This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft File: 02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json) Hash identifier: lJFrWz6idyPLHKwOGo0X+V/wPsIVo0tc62nDRx+Dg8E= Subject key identifier: 17:05:6C:15:C8:7C:46:A0:D9:68:C8:C2:DD:67:40:EE:32:4F:EB:0E Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE Certificate issuer: /CN=d36be6f075400d305a16dde690e25cbd94645cbe Certificate serial: 019AF31C31EAD2DEBDDAD2365F54DF79D64F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft Manifest number: 16B3 Signing time: Sat 06 Dec 2025 10:01:42 +0000 Manifest this update: Sat 06 Dec 2025 10:01:42 +0000 Manifest next update: Sun 07 Dec 2025 10:01:42 +0000 Files and hashes: 1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: mSCMmd/c/dujtzoHoeQed5p6Kif6QdJATsAmBJNd620=) 2: bTRllN3rhV7rnjQJp0rvDHo40Gs.roa (hash: Bx0kFO6OMs0rFfJ2IZkuiIUT2mg/0ptdVSDBzsrl1H8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:31:ea:d2:de:bd:da:d2:36:5f:54:df:79:d6:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe Validity Not Before: Dec 6 10:01:42 2025 GMT Not After : Dec 7 10:01:42 2025 GMT Subject: CN=17056c15c87c46a0d968c8c2dd6740ee324feb0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:f1:06:98:b5:f9:94:2b:7f:1b:1c:a7:58: e3:40:83:50:0b:46:27:5c:67:59:7d:a0:75:d5:16: 0a:b4:31:69:38:a6:52:59:65:b3:a7:84:5d:70:24: b9:dc:1a:1f:b1:80:68:b2:71:a0:72:08:dd:57:66: 6f:7e:dd:5b:82:e6:e6:1d:7d:94:1d:81:7c:d1:2a: 7f:b3:95:75:07:e6:9c:3c:63:5c:e7:5e:a4:f1:72: 7b:2d:b1:f1:3f:06:7d:71:f8:5e:86:c6:ba:5e:ab: 3e:ad:22:b2:e2:41:75:14:f1:a1:f9:62:1e:f3:fc: 6a:7a:51:52:9c:ca:c6:98:d3:a7:90:f2:59:8f:d4: 3d:45:ab:80:e1:38:41:d1:21:e7:c7:ab:70:1a:ad: e8:1d:8e:af:39:f4:2e:43:21:df:8e:47:bf:b2:16: 88:a7:f2:02:08:5f:f1:bf:41:5d:d4:e9:ea:b7:b7: d4:32:a2:ec:6c:8e:05:87:91:90:6f:bd:a7:50:e8: 35:f9:aa:0c:91:21:c9:a2:3c:42:90:ab:52:08:4a: f7:8e:22:12:3f:b0:4a:a6:ec:51:0d:52:b2:d3:32: a3:a9:58:d4:fb:0f:c1:03:40:49:64:cb:ac:75:83: 71:e9:01:66:31:04:d7:d6:53:d4:b4:df:f3:03:c4: 22:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:05:6C:15:C8:7C:46:A0:D9:68:C8:C2:DD:67:40:EE:32:4F:EB:0E X509v3 Authority Key Identifier: keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:7c:a6:5c:bf:0f:92:bf:10:84:71:77:fc:01:8e:3a:20:92: 35:a9:fd:c4:1d:d0:c4:ad:64:41:c9:74:a8:61:24:7a:3a:ee: 07:8a:6c:84:53:c6:b1:a6:b3:a4:6d:76:f2:69:e7:d4:55:77: 78:65:ef:0d:59:92:40:a1:35:b7:a6:be:14:ee:1d:29:be:39: 85:4e:8c:a1:19:27:ef:05:4b:46:c1:27:15:88:85:56:ea:05: 1c:66:ab:53:2b:4d:d4:35:28:7d:80:61:0d:fd:e5:09:33:7a: 37:b8:1b:76:2d:e8:ef:40:80:c9:c1:a3:48:64:37:93:b3:66: 1b:dc:38:a6:56:55:40:dd:38:7a:21:73:3b:f6:4e:16:3a:1d: 97:37:8a:a7:6f:31:da:a6:7c:2e:95:1b:18:9d:1c:d3:dc:f3: ad:7f:43:7b:51:97:45:14:8a:59:57:27:29:3e:0d:7e:84:59: b7:e1:e9:47:e5:41:a2:2d:16:83:6e:86:c0:9b:b7:32:71:5c: c3:6a:d1:55:24:e8:ec:4c:3a:b4:5c:96:f2:55:f2:4d:f5:81: 32:a7:fd:46:7b:c4:36:a2:aa:87:e9:7e:3f:33:2a:d8:99:e7: 8b:ed:29:46:a3:56:36:dc:aa:39:8a:c0:cd:5a:fa:51:1e:5c: a7:2d:15:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDHq0t692tI2X1TfedZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNmJlNmYwNzU0MDBkMzA1YTE2ZGRlNjkwZTI1Y2JkOTQ2 NDVjYmUwHhcNMjUxMjA2MTAwMTQyWhcNMjUxMjA3MTAwMTQyWjAzMTEwLwYDVQQD EygxNzA1NmMxNWM4N2M0NmEwZDk2OGM4YzJkZDY3NDBlZTMyNGZlYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1XxBpi1+ZQrfxscp1jjQINQC0Yn XGdZfaB11RYKtDFpOKZSWWWzp4RdcCS53BofsYBosnGgcgjdV2Zvft1bgubmHX2U HYF80Sp/s5V1B+acPGNc516k8XJ7LbHxPwZ9cfhehsa6Xqs+rSKy4kF1FPGh+WIe 8/xqelFSnMrGmNOnkPJZj9Q9RauA4ThB0SHnx6twGq3oHY6vOfQuQyHfjke/shaI p/ICCF/xv0Fd1Onqt7fUMqLsbI4Fh5GQb72nUOg1+aoMkSHJojxCkKtSCEr3jiIS P7BKpuxRDVKy0zKjqVjU+w/BA0BJZMusdYNx6QFmMQTX1lPUtN/zA8QizwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcFbBXIfEag2WjIwt1nQO4yT+sOMB8GA1UdIwQY MBaAFNNr5vB1QA0wWhbd5pDiXL2UZFy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZmRlMzgtZTliOS00YjY5LWI0MTQt MzBjMWM1YTA4MGQ5LzEvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wZmRlMzgtZTliOS00YjY5LWI0MTQtMzBjMWM1YTA4MGQ5 LzEvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3ymXL8P kr8QhHF3/AGOOiCSNan9xB3QxK1kQcl0qGEkejruB4pshFPGsaazpG128mnn1FV3 eGXvDVmSQKE1t6a+FO4dKb45hU6MoRkn7wVLRsEnFYiFVuoFHGarUytN1DUofYBh Df3lCTN6N7gbdi3o70CAycGjSGQ3k7NmG9w4plZVQN04eiFzO/ZOFjodlzeKp28x 2qZ8LpUbGJ0c09zzrX9De1GXRRSKWVcnKT4NfoRZt+HpR+VBoi0Wg26GwJu3MnFc w2rRVSTo7Ew6tFyW8lXyTfWBMqf9RnvENqKqh+l+PzMq2Jnni+0pRqNWNtyqOYrA zVr6UR5cpy0V2A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:21 2025 by rpki-client