This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json) Hash identifier: tYTwgp6pF9S03RR2Ao7fAJXoMptxpVbJx1w7NWrVpxs= Subject key identifier: 6E:73:E1:B3:10:70:4A:97:4F:40:65:1B:35:F2:00:59:D4:C0:40:00 Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d Certificate serial: 019B3A9069E09D333A35B60B903A25DB78A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft Manifest number: 0E37 Signing time: Sat 20 Dec 2025 07:01:41 +0000 Manifest this update: Sat 20 Dec 2025 07:01:41 +0000 Manifest next update: Sun 21 Dec 2025 07:01:41 +0000 Files and hashes: 1: 8LrCpJVZw00cB6v7Jxmu5danMVM.roa (hash: LkYRg4fRX+WYVMtQ+HSrUSifp72hGXmKbB4Mx1yLYEo=) 2: EEy6gJAmhpmEpToeahyxI211nao.roa (hash: bt34cvtSMhR5oe2u5pXbiTmmRNH/yvwh2lEhx2KoETw=) 3: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: v5/YddiZsCBZ4TU51enakDjrSH4Mla1VpfuIi+KFmG8=) 4: is_2p9c72i9SqdHOdQECHoEj2KI.roa (hash: 68Pbkuya3pT0PDgvbPhuXTcECYTodGaR9wl/fj5QS8g=) 5: x_Wqcrl6lMASnCTH86yZWYCmrJo.roa (hash: 01Zo1iYysFTI+XplluiZNnYjCDVhj/Hk3jpPa/LikZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:69:e0:9d:33:3a:35:b6:0b:90:3a:25:db:78:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d Validity Not Before: Dec 20 07:01:41 2025 GMT Not After : Dec 21 07:01:41 2025 GMT Subject: CN=6e73e1b310704a974f40651b35f20059d4c04000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d3:e2:3b:bd:e0:90:ca:78:3a:c6:6c:e9:30: fb:9c:34:a7:1d:39:65:a4:b6:19:c3:e0:ae:c0:9f: 44:49:ee:38:bb:95:27:03:46:b8:2f:18:c6:df:36: 06:8e:14:89:b2:fc:9c:be:36:5d:73:cf:cf:84:26: aa:0a:f0:f5:b4:bd:08:4a:d5:ef:ef:6a:3d:70:af: 90:b4:1c:13:68:f2:63:39:70:ef:cd:6f:7c:dd:38: fb:a6:48:53:f5:f8:76:65:79:48:e0:28:04:fe:74: 71:cf:0e:50:59:97:dc:27:e9:59:f0:42:5c:5a:cc: b3:3e:ba:7a:20:78:2f:14:cb:7d:9e:3a:f5:bf:68: 6e:55:f4:7e:46:9a:72:36:e6:0e:a1:7c:e5:a0:c4: 5c:00:27:12:d2:df:e9:7f:58:20:9c:fd:54:ec:4f: ec:44:0b:9b:03:a3:b9:f9:e3:c9:91:f5:e9:cb:2c: 94:21:12:4f:97:63:9d:6b:65:90:e8:8b:4b:1b:ed: 1a:1b:7f:66:bc:80:3b:e0:3f:33:c2:be:13:73:8e: 9f:54:bf:83:e4:c9:53:21:0e:67:7a:e0:33:24:63: 3b:b5:04:19:0f:a3:7d:ee:90:e7:fd:5e:6a:3b:ba: 32:4d:8b:11:63:8a:ce:06:73:11:49:c2:85:ec:5f: 66:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:73:E1:B3:10:70:4A:97:4F:40:65:1B:35:F2:00:59:D4:C0:40:00 X509v3 Authority Key Identifier: keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:1c:cd:bf:4b:5f:40:8c:08:50:d6:9a:be:8f:36:83:d0:3f: ff:64:21:fd:61:59:1f:c6:d0:0b:13:bc:13:28:79:c8:42:6e: 1a:0d:92:55:d8:e5:d4:a4:e8:4a:11:36:20:03:a4:ae:2d:b7: df:b7:47:8c:fa:95:af:b7:f7:11:f9:e0:63:fc:33:05:81:fb: 18:fb:bb:11:da:f3:a5:24:71:76:06:eb:a9:bc:b2:63:a4:5e: d2:7a:ab:99:fc:c6:56:c6:26:bb:65:2a:4b:68:ba:c6:7a:1a: 2b:bc:8a:92:14:1c:3c:98:a0:a6:cc:47:9c:ca:64:8c:95:d4: 69:be:09:45:60:51:47:1c:32:e6:90:31:f3:ea:21:1b:b2:3c: 02:ad:c8:dc:96:da:2e:d7:1c:0c:6f:1c:f7:7b:d3:f1:1f:91: ed:79:34:0b:44:77:e0:88:88:b1:83:77:13:b6:bd:e1:14:8c: c9:3c:5e:c6:18:d6:5b:2a:62:94:28:bf:b0:ea:1f:54:02:ee: c3:5a:95:09:a7:ad:52:77:ff:8c:2f:15:19:51:90:70:aa:29: aa:f0:45:eb:74:66:80:84:dd:d9:de:6b:af:2e:d7:bb:96:15: 9f:d2:fb:52:1b:d4:49:d1:08:90:8c:cf:10:a7:c9:4a:19:9c: 98:ab:eb:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kGngnTM6NbYLkDol23igMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmN2Q4YTc5YmFkNGY5ODNkMGM0OTg5NWFmNTBlYThhMDNl YmM3MGQwHhcNMjUxMjIwMDcwMTQxWhcNMjUxMjIxMDcwMTQxWjAzMTEwLwYDVQQD Eyg2ZTczZTFiMzEwNzA0YTk3NGY0MDY1MWIzNWYyMDA1OWQ0YzA0MDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNPiO73gkMp4OsZs6TD7nDSnHTll pLYZw+CuwJ9ESe44u5UnA0a4LxjG3zYGjhSJsvycvjZdc8/PhCaqCvD1tL0IStXv 72o9cK+QtBwTaPJjOXDvzW983Tj7pkhT9fh2ZXlI4CgE/nRxzw5QWZfcJ+lZ8EJc WsyzPrp6IHgvFMt9njr1v2huVfR+RppyNuYOoXzloMRcACcS0t/pf1ggnP1U7E/s RAubA6O5+ePJkfXpyyyUIRJPl2Oda2WQ6ItLG+0aG39mvIA74D8zwr4Tc46fVL+D 5MlTIQ5neuAzJGM7tQQZD6N97pDn/V5qO7oyTYsRY4rOBnMRScKF7F9mEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5z4bMQcEqXT0BlGzXyAFnUwEAAMB8GA1UdIwQY MBaAFP99inm61PmD0MSYla9Q6ooD68cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2Mt MDg3M2UzOTk0ZDBlLzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2MtMDg3M2UzOTk0ZDBl LzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRzNv0tf QIwIUNaavo82g9A//2Qh/WFZH8bQCxO8Eyh5yEJuGg2SVdjl1KToShE2IAOkri23 37dHjPqVr7f3EfngY/wzBYH7GPu7EdrzpSRxdgbrqbyyY6Re0nqrmfzGVsYmu2Uq S2i6xnoaK7yKkhQcPJigpsxHnMpkjJXUab4JRWBRRxwy5pAx8+ohG7I8Aq3I3Jba LtccDG8c93vT8R+R7Xk0C0R34IiIsYN3E7a94RSMyTxexhjWWypilCi/sOofVALu w1qVCaetUnf/jC8VGVGQcKopqvBF63RmgITd2d5rry7Xu5YVn9L7UhvUSdEIkIzP EKfJShmcmKvr7A== -----END CERTIFICATE-----Generated at Sat Dec 20 17:04:08 2025 by rpki-client