This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft File: 32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json) Hash identifier: OQXZrejvX/JgiWnnO851cSXLgFGYS0hBGWPU9eJhtbo= Subject key identifier: 75:34:70:B9:2B:B7:06:61:02:8C:FA:89:B4:AE:FC:8C:81:C0:6E:58 Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f Certificate serial: 019BF808201C0562793AAC32C5C3C17DFE77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft Manifest number: 06A3 Signing time: Mon 26 Jan 2026 02:00:40 +0000 Manifest this update: Mon 26 Jan 2026 02:00:40 +0000 Manifest next update: Tue 27 Jan 2026 02:00:40 +0000 Files and hashes: 1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: 1UrfjHG6nok3LD+KeWTrECSIVep3Gws6qzMUSilQFAs=) 2: qysmFDTPSaS-7X_DP__MLr3spSg.roa (hash: sizByteXB/C1D/4JpTMTXyCiROR26c285zoIFTRvIDQ=) 3: zDlZfltCh1B48XocFSVPymegLck.roa (hash: ok9T1tW3HpCXbkwunUBGjXMhZ1tSRV4NJVARGCb9Jdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:20:1c:05:62:79:3a:ac:32:c5:c3:c1:7d:fe:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f Validity Not Before: Jan 26 02:00:40 2026 GMT Not After : Jan 27 02:00:40 2026 GMT Subject: CN=753470b92bb70661028cfa89b4aefc8c81c06e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:72:60:dc:08:d6:ff:c0:47:f3:bd:5c:fe:38: 72:eb:19:a1:c6:66:0c:2c:3f:88:e6:02:73:49:c7: 1f:8b:55:62:74:25:2e:d4:9f:da:7c:5f:1d:fd:b9: 56:05:ea:70:09:fb:e4:fb:ab:77:67:34:04:5c:91: 39:ed:d0:b3:c9:eb:e0:3f:b5:b2:f8:c6:67:eb:33: 1f:17:c4:8a:2e:87:3a:07:1d:14:57:a9:f8:b7:71: 31:fd:ad:3f:27:a7:b0:da:fc:b3:01:13:bb:c1:98: 40:2b:a6:9b:c5:4c:3e:33:23:b4:b5:96:bd:50:9d: 82:f1:7b:e3:90:26:46:07:0a:7d:0a:f6:5b:c8:56: e1:5f:2f:0a:bb:d8:23:3d:bc:73:0d:33:8d:f7:19: 4f:91:74:27:9f:1f:e1:70:9d:a0:fc:1b:66:a2:48: af:53:07:a3:e0:fe:be:a5:bb:1f:b6:ad:81:1f:f4: b1:d7:96:9a:57:58:4c:7c:a7:65:e8:af:36:af:03: 8b:cd:db:a5:6a:72:95:c4:2b:61:a8:97:9f:bc:ae: 31:96:8a:b6:1f:9e:8b:b4:b4:86:5e:c1:a5:02:a8: fa:06:41:0f:c3:ca:db:23:86:fd:0d:93:26:ae:2b: 11:de:5f:97:2e:58:6e:66:2a:65:ae:53:20:e0:4d: 52:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:34:70:B9:2B:B7:06:61:02:8C:FA:89:B4:AE:FC:8C:81:C0:6E:58 X509v3 Authority Key Identifier: keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6f:21:20:59:bc:69:b8:02:01:52:5b:db:27:b2:4a:b0:e9: 9a:97:a9:b8:de:11:a9:11:34:74:cf:fa:05:f4:0f:2e:d4:d0: 85:59:43:82:b7:01:40:30:10:36:42:1a:e8:94:00:2a:b8:90: 8d:46:19:50:ab:f0:00:a8:2b:a2:06:22:8e:9b:9a:c7:9e:da: 88:25:34:6e:32:c4:c6:4f:2a:68:f4:91:a0:cb:a6:6d:25:f3: 64:20:84:61:9c:8a:cb:7e:86:2d:4c:f1:83:ae:fe:ec:48:9c: 6a:f6:c2:bc:c1:95:a8:2f:e8:12:c0:a4:49:c5:af:7d:43:82: 10:dc:64:30:09:51:eb:0b:08:08:52:3c:ff:1a:c4:23:3f:78: 2b:8e:7d:d8:eb:81:61:8f:ed:e1:75:85:c6:50:0b:75:e1:0b: 65:87:04:12:c9:a3:e4:bb:3c:c1:f5:cf:cc:ce:9b:25:b2:41: ca:94:c5:d3:41:8f:c2:d0:e9:f8:b0:af:e5:48:e6:ca:83:47: 63:2f:4b:4e:a8:ef:28:f6:87:23:94:7d:bc:7f:99:50:36:03: 53:af:87:17:af:40:fa:1e:0c:bb:f9:a6:f5:b7:6c:2a:31:64: 52:53:91:61:8c:1a:bb:8e:44:ed:63:4c:4c:07:e8:5e:29:1d: 1e:4a:fe:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CCAcBWJ5OqwyxcPBff53MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNjQxMmM1ZGRmMTI4ZWM3MTRhZmFlYTQ4M2U4N2IxYmM3 NGQ0MWYwHhcNMjYwMTI2MDIwMDQwWhcNMjYwMTI3MDIwMDQwWjAzMTEwLwYDVQQD Eyg3NTM0NzBiOTJiYjcwNjYxMDI4Y2ZhODliNGFlZmM4YzgxYzA2ZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHJg3AjW/8BH871c/jhy6xmhxmYM LD+I5gJzSccfi1VidCUu1J/afF8d/blWBepwCfvk+6t3ZzQEXJE57dCzyevgP7Wy +MZn6zMfF8SKLoc6Bx0UV6n4t3Ex/a0/J6ew2vyzARO7wZhAK6abxUw+MyO0tZa9 UJ2C8XvjkCZGBwp9CvZbyFbhXy8Ku9gjPbxzDTON9xlPkXQnnx/hcJ2g/Btmokiv Uwej4P6+pbsftq2BH/Sx15aaV1hMfKdl6K82rwOLzdulanKVxCthqJefvK4xloq2 H56LtLSGXsGlAqj6BkEPw8rbI4b9DZMmrisR3l+XLlhuZiplrlMg4E1SCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHU0cLkrtwZhAoz6ibSu/IyBwG5YMB8GA1UdIwQY MBaAFN9kEsXd8SjscUr66kg+h7G8dNQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDct Zjk1MDQyMGI5ZTA2LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDctZjk1MDQyMGI5ZTA2 LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAW8hIFm8 abgCAVJb2yeySrDpmpepuN4RqRE0dM/6BfQPLtTQhVlDgrcBQDAQNkIa6JQAKriQ jUYZUKvwAKgrogYijpuax57aiCU0bjLExk8qaPSRoMumbSXzZCCEYZyKy36GLUzx g67+7EicavbCvMGVqC/oEsCkScWvfUOCENxkMAlR6wsICFI8/xrEIz94K4592OuB YY/t4XWFxlALdeELZYcEEsmj5Ls8wfXPzM6bJbJBypTF00GPwtDp+LCv5UjmyoNH Yy9LTqjvKPaHI5R9vH+ZUDYDU6+HF69A+h4Mu/mm9bdsKjFkUlORYYwau45E7WNM TAfoXikdHkr+2g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:34 2026 by rpki-client