2:ab:d8:1c:52:d7:f3:da:92:21:7d:b7:ce:53:06: dd:1b:f6:65:7f:3a:f2:ab:fb:5d:6c:27:55:ba:de: 7f:b8:4a:14:33:de:bb:11:f1:a7:8d:8a:83:39:23: 3b:8a:72:1e:d9:ca:64:c3:95:88:7e:85:21:0d:e2: 86:8a:cb:80:61:85:40:de:b2:0b:9f:8b:49:9f:41: 7e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6B:F8:71:A6:34:09:D0:9E:34:03:80:B6:34:75:52:A8:A4:A6:52 X509v3 Authority Key Identifier: keyid:B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:12:94:0e:81:71:79:57:dd:99:c3:ae:64:b0:3a:38:3a:26: 3e:c5:3d:e6:58:93:2a:b9:b3:53:37:04:6c:d2:5b:71:63:87: ec:02:8f:0a:02:bf:08:a1:19:eb:49:34:d2:e2:49:4a:e0:bc: b3:52:98:42:3b:ce:d0:9d:15:15:39:04:63:1a:16:4c:66:1d: dc:3e:d2:2a:ed:38:49:0e:8d:62:de:ea:90:7c:f1:96:66:d0: d3:5f:5c:c9:a1:42:03:9d:ea:ee:d5:eb:22:c2:c7:8d:ea:cb: b7:7f:2e:a1:4a:56:30:39:71:81:97:5a:1e:f0:13:54:56:8c: 21:72:a1:cf:3e:b7:24:9b:db:a7:f0:49:be:15:1e:f5:03:3e: 4d:c5:87:6e:85:27:62:64:79:12:7f:75:0e:15:c6:ec:be:3f: 5e:29:8e:82:73:d0:b8:54:bb:b3:71:dd:94:e9:58:f0:2b:bf: 66:71:48:3f:b7:a8:27:3f:96:a1:79:e1:97:c8:c6:b3:6c:a0: 93:58:58:6d:22:09:3c:2b:5a:10:95:d2:8a:45:27:e5:bd:ff: bc:1e:0d:e7:56:c3:8e:23:4b:ac:1a:f1:3e:f2:fc:53:64:4f: fe:28:6f:de:44:ae:f8:b5:fc:53:db:00:7e:3a:75:f5:3c:25: 6a:f7:dc:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HDX3VhGki3wT7lwqhyFRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2QxNWU0MzQ3MGVmMGExZGM3MDEwNzQzOTNmZTcwZjJk ZjhkMDYwHhcNMjUxMjA3MDAwMDM0WhcNMjUxMjA4MDAwMDM0WjAzMTEwLwYDVQQD EygwYTZiZjg3MWE2MzQwOWQwOWUzNDAzODBiNjM0NzU1MmE4YTRhNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJpSYAh2xomu64Zz4iR+4owSjt92 6hDvE8v0ElEy3Fqa2z6xzIuKntxJ5LOFNKlxoKLAAwTAmBNTybnOvPfH1VL58YDd v6v0GqoWr4cgU2UG3qBhxRVjbC9SBASnp7T+SMrCjuHpKN2rUboLMPNhuq8gA8yP MbMJS2VF/SloXWqbbvMwfq/D0Lr63mdakseu6xiRnECDLMSEd30zrV55G6MN0Rl/ 3jojLD0lz6XqOBchHu7yq9gcUtfz2pIhfbfOUwbdG/Zlfzryq/tdbCdVut5/uEoU M967EfGnjYqDOSM7inIe2cpkw5WIfoUhDeKGisuAYYVA3rILn4tJn0F+ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApr+HGmNAnQnjQDgLY0dVKopKZSMB8GA1UdIwQY MBaAFLN9FeQ0cO8KHccBB0OT/nDy340GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kNjc0NGQtYjVjZC00ZGE3LWExMGQt ZGFmNjY5ZmFiZjgwLzEvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9kNjc0NGQtYjVjZC00ZGE3LWExMGQtZGFmNjY5ZmFiZjgw LzEvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxKUDoFx eVfdmcOuZLA6ODomPsU95liTKrmzUzcEbNJbcWOH7AKPCgK/CKEZ60k00uJJSuC8 s1KYQjvO0J0VFTkEYxoWTGYd3D7SKu04SQ6NYt7qkHzxlmbQ019cyaFCA53q7tXr IsLHjerLt38uoUpWMDlxgZdaHvATVFaMIXKhzz63JJvbp/BJvhUe9QM+TcWHboUn YmR5En91DhXG7L4/XimOgnPQuFS7s3HdlOlY8Cu/ZnFIP7eoJz+WoXnhl8jGs2yg k1hYbSIJPCtaEJXSikUn5b3/vB4N51bDjiNLrBrxPvL8U2RP/ihv3kSu+LX8U9sA fjp19Twlavfcig== -----END CERTIFICATE-----Generated at Sun Dec 7 02:28:21 2025 by rpki-client