This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft File: G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json) Hash identifier: SctNi0vb+FRcW6j/jtomY+GjxNeLv7zquowgm+2a+BY= Subject key identifier: CB:CA:39:D5:A5:17:85:EB:67:78:9D:B1:61:28:AE:42:0A:9D:EC:F3 Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45 Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45 Certificate serial: 019B37FCB584BB7A121F894AA8873E442EEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft Manifest number: 075A Signing time: Fri 19 Dec 2025 19:01:06 +0000 Manifest this update: Fri 19 Dec 2025 19:01:06 +0000 Manifest next update: Sat 20 Dec 2025 19:01:06 +0000 Files and hashes: 1: 66D5GH85kpdoRl5xE-EYGnJIu7s.roa (hash: FRI0FnMjIpTP/o+NpM2rBO+2noxEcPY4kmpjzIRRmcw=) 2: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: K2u3qiPn6lLdCeLNHgdAKQGxeD6EWwcRzI0vHnq2MDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:b5:84:bb:7a:12:1f:89:4a:a8:87:3e:44:2e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45 Validity Not Before: Dec 19 19:01:06 2025 GMT Not After : Dec 20 19:01:06 2025 GMT Subject: CN=cbca39d5a51785eb67789db16128ae420a9decf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:bb:83:d1:89:bd:94:47:d0:8a:4a:1f:5e: 5c:24:e6:87:03:de:b4:1c:08:01:5e:c8:1a:20:bc: d4:6f:da:98:6b:5c:22:b7:8f:53:ec:fa:e6:fe:51: 1e:f8:ac:7d:79:89:d9:7f:97:04:02:4b:8a:bc:af: 3e:c0:ae:b1:4f:31:5d:fe:f9:5d:dd:d0:14:08:8c: ff:8b:32:87:5c:33:19:ba:e6:4b:79:6e:6d:08:dc: fa:d7:3f:5f:29:95:11:86:e1:20:b9:72:f7:81:04: d4:a8:49:79:1f:b6:aa:e7:92:94:7a:bb:31:9e:79: 81:6c:55:8f:69:df:cc:a1:68:61:98:f2:1d:c2:5e: b9:ad:0f:bf:b5:ea:97:ce:18:ae:d0:a8:e0:4d:57: b3:bf:0f:dc:b3:fb:dc:31:50:b8:fe:d9:ac:65:00: 50:79:52:9d:1b:d6:dc:6e:2b:69:40:25:9a:23:30: b4:b6:e2:3e:81:59:b9:da:f2:86:43:13:3c:06:c3: 23:66:b2:7c:db:44:7f:b3:67:5b:be:a6:89:d0:72: 9b:dd:4d:d2:ab:b2:fd:43:b7:84:37:96:18:5a:df: 3d:d5:56:00:48:17:1a:e3:40:df:d8:4d:70:d3:af: a9:67:98:28:ee:ad:39:50:ed:bd:14:20:ca:ae:72: 5c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CA:39:D5:A5:17:85:EB:67:78:9D:B1:61:28:AE:42:0A:9D:EC:F3 X509v3 Authority Key Identifier: keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c0:93:07:9c:ce:94:4e:0d:af:81:cc:18:b9:71:99:df:96: 9e:9b:0c:3d:43:70:c5:d1:83:68:6e:a3:ed:82:3e:72:b1:ad: d5:dc:dc:28:6b:40:17:7d:02:3e:72:73:05:88:a5:5f:b6:b9: 5a:7e:fb:be:eb:88:af:98:76:b3:14:c6:23:e5:62:32:39:8f: 3f:34:be:27:53:4b:5c:15:5b:b6:13:d3:55:e3:74:53:40:bd: ea:62:ad:a8:31:7a:2f:54:f6:f8:e1:04:e4:25:1d:ef:80:ca: a4:a7:1b:cc:b4:6c:a3:cf:8a:da:78:84:09:f8:9a:34:4b:a8: 2a:e2:f7:d5:72:ae:45:6c:aa:8b:f4:ca:fa:25:fb:70:ef:2c: d6:a5:d5:32:93:78:48:b3:1b:09:aa:71:19:8d:3d:1a:de:e3: f2:e3:df:eb:0a:53:0e:32:08:cc:ba:2d:be:70:42:15:6b:cb: 1f:99:4e:43:fa:30:5d:8c:95:0e:3b:87:a8:f9:98:95:61:12: f9:b8:31:cf:a1:22:e5:7e:a1:c3:84:3f:1d:23:e8:1f:e6:18: a1:9e:83:df:80:4c:df:5f:f1:55:24:0b:98:59:25:0f:e0:dd: ab:7f:96:b5:6c:57:95:ae:e1:d2:8c:e2:99:fe:74:05:e6:48: 86:2f:20:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/LWEu3oSH4lKqIc+RC7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNGQ4MDM3M2UzZTM0ZDAwYTg1Yjg0MTI4ZDQwNTM5OWJj ZjhhNDUwHhcNMjUxMjE5MTkwMTA2WhcNMjUxMjIwMTkwMTA2WjAzMTEwLwYDVQQD EyhjYmNhMzlkNWE1MTc4NWViNjc3ODlkYjE2MTI4YWU0MjBhOWRlY2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4i7g9GJvZRH0IpKH15cJOaHA960 HAgBXsgaILzUb9qYa1wit49T7Prm/lEe+Kx9eYnZf5cEAkuKvK8+wK6xTzFd/vld 3dAUCIz/izKHXDMZuuZLeW5tCNz61z9fKZURhuEguXL3gQTUqEl5H7aq55KUersx nnmBbFWPad/MoWhhmPIdwl65rQ+/teqXzhiu0KjgTVezvw/cs/vcMVC4/tmsZQBQ eVKdG9bcbitpQCWaIzC0tuI+gVm52vKGQxM8BsMjZrJ820R/s2dbvqaJ0HKb3U3S q7L9Q7eEN5YYWt891VYASBca40Df2E1w06+pZ5go7q05UO29FCDKrnJcewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvKOdWlF4XrZ3idsWEorkIKnezzMB8GA1UdIwQY MBaAFBtNgDc+PjTQCoW4QSjUBTmbz4pFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yNTc0ZDItY2IwYy00YjJhLWJlODMt OGUwMGJkYTNiMjQ1LzEvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yNTc0ZDItY2IwYy00YjJhLWJlODMtOGUwMGJkYTNiMjQ1 LzEvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsCTB5zO lE4Nr4HMGLlxmd+WnpsMPUNwxdGDaG6j7YI+crGt1dzcKGtAF30CPnJzBYilX7a5 Wn77vuuIr5h2sxTGI+ViMjmPPzS+J1NLXBVbthPTVeN0U0C96mKtqDF6L1T2+OEE 5CUd74DKpKcbzLRso8+K2niECfiaNEuoKuL31XKuRWyqi/TK+iX7cO8s1qXVMpN4 SLMbCapxGY09Gt7j8uPf6wpTDjIIzLotvnBCFWvLH5lOQ/owXYyVDjuHqPmYlWES +bgxz6Ei5X6hw4Q/HSPoH+YYoZ6D34BM31/xVSQLmFklD+Ddq3+WtWxXla7h0ozi mf50BeZIhi8gXA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:58:13 2025 by rpki-client