This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft File: s30V5DRw7wodxwEHQ5P-cPLfjQY.mft (raw, json) Hash identifier: AeIeZbtE7BxQaNFfuacocVKQSZzlrv1AFm8cT45w7wI= Subject key identifier: 60:D1:74:5B:5B:57:A4:D1:CF:E0:EA:91:C0:06:E8:37:8C:65:C5:BB Authority key identifier: B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06 Certificate issuer: /CN=b37d15e43470ef0a1dc701074393fe70f2df8d06 Certificate serial: 019B300C39E21A1DD1A6E5F0897BDC5ADB0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft Manifest number: 0846 Signing time: Thu 18 Dec 2025 06:01:06 +0000 Manifest this update: Thu 18 Dec 2025 06:01:06 +0000 Manifest next update: Fri 19 Dec 2025 06:01:06 +0000 Files and hashes: 1: htjbCi_8qWneZo93vjbuIGh7N8U.roa (hash: g/IDR+6xEAPBW47ZPcz7WOY/otLteI/yTBnpVyBmbgA=) 2: s30V5DRw7wodxwEHQ5P-cPLfjQY.crl (hash: x4OBjkEGrhA48G3Gmf5FqAEnz1OOMMCr11XTbzZO2bY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 06:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:39:e2:1a:1d:d1:a6:e5:f0:89:7b:dc:5a:db:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37d15e43470ef0a1dc701074393fe70f2df8d06 Validity Not Before: Dec 18 06:01:06 2025 GMT Not After : Dec 19 06:01:06 2025 GMT Subject: CN=60d1745b5b57a4d1cfe0ea91c006e8378c65c5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:db:83:45:25:0a:b6:25:61:e4:e2:a4:fc: d3:72:15:14:e0:f3:a8:dc:74:66:f8:07:67:4a:60: da:ae:16:f5:23:69:08:66:0f:f3:6a:4f:9e:a1:7d: 98:1c:f5:35:7b:5b:28:b2:86:ed:9a:06:58:89:05: 07:b7:49:69:7a:d9:c5:b8:e1:1a:d2:89:9d:71:a0: 8a:91:14:80:01:a4:ff:e5:6a:21:98:c2:53:f8:bd: 04:8c:a4:3a:38:bd:82:49:f2:31:e4:7b:a1:10:a4: 45:9d:b8:f9:79:48:ca:16:4d:ed:59:02:41:55:db: 50:e1:f1:57:49:52:96:25:bb:a4:42:ff:fe:5d:0b: 2b:2b:ac:cc:9c:5a:bf:f0:d4:aa:6f:6f:53:8f:69: fe:9e:79:75:b8:21:00:a2:8d:61:6c:f4:1b:5c:4a: 64:1e:88:5e:f2:58:6b:c4:de:b7:cf:d8:8a:2a:91: 9d:34:4f:99:d1:9d:9a:fb:3b:8a:a8:45:dc:c3:1f: 0a:c5:c3:91:cc:53:31:e0:fc:4a:a7:64:d1:86:2e: 06:bb:6f:f1:21:32:0f:eb:5e:33:e1:2c:4b:52:fb: 95:99:16:cd:f4:e1:6f:99:f7:a6:46:0b:17:15:8f: 0c:4f:48:0f:d7:e3:27:29:39:f9:ff:3d:19:49:e0: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D1:74:5B:5B:57:A4:D1:CF:E0:EA:91:C0:06:E8:37:8C:65:C5:BB X509v3 Authority Key Identifier: keyid:B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:a4:31:86:6a:c4:96:47:26:da:ce:47:d7:30:6a:ff:41:87: 49:42:93:25:83:a6:95:cf:2f:eb:93:4f:53:d3:b6:6e:e6:7f: f2:7f:5c:a8:f4:d7:86:8a:51:c3:e7:6e:66:09:e0:26:10:a4: d6:3d:a6:16:ea:3e:c5:f7:d5:c5:ae:b1:13:22:35:8a:7d:b7: 9c:41:c9:b5:fb:77:fe:b9:c1:4c:25:96:f8:08:23:d5:d9:96: 5c:7f:39:12:c8:c6:fe:29:b4:4b:a3:6b:ba:c7:0f:3b:c5:f7: 10:7b:5a:48:d1:7d:80:d8:24:bb:af:77:f0:f8:73:e3:d8:5d: b0:39:5c:28:0a:63:4d:1e:1b:73:79:be:35:19:0b:85:b6:8b: 4a:10:00:9d:ec:5e:26:ac:5a:7f:83:e6:1e:95:1b:ad:45:53: 1b:53:c4:1d:58:ee:ec:cd:48:72:b3:30:1d:93:85:86:65:35: d7:b5:0c:c2:ac:55:46:96:de:4b:9d:49:43:7f:8d:54:43:d3: 97:51:53:7e:13:31:de:12:f3:9a:6c:3d:66:ed:62:bb:7d:df: 35:b4:aa:12:53:3b:c2:61:36:0a:c9:3b:98:66:2d:49:a3:dc: 15:07:bf:58:fd:0c:67:28:47:00:ea:8b:cd:d0:1e:ff:04:95: 99:83:68:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDDniGh3RpuXwiXvcWtsLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2QxNWU0MzQ3MGVmMGExZGM3MDEwNzQzOTNmZTcwZjJk ZjhkMDYwHhcNMjUxMjE4MDYwMTA2WhcNMjUxMjE5MDYwMTA2WjAzMTEwLwYDVQQD Eyg2MGQxNzQ1YjViNTdhNGQxY2ZlMGVhOTFjMDA2ZTgzNzhjNjVjNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+3bg0UlCrYlYeTipPzTchUU4POo 3HRm+AdnSmDarhb1I2kIZg/zak+eoX2YHPU1e1sosobtmgZYiQUHt0lpetnFuOEa 0omdcaCKkRSAAaT/5WohmMJT+L0EjKQ6OL2CSfIx5HuhEKRFnbj5eUjKFk3tWQJB VdtQ4fFXSVKWJbukQv/+XQsrK6zMnFq/8NSqb29Tj2n+nnl1uCEAoo1hbPQbXEpk Hohe8lhrxN63z9iKKpGdNE+Z0Z2a+zuKqEXcwx8KxcORzFMx4PxKp2TRhi4Gu2/x ITIP614z4SxLUvuVmRbN9OFvmfemRgsXFY8MT0gP1+MnKTn5/z0ZSeBRwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDRdFtbV6TRz+DqkcAG6DeMZcW7MB8GA1UdIwQY MBaAFLN9FeQ0cO8KHccBB0OT/nDy340GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kNjc0NGQtYjVjZC00ZGE3LWExMGQt ZGFmNjY5ZmFiZjgwLzEvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9kNjc0NGQtYjVjZC00ZGE3LWExMGQtZGFmNjY5ZmFiZjgw LzEvczMwVjVEUnc3d29keHdFSFE1UC1jUExmalFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaQxhmrE lkcm2s5H1zBq/0GHSUKTJYOmlc8v65NPU9O2buZ/8n9cqPTXhopRw+duZgngJhCk 1j2mFuo+xffVxa6xEyI1in23nEHJtft3/rnBTCWW+Agj1dmWXH85EsjG/im0S6Nr uscPO8X3EHtaSNF9gNgku6938Phz49hdsDlcKApjTR4bc3m+NRkLhbaLShAAnexe Jqxaf4PmHpUbrUVTG1PEHVju7M1IcrMwHZOFhmU117UMwqxVRpbeS51JQ3+NVEPT l1FTfhMx3hLzmmw9Zu1iu33fNbSqElM7wmE2Csk7mGYtSaPcFQe/WP0MZyhHAOqL zdAe/wSVmYNo2g== -----END CERTIFICATE-----Generated at Thu Dec 18 14:22:28 2025 by rpki-client