This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft File: G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json) Hash identifier: foY4HNS8JOLNvnIgvaOwE1k4W+XBs+IONJDCW1bx+tk= Subject key identifier: 8A:ED:2F:97:6E:F4:BF:CD:43:AC:DE:8F:A2:13:8F:0F:76:0F:F8:20 Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45 Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45 Certificate serial: 019AF653968D56CC999F3D3AB0BBD4C55BD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft Manifest number: 0738 Signing time: Sun 07 Dec 2025 01:01:04 +0000 Manifest this update: Sun 07 Dec 2025 01:01:04 +0000 Manifest next update: Mon 08 Dec 2025 01:01:04 +0000 Files and hashes: 1: 66D5GH85kpdoRl5xE-EYGnJIu7s.roa (hash: FRI0FnMjIpTP/o+NpM2rBO+2noxEcPY4kmpjzIRRmcw=) 2: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: ryx2+cUz3amxUqJfMviVzRg7muoLdvnwizW2EO3fMaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:96:8d:56:cc:99:9f:3d:3a:b0:bb:d4:c5:5b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45 Validity Not Before: Dec 7 01:01:04 2025 GMT Not After : Dec 8 01:01:04 2025 GMT Subject: CN=8aed2f976ef4bfcd43acde8fa2138f0f760ff820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f8:35:8d:4d:8d:02:fb:6f:84:b3:0f:2f:ad: 23:db:ae:fb:60:39:b5:66:36:8b:13:dc:d4:77:c5: 42:ca:26:d9:e4:3f:77:8e:15:9b:b8:9d:80:2f:be: 31:ee:92:46:b4:fa:25:a3:c9:43:3e:ed:5c:6a:97: 0b:1a:6d:31:1c:1d:61:26:2b:80:f1:62:e4:29:00: 2e:04:12:65:0f:f8:da:a0:29:f5:1b:02:15:03:72: 3f:5a:65:5f:c2:78:69:c2:cd:7b:fe:7d:b1:cf:d8: 45:a1:77:6d:ca:97:f1:e4:ee:0e:2c:37:d7:ef:d2: 44:15:26:6d:7d:b2:21:ff:af:ef:eb:f9:a8:9e:b0: 85:4c:68:55:a7:56:52:fb:91:0b:52:33:0c:20:9e: c9:db:42:dc:14:7e:1e:89:9c:ca:07:1f:5e:b2:31: 59:06:67:97:e0:49:a9:34:ca:3b:54:1d:1d:42:d5: e2:ca:88:88:e5:e4:de:21:ba:95:75:50:c5:6e:b3: c5:65:00:49:52:a2:d9:79:8c:04:b0:0f:b7:6f:bd: f9:f6:7f:96:9a:d3:35:22:3c:98:8a:28:21:a4:0a: 4f:6f:c5:d7:36:5f:5b:18:0d:b4:c5:68:59:80:bb: e4:2e:4e:8d:b2:07:a6:52:48:b3:97:ce:f6:7c:24: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:ED:2F:97:6E:F4:BF:CD:43:AC:DE:8F:A2:13:8F:0F:76:0F:F8:20 X509v3 Authority Key Identifier: keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:bf:88:2a:1c:30:d9:81:1c:e7:48:43:20:5b:aa:93:61:00: 01:48:62:48:c3:44:d1:b2:7f:9d:76:9b:7d:08:0a:fe:d0:79: 76:e1:ee:75:74:26:f8:da:19:7e:35:73:73:a8:17:4b:e8:1e: 91:49:97:ce:a4:19:f9:13:ce:4e:3b:16:2e:89:06:8a:0e:87: 59:5e:3f:61:d5:18:c8:31:df:6c:fa:52:a7:ac:92:71:ce:a9: 79:41:51:b1:e8:64:1f:b3:28:98:1e:44:99:4a:0a:00:77:14: f1:d2:af:c8:ab:8e:54:62:07:0d:a7:e3:04:da:99:83:54:45: eb:69:d9:36:d7:53:0f:59:21:3f:0e:a9:7c:ac:64:ff:84:99: 62:22:56:fc:83:2f:88:90:b6:75:de:fb:2b:cd:05:56:e9:fa: 2b:fa:25:fa:74:7c:92:8a:24:1a:3c:75:a0:72:ba:40:73:33: f3:4d:fa:19:5c:01:97:28:bd:d6:3e:56:b2:2d:52:72:7b:db: aa:5e:84:06:86:5d:29:b8:b5:50:35:5e:6b:ab:e0:f0:cd:c9: 91:f1:cc:a9:92:3a:3c:4f:c7:5a:3d:6a:ed:fa:dc:b3:ec:ab: 32:48:5f:81:9f:70:dc:0e:3a:ce:55:d1:e8:da:18:24:33:8d: f1:61:2b:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U5aNVsyZnz06sLvUxVvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNGQ4MDM3M2UzZTM0ZDAwYTg1Yjg0MTI4ZDQwNTM5OWJj ZjhhNDUwHhcNMjUxMjA3MDEwMTA0WhcNMjUxMjA4MDEwMTA0WjAzMTEwLwYDVQQD Eyg4YWVkMmY5NzZlZjRiZmNkNDNhY2RlOGZhMjEzOGYwZjc2MGZmODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vg1jU2NAvtvhLMPL60j2677YDm1 ZjaLE9zUd8VCyibZ5D93jhWbuJ2AL74x7pJGtPolo8lDPu1capcLGm0xHB1hJiuA 8WLkKQAuBBJlD/jaoCn1GwIVA3I/WmVfwnhpws17/n2xz9hFoXdtypfx5O4OLDfX 79JEFSZtfbIh/6/v6/monrCFTGhVp1ZS+5ELUjMMIJ7J20LcFH4eiZzKBx9esjFZ BmeX4EmpNMo7VB0dQtXiyoiI5eTeIbqVdVDFbrPFZQBJUqLZeYwEsA+3b7359n+W mtM1IjyYiighpApPb8XXNl9bGA20xWhZgLvkLk6NsgemUkizl872fCTY6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrtL5du9L/NQ6zej6ITjw92D/ggMB8GA1UdIwQY MBaAFBtNgDc+PjTQCoW4QSjUBTmbz4pFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yNTc0ZDItY2IwYy00YjJhLWJlODMt OGUwMGJkYTNiMjQ1LzEvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yNTc0ZDItY2IwYy00YjJhLWJlODMtOGUwMGJkYTNiMjQ1 LzEvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7+IKhww 2YEc50hDIFuqk2EAAUhiSMNE0bJ/nXabfQgK/tB5duHudXQm+NoZfjVzc6gXS+ge kUmXzqQZ+RPOTjsWLokGig6HWV4/YdUYyDHfbPpSp6yScc6peUFRsehkH7MomB5E mUoKAHcU8dKvyKuOVGIHDafjBNqZg1RF62nZNtdTD1khPw6pfKxk/4SZYiJW/IMv iJC2dd77K80FVun6K/ol+nR8kookGjx1oHK6QHMz8036GVwBlyi91j5Wsi1Scnvb ql6EBoZdKbi1UDVea6vg8M3JkfHMqZI6PE/HWj1q7frcs+yrMkhfgZ9w3A46zlXR 6NoYJDON8WErgg== -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:29 2025 by rpki-client