This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft File: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json) Hash identifier: 3xxockB+epft3+KB8kyWPKcfGlvrJzJ5P2wGn8ep7WA= Subject key identifier: 25:56:12:1D:39:EA:90:14:F7:42:81:45:AD:25:C5:8C:5B:76:64:DF Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63 Certificate issuer: /CN=df6a9267b18b36d828890a86387f310b84c04b63 Certificate serial: 019AF50A26C1FB87216D76D66E435BDDF4D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft Manifest number: 0EFC Signing time: Sat 06 Dec 2025 19:01:14 +0000 Manifest this update: Sat 06 Dec 2025 19:01:14 +0000 Manifest next update: Sun 07 Dec 2025 19:01:14 +0000 Files and hashes: 1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: Ig2hU4cdLXtlPYKAODxuxWUenjRckGEprk9y2x3xaRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:26:c1:fb:87:21:6d:76:d6:6e:43:5b:dd:f4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63 Validity Not Before: Dec 6 19:01:14 2025 GMT Not After : Dec 7 19:01:14 2025 GMT Subject: CN=2556121d39ea9014f7428145ad25c58c5b7664df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:24:22:24:29:f2:b0:f6:5e:3f:1b:0e:e7:47: ac:70:a3:f5:62:58:dd:57:a4:4a:b2:ac:9f:3b:9b: 78:1e:2b:67:93:4e:a7:50:a6:b9:da:ae:29:25:8e: 57:67:7d:de:21:2e:ee:f6:32:bf:b4:df:55:ac:2a: 4b:cf:ae:04:22:98:88:fe:e0:36:3b:29:b8:ca:1b: 00:22:37:bc:b0:93:22:51:65:da:af:b2:6e:34:c5: 6e:7a:4d:79:6d:3a:d1:f5:4e:f0:4b:20:5f:a9:0e: f9:23:6d:c8:bf:83:3b:79:84:eb:7f:8b:37:d8:f5: 66:a3:16:fe:cb:f7:38:d2:87:cf:83:6a:97:a2:62: 98:bd:7f:88:d6:0f:65:ec:42:cc:1b:04:2f:9e:57: cb:c3:2c:47:6c:92:b3:b9:7f:c5:8b:af:13:ee:e2: a3:cb:a5:cb:48:1f:37:52:38:5d:26:bf:e2:5e:fa: d4:d1:a5:c4:71:19:73:6d:25:44:84:eb:f4:ed:3a: c6:b8:42:c9:ea:2b:1c:a4:ac:20:38:c1:fa:83:53: 7e:fe:cd:8f:d5:f3:7d:29:a9:b0:57:7e:af:51:f7: 1c:1e:65:60:55:cd:a6:69:34:11:1b:e4:95:55:0f: c1:11:d8:ce:d0:57:f8:e3:c5:da:f4:b5:7d:12:60: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:56:12:1D:39:EA:90:14:F7:42:81:45:AD:25:C5:8C:5B:76:64:DF X509v3 Authority Key Identifier: keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a8:b2:2b:92:1a:d1:57:50:a0:28:19:ed:7c:6f:63:ae:63: 8c:b2:26:99:a5:37:45:2b:1f:a8:d8:ca:23:d9:83:c6:48:81: 20:25:20:47:b3:33:3f:cc:96:3a:37:9f:73:e1:e9:bc:4f:94: 6b:95:e3:99:0a:5d:14:6a:a6:ae:b6:76:5b:14:0d:03:b3:d6: c5:19:77:ce:42:fc:b7:5d:a4:47:11:9f:21:16:cb:4f:05:c0: b2:27:2e:7a:f5:28:f5:b2:05:6a:4b:ac:44:f2:72:6c:2e:0b: 59:fe:68:f8:e7:8b:70:9c:db:24:9e:02:36:c2:df:f8:cd:26: 9f:7b:52:cb:c9:ad:38:b0:dd:7e:22:72:d1:d8:b1:4b:62:ca: 5b:b5:2b:fa:a7:5f:68:4d:90:d7:9d:2c:5f:68:a3:56:62:23: 23:38:4f:ac:62:d5:9d:68:11:52:40:13:4a:40:9b:6c:3e:c0: d9:66:5a:dc:59:8c:28:e4:7b:75:9c:15:fc:00:e7:3c:5a:2b: a8:df:43:01:9d:59:d2:fd:3a:2f:f2:cb:d7:97:10:60:c2:aa: 00:f7:0c:48:e0:f0:c2:a6:a3:0e:c6:4e:fc:d6:cc:0f:b3:6a: ef:f7:c2:56:79:36:de:f1:17:e6:ab:27:b9:c1:4c:5e:56:06: 06:ad:c7:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CibB+4chbXbWbkNb3fTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNmE5MjY3YjE4YjM2ZDgyODg5MGE4NjM4N2YzMTBiODRj MDRiNjMwHhcNMjUxMjA2MTkwMTE0WhcNMjUxMjA3MTkwMTE0WjAzMTEwLwYDVQQD EygyNTU2MTIxZDM5ZWE5MDE0Zjc0MjgxNDVhZDI1YzU4YzViNzY2NGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iQiJCnysPZePxsO50escKP1Yljd V6RKsqyfO5t4Hitnk06nUKa52q4pJY5XZ33eIS7u9jK/tN9VrCpLz64EIpiI/uA2 Oym4yhsAIje8sJMiUWXar7JuNMVuek15bTrR9U7wSyBfqQ75I23Iv4M7eYTrf4s3 2PVmoxb+y/c40ofPg2qXomKYvX+I1g9l7ELMGwQvnlfLwyxHbJKzuX/Fi68T7uKj y6XLSB83UjhdJr/iXvrU0aXEcRlzbSVEhOv07TrGuELJ6iscpKwgOMH6g1N+/s2P 1fN9KamwV36vUfccHmVgVc2maTQRG+SVVQ/BEdjO0Ff448Xa9LV9EmCCAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVWEh056pAU90KBRa0lxYxbdmTfMB8GA1UdIwQY MBaAFN9qkmexizbYKIkKhjh/MQuEwEtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jNjBjMjAtYmI0Mi00NmJhLWIyMTUt OTlmN2JlY2E4NzViLzEvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jNjBjMjAtYmI0Mi00NmJhLWIyMTUtOTlmN2JlY2E4NzVi LzEvMzJxU1o3R0xOdGdvaVFxR09IOHhDNFRBUzJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6iyK5Ia 0VdQoCgZ7XxvY65jjLImmaU3RSsfqNjKI9mDxkiBICUgR7MzP8yWOjefc+HpvE+U a5XjmQpdFGqmrrZ2WxQNA7PWxRl3zkL8t12kRxGfIRbLTwXAsicuevUo9bIFakus RPJybC4LWf5o+OeLcJzbJJ4CNsLf+M0mn3tSy8mtOLDdfiJy0dixS2LKW7Ur+qdf aE2Q150sX2ijVmIjIzhPrGLVnWgRUkATSkCbbD7A2WZa3FmMKOR7dZwV/ADnPFor qN9DAZ1Z0v06L/LL15cQYMKqAPcMSODwwqajDsZO/NbMD7Nq7/fCVnk23vEX5qsn ucFMXlYGBq3H9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:03 2025 by rpki-client