This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft File: 02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json) Hash identifier: PEKFX+pE3TZfhub/k88xm8pl8TcHzuSApC7dW3X0qQk= Subject key identifier: 47:88:E8:87:88:AC:0B:89:46:FD:E4:A3:81:16:5A:B4:AD:06:B6:5B Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE Certificate issuer: /CN=d36be6f075400d305a16dde690e25cbd94645cbe Certificate serial: 019B53AB920FF384D79533F6C7E81E9B65AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft Manifest number: 16E5 Signing time: Thu 25 Dec 2025 04:01:51 +0000 Manifest this update: Thu 25 Dec 2025 04:01:51 +0000 Manifest next update: Fri 26 Dec 2025 04:01:51 +0000 Files and hashes: 1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: P+sOvu21TbYj6VZhDKfr0wBgQKlQdExvTXn1ztk5w20=) 2: bTRllN3rhV7rnjQJp0rvDHo40Gs.roa (hash: Bx0kFO6OMs0rFfJ2IZkuiIUT2mg/0ptdVSDBzsrl1H8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:92:0f:f3:84:d7:95:33:f6:c7:e8:1e:9b:65:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe Validity Not Before: Dec 25 04:01:51 2025 GMT Not After : Dec 26 04:01:51 2025 GMT Subject: CN=4788e88788ac0b8946fde4a381165ab4ad06b65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7c:9f:f1:ec:5d:5f:3b:2a:5f:7a:9f:cd:60: 8a:ee:4e:c9:16:7d:21:21:42:9e:04:95:e6:0f:5f: 24:7a:7a:fb:5f:f6:b3:25:26:b3:0e:de:05:e6:ac: 29:fb:84:7f:d4:86:96:c3:81:85:ee:33:98:f1:18: 3d:03:b7:5f:56:07:ec:cd:6a:81:7a:d1:49:4c:af: 3d:31:4f:a4:ef:61:ea:31:fa:c8:50:95:69:2d:6e: ed:6d:07:ad:62:9e:12:37:6c:53:df:23:6e:78:70: 1d:72:ef:a3:dc:9b:2d:59:57:89:6a:48:c6:7f:4e: d7:bb:da:90:30:9a:81:3b:49:0e:e3:5c:ef:8e:ff: d8:94:30:ff:12:92:47:ef:50:60:dc:d3:a7:89:3a: 65:48:99:7e:1e:95:35:35:09:de:41:e9:ab:b5:f9: 4d:2d:70:e8:f3:a4:8c:69:c2:df:2d:ab:29:f1:6c: a0:47:14:bb:3f:a3:42:ef:c4:f8:cb:6d:82:79:18: 7d:a5:fd:21:84:0f:ee:a7:2b:ed:f3:37:6c:37:d8: 6c:96:0e:c1:55:1c:29:08:a1:e5:26:4e:84:83:c3: 26:85:4f:8d:51:de:b0:18:ca:23:63:97:26:2e:dd: 09:e9:7f:a1:f3:50:a8:f7:c5:cd:b7:7c:34:ff:af: a7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:88:E8:87:88:AC:0B:89:46:FD:E4:A3:81:16:5A:B4:AD:06:B6:5B X509v3 Authority Key Identifier: keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:10:51:d2:25:69:33:e0:26:20:71:02:e5:5f:8f:8d:fb:b1: 63:90:ef:d7:da:85:a8:fa:49:9f:74:d9:26:13:8c:0b:d1:ea: 3b:52:41:5b:67:50:75:10:92:fa:2c:2e:af:ae:53:32:06:0e: 87:79:24:f6:66:52:6f:af:ad:38:6b:28:28:69:1e:32:b1:ca: a5:11:6a:a2:b3:64:63:53:3b:6e:54:f3:32:4e:f9:b5:a3:3f: 2b:40:ea:3e:88:da:3b:7f:09:f1:49:e0:c8:8b:fe:6c:37:25: f5:c3:5f:41:fa:ad:80:ea:6a:37:79:74:7e:11:d3:bd:62:7c: 25:17:c8:9d:15:bf:b9:de:dc:09:cb:f9:27:b4:99:f3:1f:f2: c4:40:45:55:18:64:e4:2b:94:6c:c9:43:59:52:4b:18:9c:5a: 47:23:52:18:33:dc:de:f1:e5:76:d9:f4:2f:09:ac:1a:1e:28: b9:f4:7a:0f:6b:42:3d:0e:83:1b:f8:98:6c:05:15:83:f1:5e: 6b:58:94:3d:8c:9f:40:8b:0d:22:bd:86:2c:69:82:eb:fa:80: 4d:ce:80:ca:b7:01:d5:53:05:84:5f:f2:de:f2:24:ca:b6:5e: 75:fb:f1:77:8e:88:f0:50:28:01:fe:71:a8:a5:a2:77:69:de: 1b:32:78:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq5IP84TXlTP2x+gem2WvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNmJlNmYwNzU0MDBkMzA1YTE2ZGRlNjkwZTI1Y2JkOTQ2 NDVjYmUwHhcNMjUxMjI1MDQwMTUxWhcNMjUxMjI2MDQwMTUxWjAzMTEwLwYDVQQD Eyg0Nzg4ZTg4Nzg4YWMwYjg5NDZmZGU0YTM4MTE2NWFiNGFkMDZiNjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXyf8exdXzsqX3qfzWCK7k7JFn0h IUKeBJXmD18kenr7X/azJSazDt4F5qwp+4R/1IaWw4GF7jOY8Rg9A7dfVgfszWqB etFJTK89MU+k72HqMfrIUJVpLW7tbQetYp4SN2xT3yNueHAdcu+j3JstWVeJakjG f07Xu9qQMJqBO0kO41zvjv/YlDD/EpJH71Bg3NOniTplSJl+HpU1NQneQemrtflN LXDo86SMacLfLasp8WygRxS7P6NC78T4y22CeRh9pf0hhA/upyvt8zdsN9hslg7B VRwpCKHlJk6Eg8MmhU+NUd6wGMojY5cmLt0J6X+h81Co98XNt3w0/6+ncQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeI6IeIrAuJRv3ko4EWWrStBrZbMB8GA1UdIwQY MBaAFNNr5vB1QA0wWhbd5pDiXL2UZFy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZmRlMzgtZTliOS00YjY5LWI0MTQt MzBjMWM1YTA4MGQ5LzEvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wZmRlMzgtZTliOS00YjY5LWI0MTQtMzBjMWM1YTA4MGQ5 LzEvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxBR0iVp M+AmIHEC5V+PjfuxY5Dv19qFqPpJn3TZJhOMC9HqO1JBW2dQdRCS+iwur65TMgYO h3kk9mZSb6+tOGsoKGkeMrHKpRFqorNkY1M7blTzMk75taM/K0DqPojaO38J8Ung yIv+bDcl9cNfQfqtgOpqN3l0fhHTvWJ8JRfInRW/ud7cCcv5J7SZ8x/yxEBFVRhk 5CuUbMlDWVJLGJxaRyNSGDPc3vHldtn0LwmsGh4oufR6D2tCPQ6DG/iYbAUVg/Fe a1iUPYyfQIsNIr2GLGmC6/qATc6AyrcB1VMFhF/y3vIkyrZedfvxd46I8FAoAf5x qKWid2neGzJ4QA== -----END CERTIFICATE-----Generated at Thu Dec 25 09:14:31 2025 by rpki-client