This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft File: 02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json) Hash identifier: 8AF7XYdmrsXH6Tppi0Ep1G/64o/LP/cMpnXptv7CtvA= Subject key identifier: A5:8A:48:7F:91:1F:A2:CB:05:C4:3F:B1:CE:99:CC:4F:13:2D:B3:A5 Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5 Certificate issuer: /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5 Certificate serial: 019B2AAEDB95860702611EECB3A97C44FE1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 05:01:01 +0000 Manifest this update: Wed 17 Dec 2025 05:01:01 +0000 Manifest next update: Thu 18 Dec 2025 05:01:01 +0000 Files and hashes: 1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: 41ySX0sFn9PK3eKlzoRf7X00REJQCd8nWv37ObebCP4=) 2: FxHUQG3qdwh_Io72-qooMYusypM.roa (hash: 6TiBJA+vFO4OcdT2PwhLRo55PhguPodqdNqueOVwTtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:db:95:86:07:02:61:1e:ec:b3:a9:7c:44:fe:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5 Validity Not Before: Dec 17 05:01:01 2025 GMT Not After : Dec 18 05:01:01 2025 GMT Subject: CN=a58a487f911fa2cb05c43fb1ce99cc4f132db3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:04:f6:09:69:70:7b:c8:e8:42:b0:51:3e:66: e8:67:69:6d:4a:11:fe:2e:b5:ec:e5:7c:1a:3c:30: 06:b9:79:4e:f2:bf:d1:e8:16:2d:81:c0:e2:b6:d8: 07:dc:f2:f1:d7:8d:b7:34:3b:6f:84:72:83:ab:53: 7a:f8:8e:65:d0:7f:f5:2f:17:55:60:9e:af:91:79: b1:5f:3a:bb:dd:b6:67:6e:0c:52:f9:25:0b:b8:5c: fe:0e:85:98:86:67:0f:ac:ce:ed:5e:00:62:d0:c5: c8:b2:1e:72:22:8d:00:8b:f0:95:95:36:ce:fd:e1: 7f:73:0f:f4:d8:df:b7:47:94:0b:49:dc:82:78:9c: 1b:09:45:c2:5d:4c:89:94:38:b9:68:ce:a3:67:d5: 38:e0:41:3e:64:aa:ba:21:6c:05:d1:f5:89:c9:3c: 01:e4:f9:50:fc:32:12:7c:ca:d7:1d:81:91:d1:a4: 0c:16:dc:50:9d:22:f9:ea:79:52:82:2f:ff:d3:26: 76:a6:5e:9b:5e:8f:0c:42:be:5a:a2:1e:03:44:ba: 2d:32:6f:74:13:77:03:1a:a3:80:99:de:ce:ce:97: 32:63:53:9d:53:8f:79:92:6a:06:1b:49:06:71:b7: b5:83:d6:5b:a4:77:ab:61:4b:60:f9:18:82:7b:10: 37:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8A:48:7F:91:1F:A2:CB:05:C4:3F:B1:CE:99:CC:4F:13:2D:B3:A5 X509v3 Authority Key Identifier: keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:02:9a:7d:e1:71:37:6b:bd:cf:75:71:a5:6b:9a:7a:6e:9c: 8a:ac:20:e6:47:ab:34:42:fa:6c:d6:8b:e6:60:c3:b8:12:1a: 53:d0:43:04:ae:80:c9:3b:c0:f8:33:5d:f5:2c:c9:08:86:7d: 47:1a:07:66:7f:03:84:73:78:da:8d:6c:58:a8:91:3d:83:12: fe:82:2f:19:8d:df:48:10:18:43:f4:e8:c9:77:c0:57:72:a4: 97:a4:a3:5d:e5:6f:a9:8d:01:92:34:b7:be:1c:20:0f:00:92: 7d:83:65:e8:2b:36:cd:08:41:d1:bd:4c:f7:64:2c:37:d2:ca: 53:2a:82:b6:b3:b7:c0:08:1f:9e:15:a7:f1:69:b7:a2:76:fa: c0:1e:df:e0:e5:4c:c6:95:bf:54:ce:1a:40:23:3a:de:25:f0: 72:ab:71:cc:03:70:f1:15:4c:2c:5d:cb:e6:9d:e6:13:4f:33: ea:1d:46:84:70:50:59:97:92:57:98:79:00:eb:68:5b:8b:c5: db:89:0f:b9:dc:c1:39:04:66:a2:02:53:18:87:a6:c0:2d:75: 22:8f:c5:cb:cb:eb:91:2b:65:52:e4:0c:c2:e3:43:9a:2d:e4: cb:e4:02:5d:38:43:94:85:5f:26:58:fe:af:6b:51:a3:ef:7b: fd:c7:ff:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrtuVhgcCYR7ss6l8RP4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjdkMTYzNWI0NmIzYzIyNzRiMjg3NTA1YmJiZDdkOTE1 ZGNhZjUwHhcNMjUxMjE3MDUwMTAxWhcNMjUxMjE4MDUwMTAxWjAzMTEwLwYDVQQD EyhhNThhNDg3ZjkxMWZhMmNiMDVjNDNmYjFjZTk5Y2M0ZjEzMmRiM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgT2CWlwe8joQrBRPmboZ2ltShH+ LrXs5XwaPDAGuXlO8r/R6BYtgcDittgH3PLx1423NDtvhHKDq1N6+I5l0H/1LxdV YJ6vkXmxXzq73bZnbgxS+SULuFz+DoWYhmcPrM7tXgBi0MXIsh5yIo0Ai/CVlTbO /eF/cw/02N+3R5QLSdyCeJwbCUXCXUyJlDi5aM6jZ9U44EE+ZKq6IWwF0fWJyTwB 5PlQ/DISfMrXHYGR0aQMFtxQnSL56nlSgi//0yZ2pl6bXo8MQr5aoh4DRLotMm90 E3cDGqOAmd7OzpcyY1OdU495kmoGG0kGcbe1g9ZbpHerYUtg+RiCexA34QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWKSH+RH6LLBcQ/sc6ZzE8TLbOlMB8GA1UdIwQY MBaAFNNn0WNbRrPCJ0sodQW7vX2RXcr1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84YThiNGMtOGYxMi00YzhkLThiZTQt NjliOGQ2YjUzZThjLzEvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy84YThiNGMtOGYxMi00YzhkLThiZTQtNjliOGQ2YjUzZThj LzEvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAKafeFx N2u9z3VxpWuaem6ciqwg5kerNEL6bNaL5mDDuBIaU9BDBK6AyTvA+DNd9SzJCIZ9 RxoHZn8DhHN42o1sWKiRPYMS/oIvGY3fSBAYQ/ToyXfAV3Kkl6SjXeVvqY0BkjS3 vhwgDwCSfYNl6Cs2zQhB0b1M92QsN9LKUyqCtrO3wAgfnhWn8Wm3onb6wB7f4OVM xpW/VM4aQCM63iXwcqtxzANw8RVMLF3L5p3mE08z6h1GhHBQWZeSV5h5AOtoW4vF 24kPudzBOQRmogJTGIemwC11Io/Fy8vrkStlUuQMwuNDmi3ky+QCXThDlIVfJlj+ r2tRo+97/cf/mQ== -----END CERTIFICATE-----Generated at Wed Dec 17 09:45:10 2025 by rpki-client