This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft File: 02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft (raw, json) Hash identifier: rI5zXC7QSEOS6P/IQAIvfvqTXA8sa8RFww7JW1wVzv0= Subject key identifier: 6B:8F:BD:13:F9:67:E6:9A:53:F9:57:0D:7A:67:E1:B4:76:12:6A:A8 Authority key identifier: D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54 Certificate issuer: /CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654 Certificate serial: 019AF5780DF3ECA9BEDAA2B7B050C950EA03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft Manifest number: 0817 Signing time: Sat 06 Dec 2025 21:01:17 +0000 Manifest this update: Sat 06 Dec 2025 21:01:17 +0000 Manifest next update: Sun 07 Dec 2025 21:01:17 +0000 Files and hashes: 1: 02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl (hash: nTwsbqzehh8n3x8bW69FFPjgbUjknrRzpcCYtV2bcvU=) 2: W26ZqjqHqJjDL39ur5MOByNqIds.roa (hash: 0jU+Z1p1KvFeE69GaV/1hkIxIM6ZLT+t/K51maZsks4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:0d:f3:ec:a9:be:da:a2:b7:b0:50:c9:50:ea:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654 Validity Not Before: Dec 6 21:01:17 2025 GMT Not After : Dec 7 21:01:17 2025 GMT Subject: CN=6b8fbd13f967e69a53f9570d7a67e1b476126aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:37:0f:1b:e8:bf:88:b3:09:73:c5:76:c8: 6a:63:23:70:fb:e1:c7:e7:8a:4e:13:f7:19:05:1b: 4d:af:b4:b3:07:51:1b:2c:8a:a4:f8:c3:72:74:c7: 81:c6:b8:ed:2e:c5:4a:84:5b:85:d0:cb:f1:51:42: e4:ca:38:d9:b3:3f:53:e2:a1:ea:a9:56:6d:59:6e: 8f:c1:74:ca:55:99:1a:b1:37:c5:e2:75:cc:f0:6f: a3:c6:d5:af:c2:be:83:90:92:d4:90:d5:a9:4c:a7: 47:1d:5f:d0:e3:a9:18:6f:c1:54:92:c5:14:18:14: b4:e8:7a:9c:19:4a:98:f9:ec:00:8e:e2:f6:b7:5e: 55:ce:49:82:20:9c:84:cf:ce:4a:10:6c:f7:7b:b2: 1f:3d:3e:20:e3:fa:58:45:39:29:93:40:9b:e4:73: 66:8a:ab:40:e0:45:fb:7b:2b:79:f8:ce:2c:c2:6a: 39:00:5e:37:e1:97:8f:b1:26:40:4d:8c:42:07:17: e0:8a:32:58:e7:82:a0:64:c0:62:7b:9a:43:49:fd: 5d:a5:68:b3:29:b9:51:81:7a:f3:7c:1e:95:eb:77: f0:cb:03:fb:36:a9:ad:fb:81:41:05:ef:c3:64:25: b2:16:e1:79:ff:ec:bc:95:30:09:3d:f1:e6:3f:d1: 17:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8F:BD:13:F9:67:E6:9A:53:F9:57:0D:7A:67:E1:B4:76:12:6A:A8 X509v3 Authority Key Identifier: keyid:D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:71:2a:1c:45:20:e2:19:51:af:82:c6:93:31:e7:2d:cd:41: 57:f1:85:59:03:41:7e:42:44:1d:46:b1:9f:0d:3e:9e:af:9e: ab:79:d4:93:da:34:22:38:50:e2:fd:40:ef:ef:01:c1:79:57: 88:41:40:87:3a:1d:5f:d3:c5:3a:a0:07:6e:19:34:0d:14:22: 15:39:b3:54:6a:90:0a:12:e0:3f:6e:4b:7f:03:67:59:06:79: 83:2f:ba:bc:d3:2d:c0:a8:d1:d7:49:9d:59:5f:ed:06:a2:26: df:02:0d:4e:a4:60:2a:52:54:3f:79:e9:1b:82:f8:c4:f3:96: a7:e9:3c:b1:16:fc:cc:e0:69:56:57:7d:62:68:2f:af:e4:0d: f7:f1:d1:cd:08:7a:c8:52:a5:d5:38:05:f9:c5:85:9a:1f:52: 87:bc:b4:77:d6:fa:44:5f:40:f4:a7:2b:7b:f0:40:d6:46:1c: f3:97:89:bc:f2:8c:2a:8e:f6:30:bd:e6:1f:ba:1b:0a:af:12: 30:e2:3d:90:b2:b1:49:70:b1:45:f5:c6:08:57:aa:74:9e:59: 6a:57:21:e7:80:34:2f:69:d1:8e:f6:76:35:56:c0:a5:e0:bb: f4:24:83:10:47:89:ed:87:cc:0f:3a:29:f6:67:fd:ef:45:4a: 9d:b3:53:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eA3z7Km+2qK3sFDJUOoDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjQ4M2U2NjdjOWZjZThmODBmNWFhYTVhYzZlOTE2YmM1 NGU2NTQwHhcNMjUxMjA2MjEwMTE3WhcNMjUxMjA3MjEwMTE3WjAzMTEwLwYDVQQD Eyg2YjhmYmQxM2Y5NjdlNjlhNTNmOTU3MGQ3YTY3ZTFiNDc2MTI2YWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw803Dxvov4izCXPFdshqYyNw++HH 54pOE/cZBRtNr7SzB1EbLIqk+MNydMeBxrjtLsVKhFuF0MvxUULkyjjZsz9T4qHq qVZtWW6PwXTKVZkasTfF4nXM8G+jxtWvwr6DkJLUkNWpTKdHHV/Q46kYb8FUksUU GBS06HqcGUqY+ewAjuL2t15VzkmCIJyEz85KEGz3e7IfPT4g4/pYRTkpk0Cb5HNm iqtA4EX7eyt5+M4swmo5AF434ZePsSZATYxCBxfgijJY54KgZMBie5pDSf1dpWiz KblRgXrzfB6V63fwywP7Nqmt+4FBBe/DZCWyFuF5/+y8lTAJPfHmP9EXjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuPvRP5Z+aaU/lXDXpn4bR2EmqoMB8GA1UdIwQY MBaAFNNkg+Znyfzo+A9aqlrG6Ra8VOZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJTRDVtZkpfT2o0RDFxcVdzYnBGcnhVNWxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85ZTY5OTYtMmU4OS00ODI5LWEzN2It MDczNGZmYmE4Y2E2LzEvMDJTRDVtZkpfT2o0RDFxcVdzYnBGcnhVNWxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85ZTY5OTYtMmU4OS00ODI5LWEzN2ItMDczNGZmYmE4Y2E2 LzEvMDJTRDVtZkpfT2o0RDFxcVdzYnBGcnhVNWxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHEqHEUg 4hlRr4LGkzHnLc1BV/GFWQNBfkJEHUaxnw0+nq+eq3nUk9o0IjhQ4v1A7+8BwXlX iEFAhzodX9PFOqAHbhk0DRQiFTmzVGqQChLgP25LfwNnWQZ5gy+6vNMtwKjR10md WV/tBqIm3wINTqRgKlJUP3npG4L4xPOWp+k8sRb8zOBpVld9Ymgvr+QN9/HRzQh6 yFKl1TgF+cWFmh9Sh7y0d9b6RF9A9Kcre/BA1kYc85eJvPKMKo72ML3mH7obCq8S MOI9kLKxSXCxRfXGCFeqdJ5Zalch54A0L2nRjvZ2NVbApeC79CSDEEeJ7YfMDzop 9mf970VKnbNTgg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:03 2025 by rpki-client