This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft File: x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json) Hash identifier: ZNX7eoMSEWhXfO+sT0nx0j6bWvKFJN1UpHDezMDuiwE= Subject key identifier: 39:A7:B2:42:D5:C9:72:EE:D5:20:0C:81:64:2C:54:AF:41:F7:D4:7B Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27 Certificate issuer: /CN=c74da21da8038a820542b3afafbeaaaa666b7b27 Certificate serial: 019AF5E626E21E386FC4A7CC9C3F366AAC84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft Manifest number: 16F7 Signing time: Sat 06 Dec 2025 23:01:32 +0000 Manifest this update: Sat 06 Dec 2025 23:01:32 +0000 Manifest next update: Sun 07 Dec 2025 23:01:32 +0000 Files and hashes: 1: 2t0GWwoe7mmFS83bQQPX5JNcD34.roa (hash: hxRzouLeq4ys7uUoj+7mRAVC8MeKAFWBUYqAcz4n5d0=) 2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: 3dlWFfIvKWrRzF8C//HlWpvCJaDXWCfpVx5mZR6QcsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:26:e2:1e:38:6f:c4:a7:cc:9c:3f:36:6a:ac:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27 Validity Not Before: Dec 6 23:01:32 2025 GMT Not After : Dec 7 23:01:32 2025 GMT Subject: CN=39a7b242d5c972eed5200c81642c54af41f7d47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:29:02:56:1b:43:ab:a2:29:01:7b:33:93: 76:e7:38:f5:88:e1:d8:33:6a:b9:dd:ac:ff:82:5b: da:68:97:7a:73:5f:2b:db:37:d5:63:14:14:42:2f: fa:fe:40:cc:65:19:17:0b:c3:b3:0a:ab:00:e3:41: 32:16:22:e0:44:44:2b:65:98:ad:17:01:13:62:5b: ed:31:02:21:2e:f4:4c:af:f6:e6:2f:84:ce:7e:a0: b6:cf:ad:8b:17:7f:ce:c3:4b:ae:d7:ec:5e:46:e3: 0b:71:f9:58:f2:bc:46:02:e4:4b:8d:f0:de:1e:a9: 2b:14:87:3e:82:e5:38:48:6e:c8:91:a8:cf:71:5b: 18:12:9b:65:09:ef:a3:0a:74:79:2f:a5:fa:b5:8a: 90:8f:07:c9:80:4e:24:96:92:c9:95:99:e4:67:9e: 06:17:5e:c5:37:ef:2f:60:c3:64:c0:f3:c9:9b:3c: 59:28:1b:61:16:c6:c7:06:3d:5c:40:98:8e:85:61: b7:43:8c:b1:ac:f4:6e:b7:7f:ed:64:48:0c:05:67: 34:2a:b2:55:2e:98:06:74:92:94:6e:10:07:75:23: c8:86:e8:a4:34:10:e6:b6:df:6c:41:50:24:08:00: fe:6a:05:29:52:da:03:5a:31:5b:8d:a5:cb:07:ef: 4a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A7:B2:42:D5:C9:72:EE:D5:20:0C:81:64:2C:54:AF:41:F7:D4:7B X509v3 Authority Key Identifier: keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e8:a9:58:96:6a:e5:cf:c3:1f:80:e5:e5:59:be:26:af:25: 1e:dc:4f:a6:b5:cd:e4:5a:fe:b3:db:a5:e9:c3:8a:fb:ef:68: 22:c6:ee:d4:20:f4:4e:5a:19:30:fd:1b:b4:82:ab:35:5d:de: dc:49:1c:03:44:03:ba:fb:de:a8:ed:f3:c2:fa:fe:7a:6f:12: 4f:3e:f1:f3:e5:37:83:df:6b:5b:de:a7:9f:9c:77:22:b8:47: 4d:24:2d:ba:eb:ba:ac:bf:a5:e0:19:50:e8:4a:97:4d:dd:b0: 93:f0:64:b1:ed:44:d6:af:85:1b:9b:3d:a8:7c:13:40:2f:0b: 5b:b4:fc:16:0d:08:ce:05:f4:b4:81:58:99:83:ea:86:f5:83: d9:9c:63:5f:cb:de:c7:9a:8e:12:b3:21:09:8a:cb:c2:ae:a8: 13:f0:88:3b:c0:87:f0:45:0e:25:bb:33:bc:0a:ce:ce:4f:12: 46:a5:69:8b:d9:ac:0a:46:80:96:7e:64:ff:1b:c1:37:f8:02: 16:16:b8:4d:d1:2f:d4:6a:c8:dd:64:4f:47:ef:32:7f:c2:04: da:94:23:5f:a1:84:8a:dd:07:97:e9:7e:21:d4:ca:bb:a0:8d: b0:ac:49:77:5d:88:ba:f4:c7:74:0d:fb:e2:2e:f5:15:7d:a5: 82:ce:ec:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15ibiHjhvxKfMnD82aqyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGRhMjFkYTgwMzhhODIwNTQyYjNhZmFmYmVhYWFhNjY2 YjdiMjcwHhcNMjUxMjA2MjMwMTMyWhcNMjUxMjA3MjMwMTMyWjAzMTEwLwYDVQQD EygzOWE3YjI0MmQ1Yzk3MmVlZDUyMDBjODE2NDJjNTRhZjQxZjdkNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQcpAlYbQ6uiKQF7M5N25zj1iOHY M2q53az/glvaaJd6c18r2zfVYxQUQi/6/kDMZRkXC8OzCqsA40EyFiLgREQrZZit FwETYlvtMQIhLvRMr/bmL4TOfqC2z62LF3/Ow0uu1+xeRuMLcflY8rxGAuRLjfDe HqkrFIc+guU4SG7IkajPcVsYEptlCe+jCnR5L6X6tYqQjwfJgE4klpLJlZnkZ54G F17FN+8vYMNkwPPJmzxZKBthFsbHBj1cQJiOhWG3Q4yxrPRut3/tZEgMBWc0KrJV LpgGdJKUbhAHdSPIhuikNBDmtt9sQVAkCAD+agUpUtoDWjFbjaXLB+9KQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmnskLVyXLu1SAMgWQsVK9B99R7MB8GA1UdIwQY MBaAFMdNoh2oA4qCBUKzr6++qqpma3snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Zjg0NDQtMmMzZC00NTkyLTk0NTgt ODAxZDg5ZDczNjZkLzEveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Zjg0NDQtMmMzZC00NTkyLTk0NTgtODAxZDg5ZDczNjZk LzEveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOipWJZq 5c/DH4Dl5Vm+Jq8lHtxPprXN5Fr+s9ul6cOK++9oIsbu1CD0TloZMP0btIKrNV3e 3EkcA0QDuvveqO3zwvr+em8STz7x8+U3g99rW96nn5x3IrhHTSQtuuu6rL+l4BlQ 6EqXTd2wk/Bkse1E1q+FG5s9qHwTQC8LW7T8Fg0IzgX0tIFYmYPqhvWD2ZxjX8ve x5qOErMhCYrLwq6oE/CIO8CH8EUOJbszvArOzk8SRqVpi9msCkaAln5k/xvBN/gC Fha4TdEv1GrI3WRPR+8yf8IE2pQjX6GEit0Hl+l+IdTKu6CNsKxJd12IuvTHdA37 4i71FX2lgs7s8g== -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:10 2025 by rpki-client