This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json) Hash identifier: bI7H4qMjzWyPZqBS+5sSVDz9TrXJhYppTiq1VF8xCSE= Subject key identifier: EA:EA:A4:42:EF:38:8A:02:1F:01:23:20:6C:E0:CB:8F:FA:87:DD:46 Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49 Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49 Certificate serial: 019B3F484569DA41F940277F63CF835F410D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 05:00:59 +0000 Manifest this update: Sun 21 Dec 2025 05:00:59 +0000 Manifest next update: Mon 22 Dec 2025 05:00:59 +0000 Files and hashes: 1: 1y00I_lr4dZnPswtulIObxWKqNI.roa (hash: B9wbQnXjTiDMVW+/AnVX4UUAGDb3Y2f5WOlbfFrBXa8=) 2: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: WLZ88PykQyeJLinQcHf5Ep7b8aHXCHs7+YBzNAL+o2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:45:69:da:41:f9:40:27:7f:63:cf:83:5f:41:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49 Validity Not Before: Dec 21 05:00:59 2025 GMT Not After : Dec 22 05:00:59 2025 GMT Subject: CN=eaeaa442ef388a021f0123206ce0cb8ffa87dd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:3f:11:0e:c4:1b:ae:20:33:29:b4:f0:9a: 1e:e1:f3:bc:e2:ab:ae:0e:97:60:cc:9f:5c:c0:20: db:35:69:4f:3d:79:72:94:13:41:96:29:5e:f4:16: 85:5b:fa:6a:06:d9:b4:72:4b:a6:35:60:c1:3e:64: a2:22:52:37:7d:1b:2a:e0:3a:5c:e1:3e:5b:20:86: e4:1e:0c:40:ef:92:8c:b1:ad:31:cf:30:5f:3f:8b: 84:48:fa:b8:93:ac:4a:7d:bb:51:0a:d8:ca:5f:38: bd:4e:c6:43:b4:32:de:2a:bb:9a:e3:e8:9d:be:64: 10:95:34:23:50:a7:77:8c:75:cd:8d:71:c4:2e:4c: 29:1e:f8:df:fa:9c:f7:49:7c:be:7a:1f:f0:e5:59: 70:09:9f:db:f7:d3:fc:bb:e4:aa:8a:8d:b5:34:a8: fa:7b:e5:a8:42:71:11:27:18:67:db:57:e4:bf:71: 94:9c:3e:88:c4:7d:92:75:a1:71:fe:d4:48:29:53: 8f:df:ec:a6:20:90:df:60:b8:53:30:85:d8:aa:c5: 5b:dd:69:63:0e:15:41:82:99:10:64:fd:1c:49:d3: ed:a2:a8:83:e3:6c:d7:05:53:26:8e:23:3e:e3:6c: 14:60:dc:bf:9a:87:b2:11:4c:12:31:ed:3b:9a:39: 2b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EA:A4:42:EF:38:8A:02:1F:01:23:20:6C:E0:CB:8F:FA:87:DD:46 X509v3 Authority Key Identifier: keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:42:27:ab:da:0e:b8:86:33:1e:7b:da:37:91:7d:05:dd:fc: ac:1b:ec:0a:83:34:1b:3d:80:f0:b7:4c:e2:09:eb:8c:db:fa: 33:28:f8:55:67:bc:ed:74:8f:d9:0e:75:b5:6e:40:06:26:12: 46:a1:c0:04:02:b7:c3:18:fd:af:cc:69:09:aa:08:99:75:f7: 78:05:52:a5:b8:c8:a9:e1:a5:15:a5:24:6e:0a:94:99:60:20: 51:b9:fd:b9:50:ec:b4:51:e8:5a:7e:30:30:7e:74:35:82:cd: 32:7a:7a:db:b4:c3:7f:40:15:36:a9:00:1a:9b:d0:49:fb:0e: 51:b5:b2:81:1b:fc:e9:9b:a0:01:f1:0f:11:cb:a8:2b:c3:f7: 84:13:ea:47:d2:05:99:7e:6f:91:68:98:8f:9a:0d:fe:e2:54: 46:75:51:91:55:db:8e:ff:53:5e:1b:d2:ed:13:f1:3a:3b:3e: 63:f5:e9:8b:1a:1c:ce:a7:e4:1d:53:97:2b:5f:e7:e6:f5:7e: 35:67:5b:c6:f7:48:7f:f7:4d:e7:91:8c:a8:2d:66:89:6b:20: 92:25:2f:c9:9b:9e:07:f0:bd:42:79:b6:5f:3c:c8:32:37:fb: 3b:e4:19:1c:18:65:ad:a1:5b:76:a2:87:a5:14:49:90:32:d1: 55:d4:79:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SEVp2kH5QCd/Y8+DX0ENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMDRjYTRhOTY2MTYzMWM0ZWM2MTVhM2E2ZDE1ZDIyMDMw ZGNmNDkwHhcNMjUxMjIxMDUwMDU5WhcNMjUxMjIyMDUwMDU5WjAzMTEwLwYDVQQD EyhlYWVhYTQ0MmVmMzg4YTAyMWYwMTIzMjA2Y2UwY2I4ZmZhODdkZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQE/EQ7EG64gMym08Joe4fO84quu DpdgzJ9cwCDbNWlPPXlylBNBlile9BaFW/pqBtm0ckumNWDBPmSiIlI3fRsq4Dpc 4T5bIIbkHgxA75KMsa0xzzBfP4uESPq4k6xKfbtRCtjKXzi9TsZDtDLeKrua4+id vmQQlTQjUKd3jHXNjXHELkwpHvjf+pz3SXy+eh/w5VlwCZ/b99P8u+Sqio21NKj6 e+WoQnERJxhn21fkv3GUnD6IxH2SdaFx/tRIKVOP3+ymIJDfYLhTMIXYqsVb3Wlj DhVBgpkQZP0cSdPtoqiD42zXBVMmjiM+42wUYNy/moeyEUwSMe07mjkrMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrqpELvOIoCHwEjIGzgy4/6h91GMB8GA1UdIwQY MBaAFGoEykqWYWMcTsYVo6bRXSIDDc9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMt ODExM2RhNjdlZjc1LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMtODExM2RhNjdlZjc1 LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUInq9oO uIYzHnvaN5F9Bd38rBvsCoM0Gz2A8LdM4gnrjNv6Myj4VWe87XSP2Q51tW5ABiYS RqHABAK3wxj9r8xpCaoImXX3eAVSpbjIqeGlFaUkbgqUmWAgUbn9uVDstFHoWn4w MH50NYLNMnp627TDf0AVNqkAGpvQSfsOUbWygRv86ZugAfEPEcuoK8P3hBPqR9IF mX5vkWiYj5oN/uJURnVRkVXbjv9TXhvS7RPxOjs+Y/XpixoczqfkHVOXK1/n5vV+ NWdbxvdIf/dN55GMqC1miWsgkiUvyZueB/C9Qnm2XzzIMjf7O+QZHBhlraFbdqKH pRRJkDLRVdR5cA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:26:17 2025 by rpki-client