This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json) Hash identifier: Zce6iIVeMdy4sZkcfRHtE7Gvqud1LdFQNMgPbdurjRs= Subject key identifier: ED:6D:1F:29:4D:AA:56:A3:C7:38:B7:1B:5B:DA:B7:13:2F:65:95:73 Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f Certificate serial: 019AF12EAB5F7DCF3E549711528E4060FC7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft Manifest number: 061A Signing time: Sat 06 Dec 2025 01:02:38 +0000 Manifest this update: Sat 06 Dec 2025 01:02:38 +0000 Manifest next update: Sun 07 Dec 2025 01:02:38 +0000 Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: hviwJqXWszjp0ZAWrKHup9Z753flaSdljXL8cf/Qmbk=) 2: NldJhq1MAVdUgbD6n6XKOd_rYuI.roa (hash: nicnFQBAIXmcU10eabjaRC66nw/nEzjS6x4xuq2azqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ab:5f:7d:cf:3e:54:97:11:52:8e:40:60:fc:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f Validity Not Before: Dec 6 01:02:38 2025 GMT Not After : Dec 7 01:02:38 2025 GMT Subject: CN=ed6d1f294daa56a3c738b71b5bdab7132f659573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:0c:ff:1a:6f:cd:44:19:6f:c6:2e:3b:c5: eb:2c:f3:48:cd:ed:50:8a:87:ad:38:4d:10:9e:ba: e7:63:95:3b:07:3c:ad:f5:25:81:82:8d:f7:7e:19: 69:bd:e0:11:42:3b:00:a7:aa:98:db:b3:69:61:14: a7:6a:2b:20:8c:ec:d8:2c:0d:a9:1a:d9:66:70:4b: a7:85:5d:71:9d:1e:85:18:3f:c4:98:b7:18:4e:96: da:b9:09:b6:1e:05:a3:a2:21:1e:06:ae:41:5d:99: 74:70:48:5d:30:c0:93:53:90:da:f1:83:4f:ff:16: e4:77:7e:54:2c:35:6f:fe:e5:67:40:58:aa:55:bd: c2:7b:65:9d:bc:e8:78:a2:d9:06:95:fd:ea:ab:83: 0d:8d:a0:d2:e4:6d:f8:7b:5c:04:14:47:c4:d4:01: ad:86:e7:1c:27:db:35:dd:34:d9:a5:25:57:bf:c4: 3f:e6:d4:cf:de:b3:c0:12:b1:66:c2:eb:47:1b:fb: f7:af:66:fd:b9:58:cc:54:bc:1f:41:f4:ad:59:c2: df:2c:dc:b1:73:fd:26:73:45:6b:74:89:9f:b3:58: bc:1f:df:b3:72:3e:9a:15:15:9a:55:e7:61:eb:0c: bf:f8:4d:e8:ce:68:7d:32:38:aa:8b:55:91:aa:6a: 78:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6D:1F:29:4D:AA:56:A3:C7:38:B7:1B:5B:DA:B7:13:2F:65:95:73 X509v3 Authority Key Identifier: keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d9:8b:54:cf:7c:79:e3:ae:16:fc:4b:65:61:b6:19:26:9e: 1e:bd:1b:89:30:6f:09:88:f5:e3:2f:b8:1a:2b:03:9f:6b:2c: 3d:9d:b5:67:a7:fb:43:dc:0c:3c:dd:c3:d0:22:e0:1d:c3:15: 54:82:60:1f:2b:26:b5:8d:71:8a:51:7c:d7:20:98:62:d1:2f: dc:73:ab:05:3f:64:d8:6c:e9:3c:de:24:77:9f:c1:84:d1:bc: 31:d3:9f:45:fc:42:57:8b:97:71:16:c4:a6:c7:e4:cd:59:48: 6b:7d:b4:9b:10:62:82:5c:28:b6:2a:a5:91:c7:6c:ba:29:07: 79:0b:4b:87:87:3a:e7:56:bf:59:a8:3c:cd:b4:e7:6e:9e:92: b0:a3:e9:94:36:fe:b5:a2:09:3e:5b:bf:4d:b8:19:ca:83:d1: 2f:c2:ab:ef:58:19:43:36:2a:89:21:a1:20:22:5f:a8:77:e9: 88:f9:43:66:8c:e3:fb:9b:a7:56:a4:86:22:83:ba:50:dd:6f: cb:3f:0f:10:de:38:0c:b4:e8:2f:27:12:f5:3a:16:10:3f:ab: fe:3e:e4:6e:27:ff:b7:16:9c:86:d8:67:27:68:ea:de:c4:48: 47:d0:82:fa:1e:fd:dd:a6:44:e3:36:fc:67:ff:1e:1e:fa:25: 75:e2:2e:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqtffc8+VJcRUo5AYPx/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNjQxMmM1ZGRmMTI4ZWM3MTRhZmFlYTQ4M2U4N2IxYmM3 NGQ0MWYwHhcNMjUxMjA2MDEwMjM4WhcNMjUxMjA3MDEwMjM4WjAzMTEwLwYDVQQD EyhlZDZkMWYyOTRkYWE1NmEzYzczOGI3MWI1YmRhYjcxMzJmNjU5NTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqoM/xpvzUQZb8YuO8XrLPNIze1Q ioetOE0QnrrnY5U7Bzyt9SWBgo33fhlpveARQjsAp6qY27NpYRSnaisgjOzYLA2p GtlmcEunhV1xnR6FGD/EmLcYTpbauQm2HgWjoiEeBq5BXZl0cEhdMMCTU5Da8YNP /xbkd35ULDVv/uVnQFiqVb3Ce2WdvOh4otkGlf3qq4MNjaDS5G34e1wEFEfE1AGt huccJ9s13TTZpSVXv8Q/5tTP3rPAErFmwutHG/v3r2b9uVjMVLwfQfStWcLfLNyx c/0mc0VrdImfs1i8H9+zcj6aFRWaVedh6wy/+E3ozmh9Mjiqi1WRqmp4RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1tHylNqlajxzi3G1vatxMvZZVzMB8GA1UdIwQY MBaAFN9kEsXd8SjscUr66kg+h7G8dNQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDct Zjk1MDQyMGI5ZTA2LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDctZjk1MDQyMGI5ZTA2 LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtmLVM98 eeOuFvxLZWG2GSaeHr0biTBvCYj14y+4GisDn2ssPZ21Z6f7Q9wMPN3D0CLgHcMV VIJgHysmtY1xilF81yCYYtEv3HOrBT9k2GzpPN4kd5/BhNG8MdOfRfxCV4uXcRbE psfkzVlIa320mxBiglwotiqlkcdsuikHeQtLh4c651a/Wag8zbTnbp6SsKPplDb+ taIJPlu/TbgZyoPRL8Kr71gZQzYqiSGhICJfqHfpiPlDZozj+5unVqSGIoO6UN1v yz8PEN44DLToLycS9ToWED+r/j7kbif/txachthnJ2jq3sRIR9CC+h793aZE4zb8 Z/8eHvoldeIuAg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:19:21 2025 by rpki-client