This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft File: AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json) Hash identifier: fT8KuhgKp+MOv4qZzwqnGftPmlOWnfRFN9B/WCfn28s= Subject key identifier: BE:8C:33:EB:31:4C:4D:50:63:FF:E8:C4:1A:87:73:1F:6E:E4:A5:27 Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2 Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2 Certificate serial: 019B39EB621B3B753D3C45D1D73ADCED2686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft Manifest number: 0AB9 Signing time: Sat 20 Dec 2025 04:01:25 +0000 Manifest this update: Sat 20 Dec 2025 04:01:25 +0000 Manifest next update: Sun 21 Dec 2025 04:01:25 +0000 Files and hashes: 1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: 8niWV+MyE12frIbNm0NqcDWbWJzZdgS371UKOlIihFg=) 2: KWN7lbu9UX4daUEdNDAK3ZMrFAk.roa (hash: WqU1UFiFL55OvehHLohuI3Znyc7Zm1Aa844JXIgkQ7A=) 3: RuH2k0iAjasiUyAH22AdPFV5Ae0.roa (hash: +Reg0vgoBRw6w4QQfuC6Wd/elCxMYo7/ChLckPoqJlc=) 4: wC6GvOL96y7ng1OaBtu0ACc0Uv8.roa (hash: Pb/46jJY/4NqGVEPi/tZl2cVHTdO0P2kZSbGSJnkcFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:62:1b:3b:75:3d:3c:45:d1:d7:3a:dc:ed:26:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2 Validity Not Before: Dec 20 04:01:25 2025 GMT Not After : Dec 21 04:01:25 2025 GMT Subject: CN=be8c33eb314c4d5063ffe8c41a87731f6ee4a527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:f5:dc:ed:1f:7e:8f:24:4a:93:b6:b0:cd: 81:8f:42:3e:ba:e9:72:5e:4c:9d:8f:b0:91:43:fb: fd:91:08:ba:49:3a:a5:e9:a4:44:b4:ce:f9:83:d4: d7:17:b7:ef:4d:8c:b9:74:4c:15:71:5a:3d:a6:c1: 6e:20:70:35:bc:5a:5a:c3:c1:76:97:50:d2:8e:15: a5:cb:c3:9c:07:61:c6:c1:12:47:7c:f6:23:f6:8a: f0:9c:03:94:50:29:92:0b:e5:81:47:88:9d:04:a3: f6:a6:67:61:b7:20:40:f2:0d:c8:d6:e9:49:e2:b9: cd:f3:76:7c:59:0a:67:52:48:58:7b:80:42:1b:dd: b5:2f:fb:8f:60:1f:35:17:5a:e0:59:65:88:f0:d9: 6a:cf:36:04:96:8f:6d:3e:06:d3:4c:58:04:17:55: de:d8:9b:3e:42:9b:63:0b:a7:37:05:e9:cb:9e:8c: a3:f8:26:67:2f:6b:2b:b3:23:a2:92:61:14:56:33: 5e:91:aa:34:8f:54:24:cd:b4:71:92:35:e2:9e:49: 1f:29:0d:06:85:c5:ce:d4:30:0d:af:1e:a2:74:aa: e4:1f:a3:aa:b0:9c:db:e9:ac:01:8d:d0:a7:bf:0b: f7:44:cf:be:34:39:70:5a:70:11:96:ae:6d:49:19: cb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8C:33:EB:31:4C:4D:50:63:FF:E8:C4:1A:87:73:1F:6E:E4:A5:27 X509v3 Authority Key Identifier: keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d2:b2:ea:db:f1:6d:93:96:de:5d:ab:c3:a4:2b:3c:79:8f: 98:ac:a0:61:67:d8:a2:c8:c5:e5:6e:d1:57:b6:15:58:31:17: cb:54:b2:81:f3:02:0f:ef:39:e5:72:8b:fa:49:ba:67:42:9a: 77:7a:6c:15:8d:98:24:3b:88:81:aa:73:e0:8d:52:83:a1:18: 5c:be:e3:19:a6:b9:a2:ba:05:01:77:70:d3:53:99:bd:5b:7f: c9:4c:2a:95:60:af:c0:ca:4e:9c:90:fb:21:75:8c:b1:d5:f2: 0f:8b:e2:9f:03:e4:c2:69:1c:c9:fd:5b:05:3b:44:11:aa:6e: b9:8a:da:b8:f0:59:1e:8f:2d:6c:ac:4e:84:e1:85:a0:15:f9: ac:e7:13:d2:9f:43:35:b7:13:ee:e9:41:39:7a:71:96:a8:e5: 58:04:78:f4:03:59:b5:09:48:f4:da:a5:8c:e0:e4:14:ba:dd: ca:e5:bf:51:30:e6:f3:f7:89:01:6b:b9:01:65:98:76:24:1a: 2e:e9:ae:15:c4:96:59:8e:e3:dc:c3:ab:72:c8:3f:00:ea:33: eb:f6:95:e1:f9:ed:66:86:df:97:f3:fd:85:f5:15:7b:45:28: 49:9f:cd:36:e4:d2:36:31:02:7a:ec:be:aa:de:c9:f4:f1:af: 1c:40:fd:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs562IbO3U9PEXR1zrc7SaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNmIwNmI1ZDBmZjEwMDBlMTBjNDI3NmVlYTA4ODBhZjIw OWQ3YTIwHhcNMjUxMjIwMDQwMTI1WhcNMjUxMjIxMDQwMTI1WjAzMTEwLwYDVQQD EyhiZThjMzNlYjMxNGM0ZDUwNjNmZmU4YzQxYTg3NzMxZjZlZTRhNTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXH13O0ffo8kSpO2sM2Bj0I+uuly Xkydj7CRQ/v9kQi6STql6aREtM75g9TXF7fvTYy5dEwVcVo9psFuIHA1vFpaw8F2 l1DSjhWly8OcB2HGwRJHfPYj9orwnAOUUCmSC+WBR4idBKP2pmdhtyBA8g3I1ulJ 4rnN83Z8WQpnUkhYe4BCG921L/uPYB81F1rgWWWI8NlqzzYElo9tPgbTTFgEF1Xe 2Js+QptjC6c3BenLnoyj+CZnL2srsyOikmEUVjNekao0j1QkzbRxkjXinkkfKQ0G hcXO1DANrx6idKrkH6OqsJzb6awBjdCnvwv3RM++NDlwWnARlq5tSRnLmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6MM+sxTE1QY//oxBqHcx9u5KUnMB8GA1UdIwQY MBaAFABrBrXQ/xAA4QxCdu6giAryCdeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQt NTdjOTU1YzljODVkLzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQtNTdjOTU1YzljODVk LzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9Ky6tvx bZOW3l2rw6QrPHmPmKygYWfYosjF5W7RV7YVWDEXy1SygfMCD+855XKL+km6Z0Ka d3psFY2YJDuIgapz4I1Sg6EYXL7jGaa5oroFAXdw01OZvVt/yUwqlWCvwMpOnJD7 IXWMsdXyD4vinwPkwmkcyf1bBTtEEapuuYrauPBZHo8tbKxOhOGFoBX5rOcT0p9D NbcT7ulBOXpxlqjlWAR49ANZtQlI9NqljODkFLrdyuW/UTDm8/eJAWu5AWWYdiQa LumuFcSWWY7j3MOrcsg/AOoz6/aV4fntZobfl/P9hfUVe0UoSZ/NNuTSNjECeuy+ qt7J9PGvHED9ZA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:24:43 2025 by rpki-client