This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json) Hash identifier: AZp6p+Pv6dT+n6QhttwAPjO3tOh292QoisSK6KMeLmM= Subject key identifier: 24:76:C3:C2:9C:F6:F8:E8:CC:61:0B:DE:16:EB:FA:82:CA:51:F8:16 Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43 Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343 Certificate serial: 019B593EBE77EF2D193DD89BA3DEF629A833 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft Manifest number: 0A8A Signing time: Fri 26 Dec 2025 06:00:42 +0000 Manifest this update: Fri 26 Dec 2025 06:00:42 +0000 Manifest next update: Sat 27 Dec 2025 06:00:42 +0000 Files and hashes: 1: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: jKuERdsff0LFojcR2dIk5Rg+ltqFHRqp9Vczn0DeeQw=) 2: zBqyJEl1ZTI7fL6gM2motFXrSRM.roa (hash: OkJW2+OnAMScP2GdhvLfFrfdk7h2e43pg36iU6eHej4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:be:77:ef:2d:19:3d:d8:9b:a3:de:f6:29:a8:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343 Validity Not Before: Dec 26 06:00:42 2025 GMT Not After : Dec 27 06:00:42 2025 GMT Subject: CN=2476c3c29cf6f8e8cc610bde16ebfa82ca51f816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:36:fd:42:cb:55:5e:36:82:d1:02:d9:ed:31: e6:01:1b:1e:80:67:54:1b:54:d7:7a:22:0d:4b:f1: 73:3d:dd:d2:38:61:5b:14:f2:2c:2f:69:36:ca:fb: 3f:df:0b:a1:9b:97:1f:39:90:72:a6:b2:58:76:4d: 4e:6d:41:b3:32:dc:2c:23:35:fa:7c:5e:2f:43:02: c9:c8:b2:76:2c:fb:c8:cf:b2:5e:e7:59:8c:09:0c: 3e:e3:66:d9:8d:0c:2d:33:d6:bc:8a:e2:38:8c:1d: c1:f6:75:4d:dd:ad:7f:06:6b:5f:21:7d:87:5e:51: 12:db:59:fa:77:80:07:44:57:50:7a:1b:14:1c:54: b6:dd:dd:d4:5c:d5:0e:52:a7:f0:40:86:50:52:54: 4b:3c:ce:13:c1:68:c8:47:e5:a8:a1:c7:23:83:6f: 8d:67:3a:66:8c:a8:23:8b:e0:f5:6f:4a:2d:3f:08: 0b:fd:70:dd:f9:d3:4f:fc:98:33:c7:de:23:8d:22: d5:c0:a1:af:9d:0a:d8:c8:78:39:38:dd:7b:9f:09: 4e:7b:c6:01:1f:24:97:25:dc:2a:11:a6:1e:f7:24: a8:79:5c:c0:7e:29:d0:60:97:7f:d6:58:46:9f:29: 91:aa:2e:48:07:01:bb:25:72:cd:dc:c0:f9:49:7a: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:76:C3:C2:9C:F6:F8:E8:CC:61:0B:DE:16:EB:FA:82:CA:51:F8:16 X509v3 Authority Key Identifier: keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9c:b2:56:91:39:ea:ca:5c:54:76:64:03:52:c1:cf:a5:f2: c6:e3:66:bc:6c:9b:88:31:af:57:9a:bc:0e:08:1c:60:d3:8c: aa:79:c3:d9:e4:85:c0:07:14:9d:34:2e:1e:3c:34:d0:66:76: 00:dc:0c:18:8d:c3:3d:f1:21:d5:f0:eb:4d:7b:37:14:45:a4: 83:c7:8a:ef:00:84:a6:a4:aa:0c:0c:c3:5e:33:d4:45:5e:fa: a5:bd:1b:94:88:33:c4:13:1b:5d:36:b7:99:e0:af:23:de:98: 0e:b4:25:da:1e:ae:38:3d:91:24:4c:e5:0e:2c:e1:00:6b:f3: 3a:86:67:92:bc:67:8e:2d:e9:a6:6e:63:61:94:43:be:c8:5c: 29:ae:80:1a:87:35:2a:93:bd:af:8d:b4:cd:3c:a4:c2:c7:3b: 7e:ee:bd:0f:2a:1b:fb:e0:a3:d7:08:41:cb:b9:65:36:cc:e1: f6:c9:67:a3:0e:2b:e9:ea:1c:99:32:b9:b4:be:89:64:a4:ac: 44:ae:b6:1d:c2:6e:00:18:2c:69:99:f5:68:5e:f6:b1:9a:fe: 24:2e:55:dd:df:00:44:b4:5f:19:7c:0b:ef:63:36:e4:fd:5a: 42:de:90:b5:25:84:c1:0f:5f:d4:54:c8:3a:8a:33:32:40:0e: 9c:4a:28:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPr537y0ZPdibo972KagzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MGRmNjVhMmZjYjliMTE3YTg1M2E2YjU2ODU0YjA3MThl YzMzNDMwHhcNMjUxMjI2MDYwMDQyWhcNMjUxMjI3MDYwMDQyWjAzMTEwLwYDVQQD EygyNDc2YzNjMjljZjZmOGU4Y2M2MTBiZGUxNmViZmE4MmNhNTFmODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjb9QstVXjaC0QLZ7THmARsegGdU G1TXeiINS/FzPd3SOGFbFPIsL2k2yvs/3wuhm5cfOZByprJYdk1ObUGzMtwsIzX6 fF4vQwLJyLJ2LPvIz7Je51mMCQw+42bZjQwtM9a8iuI4jB3B9nVN3a1/BmtfIX2H XlES21n6d4AHRFdQehsUHFS23d3UXNUOUqfwQIZQUlRLPM4TwWjIR+Wooccjg2+N ZzpmjKgji+D1b0otPwgL/XDd+dNP/Jgzx94jjSLVwKGvnQrYyHg5ON17nwlOe8YB HySXJdwqEaYe9ySoeVzAfinQYJd/1lhGnymRqi5IBwG7JXLN3MD5SXrJPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCR2w8Kc9vjozGEL3hbr+oLKUfgWMB8GA1UdIwQY MBaAFLUN9lovy5sReoU6a1aFSwcY7DNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUt MWY2MDEwYTMwZWJiLzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUtMWY2MDEwYTMwZWJi LzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZyyVpE5 6spcVHZkA1LBz6XyxuNmvGybiDGvV5q8DggcYNOMqnnD2eSFwAcUnTQuHjw00GZ2 ANwMGI3DPfEh1fDrTXs3FEWkg8eK7wCEpqSqDAzDXjPURV76pb0blIgzxBMbXTa3 meCvI96YDrQl2h6uOD2RJEzlDizhAGvzOoZnkrxnji3ppm5jYZRDvshcKa6AGoc1 KpO9r420zTykwsc7fu69Dyob++Cj1whBy7llNszh9slnow4r6eocmTK5tL6JZKSs RK62HcJuABgsaZn1aF72sZr+JC5V3d8ARLRfGXwL72M25P1aQt6QtSWEwQ9f1FTI OoozMkAOnEooQA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:06 2025 by rpki-client