This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json) Hash identifier: lI0witvGrr4pL6vuz5juo+DsyBq0eyjdaUiV347jfe0= Subject key identifier: 20:6A:37:9E:7B:93:FA:00:54:64:BB:F6:D8:12:34:A6:BB:B2:4D:D0 Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c Certificate serial: 019AF31D7CF1574537A9BBD12C744C695C0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft Manifest number: 1530 Signing time: Sat 06 Dec 2025 10:03:07 +0000 Manifest this update: Sat 06 Dec 2025 10:03:07 +0000 Manifest next update: Sun 07 Dec 2025 10:03:07 +0000 Files and hashes: 1: K_MyGvHR4IdSBZBjdPl8MukbNFk.roa (hash: HrMHQD3uVG8sdR811mtsQpZxidNNmctDC5Taskmcc7A=) 2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: 6PHKxwtnh6y2lCPSs/Na+Xky2CBu4j9B1/7kdkCrNtQ=) 3: qt5f6XAHUjkOK9CEjEv3rd6845Q.roa (hash: JhK1mHuSEOx5aV2MrmFZp4Cs5i5KltcCemHPpXmD5pI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:7c:f1:57:45:37:a9:bb:d1:2c:74:4c:69:5c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c Validity Not Before: Dec 6 10:03:07 2025 GMT Not After : Dec 7 10:03:07 2025 GMT Subject: CN=206a379e7b93fa005464bbf6d81234a6bbb24dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:20:c8:b9:8b:1b:6c:ff:6f:5d:c5:fc:ec:93: 1f:9e:74:0c:32:1c:fc:dc:8b:e5:8a:18:8f:d8:7b: fd:84:4b:0c:73:18:64:4b:84:01:1d:9e:d2:ac:17: 7e:13:8e:d3:c9:77:9a:65:cc:de:71:88:c3:e4:e2: 43:59:52:d8:f9:d6:ab:88:90:18:f1:55:19:75:cc: 0b:a6:46:e4:bf:ff:12:04:bc:43:fe:56:ce:35:7c: 90:97:e9:e0:fd:47:a9:f7:b5:9b:d9:4b:0a:cd:60: fa:11:1e:49:2a:8a:30:fc:3a:c1:42:39:33:de:22: b3:4f:15:16:24:49:2d:86:12:ff:a1:44:f2:c8:5a: af:6c:d2:58:5d:d2:1e:ac:59:5d:ef:be:ad:a0:03: 97:71:6d:96:8d:3f:42:b0:e5:02:ff:ba:77:53:ba: a4:c2:27:1a:4f:ec:c9:53:8b:38:f1:75:8f:81:43: 29:49:52:d4:13:e1:b0:97:79:6e:74:47:a0:b8:66: 41:9c:5d:f4:ff:4b:91:e2:83:12:d3:bc:32:1f:f7: 8a:f0:d5:30:ca:16:4d:e2:12:4e:1d:ba:80:96:14: ac:0e:73:a6:8e:69:8f:52:4d:a5:8f:70:9b:c5:cb: 9a:6c:ff:70:37:ea:ad:1e:a6:30:c6:0f:5f:75:91: 36:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6A:37:9E:7B:93:FA:00:54:64:BB:F6:D8:12:34:A6:BB:B2:4D:D0 X509v3 Authority Key Identifier: keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ac:6d:d4:9f:e8:12:f6:f9:9a:11:07:2c:69:a9:03:7c:04: f4:aa:db:63:bf:20:4a:32:65:52:d3:10:df:5a:05:72:b7:4d: 11:9a:75:54:5c:8b:24:f6:77:3f:d4:81:8e:24:32:25:e6:df: 3d:18:b9:3e:c3:c5:19:0a:3f:05:b2:70:c4:d9:48:13:5b:9c: 24:da:e6:b8:21:a4:28:4e:c1:0a:b0:8f:a3:77:8d:f8:52:d9: 4e:57:23:ca:34:a5:73:50:b8:f4:66:cb:06:08:95:51:bb:19: 81:ca:e3:bb:13:93:c3:13:79:01:f9:7b:26:84:cc:9f:53:07: dc:ac:ac:e5:c0:1d:25:d7:82:8d:54:ce:0e:22:e3:0e:aa:ae: ed:c6:58:be:52:46:3f:28:57:63:5b:4f:a6:8a:82:54:1c:ad: f3:4e:33:eb:bf:98:b9:8b:5e:45:50:a3:a8:59:31:f4:3f:69: 0f:90:6c:6d:33:ce:c3:fb:4e:c0:5e:8b:ad:a9:68:48:e1:d4: cc:79:a9:8a:9e:51:df:93:b3:8f:a4:e1:7c:17:76:48:52:91: 4b:9a:1a:02:0f:09:d5:a4:f3:e7:46:4d:19:6b:27:f9:b4:c3: 41:bb:c4:da:01:2e:68:fa:80:28:89:1b:b1:db:53:d8:b3:81: 73:fd:59:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHXzxV0U3qbvRLHRMaVwNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmN2Q4ODUzOTNiMzJiNWVlZTNhMGJmNDMzOGUwZmFhZWYz Yzc1M2MwHhcNMjUxMjA2MTAwMzA3WhcNMjUxMjA3MTAwMzA3WjAzMTEwLwYDVQQD EygyMDZhMzc5ZTdiOTNmYTAwNTQ2NGJiZjZkODEyMzRhNmJiYjI0ZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyDIuYsbbP9vXcX87JMfnnQMMhz8 3IvlihiP2Hv9hEsMcxhkS4QBHZ7SrBd+E47TyXeaZczecYjD5OJDWVLY+dariJAY 8VUZdcwLpkbkv/8SBLxD/lbONXyQl+ng/Uep97Wb2UsKzWD6ER5JKoow/DrBQjkz 3iKzTxUWJEkthhL/oUTyyFqvbNJYXdIerFld776toAOXcW2WjT9CsOUC/7p3U7qk wicaT+zJU4s48XWPgUMpSVLUE+Gwl3ludEeguGZBnF30/0uR4oMS07wyH/eK8NUw yhZN4hJOHbqAlhSsDnOmjmmPUk2lj3CbxcuabP9wN+qtHqYwxg9fdZE2VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBqN557k/oAVGS79tgSNKa7sk3QMB8GA1UdIwQY MBaAFE99iFOTsyte7joL9DOOD6rvPHU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEt YjE4ZGFjMmQyNTliLzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEtYjE4ZGFjMmQyNTli LzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqxt1J/o Evb5mhEHLGmpA3wE9KrbY78gSjJlUtMQ31oFcrdNEZp1VFyLJPZ3P9SBjiQyJebf PRi5PsPFGQo/BbJwxNlIE1ucJNrmuCGkKE7BCrCPo3eN+FLZTlcjyjSlc1C49GbL BgiVUbsZgcrjuxOTwxN5Afl7JoTMn1MH3Kys5cAdJdeCjVTODiLjDqqu7cZYvlJG PyhXY1tPpoqCVByt804z67+YuYteRVCjqFkx9D9pD5BsbTPOw/tOwF6LraloSOHU zHmpip5R35Ozj6ThfBd2SFKRS5oaAg8J1aTz50ZNGWsn+bTDQbvE2gEuaPqAKIkb sdtT2LOBc/1Z/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:48 2025 by rpki-client