This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json) Hash identifier: DCBrMLkeAHAKmGEVjZmv25E4JsuGrXV2va6VTF/WQpk= Subject key identifier: DB:56:95:8A:B9:98:38:C6:54:59:26:6A:87:E9:55:45:6D:51:F5:4E Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f Certificate serial: 019B424A7A4F2757EE5F62DFA5EEEA64A1BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft Manifest number: 0644 Signing time: Sun 21 Dec 2025 19:02:15 +0000 Manifest this update: Sun 21 Dec 2025 19:02:15 +0000 Manifest next update: Mon 22 Dec 2025 19:02:15 +0000 Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: Tr3SKQ30hw2aYtwvOabJpWs3cfHXVBjtPO2t4tO+FCw=) 2: NldJhq1MAVdUgbD6n6XKOd_rYuI.roa (hash: nicnFQBAIXmcU10eabjaRC66nw/nEzjS6x4xuq2azqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:7a:4f:27:57:ee:5f:62:df:a5:ee:ea:64:a1:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f Validity Not Before: Dec 21 19:02:15 2025 GMT Not After : Dec 22 19:02:15 2025 GMT Subject: CN=db56958ab99838c65459266a87e955456d51f54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:6c:b1:69:10:63:e6:c0:af:da:48:de:85:aa: 16:31:12:8a:9e:08:4c:92:3e:e4:81:ce:e9:d4:b5: 82:bb:a1:6e:4b:0f:1b:16:9b:3b:64:ba:b8:97:23: eb:ac:a6:1e:99:07:41:0a:d9:5e:cb:11:c2:57:83: 7d:f1:13:f2:40:a6:42:be:fe:51:2e:b9:9c:89:c6: 29:e7:18:9f:c6:ae:6a:ad:9d:ee:86:4a:f6:56:8a: 47:3e:b1:75:b6:62:fe:c2:fc:bf:6b:e4:d9:b8:16: 7b:fd:83:12:2b:6b:6b:63:8f:06:4e:29:9d:67:cc: 24:38:56:20:0c:e6:3f:05:60:fe:bf:a2:1e:bd:f8: 05:8a:26:ed:60:1a:a9:5b:74:48:4b:15:27:1d:5f: 53:d0:12:17:2c:f3:94:b9:8d:aa:f6:fc:a5:b1:2b: b5:81:0c:7d:ab:38:51:d0:e8:9f:36:dc:00:8c:b4: ae:80:d7:07:6e:eb:a8:88:0e:32:31:81:8b:45:ce: c0:a6:1e:f9:12:40:e9:f7:10:80:2e:31:5c:f4:9b: 26:8b:34:8d:44:ed:6a:4d:47:ab:9a:eb:c3:6b:cd: 7e:65:36:f4:1d:02:e7:d3:31:09:86:03:1c:3c:29: cd:53:cb:a7:47:89:90:87:50:ca:23:af:3e:f4:32: 06:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:56:95:8A:B9:98:38:C6:54:59:26:6A:87:E9:55:45:6D:51:F5:4E X509v3 Authority Key Identifier: keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:ff:56:b6:bb:a9:95:c1:a6:2f:8e:8e:39:de:39:4f:f3:d6: 21:76:05:e3:7b:b3:c8:83:1e:9f:ed:97:5e:d7:93:28:b7:ee: cc:87:dd:0b:8a:46:af:27:c5:09:6d:b9:4f:cb:8b:89:59:b6: 22:b0:93:92:79:2c:aa:24:c5:4f:0f:53:54:34:1e:94:70:47: e4:4f:df:ec:57:14:6a:ba:65:e5:17:23:2f:6a:21:9a:47:ad: 11:7a:0a:6e:4c:3c:9c:97:0c:3b:e9:6b:2f:2e:24:6a:84:a2: 65:e0:f9:af:d9:15:f1:98:c5:eb:37:34:24:1f:4e:a2:8c:91: 5c:cc:49:ce:06:90:0d:43:b8:ad:f8:48:92:d3:2f:26:0c:88: 88:e8:c4:da:7a:74:f7:02:e0:6a:aa:62:d1:6b:57:20:82:8d: 3b:5a:92:9b:db:41:5b:85:81:aa:0d:86:69:7e:24:58:b5:d7: 15:35:2d:d7:05:02:26:5c:1d:73:4c:ed:4e:7c:5e:0b:e1:d3: d8:14:12:43:65:5d:5f:bb:b2:55:7d:8c:8c:8f:31:c6:06:50: 11:f9:52:a3:3c:d9:eb:40:9f:e5:b1:eb:89:7c:a3:fd:48:77: 41:aa:4e:47:86:d4:5e:cd:63:ff:13:12:cf:d9:a3:dd:0e:e5: d8:22:b9:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSnpPJ1fuX2Lfpe7qZKG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNjQxMmM1ZGRmMTI4ZWM3MTRhZmFlYTQ4M2U4N2IxYmM3 NGQ0MWYwHhcNMjUxMjIxMTkwMjE1WhcNMjUxMjIyMTkwMjE1WjAzMTEwLwYDVQQD EyhkYjU2OTU4YWI5OTgzOGM2NTQ1OTI2NmE4N2U5NTU0NTZkNTFmNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9myxaRBj5sCv2kjehaoWMRKKnghM kj7kgc7p1LWCu6FuSw8bFps7ZLq4lyPrrKYemQdBCtleyxHCV4N98RPyQKZCvv5R LrmcicYp5xifxq5qrZ3uhkr2VopHPrF1tmL+wvy/a+TZuBZ7/YMSK2trY48GTimd Z8wkOFYgDOY/BWD+v6IevfgFiibtYBqpW3RISxUnHV9T0BIXLPOUuY2q9vylsSu1 gQx9qzhR0OifNtwAjLSugNcHbuuoiA4yMYGLRc7Aph75EkDp9xCALjFc9JsmizSN RO1qTUermuvDa81+ZTb0HQLn0zEJhgMcPCnNU8unR4mQh1DKI68+9DIGnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtWlYq5mDjGVFkmaofpVUVtUfVOMB8GA1UdIwQY MBaAFN9kEsXd8SjscUr66kg+h7G8dNQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDct Zjk1MDQyMGI5ZTA2LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDctZjk1MDQyMGI5ZTA2 LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0f9Wtrup lcGmL46OOd45T/PWIXYF43uzyIMen+2XXteTKLfuzIfdC4pGryfFCW25T8uLiVm2 IrCTknksqiTFTw9TVDQelHBH5E/f7FcUarpl5RcjL2ohmketEXoKbkw8nJcMO+lr Ly4kaoSiZeD5r9kV8ZjF6zc0JB9OooyRXMxJzgaQDUO4rfhIktMvJgyIiOjE2np0 9wLgaqpi0WtXIIKNO1qSm9tBW4WBqg2GaX4kWLXXFTUt1wUCJlwdc0ztTnxeC+HT 2BQSQ2VdX7uyVX2MjI8xxgZQEflSozzZ60Cf5bHriXyj/Uh3QapOR4bUXs1j/xMS z9mj3Q7l2CK5rw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:43:52 2025 by rpki-client