This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json) Hash identifier: us/CIUZ8ivSYK1w5xdYtJjUW55mfqruei0I+kzoqTJE= Subject key identifier: 4E:19:16:67:74:C0:49:D5:1D:C4:D6:93:B8:5E:B5:65:FD:B2:12:9E Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63 Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63 Certificate serial: 019C1C14E1CBA7F40DDBDEB054C57C2093B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft Manifest number: 0F95 Signing time: Mon 02 Feb 2026 02:00:56 +0000 Manifest this update: Mon 02 Feb 2026 02:00:56 +0000 Manifest next update: Tue 03 Feb 2026 02:00:56 +0000 Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: 04IEQVdi+Ou22wsHgDzCncSCa/H/BVRg7NtMI0ouWZs=) 2: eZW6Hra3VKDaHpIw4oWeb7v-Ing.asa (hash: prXq7zIRsAV9jtqOkMC/JnDXSMdKIhkp+Aj/pefkjkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:14:e1:cb:a7:f4:0d:db:de:b0:54:c5:7c:20:93:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63 Validity Not Before: Feb 2 02:00:56 2026 GMT Not After : Feb 3 02:00:56 2026 GMT Subject: CN=4e19166774c049d51dc4d693b85eb565fdb2129e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ed:a9:ae:95:ad:1f:1c:28:f9:bb:58:a9:56: 35:96:b7:46:9f:d6:16:50:3f:88:6f:5d:c5:fe:ec: 46:d9:b3:41:92:38:6b:cc:d3:cb:99:8f:98:91:11: 62:b0:93:8e:66:f4:53:f9:24:27:c7:41:f3:c1:12: 1e:9e:78:e0:e5:4e:52:c6:02:77:1b:68:1c:f4:04: ef:ac:9b:a3:c4:a9:1d:ee:95:1c:c5:b2:66:d4:39: 72:e0:c4:57:7a:d7:99:fa:24:84:f4:4e:9f:7f:00: 6b:58:4b:b2:88:db:93:0d:42:8d:1f:8d:6f:14:bf: bd:f3:86:ed:34:dd:35:f5:4c:80:c4:35:79:a3:be: 5e:f6:9c:ca:d7:ae:8f:75:57:3e:e1:e2:f8:17:ea: b9:79:f1:e4:cd:7e:45:f7:d9:95:0f:3e:d9:2a:8b: 36:b7:59:68:fc:ad:6e:c6:34:f0:e0:bc:68:05:eb: 98:34:e2:d6:92:f1:9e:42:50:41:7a:64:8b:46:be: 11:80:27:48:7a:6f:e4:3e:ea:98:a4:8c:92:f4:4f: cb:45:cd:a8:15:a8:87:e7:34:b9:60:b9:a8:9a:83: d9:bc:fb:b1:03:b8:56:92:b3:ff:22:ad:61:d8:d6: d1:6d:c2:64:2f:40:d5:34:86:c8:5f:32:20:81:52: 1d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:19:16:67:74:C0:49:D5:1D:C4:D6:93:B8:5E:B5:65:FD:B2:12:9E X509v3 Authority Key Identifier: keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e0:83:27:f8:64:11:0b:bd:f0:e9:b8:5c:90:2b:27:ac:0d: cf:3b:f3:88:99:59:70:e8:8a:33:e3:33:27:42:50:90:24:a5: 5b:ff:5f:bf:36:d3:40:94:ea:70:e2:c4:cc:05:0c:e5:db:c8: dc:6d:96:0e:33:bd:52:26:27:0a:4e:60:7c:a8:b1:64:08:86: e8:20:61:16:72:20:d2:35:2e:90:22:2b:31:ef:68:ec:84:77: f5:26:a8:55:b7:d2:f1:c2:41:1e:ee:fa:8d:86:b7:da:ec:b4: a4:f8:2e:31:46:6f:2d:bf:39:06:26:0a:08:15:2a:7a:dd:f8: d4:43:c2:83:23:d4:0e:aa:68:4a:a1:ab:9a:ec:04:1e:de:98: cf:27:4f:52:51:56:e1:a5:b8:de:70:5f:5e:38:18:2f:9a:92: bd:d4:08:26:cd:a4:ee:a1:b8:cc:25:7a:97:c9:f6:32:10:93: f1:9c:9e:32:a1:85:61:5d:b3:bd:88:24:76:fb:92:22:e1:f5: be:10:11:c3:d3:3b:e4:3e:bd:e6:7b:a1:f1:f5:e9:9a:90:29: fc:a5:cc:ee:00:a0:71:05:ab:86:f3:5e:ba:8e:3a:b1:2c:b4: 03:c9:44:d3:f8:86:31:97:3e:37:a7:0e:c0:89:1e:8a:81:83: 46:07:21:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFOHLp/QN296wVMV8IJOwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNmE5MjY3YjE4YjM2ZDgyODg5MGE4NjM4N2YzMTBiODRj MDRiNjMwHhcNMjYwMjAyMDIwMDU2WhcNMjYwMjAzMDIwMDU2WjAzMTEwLwYDVQQD Eyg0ZTE5MTY2Nzc0YzA0OWQ1MWRjNGQ2OTNiODVlYjU2NWZkYjIxMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu2prpWtHxwo+btYqVY1lrdGn9YW UD+Ib13F/uxG2bNBkjhrzNPLmY+YkRFisJOOZvRT+SQnx0HzwRIennjg5U5SxgJ3 G2gc9ATvrJujxKkd7pUcxbJm1Dly4MRXeteZ+iSE9E6ffwBrWEuyiNuTDUKNH41v FL+984btNN019UyAxDV5o75e9pzK166PdVc+4eL4F+q5efHkzX5F99mVDz7ZKos2 t1lo/K1uxjTw4LxoBeuYNOLWkvGeQlBBemSLRr4RgCdIem/kPuqYpIyS9E/LRc2o FaiH5zS5YLmomoPZvPuxA7hWkrP/Iq1h2NbRbcJkL0DVNIbIXzIggVIdMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4ZFmd0wEnVHcTWk7hetWX9shKeMB8GA1UdIwQY MBaAFN9qkmexizbYKIkKhjh/MQuEwEtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jNjBjMjAtYmI0Mi00NmJhLWIyMTUt OTlmN2JlY2E4NzViLzEvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jNjBjMjAtYmI0Mi00NmJhLWIyMTUtOTlmN2JlY2E4NzVi LzEvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeCDJ/hk EQu98Om4XJArJ6wNzzvziJlZcOiKM+MzJ0JQkCSlW/9fvzbTQJTqcOLEzAUM5dvI 3G2WDjO9UiYnCk5gfKixZAiG6CBhFnIg0jUukCIrMe9o7IR39SaoVbfS8cJBHu76 jYa32uy0pPguMUZvLb85BiYKCBUqet341EPCgyPUDqpoSqGrmuwEHt6YzydPUlFW 4aW43nBfXjgYL5qSvdQIJs2k7qG4zCV6l8n2MhCT8ZyeMqGFYV2zvYgkdvuSIuH1 vhARw9M75D695nuh8fXpmpAp/KXM7gCgcQWrhvNeuo46sSy0A8lE0/iGMZc+N6cO wIkeioGDRgchdw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:26 2026 by rpki-client