This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft File: aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json) Hash identifier: qBU0PXK+YUgKR7yVyM1K2cmpt7Io0ctSxc97bTVnNl8= Subject key identifier: A2:E1:4C:A5:85:E6:70:80:9F:6F:BE:94:8D:73:ED:85:BF:B9:C9:31 Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f Certificate serial: 019B6EB45CD2619C5DDC1A2A6902609B17D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 10:01:12 +0000 Manifest this update: Tue 30 Dec 2025 10:01:12 +0000 Manifest next update: Wed 31 Dec 2025 10:01:12 +0000 Files and hashes: 1: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (hash: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=) 2: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: zhg6g37S1BbWs2AG7E8+RBmEJF7cukXJy1eJlf6F46A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:5c:d2:61:9c:5d:dc:1a:2a:69:02:60:9b:17:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f Validity Not Before: Dec 30 10:01:12 2025 GMT Not After : Dec 31 10:01:12 2025 GMT Subject: CN=a2e14ca585e670809f6fbe948d73ed85bfb9c931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:d7:d3:c3:7a:ee:18:2f:07:85:6c:12:f8: 41:4d:dc:e8:60:87:4d:64:a0:b1:e4:9e:61:20:e2: 40:57:76:ef:6b:a3:f5:7a:fe:e1:c5:3e:2b:9d:15: cf:43:03:89:fb:4b:fc:40:8b:9f:c3:ae:d9:89:bc: ef:e6:79:4d:63:db:c9:fe:d9:1c:ee:41:c8:b4:82: 75:69:b2:dc:ac:b4:5b:0f:41:c6:94:7f:ca:c9:20: 76:f4:49:65:2c:32:8b:e6:84:22:ee:ab:af:7a:2e: 2f:ef:70:28:50:4e:75:c8:e0:be:c2:b2:32:77:1b: 66:6a:ae:28:30:fb:a2:db:68:ce:e6:e1:69:9a:e8: 86:d0:a3:4b:42:e0:ed:01:c2:de:2a:49:b7:e2:e1: d2:62:a4:cd:92:06:68:5c:5a:26:c7:ac:9b:ce:f1: a8:50:6c:45:97:ad:a5:de:e7:4f:15:d4:5c:7d:22: 83:ba:18:b7:2d:b4:0f:1a:51:f3:de:98:ef:03:7d: 1f:72:17:1b:04:3d:ec:fb:f1:19:79:83:90:9e:b8: 82:31:e6:0c:34:db:a8:dd:28:05:23:88:2b:da:26: 7c:5e:56:4a:91:07:fb:26:1f:1a:9b:9a:d5:eb:a4: 24:ab:3e:7b:e6:bb:f0:3a:1b:36:81:b4:f6:94:ac: 60:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E1:4C:A5:85:E6:70:80:9F:6F:BE:94:8D:73:ED:85:BF:B9:C9:31 X509v3 Authority Key Identifier: keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:af:eb:31:49:94:2b:79:c2:1a:09:83:09:4d:d1:0a:43:21: c9:87:84:08:4d:d9:38:35:e4:6a:48:d5:58:81:f9:db:e2:99: 89:82:1a:56:cf:aa:54:59:de:be:70:29:23:7e:64:19:a9:11: b8:ed:8b:78:e5:c8:51:45:2f:c9:5e:24:4d:12:1c:93:13:1b: e5:ef:f8:0d:f0:69:1f:cf:5a:de:84:ba:02:c2:3c:26:e8:70: 86:dd:77:4f:6a:c4:f2:59:83:5a:b4:17:11:c6:1e:7b:6c:67: 85:ed:6d:cc:21:78:be:91:ad:9f:7f:b2:fb:62:31:d1:bf:73: e3:b3:b9:25:b6:a4:84:30:63:62:cf:76:02:5c:e9:67:d6:3e: 93:8c:fd:9f:1f:41:90:48:1a:75:65:b0:89:df:79:c8:59:38: 81:d7:1e:87:bb:11:51:75:c7:23:89:d6:de:38:2c:8d:d0:08: a8:f5:19:da:a6:75:4d:8f:bf:33:0d:6c:b4:f4:33:44:1d:42: fa:ec:35:e1:e1:f4:66:ed:e3:95:3a:8f:cd:cd:ed:65:3f:d3: 22:c3:20:89:ad:ab:3e:d7:d3:26:47:62:a8:bc:d5:79:ec:7b: 12:c5:33:87:a5:1f:14:02:2b:6d:a4:a5:0e:85:a8:cd:10:2e: 22:1e:5a:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutFzSYZxd3BoqaQJgmxfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMDg0NmJkYmIwODA1NWFjYmQ2YWI1OWQ5NTYwOTgxZTA0 NmVlNmYwHhcNMjUxMjMwMTAwMTEyWhcNMjUxMjMxMTAwMTEyWjAzMTEwLwYDVQQD EyhhMmUxNGNhNTg1ZTY3MDgwOWY2ZmJlOTQ4ZDczZWQ4NWJmYjljOTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvfX08N67hgvB4VsEvhBTdzoYIdN ZKCx5J5hIOJAV3bva6P1ev7hxT4rnRXPQwOJ+0v8QIufw67Zibzv5nlNY9vJ/tkc 7kHItIJ1abLcrLRbD0HGlH/KySB29EllLDKL5oQi7quvei4v73AoUE51yOC+wrIy dxtmaq4oMPui22jO5uFpmuiG0KNLQuDtAcLeKkm34uHSYqTNkgZoXFomx6ybzvGo UGxFl62l3udPFdRcfSKDuhi3LbQPGlHz3pjvA30fchcbBD3s+/EZeYOQnriCMeYM NNuo3SgFI4gr2iZ8XlZKkQf7Jh8am5rV66Qkqz575rvwOhs2gbT2lKxgHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLhTKWF5nCAn2++lI1z7YW/uckxMB8GA1UdIwQY MBaAFGoIRr27CAVay9arWdlWCYHgRu5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDct Nzc5MTc1MmE5YzZlLzEvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDctNzc5MTc1MmE5YzZl LzEvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkK/rMUmU K3nCGgmDCU3RCkMhyYeECE3ZODXkakjVWIH52+KZiYIaVs+qVFnevnApI35kGakR uO2LeOXIUUUvyV4kTRIckxMb5e/4DfBpH89a3oS6AsI8Juhwht13T2rE8lmDWrQX EcYee2xnhe1tzCF4vpGtn3+y+2Ix0b9z47O5JbakhDBjYs92AlzpZ9Y+k4z9nx9B kEgadWWwid95yFk4gdceh7sRUXXHI4nW3jgsjdAIqPUZ2qZ1TY+/Mw1stPQzRB1C +uw14eH0Zu3jlTqPzc3tZT/TIsMgia2rPtfTJkdiqLzVeex7EsUzh6UfFAIrbaSl DoWozRAuIh5axw== -----END CERTIFICATE-----Generated at Tue Dec 30 12:29:21 2025 by rpki-client