This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json) Hash identifier: DIZAFaJ5i795vGZsAXSR+qQ5/9k/iD9B8qzwoyVAnuI= Subject key identifier: 5B:98:34:32:85:78:90:05:CE:8B:BC:C8:34:BF:83:85:10:89:A4:B6 Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c Certificate serial: 019B2EFAA6F98927621A12663750A926514C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft Manifest number: 154F Signing time: Thu 18 Dec 2025 01:02:16 +0000 Manifest this update: Thu 18 Dec 2025 01:02:16 +0000 Manifest next update: Fri 19 Dec 2025 01:02:16 +0000 Files and hashes: 1: K_MyGvHR4IdSBZBjdPl8MukbNFk.roa (hash: HrMHQD3uVG8sdR811mtsQpZxidNNmctDC5Taskmcc7A=) 2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: 7VYYl28QVDQhn5TtzwOh1EtHn4lgga1x9XNZNPu/9Tg=) 3: qt5f6XAHUjkOK9CEjEv3rd6845Q.roa (hash: JhK1mHuSEOx5aV2MrmFZp4Cs5i5KltcCemHPpXmD5pI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:a6:f9:89:27:62:1a:12:66:37:50:a9:26:51:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c Validity Not Before: Dec 18 01:02:16 2025 GMT Not After : Dec 19 01:02:16 2025 GMT Subject: CN=5b98343285789005ce8bbcc834bf83851089a4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d3:76:e1:7f:fe:80:c5:46:ff:e5:c9:4e:63: df:43:bf:1a:6f:41:6f:eb:d8:0e:42:20:06:0b:81: 99:04:d5:87:2a:e5:83:79:ae:5c:96:ed:a8:4f:9d: 72:ca:74:c4:f3:e7:34:4c:9d:e1:a7:96:8c:2e:1c: 26:b3:39:96:94:3b:c1:34:26:bd:bc:12:4b:d2:22: 9f:6f:72:60:26:98:fd:d8:3c:3d:6a:72:f1:2d:21: b5:a7:49:5c:db:08:f2:9b:61:63:db:15:cc:d6:72: 0a:55:94:06:25:aa:6d:b3:06:e5:b8:72:ea:59:ed: c6:e2:27:57:9a:0d:02:ee:b5:69:26:97:ba:f5:b4: 66:c1:00:f4:f5:51:26:48:72:da:63:ff:81:79:4a: 2c:40:44:f7:7c:2c:3e:3b:00:18:42:30:76:d9:38: 1e:3b:d3:37:9b:43:89:20:98:83:60:e9:9a:d3:82: 30:62:2b:5d:97:2a:d3:6c:25:8c:43:d9:26:e9:54: ee:3b:3f:04:59:4a:89:5e:d4:6e:a6:ca:d1:dd:59: f7:ea:97:2f:86:ff:dc:38:28:21:1c:d2:bc:69:f2: b2:87:e6:38:7b:b6:31:29:23:4b:8a:50:c9:6c:d5: 02:12:31:16:56:5f:a8:9f:c2:e1:d9:88:6c:a7:d9: f0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:98:34:32:85:78:90:05:CE:8B:BC:C8:34:BF:83:85:10:89:A4:B6 X509v3 Authority Key Identifier: keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:36:fb:57:97:8e:3c:e6:09:c9:ba:81:bd:4f:c0:1e:e3:52: fc:f0:67:82:42:01:d8:e5:a2:b2:e7:fc:85:53:92:b8:42:8d: cf:87:e0:0e:8a:7d:f7:c1:ea:8f:85:4d:c9:56:56:c5:28:72: 38:f9:80:71:13:6b:6b:a9:cf:3f:59:a9:b4:54:4e:be:4f:f7: 85:ee:5b:2c:a2:e4:a8:c2:8a:7d:6f:2b:12:d2:ea:44:81:cb: 32:1d:ca:71:60:a4:19:49:cb:ab:b1:21:34:b9:86:a9:62:a7: 36:c3:57:eb:7b:f1:da:06:06:d8:e9:5f:51:36:05:3c:12:d2: bd:c2:6b:b7:98:10:26:21:bc:a7:32:35:5e:d5:44:d6:d4:ce: fd:65:4a:9e:76:d6:14:77:dd:6c:20:80:b1:1a:23:77:41:b6: 97:c4:2b:5a:7e:39:e0:6e:6c:e2:55:cd:94:e9:d2:8f:46:f9: 31:35:9a:52:4e:46:46:cd:2b:30:92:a9:77:33:d3:cd:39:7d: 8b:40:7b:bc:d3:63:ce:67:35:f0:19:2a:cd:99:32:22:f5:76: d4:01:77:7d:01:4d:ef:d1:4c:b7:58:22:62:ea:bc:13:02:b6: f1:e6:13:b4:fd:15:64:23:79:70:95:ec:9e:19:cf:06:24:e4: 65:b4:3d:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+qb5iSdiGhJmN1CpJlFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmN2Q4ODUzOTNiMzJiNWVlZTNhMGJmNDMzOGUwZmFhZWYz Yzc1M2MwHhcNMjUxMjE4MDEwMjE2WhcNMjUxMjE5MDEwMjE2WjAzMTEwLwYDVQQD Eyg1Yjk4MzQzMjg1Nzg5MDA1Y2U4YmJjYzgzNGJmODM4NTEwODlhNGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NN24X/+gMVG/+XJTmPfQ78ab0Fv 69gOQiAGC4GZBNWHKuWDea5clu2oT51yynTE8+c0TJ3hp5aMLhwmszmWlDvBNCa9 vBJL0iKfb3JgJpj92Dw9anLxLSG1p0lc2wjym2Fj2xXM1nIKVZQGJaptswbluHLq We3G4idXmg0C7rVpJpe69bRmwQD09VEmSHLaY/+BeUosQET3fCw+OwAYQjB22Tge O9M3m0OJIJiDYOma04IwYitdlyrTbCWMQ9km6VTuOz8EWUqJXtRupsrR3Vn36pcv hv/cOCghHNK8afKyh+Y4e7YxKSNLilDJbNUCEjEWVl+on8Lh2Yhsp9nwrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuYNDKFeJAFzou8yDS/g4UQiaS2MB8GA1UdIwQY MBaAFE99iFOTsyte7joL9DOOD6rvPHU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEt YjE4ZGFjMmQyNTliLzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEtYjE4ZGFjMmQyNTli LzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTb7V5eO POYJybqBvU/AHuNS/PBngkIB2OWisuf8hVOSuEKNz4fgDop998Hqj4VNyVZWxShy OPmAcRNra6nPP1mptFROvk/3he5bLKLkqMKKfW8rEtLqRIHLMh3KcWCkGUnLq7Eh NLmGqWKnNsNX63vx2gYG2OlfUTYFPBLSvcJrt5gQJiG8pzI1XtVE1tTO/WVKnnbW FHfdbCCAsRojd0G2l8QrWn454G5s4lXNlOnSj0b5MTWaUk5GRs0rMJKpdzPTzTl9 i0B7vNNjzmc18BkqzZkyIvV21AF3fQFN79FMt1giYuq8EwK28eYTtP0VZCN5cJXs nhnPBiTkZbQ9Wg== -----END CERTIFICATE-----Generated at Thu Dec 18 05:49:41 2025 by rpki-client