This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json) Hash identifier: Mz09C36H/XvjiI3TRtwITkIVT+Q5tdGTI1kEle7R5dQ= Subject key identifier: 3C:12:12:3A:7D:AA:A0:D8:EC:4E:6B:E0:C7:65:1A:EF:5C:23:48:10 Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43 Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343 Certificate serial: 019B329EF6498AB6473C363BB0D36DBDCE4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft Manifest number: 0A76 Signing time: Thu 18 Dec 2025 18:00:36 +0000 Manifest this update: Thu 18 Dec 2025 18:00:36 +0000 Manifest next update: Fri 19 Dec 2025 18:00:36 +0000 Files and hashes: 1: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: PBuZiBPeadQqJxrdvlRirbyMfFplw3/wTTf0RM9t3PA=) 2: zBqyJEl1ZTI7fL6gM2motFXrSRM.roa (hash: OkJW2+OnAMScP2GdhvLfFrfdk7h2e43pg36iU6eHej4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:9e:f6:49:8a:b6:47:3c:36:3b:b0:d3:6d:bd:ce:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343 Validity Not Before: Dec 18 18:00:36 2025 GMT Not After : Dec 19 18:00:36 2025 GMT Subject: CN=3c12123a7daaa0d8ec4e6be0c7651aef5c234810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:f3:f0:46:72:d6:0b:97:6c:b1:f9:1f:a3: f4:3f:b7:60:38:78:de:35:44:e8:6c:32:0b:45:dc: 39:78:48:8c:d8:eb:a6:4f:5b:f4:8c:d6:46:a2:d1: a7:31:d4:ef:dc:0c:04:57:7f:8a:2b:25:61:6c:09: 8b:3a:c5:dc:05:9e:29:34:e8:d7:d8:c9:c7:3a:cc: c9:98:20:75:2a:07:45:ac:0f:c8:da:56:38:06:0b: b5:eb:df:72:a3:54:38:15:83:f1:c3:8f:e8:df:5e: c7:ea:46:ce:cc:85:6c:a8:ce:26:15:e1:e0:0d:5e: ac:0c:42:6f:3d:1a:d9:3f:0b:9b:0a:49:28:44:3f: 6e:17:fd:61:ab:8a:2d:3d:af:8d:61:5c:67:e4:20: 5a:26:7e:f7:49:02:56:f6:a1:d1:46:0d:fc:f7:d8: 0f:16:8a:e2:5a:fb:6b:3d:e9:a4:06:69:f8:3a:15: b2:84:7b:8f:ab:bd:8d:05:f3:02:15:cc:6a:84:f3: 4f:99:df:81:63:ec:92:60:54:fa:1e:06:c7:3c:ed: 83:23:5c:f7:ed:96:a2:33:b4:95:9e:09:cf:b6:b4: 2e:c8:03:9d:58:f6:33:ed:39:e8:05:e6:63:24:ef: a3:d1:9e:77:14:a1:f2:99:56:98:09:81:0f:ac:6d: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:12:12:3A:7D:AA:A0:D8:EC:4E:6B:E0:C7:65:1A:EF:5C:23:48:10 X509v3 Authority Key Identifier: keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:aa:22:ad:d1:fb:65:97:2e:81:18:5b:7c:0d:a6:f3:b2:8b: a3:c8:5a:ca:08:b3:c5:aa:c3:6e:26:48:46:35:a4:30:b8:78: 0e:66:b0:89:20:69:cc:c6:ff:74:f8:2d:0e:a2:b3:81:e3:5e: 2c:7b:c0:f5:0a:e1:ce:cc:8d:99:51:6e:2b:b5:17:ad:0c:fa: fe:88:81:2e:1e:28:f5:cf:6d:df:64:d0:19:61:69:b9:37:d7: 5f:2a:52:c4:97:4e:a4:1a:86:41:13:bb:d4:69:2b:a5:dd:bb: e8:ec:82:e1:50:08:96:02:c4:64:d2:5b:8f:47:9b:1b:ec:b2: 83:3d:8f:d9:02:83:3a:f1:93:72:43:00:5e:f9:90:3c:b0:0c: 78:a0:0f:de:f0:c8:b4:43:99:44:d2:d5:18:a1:9a:02:ac:a0: 61:78:17:02:d9:b2:8c:4a:73:8a:f4:d9:be:ab:4d:f2:5a:a0: af:fa:24:4c:2a:3f:6c:75:60:82:f7:b5:93:ae:0c:8a:ff:99: 79:82:55:bc:03:fc:ef:7a:fa:8c:43:f4:0a:31:38:0a:ce:38: 05:ca:34:53:13:fd:37:61:28:34:eb:e4:56:06:30:94:9e:fd: bf:ed:2c:28:aa:a0:c9:00:1c:31:46:b5:d8:6f:d7:1f:c9:22: d8:8a:84:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsynvZJirZHPDY7sNNtvc5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MGRmNjVhMmZjYjliMTE3YTg1M2E2YjU2ODU0YjA3MThl YzMzNDMwHhcNMjUxMjE4MTgwMDM2WhcNMjUxMjE5MTgwMDM2WjAzMTEwLwYDVQQD EygzYzEyMTIzYTdkYWFhMGQ4ZWM0ZTZiZTBjNzY1MWFlZjVjMjM0ODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeDz8EZy1guXbLH5H6P0P7dgOHje NUTobDILRdw5eEiM2OumT1v0jNZGotGnMdTv3AwEV3+KKyVhbAmLOsXcBZ4pNOjX 2MnHOszJmCB1KgdFrA/I2lY4Bgu1699yo1Q4FYPxw4/o317H6kbOzIVsqM4mFeHg DV6sDEJvPRrZPwubCkkoRD9uF/1hq4otPa+NYVxn5CBaJn73SQJW9qHRRg3899gP ForiWvtrPemkBmn4OhWyhHuPq72NBfMCFcxqhPNPmd+BY+ySYFT6HgbHPO2DI1z3 7ZaiM7SVngnPtrQuyAOdWPYz7TnoBeZjJO+j0Z53FKHymVaYCYEPrG1CSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwSEjp9qqDY7E5r4MdlGu9cI0gQMB8GA1UdIwQY MBaAFLUN9lovy5sReoU6a1aFSwcY7DNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUt MWY2MDEwYTMwZWJiLzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUtMWY2MDEwYTMwZWJi LzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKoirdH7 ZZcugRhbfA2m87KLo8haygizxarDbiZIRjWkMLh4DmawiSBpzMb/dPgtDqKzgeNe LHvA9QrhzsyNmVFuK7UXrQz6/oiBLh4o9c9t32TQGWFpuTfXXypSxJdOpBqGQRO7 1Gkrpd276OyC4VAIlgLEZNJbj0ebG+yygz2P2QKDOvGTckMAXvmQPLAMeKAP3vDI tEOZRNLVGKGaAqygYXgXAtmyjEpzivTZvqtN8lqgr/okTCo/bHVggve1k64Miv+Z eYJVvAP873r6jEP0CjE4Cs44Bco0UxP9N2EoNOvkVgYwlJ79v+0sKKqgyQAcMUa1 2G/XH8ki2IqEjQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:17:06 2025 by rpki-client