This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft File: 32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json) Hash identifier: 5TFbnSDIa/kFjbgewonxttjrMDNbxZJtfu4xCkIVbzU= Subject key identifier: 50:35:18:E4:D8:A0:87:21:FC:0C:65:B8:18:20:50:C6:9E:A5:86:7F Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34 Certificate issuer: /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834 Certificate serial: 019B435C4974A25352FC80C075563FAF98F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft Manifest number: 0E3A Signing time: Mon 22 Dec 2025 00:01:20 +0000 Manifest this update: Mon 22 Dec 2025 00:01:20 +0000 Manifest next update: Tue 23 Dec 2025 00:01:20 +0000 Files and hashes: 1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: scAEv4DYD6yVfgFlmqAsQFebVHViy7RRb4VymPiNT4s=) 2: DmQguxgVyJ_d0tpi3KUPtRcdGUQ.roa (hash: OiuAWrEvvfbOYm4huTJvJrvDJABO3FsTpYDNXs6sb+s=) 3: aI06tjVZeZrIS1TA5LHHtgH2TfE.roa (hash: LKF1KEnQy5/5rD4HRU7tZBGEwLV0sJ0zLyAcVF0BY1c=) 4: gCOrJJaf7HO535LCuEoI7vxf65A.roa (hash: 7Nbxw9zLeIaRzeX3DJv4MIaTHvVYcSTc1CbOKxR59lQ=) 5: k6eyynVladw6I8I9j1dsAe95OA8.roa (hash: A0AAtMX//zpiq0We38ivcj7YmnJWOeaOBnQnV51DCG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:49:74:a2:53:52:fc:80:c0:75:56:3f:af:98:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834 Validity Not Before: Dec 22 00:01:20 2025 GMT Not After : Dec 23 00:01:20 2025 GMT Subject: CN=503518e4d8a08721fc0c65b8182050c69ea5867f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:03:7f:39:49:56:ac:0a:8c:b3:11:cf:3e:e9: 0e:c0:cf:c5:14:05:ba:c3:49:12:0d:59:f1:8b:b7: 5d:10:2c:c7:69:25:07:01:ad:86:e0:1b:f6:37:f8: cd:02:dc:b0:67:38:c6:00:b5:d0:2c:69:11:6e:17: dd:37:8c:87:6f:69:33:0d:26:9f:5f:6f:eb:28:c2: 15:fd:a7:60:96:8f:bc:8e:21:c1:19:af:d0:2b:ab: 82:58:95:19:3e:ba:78:3d:06:3a:8d:28:57:24:af: 34:9d:4e:20:c3:2b:70:69:d6:cf:db:14:ea:19:39: 81:73:18:a8:8f:7a:ad:0b:b2:95:cd:bf:04:f8:ba: 8d:6c:36:e3:04:6b:f7:b2:ba:84:60:b9:4f:68:25: 68:3e:6a:3e:c7:1e:4b:97:ba:71:f5:da:7f:be:41: f5:a9:02:17:31:58:14:de:16:07:06:37:e3:bb:fa: 18:90:3f:c8:10:4b:bd:aa:56:8e:3d:67:71:86:e9: ef:ca:ba:fa:30:47:ac:24:30:76:75:72:c9:25:4e: af:cc:53:54:64:7c:10:90:c6:49:8b:4d:eb:b7:a9: 42:b6:33:54:a8:c8:1f:41:8e:07:82:d4:f5:2d:db: ca:ca:34:7d:47:e7:63:52:17:9b:f4:af:50:54:eb: 90:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:35:18:E4:D8:A0:87:21:FC:0C:65:B8:18:20:50:C6:9E:A5:86:7F X509v3 Authority Key Identifier: keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:be:a3:4f:3b:92:7d:01:0a:da:2e:03:47:94:f6:8d:f2:08: 23:2b:e9:e5:22:87:bb:6f:ce:80:ab:6f:2a:48:ca:3f:80:18: c6:eb:f4:7f:17:5e:a8:dd:8c:05:99:27:e9:cb:84:55:9e:8a: 37:63:f1:ae:b8:be:06:ce:77:20:4f:a1:08:e0:2b:2a:2d:d2: 3d:11:66:d4:9e:aa:af:35:dd:6b:43:93:7e:dd:4b:d9:fe:f7: 08:98:3a:24:83:51:ed:1b:3b:27:f4:6d:03:2a:ee:c8:fd:c2: de:01:45:5e:18:62:90:d8:a5:77:09:42:65:aa:ec:d8:e5:58: f1:8e:29:91:0c:d9:24:7d:b0:d7:10:20:a0:4e:0e:76:a0:83: 25:40:c3:40:65:c6:bf:6c:d7:83:c9:30:7d:bb:fc:29:de:ad: 8a:9d:8b:7f:ac:4b:dc:f2:54:b4:96:5d:75:07:14:44:d3:99: 02:65:04:12:f0:51:b2:7b:38:62:60:17:35:69:45:28:48:31: 6c:03:87:68:be:76:ee:c6:10:3a:8f:9d:46:de:ec:6c:4a:8c: fd:0a:25:55:4e:df:46:b1:7c:fe:74:ae:d2:9c:66:3a:2e:43: 82:87:c0:53:b2:90:f0:fa:80:84:2c:1b:b0:8e:a4:f6:80:1d: 89:ae:e7:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXEl0olNS/IDAdVY/r5jzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNjFhMjkyMjIzYWQ5YWViYzhhZDgyYzJhNTY0NzVmYmQ5 N2E4MzQwHhcNMjUxMjIyMDAwMTIwWhcNMjUxMjIzMDAwMTIwWjAzMTEwLwYDVQQD Eyg1MDM1MThlNGQ4YTA4NzIxZmMwYzY1YjgxODIwNTBjNjllYTU4NjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AN/OUlWrAqMsxHPPukOwM/FFAW6 w0kSDVnxi7ddECzHaSUHAa2G4Bv2N/jNAtywZzjGALXQLGkRbhfdN4yHb2kzDSaf X2/rKMIV/adglo+8jiHBGa/QK6uCWJUZPrp4PQY6jShXJK80nU4gwytwadbP2xTq GTmBcxioj3qtC7KVzb8E+LqNbDbjBGv3srqEYLlPaCVoPmo+xx5Ll7px9dp/vkH1 qQIXMVgU3hYHBjfju/oYkD/IEEu9qlaOPWdxhunvyrr6MEesJDB2dXLJJU6vzFNU ZHwQkMZJi03rt6lCtjNUqMgfQY4HgtT1LdvKyjR9R+djUheb9K9QVOuQRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFA1GOTYoIch/AxluBggUMaepYZ/MB8GA1UdIwQY MBaAFN9hopIiOtmuvIrYLCpWR1+9l6g0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzJHaWtpSTYyYTY4aXRnc0tsWkhYNzJYcURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iN2Q4NzUtYjEyYy00ZWQ4LWI4MGYt NDE0ODdmNGQ0MTcxLzEvMzJHaWtpSTYyYTY4aXRnc0tsWkhYNzJYcURRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iN2Q4NzUtYjEyYy00ZWQ4LWI4MGYtNDE0ODdmNGQ0MTcx LzEvMzJHaWtpSTYyYTY4aXRnc0tsWkhYNzJYcURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT76jTzuS fQEK2i4DR5T2jfIIIyvp5SKHu2/OgKtvKkjKP4AYxuv0fxdeqN2MBZkn6cuEVZ6K N2Pxrri+Bs53IE+hCOArKi3SPRFm1J6qrzXda0OTft1L2f73CJg6JINR7Rs7J/Rt AyruyP3C3gFFXhhikNildwlCZars2OVY8Y4pkQzZJH2w1xAgoE4OdqCDJUDDQGXG v2zXg8kwfbv8Kd6tip2Lf6xL3PJUtJZddQcURNOZAmUEEvBRsns4YmAXNWlFKEgx bAOHaL527sYQOo+dRt7sbEqM/QolVU7fRrF8/nSu0pxmOi5DgofAU7KQ8PqAhCwb sI6k9oAdia7nwQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:52:42 2025 by rpki-client