This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft File: m-02rxPaSC_feftUA-UHSGDuzQ0.mft (raw, json) Hash identifier: 5uga1CEHcIA6cGlp9f/CrqAGHREoMz8nRC1V5RUk2lc= Subject key identifier: 3E:E9:C2:4A:79:19:B9:7C:2A:DA:90:A1:DF:B0:9B:CB:0D:53:B3:EE Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D Certificate issuer: /CN=9bed36af13da482fdf79fb5403e5074860eecd0d Certificate serial: 019AF1D22BF0DEAFD5CA951AB7D683CD4EFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft Manifest number: 1245 Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: GCFxtCAUzvqYZpyUW8Mzrm4wxsc.roa (hash: IKXqgRLjEEuJWHSAJe6iyyi0FX1Oz2p26+VidSpPSQE=) 2: gME55grAdW0csfpDqI4X-z1lPB8.roa (hash: Yk24RuTuN+kQwIiTqSqW+TjwkayeuH80Y+g3ReFhIuE=) 3: m-02rxPaSC_feftUA-UHSGDuzQ0.crl (hash: 7m+4ukyXuexSQEqGuVuwIbynL87x2WXGEwCZXtBvpNk=) 4: oAMq7eOSrrg7QzHYvuiclu2pDcU.roa (hash: 0Dq9HT+D04Msgy5j4AI+QE/myTwZkQVZ5ZeJBagVuyM=) 5: rPUiYOwFFBXwEbG0rI7AP5flCD0.roa (hash: fpp2fjiduFcCROlP6+vFm2e63EILUjHK8HyGsStaukM=) 6: tsiU7azXEn11ZU6Xi_XUw-9XI8A.roa (hash: zObDmeFB3M8dfzRuyTAH/oAzX2g0/cCu39kU8lAYB64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2b:f0:de:af:d5:ca:95:1a:b7:d6:83:cd:4e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=3ee9c24a7919b97c2ada90a1dfb09bcb0d53b3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:99:2b:2f:04:14:c0:44:ef:92:b0:51:f4:35: 1e:a6:f6:00:ff:f0:68:68:ad:d7:82:bc:da:40:b0: 88:21:7c:40:ce:18:eb:fe:ef:0b:27:67:02:44:96: eb:57:f7:8b:44:15:c5:36:c5:c1:49:89:de:cd:49: 9d:c0:76:fd:da:59:46:47:ae:e0:4a:fc:17:1f:a7: f4:2d:33:6d:b7:04:03:96:65:2b:8c:a5:7f:ca:18: 78:af:5b:9e:aa:d0:9b:d8:77:ec:dd:07:83:8b:8e: 74:30:2a:87:8c:dc:b1:30:1d:56:99:96:02:99:db: f9:57:43:f0:f8:5c:dc:06:b0:a2:6c:44:65:92:5f: 43:2e:2f:67:fb:a2:7a:8f:42:86:30:39:3a:ad:83: 96:e4:f4:bf:fa:d0:88:4a:82:83:7e:3f:60:c9:7d: 6c:9e:3a:86:72:ba:29:94:85:12:5d:70:5d:ea:35: 39:bb:f2:65:0c:c0:ea:34:e2:40:62:e1:64:f7:27: f9:da:a7:fe:1c:c3:61:d8:cd:47:4d:88:df:bd:3d: 58:55:e9:e2:49:dd:15:7f:2b:86:f9:18:2c:f5:3b: 1f:20:23:15:3b:62:05:fb:c4:d3:9e:62:db:eb:79: b5:49:d6:8f:fd:3a:eb:b1:35:96:e6:2c:6b:f7:c2: 56:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E9:C2:4A:79:19:B9:7C:2A:DA:90:A1:DF:B0:9B:CB:0D:53:B3:EE X509v3 Authority Key Identifier: keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:f6:8c:4e:36:e0:a8:51:87:93:10:9e:73:c0:3d:01:06:e0: d1:90:f7:74:7b:03:2b:d4:a1:98:1c:53:7f:c3:35:e4:66:63: 88:38:3f:fb:6d:18:3d:e3:17:77:b9:11:f1:ab:28:cb:97:d2: a3:5b:f8:43:54:49:23:8f:33:a3:56:d8:91:f8:81:10:69:9c: d9:8d:a9:40:e0:33:a8:0a:cb:76:ea:4b:60:b4:18:a2:93:83: 5c:04:34:8b:b4:09:f9:b3:fe:c0:d2:5e:da:d3:e6:17:cd:71: 7d:d7:b6:5f:d9:5a:9c:d1:c4:83:4b:bc:e3:83:db:e9:dd:63: 60:c3:e2:75:49:37:10:41:dc:61:b5:aa:21:6a:cf:05:53:6c: 9d:41:31:ed:42:79:76:9d:ec:e4:ce:91:55:26:78:a2:07:9f: e1:6a:16:9f:5a:80:4a:53:5c:3a:f9:43:ac:cb:21:d4:aa:d6: 5e:22:a6:67:38:c6:f1:fc:5f:c8:94:41:75:33:cf:3f:84:e7: 95:42:b8:36:39:b1:a8:35:15:21:ce:f4:5b:be:87:a1:77:8c: e5:1a:df:02:02:31:9d:df:7c:06:a1:fa:50:a6:f3:52:f7:b1: 72:1c:6f:78:ee:f8:ba:0c:9b:22:05:6e:82:10:be:47:0f:e3: 1f:06:4d:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ivw3q/VypUat9aDzU7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZWQzNmFmMTNkYTQ4MmZkZjc5ZmI1NDAzZTUwNzQ4NjBl ZWNkMGQwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD EygzZWU5YzI0YTc5MTliOTdjMmFkYTkwYTFkZmIwOWJjYjBkNTNiM2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpkrLwQUwETvkrBR9DUepvYA//Bo aK3XgrzaQLCIIXxAzhjr/u8LJ2cCRJbrV/eLRBXFNsXBSYnezUmdwHb92llGR67g SvwXH6f0LTNttwQDlmUrjKV/yhh4r1ueqtCb2Hfs3QeDi450MCqHjNyxMB1WmZYC mdv5V0Pw+FzcBrCibERlkl9DLi9n+6J6j0KGMDk6rYOW5PS/+tCISoKDfj9gyX1s njqGcroplIUSXXBd6jU5u/JlDMDqNOJAYuFk9yf52qf+HMNh2M1HTYjfvT1YVeni Sd0VfyuG+Rgs9TsfICMVO2IF+8TTnmLb63m1SdaP/TrrsTWW5ixr98JWpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7pwkp5Gbl8KtqQod+wm8sNU7PuMB8GA1UdIwQY MBaAFJvtNq8T2kgv33n7VAPlB0hg7s0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS0wMnJ4UGFTQ19mZWZ0VUEtVUhTR0R1elEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80YjAyODMtYTkwYy00ZDY0LTgzMDEt ZDIyMWViZDA4MThkLzEvbS0wMnJ4UGFTQ19mZWZ0VUEtVUhTR0R1elEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni80YjAyODMtYTkwYy00ZDY0LTgzMDEtZDIyMWViZDA4MThk LzEvbS0wMnJ4UGFTQ19mZWZ0VUEtVUhTR0R1elEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvaMTjbg qFGHkxCec8A9AQbg0ZD3dHsDK9ShmBxTf8M15GZjiDg/+20YPeMXd7kR8asoy5fS o1v4Q1RJI48zo1bYkfiBEGmc2Y2pQOAzqArLdupLYLQYopODXAQ0i7QJ+bP+wNJe 2tPmF81xfde2X9lanNHEg0u844Pb6d1jYMPidUk3EEHcYbWqIWrPBVNsnUEx7UJ5 dp3s5M6RVSZ4ogef4WoWn1qASlNcOvlDrMsh1KrWXiKmZzjG8fxfyJRBdTPPP4Tn lUK4NjmxqDUVIc70W76HoXeM5RrfAgIxnd98BqH6UKbzUvexchxveO74ugybIgVu ghC+Rw/jHwZNPg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:54 2025 by rpki-client