This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft File: 02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json) Hash identifier: YTG9ReUTsw/QzUZ3CHms6WmFtVzH0spEFhqxDIjyiMg= Subject key identifier: A3:6B:6D:82:E1:D3:B6:A3:4E:0E:35:A8:4D:3E:D0:87:E1:D7:A4:99 Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95 Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095 Certificate serial: 019B36B2B80B3E4947482374A459447EB06A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft Manifest number: 0B45 Signing time: Fri 19 Dec 2025 13:00:40 +0000 Manifest this update: Fri 19 Dec 2025 13:00:40 +0000 Manifest next update: Sat 20 Dec 2025 13:00:40 +0000 Files and hashes: 1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: l71iJXS7yAlkMOebKoZY/wCk2XYev2veJVECt0wMPp8=) 2: MHr8PGZP4WdCJVRk1ABwnxF7Fcg.roa (hash: 6TKkNt/HHcapeVfZJIi0l5UGXRs34MQGe7K+m4zvMs4=) 3: glUIEM3aMRzTUWeLJXm7pNU7Hcc.roa (hash: dnZcMSrdJKJGGZKaN5OJM5oZr/gbEmBmefYKs8aAaDo=) 4: sUMt2I0qsDCXGGhD6_L1M2esRvU.roa (hash: P9ByjtRUC161Qd26Fzc7AA5m4JXTB5Ed5GY59AzQlSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:b8:0b:3e:49:47:48:23:74:a4:59:44:7e:b0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095 Validity Not Before: Dec 19 13:00:40 2025 GMT Not After : Dec 20 13:00:40 2025 GMT Subject: CN=a36b6d82e1d3b6a34e0e35a84d3ed087e1d7a499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a9:c5:8c:d5:3d:41:d3:3c:d9:1a:54:91:08: c8:79:0d:40:2a:87:e8:26:b7:5b:08:e9:d4:0b:c5: 15:f2:73:d9:4a:20:7f:3a:0a:b5:9c:47:fe:e0:31: b4:3f:1d:a1:ef:ab:e6:38:0f:54:df:fe:2f:b2:7c: 98:6a:cd:98:e5:f1:3a:0b:05:82:2b:2c:5b:bb:ab: e3:7a:15:72:73:01:53:79:c0:54:fc:57:f4:b1:5b: e0:42:39:33:39:d5:54:df:3c:a6:df:ca:99:ad:6e: c4:1a:0a:20:12:e8:39:9b:43:15:2d:c0:5d:57:34: cb:78:9d:08:71:22:d0:22:4f:6f:4b:69:31:29:b0: 0d:6e:55:82:ae:c5:2b:2b:65:fa:1c:50:04:99:2f: a8:15:b0:eb:b8:82:0c:57:93:81:fd:e5:e3:0a:6f: af:69:05:49:99:e8:70:b0:e1:85:04:ab:88:38:ce: f6:0c:cb:e8:06:56:ef:2f:30:be:db:53:7d:f1:00: b4:fe:21:9f:88:65:20:b6:87:d0:d4:2d:bb:20:ce: ef:1d:07:7f:d9:68:89:76:62:fd:35:d7:54:08:4c: 2b:59:d7:bc:4e:10:de:a4:81:d3:76:c5:fc:6d:bc: 8c:fc:56:ed:a8:93:6f:40:cc:38:85:f2:a5:ad:c1: 33:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6B:6D:82:E1:D3:B6:A3:4E:0E:35:A8:4D:3E:D0:87:E1:D7:A4:99 X509v3 Authority Key Identifier: keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:50:d8:f4:14:03:73:e5:1d:c9:14:ba:cc:bd:cf:1b:8e:f2: 73:7a:48:54:f4:55:35:83:4a:0e:d7:35:91:fc:56:3d:4f:60: ec:dd:99:70:57:78:0a:73:65:c5:04:01:15:a7:5a:6e:cd:07: ae:8c:df:03:bd:be:c2:0c:e3:f4:4d:be:a7:06:f7:f3:5f:97: be:26:08:b9:b5:5c:9d:76:63:5c:10:65:1d:ac:cb:f8:1c:0f: f7:b5:5f:40:e7:06:2d:60:a9:d7:a9:8e:13:c6:fe:41:12:6d: 2b:c9:d8:c2:4f:0a:78:c9:23:24:99:f7:b7:35:b1:5a:f6:c5: bb:34:42:09:a4:5e:3b:34:f7:10:c5:35:e0:9a:d2:a8:f1:0f: 6c:14:cc:01:90:90:14:8e:35:6e:a8:6e:d4:50:18:d6:29:9f: 4a:18:c4:b8:5d:4c:e4:4e:92:5f:3d:b1:13:8a:ac:f9:50:fe: 3c:90:da:a3:90:7e:a3:04:a7:51:21:e0:49:06:1d:6b:19:85: 19:67:0e:a7:bf:e4:bb:14:7a:3d:6d:86:d7:91:3f:4f:fd:52: d3:46:7b:ce:62:58:3b:1a:2e:90:3c:fb:c5:9d:4b:2c:46:62: 53:2c:d2:db:c2:ca:17:f3:26:04:ce:fb:e8:8b:ab:44:e3:43: b9:2b:a5:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2srgLPklHSCN0pFlEfrBqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNmJmZDkyOGJjY2I0MmFkOWM0NjhhNTUyYWI3MzkzZmRk ODcwOTUwHhcNMjUxMjE5MTMwMDQwWhcNMjUxMjIwMTMwMDQwWjAzMTEwLwYDVQQD EyhhMzZiNmQ4MmUxZDNiNmEzNGUwZTM1YTg0ZDNlZDA4N2UxZDdhNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qnFjNU9QdM82RpUkQjIeQ1AKofo JrdbCOnUC8UV8nPZSiB/Ogq1nEf+4DG0Px2h76vmOA9U3/4vsnyYas2Y5fE6CwWC Kyxbu6vjehVycwFTecBU/Ff0sVvgQjkzOdVU3zym38qZrW7EGgogEug5m0MVLcBd VzTLeJ0IcSLQIk9vS2kxKbANblWCrsUrK2X6HFAEmS+oFbDruIIMV5OB/eXjCm+v aQVJmehwsOGFBKuIOM72DMvoBlbvLzC+21N98QC0/iGfiGUgtofQ1C27IM7vHQd/ 2WiJdmL9NddUCEwrWde8ThDepIHTdsX8bbyM/FbtqJNvQMw4hfKlrcEzxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNrbYLh07ajTg41qE0+0Ifh16SZMB8GA1UdIwQY MBaAFNNr/ZKLzLQq2cRopVKrc5P92HCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjkt YTc0ZTRhODg3ODA0LzEvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjktYTc0ZTRhODg3ODA0 LzEvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlDY9BQD c+UdyRS6zL3PG47yc3pIVPRVNYNKDtc1kfxWPU9g7N2ZcFd4CnNlxQQBFadabs0H rozfA72+wgzj9E2+pwb381+XviYIubVcnXZjXBBlHazL+BwP97VfQOcGLWCp16mO E8b+QRJtK8nYwk8KeMkjJJn3tzWxWvbFuzRCCaReOzT3EMU14JrSqPEPbBTMAZCQ FI41bqhu1FAY1imfShjEuF1M5E6SXz2xE4qs+VD+PJDao5B+owSnUSHgSQYdaxmF GWcOp7/kuxR6PW2G15E/T/1S00Z7zmJYOxoukDz7xZ1LLEZiUyzS28LKF/MmBM77 6IurRONDuSulFw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:10:39 2025 by rpki-client