This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft File: 32K78V3jRKzbX3gARQ8sgteX15g.mft (raw, json) Hash identifier: dRXupwmHTSeM3CdOp5WdNXvTRM0qRlBopphF2H6L2Es= Subject key identifier: 44:DB:0E:8A:F5:6B:4C:00:9B:86:90:7D:77:AF:6C:B0:E7:B0:DB:15 Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98 Certificate issuer: /CN=df62bbf15de344acdb5f7800450f2c82d797d798 Certificate serial: 019AF5E64B2ED41E49B371A62BB76B668093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft Manifest number: 0DF6 Signing time: Sat 06 Dec 2025 23:01:41 +0000 Manifest this update: Sat 06 Dec 2025 23:01:41 +0000 Manifest next update: Sun 07 Dec 2025 23:01:41 +0000 Files and hashes: 1: 32K78V3jRKzbX3gARQ8sgteX15g.crl (hash: /0ZzRJMfG+q4R5eOnJHY3/b2ZSnAeFP6itcr+48C0YI=) 2: oOmlEIPuZj-euGQgaSJSIdcSgws.roa (hash: 4HVEBIShSrKuBB15YN2IPkpfbl2tZhoTqa30YNiE+ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:4b:2e:d4:1e:49:b3:71:a6:2b:b7:6b:66:80:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798 Validity Not Before: Dec 6 23:01:41 2025 GMT Not After : Dec 7 23:01:41 2025 GMT Subject: CN=44db0e8af56b4c009b86907d77af6cb0e7b0db15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:e5:e5:dc:fd:c6:6a:7d:95:ed:af:d8:2d: 63:5f:6c:d2:99:99:30:5a:84:40:db:93:d8:d9:dd: dd:60:66:72:99:17:e0:e7:e6:26:76:4b:93:8d:22: 52:95:2b:aa:f7:e2:70:5d:79:5a:f2:5e:32:2f:bc: 42:f4:44:42:02:a3:80:db:06:1d:ba:1c:4b:0d:22: f6:18:d6:c5:32:6d:a3:9d:d0:12:27:9a:20:8c:f3: d0:97:4b:8c:f6:54:72:c7:11:87:b7:2b:74:d1:3d: 8d:3f:35:53:7a:b8:84:e4:23:a9:2e:79:ec:cd:b4: a6:f7:76:a3:5e:09:a5:c3:66:21:a2:22:07:67:cb: d8:e5:e2:4a:d6:47:60:06:4a:bf:c3:43:28:44:70: 52:31:29:b1:4a:06:c5:ec:81:4e:7c:b7:a0:bd:a7: b8:f9:84:c6:40:7e:ae:1d:8f:9f:22:0c:a5:42:63: 91:4a:ad:5b:86:b0:9d:83:ea:64:32:c1:6a:82:f7: c9:4c:0f:50:8f:3a:27:63:a3:ec:7c:21:08:3b:a2: c2:97:f5:87:95:47:cb:30:8c:9c:71:cb:16:e7:1e: 55:59:76:9d:97:73:d1:79:ef:33:c2:d8:54:ac:fb: f6:16:71:f8:ad:91:a8:29:dc:b0:d4:03:20:80:87: 6b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DB:0E:8A:F5:6B:4C:00:9B:86:90:7D:77:AF:6C:B0:E7:B0:DB:15 X509v3 Authority Key Identifier: keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:79:b0:45:bc:99:1c:43:68:b7:97:bf:c6:2e:db:cd:9a:ae: 46:f0:51:79:ec:c2:9c:44:a4:36:eb:19:1b:86:1f:20:0c:2c: 32:2b:aa:91:31:85:cc:26:f8:2a:e2:c0:25:b6:d1:ed:c0:2e: a8:e9:e4:ba:cc:07:2d:c0:46:35:b2:20:ef:32:f9:e6:f6:60: 08:87:e2:99:88:63:c9:01:83:3a:fd:2c:a2:49:f1:ac:97:ea: 00:ab:78:e9:f1:5c:71:cf:8d:de:e2:b0:fd:89:7f:a5:2e:c6: 60:08:ab:4d:cd:2f:df:cc:04:f7:0a:3e:25:b9:10:c8:b3:0a: bb:17:08:14:17:8e:f6:7d:a4:14:e3:50:09:85:19:c4:e0:2d: 57:29:d0:a0:1f:61:47:26:cd:09:c6:1b:ba:d0:9b:ea:7c:18: 97:a9:7c:83:f5:50:04:35:c3:a3:ba:57:af:46:57:bb:7d:b4: 2a:73:40:80:ee:7a:2d:db:15:89:cf:1c:2f:50:d8:9c:20:c1: 7e:4e:a7:ee:ac:f5:2c:32:54:29:48:c5:ba:a9:4c:2d:54:fe: be:e8:55:12:b7:cb:94:ec:66:89:73:e1:e6:1d:04:60:cf:94: a4:45:f2:e2:ab:88:d5:39:d9:02:ed:d3:27:f5:c2:9d:d5:92: 57:d9:78:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15ksu1B5Js3GmK7drZoCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNjJiYmYxNWRlMzQ0YWNkYjVmNzgwMDQ1MGYyYzgyZDc5 N2Q3OTgwHhcNMjUxMjA2MjMwMTQxWhcNMjUxMjA3MjMwMTQxWjAzMTEwLwYDVQQD Eyg0NGRiMGU4YWY1NmI0YzAwOWI4NjkwN2Q3N2FmNmNiMGU3YjBkYjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysPl5dz9xmp9le2v2C1jX2zSmZkw WoRA25PY2d3dYGZymRfg5+YmdkuTjSJSlSuq9+JwXXla8l4yL7xC9ERCAqOA2wYd uhxLDSL2GNbFMm2jndASJ5ogjPPQl0uM9lRyxxGHtyt00T2NPzVTeriE5COpLnns zbSm93ajXgmlw2YhoiIHZ8vY5eJK1kdgBkq/w0MoRHBSMSmxSgbF7IFOfLegvae4 +YTGQH6uHY+fIgylQmORSq1bhrCdg+pkMsFqgvfJTA9QjzonY6PsfCEIO6LCl/WH lUfLMIycccsW5x5VWXadl3PRee8zwthUrPv2FnH4rZGoKdyw1AMggIdrbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETbDor1a0wAm4aQfXevbLDnsNsVMB8GA1UdIwQY MBaAFN9iu/Fd40Ss2194AEUPLILXl9eYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzJLNzhWM2pSS3piWDNnQVJROHNndGVYMTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9hMDBjNDYtODAzMS00MTFmLTg1MDMt YTBmMjU5MWRkMmJkLzEvMzJLNzhWM2pSS3piWDNnQVJROHNndGVYMTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9hMDBjNDYtODAzMS00MTFmLTg1MDMtYTBmMjU5MWRkMmJk LzEvMzJLNzhWM2pSS3piWDNnQVJROHNndGVYMTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3mwRbyZ HENot5e/xi7bzZquRvBReezCnESkNusZG4YfIAwsMiuqkTGFzCb4KuLAJbbR7cAu qOnkuswHLcBGNbIg7zL55vZgCIfimYhjyQGDOv0soknxrJfqAKt46fFccc+N3uKw /Yl/pS7GYAirTc0v38wE9wo+JbkQyLMKuxcIFBeO9n2kFONQCYUZxOAtVynQoB9h RybNCcYbutCb6nwYl6l8g/VQBDXDo7pXr0ZXu320KnNAgO56LdsVic8cL1DYnCDB fk6n7qz1LDJUKUjFuqlMLVT+vuhVErfLlOxmiXPh5h0EYM+UpEXy4quI1TnZAu3T J/XCndWSV9l4bw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:27 2025 by rpki-client