This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json) Hash identifier: LUYqCoJBvqN8S38QjkBWxNhlLdu0vto2nheoNOHyeQ0= Subject key identifier: BE:95:BC:53:05:DD:5C:31:C1:7C:F3:13:7D:FF:AD:0B:C9:6D:B5:E1 Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c Certificate serial: 019B27411C8E38FDCF07DE1435BD33F3D987 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft Manifest number: 154B Signing time: Tue 16 Dec 2025 13:02:16 +0000 Manifest this update: Tue 16 Dec 2025 13:02:16 +0000 Manifest next update: Wed 17 Dec 2025 13:02:16 +0000 Files and hashes: 1: K_MyGvHR4IdSBZBjdPl8MukbNFk.roa (hash: HrMHQD3uVG8sdR811mtsQpZxidNNmctDC5Taskmcc7A=) 2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: Nt/8Ri54UMs9LR/ZE+stwKrlHC+My8W5T0JUO/EM/8M=) 3: qt5f6XAHUjkOK9CEjEv3rd6845Q.roa (hash: JhK1mHuSEOx5aV2MrmFZp4Cs5i5KltcCemHPpXmD5pI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:1c:8e:38:fd:cf:07:de:14:35:bd:33:f3:d9:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c Validity Not Before: Dec 16 13:02:16 2025 GMT Not After : Dec 17 13:02:16 2025 GMT Subject: CN=be95bc5305dd5c31c17cf3137dffad0bc96db5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d1:7f:92:3f:b6:82:6c:9c:46:c3:40:6e:75: c6:81:f2:3b:a1:4b:31:90:b6:f0:fc:ef:7f:4e:87: c6:92:9a:5e:0a:9a:b9:98:2b:bb:ea:05:56:3e:b4: a1:89:12:65:58:4c:b2:71:f2:5c:f1:86:f7:78:6d: 25:70:18:d9:b1:c5:2b:79:b3:10:0d:c2:c7:0d:ad: 9f:4a:fd:50:b6:10:c6:2c:c1:19:b5:01:8e:83:4e: d7:83:2d:24:03:89:6e:b0:90:ea:64:93:bb:9f:65: 40:6a:09:33:53:83:ef:49:69:e3:63:03:59:20:e0: 16:90:2d:83:ad:22:18:f5:ae:c9:75:2f:f8:4f:6c: f0:22:6c:50:2a:0d:a3:20:78:d0:3c:6e:22:95:bc: bc:45:f3:f6:12:09:06:c1:98:8f:56:f3:88:18:4d: 3a:95:d8:bc:73:76:68:b7:4e:ff:fb:c0:82:0b:3c: b9:d1:20:c1:f3:22:c7:f2:b6:f4:b4:fa:e8:f1:ef: 28:a3:41:10:db:2a:ed:20:43:09:ba:7f:c5:9c:cf: e2:49:17:3e:f5:fd:77:8b:7c:2f:08:70:c6:11:df: 57:36:20:c0:71:00:02:ba:a8:66:85:3e:25:8c:38: 66:6d:f2:62:ec:bf:8d:17:d0:e5:70:06:3f:a9:45: f2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:95:BC:53:05:DD:5C:31:C1:7C:F3:13:7D:FF:AD:0B:C9:6D:B5:E1 X509v3 Authority Key Identifier: keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:69:37:2e:41:d5:a8:2c:bc:23:00:6b:20:df:c4:05:30:eb: 04:de:47:18:2f:71:26:84:80:27:35:97:15:0c:3d:a3:ad:b3: 30:ea:02:74:08:0f:95:5d:08:19:f8:53:59:6e:c1:5f:43:bd: 09:c0:b9:2f:db:3d:23:aa:61:14:c7:f7:54:e0:5e:99:ae:8b: fb:d1:d9:10:b5:ad:4e:17:9c:a1:ee:a2:84:df:97:b1:4e:e2: aa:df:3c:dc:f5:92:e1:69:b8:aa:7d:06:7d:10:f0:b7:f2:91: 4f:90:5d:67:01:ee:fc:ea:8b:ce:fa:df:7a:3f:e7:95:56:f1: 60:25:d2:f6:73:84:18:27:ee:59:a7:0d:c9:21:ad:32:32:2e: 75:f5:9c:ba:87:f4:89:3f:6a:62:6b:07:9b:c8:0a:a3:9c:2d: 0f:33:da:9e:3e:45:52:7f:54:f7:7f:4b:d1:8e:86:98:9f:f2: 0d:69:f0:b7:7e:af:28:09:93:82:79:68:df:e7:cc:2b:30:e7: fe:b8:0b:c9:66:0c:0e:53:3f:fe:9f:dd:00:28:7f:b0:13:20: 1f:64:cf:8f:bc:32:db:31:0f:df:d1:34:7a:ba:cf:f4:52:8b: 98:e6:46:b6:6b:40:9e:4c:e3:a6:9f:64:03:9b:90:b2:6e:0d: 5c:d6:60:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQRyOOP3PB94UNb0z89mHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmN2Q4ODUzOTNiMzJiNWVlZTNhMGJmNDMzOGUwZmFhZWYz Yzc1M2MwHhcNMjUxMjE2MTMwMjE2WhcNMjUxMjE3MTMwMjE2WjAzMTEwLwYDVQQD EyhiZTk1YmM1MzA1ZGQ1YzMxYzE3Y2YzMTM3ZGZmYWQwYmM5NmRiNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndF/kj+2gmycRsNAbnXGgfI7oUsx kLbw/O9/TofGkppeCpq5mCu76gVWPrShiRJlWEyycfJc8Yb3eG0lcBjZscUrebMQ DcLHDa2fSv1QthDGLMEZtQGOg07Xgy0kA4lusJDqZJO7n2VAagkzU4PvSWnjYwNZ IOAWkC2DrSIY9a7JdS/4T2zwImxQKg2jIHjQPG4ilby8RfP2EgkGwZiPVvOIGE06 ldi8c3Zot07/+8CCCzy50SDB8yLH8rb0tPro8e8oo0EQ2yrtIEMJun/FnM/iSRc+ 9f13i3wvCHDGEd9XNiDAcQACuqhmhT4ljDhmbfJi7L+NF9DlcAY/qUXyywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6VvFMF3VwxwXzzE33/rQvJbbXhMB8GA1UdIwQY MBaAFE99iFOTsyte7joL9DOOD6rvPHU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEt YjE4ZGFjMmQyNTliLzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEtYjE4ZGFjMmQyNTli LzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGk3LkHV qCy8IwBrIN/EBTDrBN5HGC9xJoSAJzWXFQw9o62zMOoCdAgPlV0IGfhTWW7BX0O9 CcC5L9s9I6phFMf3VOBema6L+9HZELWtThecoe6ihN+XsU7iqt883PWS4Wm4qn0G fRDwt/KRT5BdZwHu/OqLzvrfej/nlVbxYCXS9nOEGCfuWacNySGtMjIudfWcuof0 iT9qYmsHm8gKo5wtDzPanj5FUn9U939L0Y6GmJ/yDWnwt36vKAmTgnlo3+fMKzDn /rgLyWYMDlM//p/dACh/sBMgH2TPj7wy2zEP39E0errP9FKLmOZGtmtAnkzjpp9k A5uQsm4NXNZgvQ== -----END CERTIFICATE-----Generated at Tue Dec 16 19:29:52 2025 by rpki-client