This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json) Hash identifier: G6cg98teuAEzE5EZVu1FPuB5bm8PkTKaf3IDhorLXkE= Subject key identifier: C0:92:68:4A:97:77:95:6D:4D:F5:C4:67:A8:EF:4A:82:8A:A8:8B:85 Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98 Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798 Certificate serial: 019B4EBB47B618CEC130F9D616ADF674E77D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft Manifest number: 0E24 Signing time: Wed 24 Dec 2025 05:00:54 +0000 Manifest this update: Wed 24 Dec 2025 05:00:54 +0000 Manifest next update: Thu 25 Dec 2025 05:00:54 +0000 Files and hashes: 1: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: 3wj+CgdFtJbVYqL+6go85ONhicpIkkpz4eD3hLgJy+k=) 2: oOmlEIPuZj-euGQgaSJSIdcSgws.roa (hash: 4HVEBIShSrKuBB15YN2IPkpfbl2tZhoTqa30YNiE+ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:47:b6:18:ce:c1:30:f9:d6:16:ad:f6:74:e7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798 Validity Not Before: Dec 24 05:00:54 2025 GMT Not After : Dec 25 05:00:54 2025 GMT Subject: CN=c092684a9777956d4df5c467a8ef4a828aa88b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:81:69:09:29:e4:ab:d6:ab:a4:a6:20:11: 09:1e:8d:d7:a4:01:64:62:68:68:92:cc:31:1b:e4: b0:05:e0:d5:b9:f7:2d:d6:05:33:f2:44:8a:1e:04: d3:ba:8f:7e:17:f8:52:6f:1a:ca:d9:07:e1:90:b3: de:c3:e9:05:32:7d:4b:d3:e9:3c:6e:d3:e1:8a:2b: 36:6a:1f:cf:65:9e:b8:25:13:6e:be:58:b0:b3:cf: 2f:67:cf:70:02:8d:bb:ee:34:91:b4:37:b2:61:e1: 46:07:9e:d9:90:8a:14:10:45:9e:7c:78:ee:bf:1e: 93:80:70:60:50:e4:a0:83:af:77:af:d5:88:81:98: 69:e8:f6:52:26:d8:e5:2b:69:ea:e1:59:77:15:e3: 40:25:45:2a:12:0a:54:16:86:d3:23:9a:c2:51:e7: cb:d9:bf:d3:2d:0f:12:03:38:22:98:01:4a:4f:1b: 1a:de:c3:52:5e:63:3b:1e:58:64:ca:36:35:13:6b: 18:8d:62:4d:64:ad:55:f3:a1:07:4c:8b:45:04:7f: e7:8b:17:32:98:65:42:84:86:aa:0f:9f:82:f7:e5: 35:9d:57:75:d5:c9:6f:67:b1:5e:60:74:0d:7e:d2: b0:bc:a9:4a:ef:e7:7c:75:b2:75:bf:a5:be:0b:57: 2e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:92:68:4A:97:77:95:6D:4D:F5:C4:67:A8:EF:4A:82:8A:A8:8B:85 X509v3 Authority Key Identifier: keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b2:2d:26:a0:ce:f8:e4:06:bc:11:f6:ea:5d:61:09:2f:ef: 15:48:1d:29:b3:45:70:ba:e6:46:71:aa:d6:05:67:de:be:d5: 51:b1:a6:a1:50:4c:98:37:f3:e2:a0:cc:95:be:fa:40:6a:3a: 31:c7:04:f7:7f:2d:91:20:f9:07:e0:73:3c:88:ce:a1:a9:1b: 62:9a:a5:fa:70:81:bf:0c:48:fa:18:05:c3:64:90:6e:28:fc: 42:0a:57:e0:f6:40:55:2f:fc:af:16:1a:e2:24:32:d7:56:f3: 45:16:f4:52:30:2e:f6:66:9b:b5:dc:65:65:c6:d1:de:2b:4d: a5:d8:1a:76:46:18:1d:35:e5:31:76:b3:69:5f:3f:5a:1b:b2: 04:17:ee:d9:b3:38:32:46:3a:da:1c:cd:34:50:a7:41:14:73: 74:09:fd:0f:1a:61:a6:06:75:c8:ef:2b:f3:a6:c8:3b:80:79: c8:8e:cd:a2:d9:b8:17:79:56:4a:25:b9:f7:3d:1a:88:e6:bc: 9f:c8:8c:cd:9b:d8:e6:cc:b8:ac:aa:ae:d2:ad:a2:b9:37:72: 83:5d:2e:4e:f2:1d:89:93:29:48:23:2a:b5:56:b9:bd:b5:71: f1:89:88:3e:8b:81:37:fa:59:ca:cd:48:18:60:09:3b:57:b3: 0a:64:6d:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu0e2GM7BMPnWFq32dOd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNjJiYmYxNWRlMzQ0YWNkYjVmNzgwMDQ1MGYyYzgyZDc5 N2Q3OTgwHhcNMjUxMjI0MDUwMDU0WhcNMjUxMjI1MDUwMDU0WjAzMTEwLwYDVQQD EyhjMDkyNjg0YTk3Nzc5NTZkNGRmNWM0NjdhOGVmNGE4MjhhYTg4Yjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2mBaQkp5KvWq6SmIBEJHo3XpAFk YmhokswxG+SwBeDVufct1gUz8kSKHgTTuo9+F/hSbxrK2QfhkLPew+kFMn1L0+k8 btPhiis2ah/PZZ64JRNuvliws88vZ89wAo277jSRtDeyYeFGB57ZkIoUEEWefHju vx6TgHBgUOSgg693r9WIgZhp6PZSJtjlK2nq4Vl3FeNAJUUqEgpUFobTI5rCUefL 2b/TLQ8SAzgimAFKTxsa3sNSXmM7HlhkyjY1E2sYjWJNZK1V86EHTItFBH/nixcy mGVChIaqD5+C9+U1nVd11clvZ7FeYHQNftKwvKlK7+d8dbJ1v6W+C1cuiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCSaEqXd5VtTfXEZ6jvSoKKqIuFMB8GA1UdIwQY MBaAFN9iu/Fd40Ss2194AEUPLILXl9eYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzJLNzhWM2pSS3piWDNnQVJROHNndGVYMTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9hMDBjNDYtODAzMS00MTFmLTg1MDMt YTBmMjU5MWRkMmJkLzEvMzJLNzhWM2pSS3piWDNnQVJROHNndGVYMTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9hMDBjNDYtODAzMS00MTFmLTg1MDMtYTBmMjU5MWRkMmJk LzEvMzJLNzhWM2pSS3piWDNnQVJROHNndGVYMTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbItJqDO +OQGvBH26l1hCS/vFUgdKbNFcLrmRnGq1gVn3r7VUbGmoVBMmDfz4qDMlb76QGo6 MccE938tkSD5B+BzPIjOoakbYpql+nCBvwxI+hgFw2SQbij8QgpX4PZAVS/8rxYa 4iQy11bzRRb0UjAu9mabtdxlZcbR3itNpdgadkYYHTXlMXazaV8/WhuyBBfu2bM4 MkY62hzNNFCnQRRzdAn9DxphpgZ1yO8r86bIO4B5yI7Notm4F3lWSiW59z0aiOa8 n8iMzZvY5sy4rKqu0q2iuTdyg10uTvIdiZMpSCMqtVa5vbVx8YmIPouBN/pZys1I GGAJO1ezCmRtew== -----END CERTIFICATE-----Generated at Wed Dec 24 11:12:49 2025 by rpki-client