This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft File: J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft (raw, json) Hash identifier: 9l3kt9/cubcPmPU0Hdv9+j5lUnDNUHxYKUd16d6kZes= Subject key identifier: AC:40:FF:AD:22:AF:2D:24:DF:22:C3:B0:D7:4C:4E:E8:94:77:A2:AC Authority key identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4 Certificate issuer: /CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4 Certificate serial: 019AF42E7DE7C8698EE42E9E5A0273528DE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft Manifest number: 032D Signing time: Sat 06 Dec 2025 15:01:18 +0000 Manifest this update: Sat 06 Dec 2025 15:01:18 +0000 Manifest next update: Sun 07 Dec 2025 15:01:18 +0000 Files and hashes: 1: J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl (hash: x7bq1cQYn5ADsCtlG8jJHt/NGr0nM/SCJD/CA/6EmeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:7d:e7:c8:69:8e:e4:2e:9e:5a:02:73:52:8d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4 Validity Not Before: Dec 6 15:01:18 2025 GMT Not After : Dec 7 15:01:18 2025 GMT Subject: CN=ac40ffad22af2d24df22c3b0d74c4ee89477a2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fc:ac:c9:77:f1:c8:0f:e7:93:f4:63:23:60: b4:3a:bf:fe:a6:1a:6c:62:61:d3:1e:7c:91:bd:4c: de:96:f1:ea:2b:df:6f:9c:c1:62:08:a4:9b:22:e4: f2:16:a2:ce:5d:7e:f1:67:49:25:7c:eb:4f:39:08: 4b:53:f9:95:ea:c0:70:1a:50:d6:4b:76:87:7e:71: 8d:6a:87:ff:12:3d:cb:ff:c3:1a:e4:d6:a7:11:02: 6f:78:7d:92:a8:ea:1f:e1:06:41:be:66:7a:63:ec: 90:80:41:38:3d:07:8e:20:06:b5:bd:fd:e1:45:90: c4:41:4f:e2:fd:74:34:e5:7a:5c:36:51:f0:64:e6: c3:bd:75:9c:6e:97:13:4f:5a:f1:84:21:bb:62:f6: 1c:c5:79:8c:61:d1:ec:0a:6d:72:ac:1b:5c:08:44: 34:9e:b3:7d:90:43:ef:32:3f:1b:6d:54:50:dd:cf: 6d:fe:d6:ce:ac:3c:b6:db:96:a3:9b:90:3d:8c:25: b4:a3:a4:d0:22:c5:9c:67:af:dd:69:88:7b:96:d0: ec:26:bd:cd:5f:72:f0:3d:12:d2:eb:a6:95:43:91: c5:60:9c:4f:a2:1f:01:82:ff:4d:93:a5:8d:b8:b1: 38:b6:3d:df:b9:c0:f6:ff:2b:6f:69:6f:07:13:62: 8b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:40:FF:AD:22:AF:2D:24:DF:22:C3:B0:D7:4C:4E:E8:94:77:A2:AC X509v3 Authority Key Identifier: keyid:27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f3:31:2d:83:ee:a3:7d:b8:fc:d7:3a:47:c5:c8:60:d9:ad: cd:0c:b2:de:02:66:7d:80:c6:aa:79:8c:e0:a2:9c:a5:e2:17: c7:8f:18:48:03:65:52:b4:a0:01:67:53:7a:36:7b:6c:3f:35: 24:3f:65:53:7b:32:99:a4:0d:27:48:0e:89:8c:82:a5:fe:b4: 4f:0c:0f:ed:6d:12:cf:b8:7d:b9:db:6f:8e:53:c5:d1:ae:c8: ae:02:0a:3b:1a:2e:1f:fd:73:eb:85:a5:1d:c8:91:94:8e:04: 0f:41:c7:3b:49:3c:ce:1a:c8:2b:29:53:c5:49:df:6b:fe:6f: 8c:f1:08:83:0c:b3:3b:ec:f6:b8:4c:b6:cc:cc:12:ce:be:3e: 5c:ee:1b:42:11:9a:58:f6:d1:e1:df:38:3b:cb:28:4e:1f:f1: 15:c3:5e:73:fd:6e:56:d9:0f:98:8f:da:f9:05:c9:86:ce:b5: 9a:20:4f:88:09:15:ae:35:e4:6d:91:70:a7:cc:61:3b:6a:9e: 67:e2:d4:94:64:62:11:0f:0a:8c:18:9d:1e:fd:25:ac:a8:64: 6a:57:40:19:3d:e2:96:3b:36:19:5b:49:69:34:47:de:75:60: 8e:52:34:74:13:16:9a:55:3e:4a:bf:ab:51:38:13:67:ff:c9: c2:3e:22:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Ln3nyGmO5C6eWgJzUo3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3N2Q4MGYwZmUyYjQzZDA0NmJlYjNkNzliYWMxOTdhNzk4 OWMyZTQwHhcNMjUxMjA2MTUwMTE4WhcNMjUxMjA3MTUwMTE4WjAzMTEwLwYDVQQD EyhhYzQwZmZhZDIyYWYyZDI0ZGYyMmMzYjBkNzRjNGVlODk0NzdhMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vysyXfxyA/nk/RjI2C0Or/+phps YmHTHnyRvUzelvHqK99vnMFiCKSbIuTyFqLOXX7xZ0klfOtPOQhLU/mV6sBwGlDW S3aHfnGNaof/Ej3L/8Ma5NanEQJveH2SqOof4QZBvmZ6Y+yQgEE4PQeOIAa1vf3h RZDEQU/i/XQ05XpcNlHwZObDvXWcbpcTT1rxhCG7YvYcxXmMYdHsCm1yrBtcCEQ0 nrN9kEPvMj8bbVRQ3c9t/tbOrDy225ajm5A9jCW0o6TQIsWcZ6/daYh7ltDsJr3N X3LwPRLS66aVQ5HFYJxPoh8Bgv9Nk6WNuLE4tj3fucD2/ytvaW8HE2KLTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxA/60iry0k3yLDsNdMTuiUd6KsMB8GA1UdIwQY MBaAFCd9gPD+K0PQRr6z15usGXp5icLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjMyQThQNHJROUJHdnJQWG02d1plbm1Kd3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xOTA5NTAtZDQxYy00ZDI2LTg1YmMt NTE4NGI1NWYxY2ZmLzEvSjMyQThQNHJROUJHdnJQWG02d1plbm1Kd3VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xOTA5NTAtZDQxYy00ZDI2LTg1YmMtNTE4NGI1NWYxY2Zm LzEvSjMyQThQNHJROUJHdnJQWG02d1plbm1Kd3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPMxLYPu o324/Nc6R8XIYNmtzQyy3gJmfYDGqnmM4KKcpeIXx48YSANlUrSgAWdTejZ7bD81 JD9lU3symaQNJ0gOiYyCpf60TwwP7W0Sz7h9udtvjlPF0a7IrgIKOxouH/1z64Wl HciRlI4ED0HHO0k8zhrIKylTxUnfa/5vjPEIgwyzO+z2uEy2zMwSzr4+XO4bQhGa WPbR4d84O8soTh/xFcNec/1uVtkPmI/a+QXJhs61miBPiAkVrjXkbZFwp8xhO2qe Z+LUlGRiEQ8KjBidHv0lrKhkaldAGT3iljs2GVtJaTRH3nVgjlI0dBMWmlU+Sr+r UTgTZ//Jwj4imQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:17:02 2025 by rpki-client