This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json) Hash identifier: sVn9xRzOutdTDBnc/A5IpxOGNuwsRp0YjbfpDZHMBxA= Subject key identifier: 9E:AE:DB:2A:01:3D:AF:D0:78:A2:5D:57:CC:18:F0:A7:63:E2:43:84 Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d Certificate serial: 019AF389F694F14ABA538604089D669408C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft Manifest number: 0E12 Signing time: Sat 06 Dec 2025 12:01:36 +0000 Manifest this update: Sat 06 Dec 2025 12:01:36 +0000 Manifest next update: Sun 07 Dec 2025 12:01:36 +0000 Files and hashes: 1: 8LrCpJVZw00cB6v7Jxmu5danMVM.roa (hash: LkYRg4fRX+WYVMtQ+HSrUSifp72hGXmKbB4Mx1yLYEo=) 2: COurHBmKxKzA2XaP35V0TKv22j8.roa (hash: mOJRDgA4eGDtP6pug7iu4FVIpAjMDZJckmCB6cKfpOc=) 3: EEy6gJAmhpmEpToeahyxI211nao.roa (hash: bt34cvtSMhR5oe2u5pXbiTmmRNH/yvwh2lEhx2KoETw=) 4: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: fl23NPzGKYiWOXWWeQfwmzJn4+UFhOFl55euhCMpc+0=) 5: is_2p9c72i9SqdHOdQECHoEj2KI.roa (hash: 68Pbkuya3pT0PDgvbPhuXTcECYTodGaR9wl/fj5QS8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f6:94:f1:4a:ba:53:86:04:08:9d:66:94:08:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d Validity Not Before: Dec 6 12:01:36 2025 GMT Not After : Dec 7 12:01:36 2025 GMT Subject: CN=9eaedb2a013dafd078a25d57cc18f0a763e24384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:91:d0:4c:cc:74:4d:0c:c5:ea:d1:54:cb: f0:cb:21:1a:93:c7:45:2d:1b:09:91:26:9b:64:04: 6d:e3:f0:d0:ec:ec:17:70:04:19:58:23:2c:e6:38: 6e:e9:8b:42:52:3e:66:6b:58:d1:16:c8:ad:7c:4c: 46:bc:37:a2:19:48:7c:e9:a8:30:a6:4c:fa:ad:c0: 39:0a:d4:d7:83:d5:96:94:fd:1a:19:98:63:a1:41: f2:4f:06:fa:d0:67:d7:ab:2d:4d:69:15:7e:36:c5: 8b:91:a3:6a:dd:c5:71:22:81:f5:ef:d8:b9:2a:ac: 9a:e6:d1:b2:28:dd:e4:4a:a6:bd:ee:ce:c4:bc:74: a8:28:4f:ca:89:56:22:e7:ec:17:58:b0:5e:f3:ac: b0:c8:79:e0:66:ae:36:c0:91:ec:53:6b:5e:ec:6e: e6:a9:2f:18:4b:bd:aa:55:8c:5f:dc:c5:46:de:b4: 4c:10:01:a9:90:cf:84:d9:ef:a1:5d:3d:8b:e9:4e: 83:dd:ab:8f:cf:55:10:6e:e4:2c:69:2c:fd:eb:65: 49:cc:bf:6c:76:15:f3:0b:b5:44:57:10:a5:cb:6a: 2f:63:df:c1:59:33:1e:29:76:b7:d7:b4:b5:43:13: 3a:53:8e:c1:98:bd:5b:2f:b6:f0:63:1a:48:cc:29: 44:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AE:DB:2A:01:3D:AF:D0:78:A2:5D:57:CC:18:F0:A7:63:E2:43:84 X509v3 Authority Key Identifier: keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:42:e2:71:05:d3:5e:47:82:6f:ec:19:ff:ad:6d:d1:25:ad: 33:e9:21:56:11:ce:47:3e:c9:fd:61:fe:af:ca:fa:2b:ed:f9: 48:99:61:36:d3:62:05:65:83:e4:62:fd:e9:05:f8:96:b2:44: fa:f5:2f:1b:48:f6:ef:43:28:8b:e7:10:0a:fd:1d:52:dc:cb: 06:2f:71:dd:64:00:b3:31:fe:1f:d0:4c:e4:d0:20:14:34:1a: ff:e7:24:1c:63:6c:85:3c:d7:b5:d8:8d:9b:0b:92:34:98:7e: 3f:33:a3:63:ee:0c:7a:b4:90:9f:6a:d7:d8:8b:63:2f:6d:0f: da:76:f1:12:ea:c3:ec:8e:95:5a:a7:d7:e2:42:f8:d6:0c:98: b7:67:6f:c2:92:ce:28:16:bf:da:cb:a6:b0:c6:61:fb:46:b9: cd:54:44:e2:33:b0:62:e5:6d:0a:cf:8f:54:ab:f9:4a:b8:ad: c9:19:a8:80:30:4c:38:f4:60:b7:9d:0c:6e:84:3d:76:f0:db: f1:bb:6c:9b:a9:f1:47:d2:44:97:2a:1e:cd:cd:c2:df:77:fe: 90:22:df:23:4c:ac:15:52:98:21:34:24:2c:2c:c1:51:d3:62: 17:c4:2c:da:55:ab:34:4e:a0:37:73:11:30:e2:85:f9:d0:3d: 17:d5:33:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifaU8Uq6U4YECJ1mlAjCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmN2Q4YTc5YmFkNGY5ODNkMGM0OTg5NWFmNTBlYThhMDNl YmM3MGQwHhcNMjUxMjA2MTIwMTM2WhcNMjUxMjA3MTIwMTM2WjAzMTEwLwYDVQQD Eyg5ZWFlZGIyYTAxM2RhZmQwNzhhMjVkNTdjYzE4ZjBhNzYzZTI0Mzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEqR0EzMdE0MxerRVMvwyyEak8dF LRsJkSabZARt4/DQ7OwXcAQZWCMs5jhu6YtCUj5ma1jRFsitfExGvDeiGUh86agw pkz6rcA5CtTXg9WWlP0aGZhjoUHyTwb60GfXqy1NaRV+NsWLkaNq3cVxIoH179i5 Kqya5tGyKN3kSqa97s7EvHSoKE/KiVYi5+wXWLBe86ywyHngZq42wJHsU2te7G7m qS8YS72qVYxf3MVG3rRMEAGpkM+E2e+hXT2L6U6D3auPz1UQbuQsaSz962VJzL9s dhXzC7VEVxCly2ovY9/BWTMeKXa317S1QxM6U47BmL1bL7bwYxpIzClEdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6u2yoBPa/QeKJdV8wY8Kdj4kOEMB8GA1UdIwQY MBaAFP99inm61PmD0MSYla9Q6ooD68cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2Mt MDg3M2UzOTk0ZDBlLzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2MtMDg3M2UzOTk0ZDBl LzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmULicQXT XkeCb+wZ/61t0SWtM+khVhHORz7J/WH+r8r6K+35SJlhNtNiBWWD5GL96QX4lrJE +vUvG0j270Moi+cQCv0dUtzLBi9x3WQAszH+H9BM5NAgFDQa/+ckHGNshTzXtdiN mwuSNJh+PzOjY+4MerSQn2rX2ItjL20P2nbxEurD7I6VWqfX4kL41gyYt2dvwpLO KBa/2sumsMZh+0a5zVRE4jOwYuVtCs+PVKv5SrityRmogDBMOPRgt50MboQ9dvDb 8btsm6nxR9JElyoezc3C33f+kCLfI0ysFVKYITQkLCzBUdNiF8Qs2lWrNE6gN3MR MOKF+dA9F9UzDw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:23:50 2025 by rpki-client