This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft File: g02WbQCvvDm1lYvBpu1Xk__AxU0.mft (raw, json) Hash identifier: 7JbmameQDp3ra5ZuUgW5dUmg0yf2eiy58Q+ZvvDgKsw= Subject key identifier: 24:33:67:7A:5D:BD:74:61:9C:60:23:9B:9E:6B:5C:96:4E:FA:7E:84 Authority key identifier: 83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D Certificate issuer: /CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d Certificate serial: 019B3FB5D6AC1C5C4D5E2BBAB5318ABF355C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 07:00:40 +0000 Manifest this update: Sun 21 Dec 2025 07:00:40 +0000 Manifest next update: Mon 22 Dec 2025 07:00:40 +0000 Files and hashes: 1: IOmKwvAlqovOqDg8R3XEjQKQn3k.roa (hash: /PNQa25f3KzGjHOJXgALCT84CCr36de+6y0mC+W9C/U=) 2: g02WbQCvvDm1lYvBpu1Xk__AxU0.crl (hash: xc24oQX7hwmTytRgGRLXhTyTy7AqlKsY98+mkNWLuPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:d6:ac:1c:5c:4d:5e:2b:ba:b5:31:8a:bf:35:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d Validity Not Before: Dec 21 07:00:40 2025 GMT Not After : Dec 22 07:00:40 2025 GMT Subject: CN=2433677a5dbd74619c60239b9e6b5c964efa7e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d6:4e:12:67:eb:b6:c6:e2:46:af:f5:c2:80: e0:26:2a:f4:19:9c:d4:66:8e:9e:20:16:54:33:64: 11:72:9f:37:86:0c:0f:6f:61:c8:0e:76:3b:13:7e: 0a:a0:9b:ea:e5:48:f4:ce:45:26:0d:c2:db:2f:17: 9f:8f:cb:be:69:f2:d6:5e:c4:da:a2:a5:bc:ee:3a: ef:ff:80:bd:01:c9:97:11:97:20:86:9f:d4:28:d0: 9a:52:18:7b:67:c6:69:7a:7c:6b:e9:41:d4:88:c8: 8e:0e:9d:01:d8:4c:42:15:94:fd:f8:fb:3a:5b:31: 32:ba:ab:b5:52:14:d1:ea:99:d8:8d:77:20:6f:47: 8f:43:32:cc:18:eb:dd:61:76:94:7c:36:1b:00:4b: 09:b7:aa:9d:6f:70:30:2b:79:87:98:36:d5:13:65: d7:36:6e:2f:85:1e:a4:1d:de:b7:2b:be:ab:8e:53: 34:41:8e:1f:a2:88:96:18:5e:16:1e:56:9e:35:38: d3:c1:14:2f:ac:bf:36:c0:3d:5d:25:21:a1:a9:1b: 41:d8:0e:fb:c7:56:66:42:d4:42:4c:dc:3a:0e:1a: d0:a4:3f:a1:43:79:44:74:9c:0d:ce:7a:d8:7b:7a: 90:77:92:0b:ff:ac:cf:92:7c:c3:bd:43:7e:a6:3a: ea:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:33:67:7A:5D:BD:74:61:9C:60:23:9B:9E:6B:5C:96:4E:FA:7E:84 X509v3 Authority Key Identifier: keyid:83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e4:c0:ae:97:6c:39:78:3d:4a:2a:c7:c6:91:5f:00:25:70: e0:62:cc:10:cd:65:a3:56:74:58:a0:e4:d0:d1:c2:9e:cb:d2: 8c:50:c9:48:7c:b7:03:72:bc:3c:ee:22:65:34:a6:60:71:49: 5b:0d:34:00:95:62:f8:0f:5e:6c:d2:e8:c5:86:84:6d:dc:f1: a4:35:52:64:1f:e0:13:26:1d:c1:38:d6:f3:ea:81:06:4e:c2: 78:97:34:11:3a:7f:16:2a:7a:36:4d:68:80:0c:dc:07:ad:5e: ad:80:ba:f6:2f:9e:84:eb:ec:0a:f5:3f:86:37:42:b2:71:61: 7a:fe:2c:12:11:6d:92:ac:4c:59:7a:33:34:d0:e8:1d:52:e2: d3:e6:8a:30:c6:a4:72:c4:1c:37:17:48:1f:b9:83:ac:5c:28: a5:ab:ef:7d:7a:7b:a1:e2:b2:dd:c8:d1:4e:7a:ba:da:c8:fd: 77:13:1b:45:99:5e:d6:42:d2:9e:df:26:98:05:22:ef:0f:01: ef:24:0c:12:2e:df:65:d7:fc:b6:d7:a6:14:2b:37:97:97:4b: 55:12:a8:fb:47:f0:f3:1f:a4:e4:7d:e6:58:1f:df:89:d8:f9: 1c:ba:c1:26:b1:be:2e:3c:56:87:83:de:b8:0e:e0:6d:f6:c2: 3c:3d:b7:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tdasHFxNXiu6tTGKvzVcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNGQ5NjZkMDBhZmJjMzliNTk1OGJjMWE2ZWQ1NzkzZmZj MGM1NGQwHhcNMjUxMjIxMDcwMDQwWhcNMjUxMjIyMDcwMDQwWjAzMTEwLwYDVQQD EygyNDMzNjc3YTVkYmQ3NDYxOWM2MDIzOWI5ZTZiNWM5NjRlZmE3ZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09ZOEmfrtsbiRq/1woDgJir0GZzU Zo6eIBZUM2QRcp83hgwPb2HIDnY7E34KoJvq5Uj0zkUmDcLbLxefj8u+afLWXsTa oqW87jrv/4C9AcmXEZcghp/UKNCaUhh7Z8Zpenxr6UHUiMiODp0B2ExCFZT9+Ps6 WzEyuqu1UhTR6pnYjXcgb0ePQzLMGOvdYXaUfDYbAEsJt6qdb3AwK3mHmDbVE2XX Nm4vhR6kHd63K76rjlM0QY4fooiWGF4WHlaeNTjTwRQvrL82wD1dJSGhqRtB2A77 x1ZmQtRCTNw6DhrQpD+hQ3lEdJwNznrYe3qQd5IL/6zPknzDvUN+pjrqrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQzZ3pdvXRhnGAjm55rXJZO+n6EMB8GA1UdIwQY MBaAFINNlm0Ar7w5tZWLwabtV5P/wMVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ODMwYTQtNmM4My00MzM4LWJhZmQt YjVkMWU5MDIzMTBhLzEvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84ODMwYTQtNmM4My00MzM4LWJhZmQtYjVkMWU5MDIzMTBh LzEvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuTArpds OXg9SirHxpFfACVw4GLMEM1lo1Z0WKDk0NHCnsvSjFDJSHy3A3K8PO4iZTSmYHFJ Ww00AJVi+A9ebNLoxYaEbdzxpDVSZB/gEyYdwTjW8+qBBk7CeJc0ETp/Fip6Nk1o gAzcB61erYC69i+ehOvsCvU/hjdCsnFhev4sEhFtkqxMWXozNNDoHVLi0+aKMMak csQcNxdIH7mDrFwopavvfXp7oeKy3cjRTnq62sj9dxMbRZle1kLSnt8mmAUi7w8B 7yQMEi7fZdf8ttemFCs3l5dLVRKo+0fw8x+k5H3mWB/fidj5HLrBJrG+LjxWh4Pe uA7gbfbCPD23Zw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:11:39 2025 by rpki-client