This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft File: 02jCohY2GiT97Jfx838uHRIHEIc.mft (raw, json) Hash identifier: 1IVK4b/zMIi4G5hDAMRH4ePrU17LgkPCU7eCETRQTyU= Subject key identifier: 6E:0D:91:D1:8E:B5:45:2C:C4:39:C2:45:00:8D:57:6E:A3:BB:CD:DC Authority key identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87 Certificate issuer: /CN=d368c2a216361a24fdec97f1f37f2e1d12071087 Certificate serial: 019AF276D93FD3D9DE68AD2DA03FA2BF33CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 07:01:06 +0000 Manifest this update: Sat 06 Dec 2025 07:01:06 +0000 Manifest next update: Sun 07 Dec 2025 07:01:06 +0000 Files and hashes: 1: 02jCohY2GiT97Jfx838uHRIHEIc.crl (hash: K5N3DUIIgZjR9hy08GalzGP0qoylu6Pqyx0ndNHRgqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d9:3f:d3:d9:de:68:ad:2d:a0:3f:a2:bf:33:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d368c2a216361a24fdec97f1f37f2e1d12071087 Validity Not Before: Dec 6 07:01:06 2025 GMT Not After : Dec 7 07:01:06 2025 GMT Subject: CN=6e0d91d18eb5452cc439c245008d576ea3bbcddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:e8:67:34:7f:4a:48:40:22:c6:3f:4b:a5: d7:bc:71:96:da:00:01:a7:4a:36:cc:8c:05:ab:6c: 21:1d:b3:6f:90:52:3e:c4:3b:27:b8:bc:00:5e:7c: 20:0d:78:96:fe:b0:b0:29:01:42:9d:10:17:5e:b7: a0:45:ff:e2:f3:18:a8:43:c7:5e:5a:cd:e0:c3:5a: e8:38:ba:e5:4a:1e:ae:56:25:ad:1c:7e:31:67:51: b1:66:59:1f:e2:88:57:18:ae:a5:1c:f6:7e:38:d1: ef:cf:ef:8a:2a:aa:77:38:a6:70:37:5b:59:c6:19: 5e:fe:6d:f9:4c:97:2f:8f:4f:fa:ca:50:b2:ef:f5: cb:75:b5:2e:86:5e:46:49:d3:20:44:01:d3:7a:02: 47:49:2d:12:12:d5:d2:f2:c2:7e:67:0f:be:50:3e: b2:76:e5:c6:a5:c5:37:b7:00:fb:3b:4a:0e:56:62: 4c:63:82:04:93:73:20:8a:9c:96:51:b7:df:63:ed: d6:f7:06:e6:1d:94:f3:76:de:15:0e:65:61:7a:07: 7a:df:24:f8:20:0c:c0:40:27:9d:17:a9:42:b6:b6: c4:54:75:0d:56:d6:e8:cb:7f:1a:6f:57:6e:56:b3: 00:79:2d:94:dc:8d:34:db:85:b6:86:c4:7a:d9:46: e9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0D:91:D1:8E:B5:45:2C:C4:39:C2:45:00:8D:57:6E:A3:BB:CD:DC X509v3 Authority Key Identifier: keyid:D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e3:67:2d:e3:e0:e4:b2:84:83:a1:b6:d5:32:78:56:30:5f: e0:4a:f2:a5:47:18:54:c5:42:b3:d0:03:4b:f6:bb:d3:61:ab: d0:17:66:7a:b9:24:d5:32:40:e1:c2:4e:ca:05:9e:34:22:d0: c8:00:00:14:81:d4:f1:02:d7:ff:2e:00:22:65:70:01:92:29: 2f:6b:6a:b0:e2:c7:18:78:41:59:f4:a9:60:f9:36:d6:3c:e7: 3b:05:a3:fc:57:02:63:c3:cd:5e:d2:9c:9a:d2:77:41:41:f6: 47:ba:50:2d:54:cb:30:02:a5:a4:e7:7d:3f:80:71:b2:28:45: cd:f6:2b:b5:72:9c:5c:9c:69:73:ae:e4:03:27:21:be:4d:02: f3:7f:ec:52:b8:96:88:80:2c:67:2b:09:83:1e:bc:3c:87:ad: ae:5d:b6:78:93:c9:67:a9:d2:e3:33:db:1b:e7:22:14:fd:d4: b3:e5:34:c8:ab:47:83:83:d3:98:03:2c:a0:5d:44:d0:59:41: f9:7b:7f:96:3d:9b:d8:19:cd:c8:9f:73:20:97:cf:cb:7a:3a: d3:a1:c2:15:74:3f:35:e5:94:39:53:a8:13:a8:57:82:ca:5e: 40:08:99:2d:6d:56:1d:1c:c5:99:b2:b5:10:06:2f:c6:fd:87: 85:8d:db:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtk/09neaK0toD+ivzPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjhjMmEyMTYzNjFhMjRmZGVjOTdmMWYzN2YyZTFkMTIw NzEwODcwHhcNMjUxMjA2MDcwMTA2WhcNMjUxMjA3MDcwMTA2WjAzMTEwLwYDVQQD Eyg2ZTBkOTFkMThlYjU0NTJjYzQzOWMyNDUwMDhkNTc2ZWEzYmJjZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyroZzR/SkhAIsY/S6XXvHGW2gAB p0o2zIwFq2whHbNvkFI+xDsnuLwAXnwgDXiW/rCwKQFCnRAXXregRf/i8xioQ8de Ws3gw1roOLrlSh6uViWtHH4xZ1GxZlkf4ohXGK6lHPZ+ONHvz++KKqp3OKZwN1tZ xhle/m35TJcvj0/6ylCy7/XLdbUuhl5GSdMgRAHTegJHSS0SEtXS8sJ+Zw++UD6y duXGpcU3twD7O0oOVmJMY4IEk3MgipyWUbffY+3W9wbmHZTzdt4VDmVhegd63yT4 IAzAQCedF6lCtrbEVHUNVtboy38ab1duVrMAeS2U3I0024W2hsR62UbpKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4NkdGOtUUsxDnCRQCNV26ju83cMB8GA1UdIwQY MBaAFNNowqIWNhok/eyX8fN/Lh0SBxCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJqQ29oWTJHaVQ5N0pmeDgzOHVIUklIRUljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMjJlZGYtZmI0OS00ZTAxLThmZDQt OTAyMDhlMWYzZGU2LzEvMDJqQ29oWTJHaVQ5N0pmeDgzOHVIUklIRUljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kMjJlZGYtZmI0OS00ZTAxLThmZDQtOTAyMDhlMWYzZGU2 LzEvMDJqQ29oWTJHaVQ5N0pmeDgzOHVIUklIRUljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuNnLePg 5LKEg6G21TJ4VjBf4ErypUcYVMVCs9ADS/a702Gr0Bdmerkk1TJA4cJOygWeNCLQ yAAAFIHU8QLX/y4AImVwAZIpL2tqsOLHGHhBWfSpYPk21jznOwWj/FcCY8PNXtKc mtJ3QUH2R7pQLVTLMAKlpOd9P4BxsihFzfYrtXKcXJxpc67kAychvk0C83/sUriW iIAsZysJgx68PIetrl22eJPJZ6nS4zPbG+ciFP3Us+U0yKtHg4PTmAMsoF1E0FlB +Xt/lj2b2BnNyJ9zIJfPy3o606HCFXQ/NeWUOVOoE6hXgspeQAiZLW1WHRzFmbK1 EAYvxv2HhY3bog== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:18 2025 by rpki-client