This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft File: 02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json) Hash identifier: qtjgzur3vGPjTBoFpAx8CeFFp4cyB20tQRtDyo6xRkw= Subject key identifier: 30:AD:D3:59:57:AC:8D:12:E3:71:A3:B8:B6:AE:DA:D8:AA:18:46:3B Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5 Certificate issuer: /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5 Certificate serial: 019AF0BF5FC30F04D10D9A3C9EA594B49C96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 23:01:04 +0000 Manifest this update: Fri 05 Dec 2025 23:01:04 +0000 Manifest next update: Sat 06 Dec 2025 23:01:04 +0000 Files and hashes: 1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: 2tmMhyc5xwWB9TJXIHQZSLDBnfCIheY4niZ3A+4HhHU=) 2: FxHUQG3qdwh_Io72-qooMYusypM.roa (hash: 6TiBJA+vFO4OcdT2PwhLRo55PhguPodqdNqueOVwTtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:5f:c3:0f:04:d1:0d:9a:3c:9e:a5:94:b4:9c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5 Validity Not Before: Dec 5 23:01:04 2025 GMT Not After : Dec 6 23:01:04 2025 GMT Subject: CN=30add35957ac8d12e371a3b8b6aedad8aa18463b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:61:52:15:09:77:46:0d:ee:35:60:0b:92: ad:8d:96:e0:b0:c3:29:03:50:08:d9:77:45:89:b0: a4:5b:8f:f1:f9:1f:46:df:e3:9e:51:d8:bd:c4:bc: ca:30:1a:00:13:cf:19:a8:f7:05:72:2a:32:3b:37: 5a:a5:31:3a:73:b8:a2:a8:57:0c:02:d7:cd:56:41: 2d:59:9a:f2:de:91:ce:e9:b9:6b:c0:b7:5d:5d:cb: 6a:7a:c1:31:c7:c2:84:95:f0:79:f2:3e:72:0b:43: 11:7e:93:6e:d9:d8:1e:f7:29:93:59:78:55:39:04: 5f:fc:c1:46:71:92:42:8c:d6:3d:8e:63:82:fe:d4: 09:f2:a2:c7:8b:cf:aa:8a:1c:27:ec:ec:c6:45:51: 15:3a:81:da:4f:67:81:68:50:d2:79:02:4f:83:f1: 15:78:3b:db:e1:82:a0:17:94:06:fd:a3:ca:cf:b9: 2b:e2:93:20:af:2a:7e:97:a7:5f:21:28:4a:e9:d9: 3d:cb:22:00:4d:05:04:17:11:90:60:8d:0d:b7:ea: 52:af:6b:60:b8:8e:09:04:06:58:ac:d2:98:97:23: 22:bf:d4:29:8f:72:a0:3d:fc:0e:c3:e1:87:3e:f5: 13:e8:3b:47:b4:27:e4:99:b7:27:77:ef:c2:b4:bc: 6d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AD:D3:59:57:AC:8D:12:E3:71:A3:B8:B6:AE:DA:D8:AA:18:46:3B X509v3 Authority Key Identifier: keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:e1:3c:28:16:dd:19:a8:c0:e8:ab:75:d7:f1:98:b5:f9:00: 57:92:cc:6a:3b:34:c9:fb:3a:6d:01:fb:b8:9c:46:be:53:2a: b2:75:d3:fb:0c:c5:b4:b9:98:1f:e5:d2:35:8d:71:92:4e:1d: f0:da:6e:7f:20:43:4d:c1:16:8d:19:16:77:19:d9:63:e1:7e: 35:18:6f:ab:af:10:35:40:8a:39:b1:b7:45:e4:0a:01:bc:fc: 96:b2:4e:ee:0a:e9:96:2f:e5:7b:6c:7b:89:69:11:5f:61:df: c7:f4:82:22:06:28:da:e7:5c:bc:2e:89:cd:62:64:5f:60:56: c9:bb:e8:ed:a0:51:9d:40:0a:c3:70:96:39:33:e2:1e:22:4d: 39:88:88:61:12:ff:dc:42:ee:d1:83:d6:09:f3:58:cb:e8:f2: aa:fa:8f:c2:39:f5:91:eb:39:6a:f4:47:1f:bd:fd:b0:0b:f0: 0c:2b:cf:a4:00:77:52:39:7d:a6:b7:a4:ee:f7:c7:7e:e2:b6: d5:a1:4e:9b:18:0b:d1:91:92:8e:b9:c5:38:ca:e0:42:3b:b0: e1:9b:a4:dd:a2:08:0d:5f:18:67:2d:a6:72:1c:34:bc:2a:74: d2:15:fa:2e:06:b4:4a:85:77:36:66:4c:91:b4:5d:17:43:72: bf:52:91:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1/DDwTRDZo8nqWUtJyWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjdkMTYzNWI0NmIzYzIyNzRiMjg3NTA1YmJiZDdkOTE1 ZGNhZjUwHhcNMjUxMjA1MjMwMTA0WhcNMjUxMjA2MjMwMTA0WjAzMTEwLwYDVQQD EygzMGFkZDM1OTU3YWM4ZDEyZTM3MWEzYjhiNmFlZGFkOGFhMTg0NjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4dhUhUJd0YN7jVgC5KtjZbgsMMp A1AI2XdFibCkW4/x+R9G3+OeUdi9xLzKMBoAE88ZqPcFcioyOzdapTE6c7iiqFcM AtfNVkEtWZry3pHO6blrwLddXctqesExx8KElfB58j5yC0MRfpNu2dge9ymTWXhV OQRf/MFGcZJCjNY9jmOC/tQJ8qLHi8+qihwn7OzGRVEVOoHaT2eBaFDSeQJPg/EV eDvb4YKgF5QG/aPKz7kr4pMgryp+l6dfIShK6dk9yyIATQUEFxGQYI0Nt+pSr2tg uI4JBAZYrNKYlyMiv9Qpj3KgPfwOw+GHPvUT6DtHtCfkmbcnd+/CtLxtYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCt01lXrI0S43GjuLau2tiqGEY7MB8GA1UdIwQY MBaAFNNn0WNbRrPCJ0sodQW7vX2RXcr1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84YThiNGMtOGYxMi00YzhkLThiZTQt NjliOGQ2YjUzZThjLzEvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy84YThiNGMtOGYxMi00YzhkLThiZTQtNjliOGQ2YjUzZThj LzEvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAteE8KBbd GajA6Kt11/GYtfkAV5LMajs0yfs6bQH7uJxGvlMqsnXT+wzFtLmYH+XSNY1xkk4d 8NpufyBDTcEWjRkWdxnZY+F+NRhvq68QNUCKObG3ReQKAbz8lrJO7grpli/le2x7 iWkRX2Hfx/SCIgYo2udcvC6JzWJkX2BWybvo7aBRnUAKw3CWOTPiHiJNOYiIYRL/ 3ELu0YPWCfNYy+jyqvqPwjn1kes5avRHH739sAvwDCvPpAB3Ujl9prek7vfHfuK2 1aFOmxgL0ZGSjrnFOMrgQjuw4Zuk3aIIDV8YZy2mchw0vCp00hX6Lga0SoV3NmZM kbRdF0Nyv1KRjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:23 2025 by rpki-client