This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft File: 02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json) Hash identifier: SW/PI9DcqmTMpRfAB7Dhn+5SmnF6l2DRye8n/+Y5i9k= Subject key identifier: 86:01:5B:88:9B:F0:38:A9:3D:3D:80:AB:6C:70:F1:12:8B:8B:C3:E0 Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c Certificate serial: 019AF2402B2033E8F4D97E67DE4BC4E50AD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:22 +0000 Manifest this update: Sat 06 Dec 2025 06:01:22 +0000 Manifest next update: Sun 07 Dec 2025 06:01:22 +0000 Files and hashes: 1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: iIrKnZ1S7JDLc/WO/ik9/iooH7sAGM6wlVBu31ODEDM=) 2: 8wRwksgEoG333HypQIIwjmT0nX4.roa (hash: HiR8D2zkzsAnyOZuw2MTERQhKjFGkf9qzkInu3daTko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2b:20:33:e8:f4:d9:7e:67:de:4b:c4:e5:0a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c Validity Not Before: Dec 6 06:01:22 2025 GMT Not After : Dec 7 06:01:22 2025 GMT Subject: CN=86015b889bf038a93d3d80ab6c70f1128b8bc3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f8:8a:ad:71:46:8a:b6:34:e7:12:26:4a:40: 72:4e:12:85:c7:13:c1:a5:1d:43:c7:23:0d:33:c0: b0:ad:29:c7:98:ff:20:a0:a4:6c:dd:56:43:82:09: 64:b2:bb:51:f7:c3:a9:4b:39:5b:e7:cf:a5:13:b5: 1c:9d:1d:9a:de:35:5b:8b:ef:45:77:c1:b5:52:43: 32:9f:35:46:82:02:4c:72:7b:94:ff:73:8d:cb:23: 67:19:26:a2:ca:01:ae:ea:60:54:07:04:37:42:b8: 82:13:bf:54:49:0c:ad:59:3b:60:0c:5c:20:89:ed: dc:a4:bc:ff:8c:52:ea:5f:2e:c2:48:45:a4:71:cb: a1:08:68:7d:60:de:25:bf:9c:a9:f4:e3:1d:84:e1: 02:fa:f6:1f:6a:8b:28:c1:90:28:b4:b7:34:b4:4c: 79:79:45:6b:79:b1:d0:68:00:3c:12:8b:33:6a:a9: 63:83:35:85:1c:ea:10:88:21:66:28:a1:4a:63:24: 92:1a:4e:27:4a:0b:25:44:e1:22:63:6c:a1:d0:a8: d7:80:fa:26:d0:b7:a2:d9:56:ce:2b:c6:04:ec:3f: 71:b6:02:59:61:ad:21:33:30:05:2d:1a:83:eb:10: 89:a0:04:d6:3d:6f:10:e0:d5:51:41:51:e1:2e:f6: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:01:5B:88:9B:F0:38:A9:3D:3D:80:AB:6C:70:F1:12:8B:8B:C3:E0 X509v3 Authority Key Identifier: keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:26:7c:07:b3:98:38:95:f8:60:c7:af:8a:63:c7:ad:5d:24: 4d:7c:8e:41:84:34:d5:9d:3a:59:70:a5:d4:44:6f:9f:a4:88: 7f:1c:37:30:e1:a6:06:d8:95:04:03:89:71:64:28:d3:2f:41: 82:96:d2:87:30:9e:d2:56:1f:39:b2:d1:8d:97:d5:45:34:6a: dd:66:68:e1:15:0d:4b:67:fd:18:42:f7:7b:4a:3e:d7:9f:84: 76:4b:e8:f1:83:d3:42:38:5a:01:ff:0f:d3:7e:37:35:b2:6b: df:e7:ec:8b:a6:1e:df:cb:92:c5:65:7e:8b:eb:52:fb:0f:d0: 39:03:01:10:1a:c7:31:10:f8:11:55:83:68:46:ba:26:13:f9: 98:60:18:86:da:a7:b6:55:ea:23:c5:f9:48:8b:7c:a9:04:29: a0:cf:82:cb:25:f0:ec:48:37:80:5c:13:87:81:da:f5:68:45: 64:34:f5:15:6e:99:c4:9a:1a:ea:16:34:5e:be:d8:2d:10:8b: e6:bc:ab:2b:de:7d:08:41:84:45:b5:31:29:54:60:0b:36:50: 47:08:62:fa:e6:9c:59:68:e9:78:76:c7:54:18:90:b9:07:7a: 24:76:96:ba:12:29:a7:3b:b3:73:c0:38:c7:3b:68:e6:b8:9b: 70:1b:70:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCsgM+j02X5n3kvE5QrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjk4YmU5MDJjMDZmZWFiNWY1YWFmNzI5ZTBiYmMzN2Ji YzM0MWMwHhcNMjUxMjA2MDYwMTIyWhcNMjUxMjA3MDYwMTIyWjAzMTEwLwYDVQQD Eyg4NjAxNWI4ODliZjAzOGE5M2QzZDgwYWI2YzcwZjExMjhiOGJjM2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmviKrXFGirY05xImSkByThKFxxPB pR1DxyMNM8CwrSnHmP8goKRs3VZDgglksrtR98OpSzlb58+lE7UcnR2a3jVbi+9F d8G1UkMynzVGggJMcnuU/3ONyyNnGSaiygGu6mBUBwQ3QriCE79USQytWTtgDFwg ie3cpLz/jFLqXy7CSEWkccuhCGh9YN4lv5yp9OMdhOEC+vYfaosowZAotLc0tEx5 eUVrebHQaAA8EoszaqljgzWFHOoQiCFmKKFKYySSGk4nSgslROEiY2yh0KjXgPom 0Lei2VbOK8YE7D9xtgJZYa0hMzAFLRqD6xCJoATWPW8Q4NVRQVHhLvb5swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYBW4ib8DipPT2Aq2xw8RKLi8PgMB8GA1UdIwQY MBaAFNNpi+kCwG/qtfWq9yngu8N7vDQcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84ZmNlN2YtNzdkZS00Mjc4LWJhZmUt ZGRjMzI1MjFkNzkwLzEvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84ZmNlN2YtNzdkZS00Mjc4LWJhZmUtZGRjMzI1MjFkNzkw LzEvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiZ8B7OY OJX4YMevimPHrV0kTXyOQYQ01Z06WXCl1ERvn6SIfxw3MOGmBtiVBAOJcWQo0y9B gpbShzCe0lYfObLRjZfVRTRq3WZo4RUNS2f9GEL3e0o+15+Edkvo8YPTQjhaAf8P 0343NbJr3+fsi6Ye38uSxWV+i+tS+w/QOQMBEBrHMRD4EVWDaEa6JhP5mGAYhtqn tlXqI8X5SIt8qQQpoM+CyyXw7Eg3gFwTh4Ha9WhFZDT1FW6ZxJoa6hY0Xr7YLRCL 5ryrK959CEGERbUxKVRgCzZQRwhi+uacWWjpeHbHVBiQuQd6JHaWuhIppzuzc8A4 xzto5ribcBtwQA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:49 2025 by rpki-client