This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json) Hash identifier: 4Z0lKdcdWXz6jDjMxRvI0v6nqo2bsbAWinczneVVKSg= Subject key identifier: 9E:B3:53:E9:B7:90:AD:BD:BD:F3:DC:F1:56:68:13:9B:39:C9:73:3B Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63 Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63 Certificate serial: 019B326864C4F16DFADAFFB710D2FDDEA1CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft Manifest number: 0F1C Signing time: Thu 18 Dec 2025 17:01:00 +0000 Manifest this update: Thu 18 Dec 2025 17:01:00 +0000 Manifest next update: Fri 19 Dec 2025 17:01:00 +0000 Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: bI5JAbaGD7VKlt7OEt0csi4y534cmSQ+fRY5CxOpI8g=) 2: eZW6Hra3VKDaHpIw4oWeb7v-Ing.asa (hash: prXq7zIRsAV9jtqOkMC/JnDXSMdKIhkp+Aj/pefkjkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:64:c4:f1:6d:fa:da:ff:b7:10:d2:fd:de:a1:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63 Validity Not Before: Dec 18 17:01:00 2025 GMT Not After : Dec 19 17:01:00 2025 GMT Subject: CN=9eb353e9b790adbdbdf3dcf15668139b39c9733b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:21:eb:b3:f2:f0:f4:5b:2e:8c:98:5c:c0: 81:f6:77:d3:95:a8:2f:6d:99:df:16:63:66:02:94: d5:42:de:cd:42:ab:b6:65:b0:6f:25:72:f8:b4:34: 23:03:4c:33:9d:2d:af:99:7d:0d:6c:81:57:b5:4f: 39:a2:ad:13:65:67:93:fe:74:bf:f9:37:7a:2a:77: b1:35:bb:51:17:20:b9:74:9d:4a:f2:94:e2:0b:6b: e3:92:e3:fa:59:6d:e3:eb:5b:44:ce:58:de:c3:2d: ee:28:1a:d2:25:0e:f9:81:de:63:97:10:03:31:71: b3:bc:27:82:d8:86:81:6b:93:b7:ba:9d:4e:d0:78: f9:45:79:60:d1:a5:ab:3a:4c:fe:6e:ef:e6:06:08: dd:6b:41:ba:a3:c9:de:d0:ae:9e:78:a0:76:0b:d1: fc:0c:db:7a:f4:e7:f5:43:a6:ef:4e:65:3b:6b:10: f7:5e:4e:95:83:73:d1:c6:ee:fd:7e:4e:f4:0e:6c: 91:df:e1:3d:24:e1:4b:fd:d8:3b:47:ae:eb:b3:02: 24:50:ed:6f:6f:2b:42:9e:6e:14:c2:9b:16:7d:90: 2c:ac:5a:68:0e:3e:13:ce:af:a0:b3:d8:ea:36:87: a0:82:67:b0:5b:83:9a:e0:54:ae:e3:a4:a2:5c:a9: 99:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B3:53:E9:B7:90:AD:BD:BD:F3:DC:F1:56:68:13:9B:39:C9:73:3B X509v3 Authority Key Identifier: keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:76:d9:3c:4a:d7:cc:d1:a4:9d:29:05:11:e1:fe:1f:e4:aa: 9c:a9:d8:73:3f:a6:d2:6a:6f:46:12:3f:c3:e1:a9:bc:8a:91: 94:9b:6e:d3:21:03:bf:ec:46:6b:59:3d:38:a1:1d:ab:87:f8: 82:d8:1c:5c:17:16:d5:ef:6c:5c:12:5d:5e:98:5b:8c:7f:cb: 05:ee:d4:88:10:95:39:a2:0b:fb:b9:68:37:53:9a:d4:90:b2: eb:b4:30:08:a4:92:ea:05:a2:e4:95:a9:44:47:f3:76:4f:a2: de:d3:3a:73:fb:2d:52:89:ec:e1:42:de:78:61:c7:a6:63:d1: bf:30:05:75:ff:fd:cf:c9:de:89:99:88:3b:eb:f5:72:e3:07: 3f:33:86:d2:28:5f:20:69:a8:f4:e9:fd:cc:0a:a3:87:27:72: 03:5a:d1:c5:c9:47:b5:83:1e:38:c4:3e:17:a5:f4:19:1a:64: b6:08:ec:9a:0f:d8:b1:cf:b7:3f:2d:8e:63:58:b2:d7:b0:45: 50:6e:9f:91:39:c3:34:da:1d:11:4f:69:b5:c4:52:05:c2:9e: 6a:35:bc:59:e1:2a:eb:dc:8b:e9:18:fb:55:8e:df:28:3e:a8: fb:f4:72:fd:c5:73:b5:d3:f7:87:03:ac:47:20:b4:f5:ae:68: e8:69:e8:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaGTE8W362v+3ENL93qHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNmE5MjY3YjE4YjM2ZDgyODg5MGE4NjM4N2YzMTBiODRj MDRiNjMwHhcNMjUxMjE4MTcwMTAwWhcNMjUxMjE5MTcwMTAwWjAzMTEwLwYDVQQD Eyg5ZWIzNTNlOWI3OTBhZGJkYmRmM2RjZjE1NjY4MTM5YjM5Yzk3MzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXQh67Py8PRbLoyYXMCB9nfTlagv bZnfFmNmApTVQt7NQqu2ZbBvJXL4tDQjA0wznS2vmX0NbIFXtU85oq0TZWeT/nS/ +Td6KnexNbtRFyC5dJ1K8pTiC2vjkuP6WW3j61tEzljewy3uKBrSJQ75gd5jlxAD MXGzvCeC2IaBa5O3up1O0Hj5RXlg0aWrOkz+bu/mBgjda0G6o8ne0K6eeKB2C9H8 DNt69Of1Q6bvTmU7axD3Xk6Vg3PRxu79fk70DmyR3+E9JOFL/dg7R67rswIkUO1v bytCnm4UwpsWfZAsrFpoDj4Tzq+gs9jqNoeggmewW4Oa4FSu46SiXKmZwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6zU+m3kK29vfPc8VZoE5s5yXM7MB8GA1UdIwQY MBaAFN9qkmexizbYKIkKhjh/MQuEwEtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jNjBjMjAtYmI0Mi00NmJhLWIyMTUt OTlmN2JlY2E4NzViLzEvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jNjBjMjAtYmI0Mi00NmJhLWIyMTUtOTlmN2JlY2E4NzVi LzEvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInbZPErX zNGknSkFEeH+H+SqnKnYcz+m0mpvRhI/w+GpvIqRlJtu0yEDv+xGa1k9OKEdq4f4 gtgcXBcW1e9sXBJdXphbjH/LBe7UiBCVOaIL+7loN1Oa1JCy67QwCKSS6gWi5JWp REfzdk+i3tM6c/stUons4ULeeGHHpmPRvzAFdf/9z8neiZmIO+v1cuMHPzOG0ihf IGmo9On9zAqjhydyA1rRxclHtYMeOMQ+F6X0GRpktgjsmg/Ysc+3Py2OY1iy17BF UG6fkTnDNNodEU9ptcRSBcKeajW8WeEq69yL6Rj7VY7fKD6o+/Ry/cVztdP3hwOs RyC09a5o6Gnodw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:01:03 2025 by rpki-client