This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft File: a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json) Hash identifier: uA5UcgRiLpaRfuwjR/9nHN+zldI4isxFSrLKmkPu2KM= Subject key identifier: 9A:59:F3:FA:4D:93:E5:BB:7D:E6:82:22:8F:71:5E:FC:36:93:B9:F3 Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1 Certificate serial: 019B3DFED5BF28BDE09001886C04B5309D1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft Manifest number: 1217 Signing time: Sat 20 Dec 2025 23:01:09 +0000 Manifest this update: Sat 20 Dec 2025 23:01:09 +0000 Manifest next update: Sun 21 Dec 2025 23:01:09 +0000 Files and hashes: 1: 1-47yB099htuBv2m-mnsxmo5hMaE.roa (hash: glbHBbOOXucvNPZBEZEZlyBvhlSEAVVGrvhxKUG4Uz4=) 2: 5Y2NPf-2wwHQNFwN222T-_ksWjs.roa (hash: 7vHIYZQTiGeFh0mU2zpcuuX7KVBld5DcIlwlMA6in8o=) 3: St4HRjoesIgHRfExOBffE_pcBIw.roa (hash: zj7JSUVTgp8pR7SRQVxha79Is1N6T3q+JK526mfdo5s=) 4: ZRn8_lnFsXvgqivcUn4eIrUv-Ic.roa (hash: ViUiWV5ebu4waGuKqQE1IWidKaFMMzGFtUARe3tVsh4=) 5: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: G8RXGpJ5EgKe8/Y1zFFdg5iyOjMDLdncFDWWoonBmTI=) 6: lKdTsJ9TvIICTgPRcm3O1hlBWiM.roa (hash: py16JH9zUXcJT+HWUygN67vLSyq6kBTksveRhrIkt/k=) 7: pTwzFC29LPXNKIBj8fs94m0Kbbg.roa (hash: sPgk9WDd2v8KxrBOyyp78OiRQG9IETqQ+gnNWNn4qjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:d5:bf:28:bd:e0:90:01:88:6c:04:b5:30:9d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1 Validity Not Before: Dec 20 23:01:09 2025 GMT Not After : Dec 21 23:01:09 2025 GMT Subject: CN=9a59f3fa4d93e5bb7de682228f715efc3693b9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:13:2a:3a:d4:e3:7b:47:78:d5:25:f7:04:a9: ca:b0:31:9f:a0:73:03:19:10:04:e8:8d:f5:a3:91: ed:04:29:c5:76:0d:8e:b3:1c:2f:12:31:c1:52:c4: fc:51:60:50:77:7b:6f:22:9f:56:91:55:db:ba:5c: 57:bf:75:a5:5f:c2:17:28:0c:59:8d:a4:61:df:2c: 5d:d0:a8:d4:7a:80:72:67:a3:c8:f8:03:e0:cd:57: 1b:17:bd:d9:30:f8:5b:9d:91:44:d2:db:8d:db:ba: 73:14:c1:dc:1d:44:97:48:16:fe:30:e9:56:bd:7b: a3:d0:7b:3e:e4:b5:4c:de:e0:b8:9f:eb:2b:f3:69: c8:39:a5:53:e9:e8:e1:75:7a:5d:34:07:a9:f7:41: 0c:4c:f8:78:08:32:53:d3:46:01:31:28:5d:ec:77: ad:fa:51:dd:cd:b8:2f:0a:54:ad:fc:98:6b:39:fa: 40:f1:c2:4a:63:90:b4:52:63:ab:16:c9:12:19:e0: 2d:d4:21:71:f6:3c:84:92:42:e8:86:89:ff:6e:c8: 5d:0d:39:34:74:da:c3:12:2e:59:c7:78:1d:d0:3c: e1:07:ca:0d:c2:2e:bf:33:fe:51:80:b0:bc:10:52: f8:32:c6:2c:21:72:65:05:07:65:a7:00:af:d5:c2: 6b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:59:F3:FA:4D:93:E5:BB:7D:E6:82:22:8F:71:5E:FC:36:93:B9:F3 X509v3 Authority Key Identifier: keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:74:30:a6:32:1c:23:a9:79:e0:3f:0d:6c:d3:9e:b3:df:9e: 8b:c3:91:eb:76:7e:ad:17:6d:c1:4e:7a:57:9d:c2:e9:56:83: 46:79:dc:52:bc:aa:f3:1d:af:ba:f1:f9:e3:5b:12:b4:56:52: ab:54:a9:1f:24:06:4e:5e:a2:bc:b8:ef:3f:c5:ae:46:6e:38: 0d:6c:16:37:3c:f4:f2:2e:c7:d7:9a:73:98:3b:8b:49:87:90: e0:33:5f:88:0b:01:e0:50:69:1e:c6:35:d8:73:e9:02:70:a3: 26:a4:63:90:38:f3:58:56:27:7c:e4:db:6a:06:04:f9:70:00: 64:75:98:8e:77:f3:9d:b2:2b:aa:fc:f1:87:a5:8d:b8:4e:5f: e8:19:cd:10:9e:45:a2:e2:8a:27:4c:55:a2:48:18:af:ed:63: 92:67:d0:63:b5:9c:8a:84:26:88:82:68:7f:3e:09:2c:ed:f9: ad:51:3c:ba:67:8c:fa:26:62:da:a3:fe:ff:0c:2d:a6:b5:c4: 30:1a:88:33:9b:a1:19:c9:80:71:04:b4:b8:8c:3a:6e:b8:0e: 3d:f4:03:ec:ed:0b:58:a0:79:6d:d5:1d:ff:0a:da:90:8b:c7: 2a:fb:a2:e6:c3:0d:a8:ba:84:fb:67:6f:ed:e1:cc:d3:86:a3: f3:c6:94:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/tW/KL3gkAGIbAS1MJ0cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz OGVhYzEwHhcNMjUxMjIwMjMwMTA5WhcNMjUxMjIxMjMwMTA5WjAzMTEwLwYDVQQD Eyg5YTU5ZjNmYTRkOTNlNWJiN2RlNjgyMjI4ZjcxNWVmYzM2OTNiOWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhMqOtTje0d41SX3BKnKsDGfoHMD GRAE6I31o5HtBCnFdg2OsxwvEjHBUsT8UWBQd3tvIp9WkVXbulxXv3WlX8IXKAxZ jaRh3yxd0KjUeoByZ6PI+APgzVcbF73ZMPhbnZFE0tuN27pzFMHcHUSXSBb+MOlW vXuj0Hs+5LVM3uC4n+sr82nIOaVT6ejhdXpdNAep90EMTPh4CDJT00YBMShd7Het +lHdzbgvClSt/JhrOfpA8cJKY5C0UmOrFskSGeAt1CFx9jyEkkLohon/bshdDTk0 dNrDEi5Zx3gd0DzhB8oNwi6/M/5RgLC8EFL4MsYsIXJlBQdlpwCv1cJrmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpZ8/pNk+W7feaCIo9xXvw2k7nzMB8GA1UdIwQY MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt MmZhZDlhMmZjM2VmLzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHQwpjIc I6l54D8NbNOes9+ei8OR63Z+rRdtwU56V53C6VaDRnncUryq8x2vuvH541sStFZS q1SpHyQGTl6ivLjvP8WuRm44DWwWNzz08i7H15pzmDuLSYeQ4DNfiAsB4FBpHsY1 2HPpAnCjJqRjkDjzWFYnfOTbagYE+XAAZHWYjnfznbIrqvzxh6WNuE5f6BnNEJ5F ouKKJ0xVokgYr+1jkmfQY7WcioQmiIJofz4JLO35rVE8umeM+iZi2qP+/wwtprXE MBqIM5uhGcmAcQS0uIw6brgOPfQD7O0LWKB5bdUd/wrakIvHKvui5sMNqLqE+2dv 7eHM04aj88aUbg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:29:38 2025 by rpki-client