This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json) Hash identifier: 5U/6pWxajlXUz+avtmUdZ4FefOwl6IBAf5p4WO9kZSE= Subject key identifier: 52:38:AB:84:05:AB:D6:EB:2A:6A:8C:31:09:69:F6:43:10:8D:75:0F Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68 Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68 Certificate serial: 019B2A414A090F2D8E8CE5D0A20FC11555B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft Manifest number: 0A73 Signing time: Wed 17 Dec 2025 03:01:20 +0000 Manifest this update: Wed 17 Dec 2025 03:01:20 +0000 Manifest next update: Thu 18 Dec 2025 03:01:20 +0000 Files and hashes: 1: GRjGVnhDoWbQf18vA-j6jPrf8bk.roa (hash: zfy3Xeb5F33VM6wGODUsXEb4Wf9If41Lyk9PhoslocI=) 2: Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa (hash: tgY6PnqoOsKcCw452vOSzlvkg7P0cNWRWTWaQclJxEc=) 3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: topQRogntH7vfCugV/q79s8N5//SndrrOKGjl3pBnsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 03:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:41:4a:09:0f:2d:8e:8c:e5:d0:a2:0f:c1:15:55:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a016dad273047b18886691485dedd97171c4d68 Validity Not Before: Dec 17 03:01:20 2025 GMT Not After : Dec 18 03:01:20 2025 GMT Subject: CN=5238ab8405abd6eb2a6a8c310969f643108d750f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c5:85:88:46:29:a8:2c:5f:70:c2:08:ce:fd: 46:78:9b:f4:e0:7c:b0:78:a9:e9:cb:a4:7e:29:27: 7f:81:12:0f:12:62:44:51:71:7b:10:53:43:9f:fd: ff:ee:ab:5d:20:40:2d:e1:64:4e:e2:ee:c3:09:70: f5:6d:15:e9:33:38:a8:3a:0a:36:23:f3:0e:cb:d7: 92:7b:35:f9:92:74:64:05:fc:94:9f:f6:a0:bd:9f: 55:3f:7a:f4:69:26:03:e1:45:cc:8c:78:3f:0d:a8: 95:49:6d:d1:90:b2:7d:a1:6a:78:58:a7:97:20:5f: 28:7f:15:42:65:f7:53:7e:60:1f:86:51:ea:fd:11: fa:3e:c2:ae:31:4f:4b:1f:5b:89:52:61:24:a8:b1: 19:88:6c:4b:b3:7a:f6:ef:09:14:e3:cc:e8:cb:f3: b9:d1:d9:6c:85:b9:43:a6:8a:61:eb:71:a8:07:f8: 48:7d:7a:61:0e:33:9d:ff:c0:00:43:bc:4b:31:68: 2a:01:95:82:06:0f:52:01:77:17:86:6e:d2:22:36: 01:6e:b8:bd:61:dd:b4:43:af:79:23:ee:66:a5:1f: bf:7f:a5:40:2d:97:95:de:77:4e:da:cb:f5:d7:81: c5:88:b6:b2:32:25:12:27:b4:91:a6:bb:7b:08:dc: 38:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:38:AB:84:05:AB:D6:EB:2A:6A:8C:31:09:69:F6:43:10:8D:75:0F X509v3 Authority Key Identifier: keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f4:bb:1a:bb:4e:04:9a:48:3f:76:91:43:fb:a3:3a:ef:3a: 6b:73:23:87:1a:a0:e8:e3:87:70:e8:a3:27:f9:77:68:44:5f: 1f:32:d5:3c:9f:bf:66:2d:fe:8a:92:72:d1:f5:95:91:e7:93: c9:ff:9c:17:f2:da:4a:9c:d6:34:88:8f:64:10:f4:19:58:ea: 96:82:53:80:bf:36:4f:54:54:c9:71:f1:b1:87:d9:86:cb:88: 8d:d4:5f:10:e8:e7:bd:09:3e:e6:26:17:ed:36:1c:a7:62:b5: ce:33:e3:1f:99:16:78:c9:83:28:09:33:3c:62:30:6e:d0:70: 93:f5:d7:fa:37:6c:70:6b:4b:b2:42:6b:54:fc:11:3f:63:66: 97:b0:54:8b:3d:e6:92:a4:93:5b:96:c8:a7:1b:e5:10:b5:c3: 17:32:cd:f9:7b:78:96:51:36:b6:b4:df:4a:97:7c:e7:9d:34: cd:3a:32:7b:4d:ac:9c:30:91:ca:6f:4d:7c:e9:19:18:73:96: b7:06:b3:6c:20:ac:42:b4:04:33:db:43:4d:9f:7e:81:3d:f1: d5:83:59:71:00:f3:31:47:96:09:ae:b2:90:db:54:5a:1c:ac: b1:f5:c1:0b:db:c4:88:6b:87:35:17:8a:c1:59:5e:01:17:8c: 6d:5a:2a:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqQUoJDy2OjOXQog/BFVW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMDE2ZGFkMjczMDQ3YjE4ODg2NjkxNDg1ZGVkZDk3MTcx YzRkNjgwHhcNMjUxMjE3MDMwMTIwWhcNMjUxMjE4MDMwMTIwWjAzMTEwLwYDVQQD Eyg1MjM4YWI4NDA1YWJkNmViMmE2YThjMzEwOTY5ZjY0MzEwOGQ3NTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMWFiEYpqCxfcMIIzv1GeJv04Hyw eKnpy6R+KSd/gRIPEmJEUXF7EFNDn/3/7qtdIEAt4WRO4u7DCXD1bRXpMzioOgo2 I/MOy9eSezX5knRkBfyUn/agvZ9VP3r0aSYD4UXMjHg/DaiVSW3RkLJ9oWp4WKeX IF8ofxVCZfdTfmAfhlHq/RH6PsKuMU9LH1uJUmEkqLEZiGxLs3r27wkU48zoy/O5 0dlshblDpoph63GoB/hIfXphDjOd/8AAQ7xLMWgqAZWCBg9SAXcXhm7SIjYBbri9 Yd20Q695I+5mpR+/f6VALZeV3ndO2sv114HFiLayMiUSJ7SRprt7CNw4SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFI4q4QFq9brKmqMMQlp9kMQjXUPMB8GA1UdIwQY MBaAFGoBba0nMEexiIZpFIXe3ZcXHE1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMt Yzk1MjgwNDkzMmMyLzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMtYzk1MjgwNDkzMmMy LzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvS7GrtO BJpIP3aRQ/ujOu86a3Mjhxqg6OOHcOijJ/l3aERfHzLVPJ+/Zi3+ipJy0fWVkeeT yf+cF/LaSpzWNIiPZBD0GVjqloJTgL82T1RUyXHxsYfZhsuIjdRfEOjnvQk+5iYX 7TYcp2K1zjPjH5kWeMmDKAkzPGIwbtBwk/XX+jdscGtLskJrVPwRP2Nml7BUiz3m kqSTW5bIpxvlELXDFzLN+Xt4llE2trTfSpd85500zToye02snDCRym9NfOkZGHOW twazbCCsQrQEM9tDTZ9+gT3x1YNZcQDzMUeWCa6ykNtUWhyssfXBC9vEiGuHNReK wVleAReMbVoqfw== -----END CERTIFICATE-----Generated at Wed Dec 17 09:46:40 2025 by rpki-client