This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json) Hash identifier: tINzhxx6pOZyB8BBuI58tq+MTudIrMZ9itTeqZtzCJo= Subject key identifier: 48:19:D9:29:18:2E:DA:95:94:FB:88:09:80:36:1C:06:5F:0D:8A:93 Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54 Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054 Certificate serial: 019B3E6D438874A993944BA6BD042167F4DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft Manifest number: 17A3 Signing time: Sun 21 Dec 2025 01:01:46 +0000 Manifest this update: Sun 21 Dec 2025 01:01:46 +0000 Manifest next update: Mon 22 Dec 2025 01:01:46 +0000 Files and hashes: 1: nd7EMYxqZskNG-8RUiwICJeXwqY.roa (hash: mY3khCwzfzEen/6QsaBVskA8rJ9h0QmksXwmEPcvkIM=) 2: oz9BBzN_BuPcGQT11NYYdsxnqjY.roa (hash: nvAXPeVrUMWzLRMYMGEkxTC8HsMJu8Sz1cS7HP/e1xI=) 3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: w06cqTx/YTSFeOohGlixWYgKf71g1ngLkdhpEcBpjao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:43:88:74:a9:93:94:4b:a6:bd:04:21:67:f4:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054 Validity Not Before: Dec 21 01:01:46 2025 GMT Not After : Dec 22 01:01:46 2025 GMT Subject: CN=4819d929182eda9594fb880980361c065f0d8a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:23:63:fe:e6:70:89:6a:54:40:47:05:d4:91: e4:c0:3b:dc:a8:28:0f:f7:3e:02:f8:7f:b1:02:4f: a5:b5:2b:5f:2c:9e:cb:bc:86:6a:3a:82:a4:25:22: 0b:4c:74:92:ce:48:6b:a3:f8:28:2e:3c:de:c8:d5: c3:5c:94:f3:78:b2:8c:8d:bb:55:6e:d7:18:9e:ad: 3e:9d:69:79:c8:de:91:03:bf:c2:f2:46:bb:b4:14: 72:83:c1:4d:de:f6:57:e2:dc:66:21:8c:2d:6f:ae: 19:08:3b:04:cb:77:ce:8a:2f:a9:82:b4:0c:f5:e7: 4d:02:df:4c:66:2d:86:19:9d:b8:f1:30:ff:1d:ff: cf:9f:5e:12:a8:88:60:b7:56:4b:af:54:73:70:49: 24:34:5d:7f:9b:94:44:ab:51:40:ee:e0:c3:8b:31: 85:79:51:01:53:ce:0a:03:2a:8f:f5:8d:92:35:ef: b1:9c:de:5c:8b:42:35:9a:ab:e8:be:eb:07:cf:71: da:a2:c0:ab:7f:ee:4d:f5:f0:68:fd:78:5e:15:bb: b1:c7:39:9a:b5:38:13:e5:d9:10:fa:3a:76:7c:40: 10:8d:1d:69:15:c0:0f:28:e7:58:69:90:07:9d:be: f1:8a:2b:d7:e9:38:b5:8a:39:40:65:a6:a7:ca:16: 74:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:19:D9:29:18:2E:DA:95:94:FB:88:09:80:36:1C:06:5F:0D:8A:93 X509v3 Authority Key Identifier: keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:22:05:c0:ea:23:33:60:6f:fe:d5:70:4f:52:b4:3a:66:82: 9e:ca:93:cd:d3:16:0f:45:9e:86:23:03:49:3c:92:2c:f4:52: 14:f7:82:0a:54:e0:27:5f:4b:e4:4a:df:bc:86:4a:4d:31:1c: 8c:09:15:6c:7d:50:e5:4d:d0:91:13:66:93:d2:22:c3:14:b1: 9e:06:8f:9b:cd:bd:ff:56:8f:e7:88:ad:7f:c8:20:4b:da:bb: 82:22:86:aa:31:22:68:71:d4:cc:90:23:b1:97:cb:d5:6c:9e: fd:20:97:d0:fa:4a:85:62:81:e4:2b:cf:41:d2:32:95:e2:39: e7:f5:85:0c:99:3d:2c:4e:93:df:01:ce:c7:ec:c1:2c:3c:bb: 10:32:59:7f:40:77:8b:e1:cd:ef:9f:5d:bf:93:69:fa:ba:57: 7b:e1:db:0c:44:22:fd:56:5f:00:ab:0f:95:b3:39:08:72:d3: dd:fd:aa:c1:5f:82:f3:a7:7a:14:6a:07:08:02:9c:81:0f:76: 78:ea:d2:e3:74:3c:ff:af:df:b8:3b:e5:27:7b:7d:ef:4d:7c: ab:c5:1d:b8:3b:c2:ba:a8:36:8a:22:35:cd:64:7a:c7:a1:ee: 1b:3a:7d:c0:8d:5d:ae:98:b6:db:fd:1a:f4:ab:9f:00:06:94: dc:8e:cf:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bUOIdKmTlEumvQQhZ/TcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMGE1YTFiMzg2MTdjYzE2MWY2MDYxM2Q5OGUxNzliNTM2 MGMwNTQwHhcNMjUxMjIxMDEwMTQ2WhcNMjUxMjIyMDEwMTQ2WjAzMTEwLwYDVQQD Eyg0ODE5ZDkyOTE4MmVkYTk1OTRmYjg4MDk4MDM2MWMwNjVmMGQ4YTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SNj/uZwiWpUQEcF1JHkwDvcqCgP 9z4C+H+xAk+ltStfLJ7LvIZqOoKkJSILTHSSzkhro/goLjzeyNXDXJTzeLKMjbtV btcYnq0+nWl5yN6RA7/C8ka7tBRyg8FN3vZX4txmIYwtb64ZCDsEy3fOii+pgrQM 9edNAt9MZi2GGZ248TD/Hf/Pn14SqIhgt1ZLr1RzcEkkNF1/m5REq1FA7uDDizGF eVEBU84KAyqP9Y2SNe+xnN5ci0I1mqvovusHz3HaosCrf+5N9fBo/XheFbuxxzma tTgT5dkQ+jp2fEAQjR1pFcAPKOdYaZAHnb7xiivX6Ti1ijlAZaanyhZ0dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgZ2SkYLtqVlPuICYA2HAZfDYqTMB8GA1UdIwQY MBaAFK4KWhs4YXzBYfYGE9mOF5tTYMBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQt YjI5ODEyYzNlNDY1LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQtYjI5ODEyYzNlNDY1 LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSIFwOoj M2Bv/tVwT1K0OmaCnsqTzdMWD0WehiMDSTySLPRSFPeCClTgJ19L5ErfvIZKTTEc jAkVbH1Q5U3QkRNmk9IiwxSxngaPm829/1aP54itf8ggS9q7giKGqjEiaHHUzJAj sZfL1Wye/SCX0PpKhWKB5CvPQdIyleI55/WFDJk9LE6T3wHOx+zBLDy7EDJZf0B3 i+HN759dv5Np+rpXe+HbDEQi/VZfAKsPlbM5CHLT3f2qwV+C86d6FGoHCAKcgQ92 eOrS43Q8/6/fuDvlJ3t97018q8UduDvCuqg2iiI1zWR6x6HuGzp9wI1drpi22/0a 9KufAAaU3I7PWA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:20:33 2025 by rpki-client