This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft File: G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json) Hash identifier: QlImTHNP6FK3dI4RyE0NKsq8bBniyPYzE36KcxGK7AM= Subject key identifier: A6:C4:9E:27:48:D6:20:54:CA:CF:73:31:39:02:4B:0B:62:C2:17:A6 Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45 Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45 Certificate serial: 019BF6199A25C07B8F3EE0C48F2DD8A53EC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft Manifest number: 07BD Signing time: Sun 25 Jan 2026 17:00:31 +0000 Manifest this update: Sun 25 Jan 2026 17:00:31 +0000 Manifest next update: Mon 26 Jan 2026 17:00:31 +0000 Files and hashes: 1: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: 78EoEvi7B8WWhS77a0vxibCnwJ2sszO4s/CLFQDj23M=) 2: Glx5RcagYbxlQ_PlKvDqvMcqa2c.roa (hash: WHKedsLPSn5sRQ/YnrYA97FUz2TYFtRFerhfVcN7fi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:9a:25:c0:7b:8f:3e:e0:c4:8f:2d:d8:a5:3e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45 Validity Not Before: Jan 25 17:00:31 2026 GMT Not After : Jan 26 17:00:31 2026 GMT Subject: CN=a6c49e2748d62054cacf733139024b0b62c217a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:39:62:80:c4:c8:a6:db:05:56:e6:ff:30: f2:c5:58:ab:de:d7:37:59:45:ef:49:01:fe:31:e1: 10:a1:bf:ad:fc:2b:e2:b2:2c:a3:26:c0:2e:90:81: 68:06:6a:2e:dc:0c:86:3e:f0:5a:12:12:25:f9:ee: ec:61:ea:04:94:77:3a:39:1e:69:32:76:67:07:ab: 92:05:67:37:0e:b9:cf:ec:6e:d9:6c:b9:5b:6d:7f: 34:43:18:01:c1:79:37:95:e8:a4:3d:44:83:af:de: 95:c9:f4:28:10:0a:ac:fd:de:b4:0e:dd:10:23:50: 9d:3c:79:61:ff:a5:64:7a:53:dd:8e:f9:24:a3:cc: 19:54:fc:ce:5b:60:16:c7:c7:f2:d8:49:31:c6:6a: 44:b2:f5:91:b6:8d:d1:d4:6d:a9:c9:a3:3f:6b:cd: aa:2e:a5:f4:73:d0:22:d8:c5:18:4f:8c:bf:55:91: 93:85:94:0e:44:dc:5e:0a:87:62:33:ea:67:f7:f1: 51:66:5a:7a:e1:10:25:3d:e8:17:ac:bb:c3:53:46: ab:58:e9:54:4b:ae:83:88:ed:c2:13:f1:4c:08:3d: da:8b:1a:00:13:fd:b4:d4:02:4e:ff:83:06:36:d6: 14:ad:41:bf:74:6a:83:8e:5e:40:b5:d1:55:fb:a2: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C4:9E:27:48:D6:20:54:CA:CF:73:31:39:02:4B:0B:62:C2:17:A6 X509v3 Authority Key Identifier: keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:45:a9:fc:3d:9c:97:cb:ee:61:f5:e5:1f:59:17:ff:88:3b: cd:ed:7d:47:ce:b8:30:39:ec:57:cd:7d:47:6c:e3:86:42:e0: 49:a9:24:c6:a0:c0:d7:f9:b5:dc:fc:d1:21:3b:51:50:b1:ad: 6d:66:70:ac:3a:f7:39:1e:2c:86:78:56:ec:92:00:00:b3:45: 35:49:ea:3b:f7:9e:60:57:83:38:34:eb:f6:86:0e:48:a3:06: 85:68:0c:32:5c:81:d3:9f:d5:c5:6e:46:c6:5c:79:ef:1a:44: 9a:a5:4c:e0:27:d2:8a:b3:d2:9a:ce:6c:99:62:29:84:d0:b9: ff:87:07:74:23:bd:c2:2f:0f:ae:c7:d1:1e:71:e9:a9:64:66: ca:cf:28:be:6b:79:34:b7:7e:50:0d:06:d5:dc:d9:6c:27:dc: 3d:66:f6:a1:1a:9f:f8:42:60:02:cf:4c:1a:d8:21:8d:17:66: 63:a8:54:51:7d:90:ac:e5:26:a4:e9:bb:9a:5b:36:d8:7d:e0: 8d:a0:c8:e5:f7:0b:ce:9b:68:cb:09:84:07:0b:14:79:c7:2c: 3d:52:4b:7e:9c:c6:5c:8b:43:f8:e6:9a:19:28:2a:d2:b5:23: 50:a7:60:e0:dd:b4:de:ad:b8:ef:10:82:d1:fe:f4:db:a0:93: d8:89:d9:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GZolwHuPPuDEjy3YpT7HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNGQ4MDM3M2UzZTM0ZDAwYTg1Yjg0MTI4ZDQwNTM5OWJj ZjhhNDUwHhcNMjYwMTI1MTcwMDMxWhcNMjYwMTI2MTcwMDMxWjAzMTEwLwYDVQQD EyhhNmM0OWUyNzQ4ZDYyMDU0Y2FjZjczMzEzOTAyNGIwYjYyYzIxN2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgk5YoDEyKbbBVbm/zDyxVir3tc3 WUXvSQH+MeEQob+t/CvisiyjJsAukIFoBmou3AyGPvBaEhIl+e7sYeoElHc6OR5p MnZnB6uSBWc3DrnP7G7ZbLlbbX80QxgBwXk3leikPUSDr96VyfQoEAqs/d60Dt0Q I1CdPHlh/6VkelPdjvkko8wZVPzOW2AWx8fy2EkxxmpEsvWRto3R1G2pyaM/a82q LqX0c9Ai2MUYT4y/VZGThZQORNxeCodiM+pn9/FRZlp64RAlPegXrLvDU0arWOlU S66DiO3CE/FMCD3aixoAE/201AJO/4MGNtYUrUG/dGqDjl5AtdFV+6Lx1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbEnidI1iBUys9zMTkCSwtiwhemMB8GA1UdIwQY MBaAFBtNgDc+PjTQCoW4QSjUBTmbz4pFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yNTc0ZDItY2IwYy00YjJhLWJlODMt OGUwMGJkYTNiMjQ1LzEvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yNTc0ZDItY2IwYy00YjJhLWJlODMtOGUwMGJkYTNiMjQ1 LzEvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUWp/D2c l8vuYfXlH1kX/4g7ze19R864MDnsV819R2zjhkLgSakkxqDA1/m13PzRITtRULGt bWZwrDr3OR4shnhW7JIAALNFNUnqO/eeYFeDODTr9oYOSKMGhWgMMlyB05/VxW5G xlx57xpEmqVM4CfSirPSms5smWIphNC5/4cHdCO9wi8PrsfRHnHpqWRmys8ovmt5 NLd+UA0G1dzZbCfcPWb2oRqf+EJgAs9MGtghjRdmY6hUUX2QrOUmpOm7mls22H3g jaDI5fcLzptoywmEBwsUeccsPVJLfpzGXItD+OaaGSgq0rUjUKdg4N203q247xCC 0f7026CT2InZZw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:43 2026 by rpki-client