This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft File: 1qVTYS2UsJGzZZshILyO-yYOfTA.mft (raw, json) Hash identifier: 6lpj+ZeHnmvcn0PpzVjsMRGsRWVa4d1bSQCj0BcGGJY= Subject key identifier: 32:F2:E5:B2:E5:8D:64:8A:81:8D:22:30:CB:90:EB:C1:E1:EB:F1:7B Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30 Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30 Certificate serial: 019AF163DF7B506C866B595A7CE5022C81D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft Manifest number: 32 Signing time: Sat 06 Dec 2025 02:00:45 +0000 Manifest this update: Sat 06 Dec 2025 02:00:45 +0000 Manifest next update: Sun 07 Dec 2025 02:00:45 +0000 Files and hashes: 1: 1qVTYS2UsJGzZZshILyO-yYOfTA.crl (hash: MJgT8jyFMUXJ2a6HX5XisR0u0AQQWhFkdsJamOVY9ys=) 2: eBymUAqZyrXsauAb8neOB7R0FqA.roa (hash: wowD/ZNy2Gh6RNTsjMg8v4b4d4GuZYTg//SMNlCdkxg=) 3: u4qmxEf6xnyqisVRIL8RtgUjb6U.roa (hash: IhkTYP7c/yQI3dq18PlMoNcZW/0iTHX4nmvnsV9qddU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:df:7b:50:6c:86:6b:59:5a:7c:e5:02:2c:81:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30 Validity Not Before: Dec 6 02:00:45 2025 GMT Not After : Dec 7 02:00:45 2025 GMT Subject: CN=32f2e5b2e58d648a818d2230cb90ebc1e1ebf17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:97:db:e4:cb:f5:40:2f:62:71:89:ed:4d: a7:0f:13:50:71:d8:b5:bd:24:bb:72:b5:3a:80:48: 94:c8:81:8d:44:58:91:6c:1c:f5:ae:4d:06:6c:8a: 65:80:49:5b:0e:38:4f:83:e7:a4:ba:c3:61:b9:18: ac:f2:19:2d:7f:4d:81:58:5c:a5:e7:10:75:bd:58: 05:02:7e:b5:ec:34:66:b8:75:d6:7c:dd:6d:83:35: 08:91:4a:03:76:30:60:db:92:c7:54:d6:0e:6b:af: 6a:3a:97:16:b9:e2:59:8c:93:ce:86:06:0f:84:92: a3:da:70:69:16:15:ec:0f:43:f0:19:f9:86:4d:56: 04:e3:7e:f5:dd:39:b9:96:45:97:73:f9:0f:8c:60: ab:e5:cb:eb:74:78:49:f3:c3:88:35:b8:c8:cd:65: 05:c6:aa:d7:10:fc:95:83:3d:98:d5:4c:74:8a:2b: f1:0e:4c:cc:4c:dc:09:21:05:1d:21:a5:8d:db:c5: f1:db:85:ce:db:44:ab:e2:54:6a:0d:7a:bf:24:84: c2:c2:48:d7:c9:32:80:51:33:46:0b:47:be:09:a8: c7:2b:b8:ab:f9:af:9f:97:71:b7:9d:9f:43:aa:09: 69:3a:03:ee:85:4c:8b:83:03:71:78:d7:d5:90:97: bb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F2:E5:B2:E5:8D:64:8A:81:8D:22:30:CB:90:EB:C1:E1:EB:F1:7B X509v3 Authority Key Identifier: keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ec:03:a9:15:8e:a1:cd:29:e8:1f:cb:00:10:52:ed:a2:b3: 1a:8a:d2:4e:40:11:4a:68:41:fd:83:5b:0d:6d:79:33:e3:bd: 72:41:17:14:67:b7:fb:70:2c:89:9f:fe:b7:0b:7b:10:56:2e: 91:32:3f:00:ef:ee:91:4e:5d:88:2c:18:52:a3:8b:40:6d:7c: 50:ab:86:c6:18:de:e4:fc:67:06:c4:a2:2d:9d:ce:0a:c4:5f: 45:1e:dd:4c:45:d4:94:7d:3f:db:56:a2:7d:6f:6b:86:8a:d9: d8:e2:e0:53:95:9b:c0:d1:f3:a3:ee:71:bd:c7:ce:fc:59:1a: fd:f8:3a:4c:df:f6:02:c4:66:12:ec:c0:91:5f:d1:d3:20:47: da:0a:c1:a3:c5:a1:9a:5e:aa:b5:9b:bc:dc:49:97:0c:60:c5: ca:12:34:08:69:21:40:41:0f:bb:a0:2e:26:b8:ea:f0:e9:12: 7e:3e:78:27:0a:53:c2:3b:05:14:fb:6b:13:f6:15:e6:ae:e0: 93:7d:d2:e5:13:97:6c:8a:5f:a9:94:77:f2:2f:43:d1:d2:98: 1d:b9:15:ec:f1:82:4e:5c:65:db:87:95:55:27:53:1e:a3:e7: 0e:b3:29:d9:bd:ff:22:ff:f2:45:6f:40:a5:3e:23:f6:ba:a1: e8:a0:52:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY997UGyGa1lafOUCLIHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YTU1MzYxMmQ5NGIwOTFiMzY1OWIyMTIwYmM4ZWZiMjYw ZTdkMzAwHhcNMjUxMjA2MDIwMDQ1WhcNMjUxMjA3MDIwMDQ1WjAzMTEwLwYDVQQD EygzMmYyZTViMmU1OGQ2NDhhODE4ZDIyMzBjYjkwZWJjMWUxZWJmMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAqX2+TL9UAvYnGJ7U2nDxNQcdi1 vSS7crU6gEiUyIGNRFiRbBz1rk0GbIplgElbDjhPg+ekusNhuRis8hktf02BWFyl 5xB1vVgFAn617DRmuHXWfN1tgzUIkUoDdjBg25LHVNYOa69qOpcWueJZjJPOhgYP hJKj2nBpFhXsD0PwGfmGTVYE43713Tm5lkWXc/kPjGCr5cvrdHhJ88OINbjIzWUF xqrXEPyVgz2Y1Ux0iivxDkzMTNwJIQUdIaWN28Xx24XO20Sr4lRqDXq/JITCwkjX yTKAUTNGC0e+CajHK7ir+a+fl3G3nZ9DqglpOgPuhUyLgwNxeNfVkJe7WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLy5bLljWSKgY0iMMuQ68Hh6/F7MB8GA1UdIwQY MBaAFNalU2EtlLCRs2WbISC8jvsmDn0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xODhmY2QtZDY4OS00MzZkLWE2ODQt ZTA1OTA2Y2I2OTQ4LzEvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xODhmY2QtZDY4OS00MzZkLWE2ODQtZTA1OTA2Y2I2OTQ4 LzEvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOwDqRWO oc0p6B/LABBS7aKzGorSTkARSmhB/YNbDW15M+O9ckEXFGe3+3AsiZ/+twt7EFYu kTI/AO/ukU5diCwYUqOLQG18UKuGxhje5PxnBsSiLZ3OCsRfRR7dTEXUlH0/21ai fW9rhorZ2OLgU5WbwNHzo+5xvcfO/Fka/fg6TN/2AsRmEuzAkV/R0yBH2grBo8Wh ml6qtZu83EmXDGDFyhI0CGkhQEEPu6AuJrjq8OkSfj54JwpTwjsFFPtrE/YV5q7g k33S5ROXbIpfqZR38i9D0dKYHbkV7PGCTlxl24eVVSdTHqPnDrMp2b3/Iv/yRW9A pT4j9rqh6KBSfw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:21 2025 by rpki-client