This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json) Hash identifier: dKDzuXJZ4cP6vWuxqD8KK06Ak3QijA4zUkwKuzU0CYM= Subject key identifier: A2:27:E4:8C:5F:3C:75:A5:FE:5D:56:F1:4E:8E:C0:7A:BC:24:CF:BA Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05 Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05 Certificate serial: 019B6C208CD7D1ACCD116CCE34EFD9BDD6EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft Manifest number: 17A5 Signing time: Mon 29 Dec 2025 22:00:31 +0000 Manifest this update: Mon 29 Dec 2025 22:00:31 +0000 Manifest next update: Tue 30 Dec 2025 22:00:31 +0000 Files and hashes: 1: 1-BqPUmwLhiY4Yhx0LfgUMnThGxA.roa (hash: K4n04vrpGIt/U+DsbhlaysS9N4rLWgryrsGr6i9waUc=) 2: 1nS0uX-20m5q3S5s2ax-hzltY7M.roa (hash: fPbs3orCk/9uH211HxlkX/O3dh9FAzUrv0hFLfs7bIc=) 3: 2MWwWUq-nPd7Gzhb6Z0417winfw.roa (hash: JU/lw4BXm/KV3NT2WmLhKrIC3zR0XBpPPnNeGokCO90=) 4: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: fHDhpHQX/49G95uBckQcznR6RQ68TuAx1ty0VS5j86I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:20:8c:d7:d1:ac:cd:11:6c:ce:34:ef:d9:bd:d6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05 Validity Not Before: Dec 29 22:00:31 2025 GMT Not After : Dec 30 22:00:31 2025 GMT Subject: CN=a227e48c5f3c75a5fe5d56f14e8ec07abc24cfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:39:e9:48:d2:1c:f0:a9:8e:f5:1f:92:bc: 42:c5:20:ee:88:2d:61:00:63:be:97:9b:33:b5:f2: 1f:33:e0:c6:f4:f4:64:56:57:56:57:5d:c1:c8:62: 65:c1:75:1d:38:4b:0e:df:a1:04:76:cf:fb:35:39: e2:7b:66:44:b1:2d:33:80:17:c7:53:ea:c6:d7:00: 8d:fb:47:bd:24:8b:25:a6:99:74:b8:86:04:18:2b: cb:2b:c6:d4:99:be:50:95:58:a8:89:5f:b5:fe:74: 78:4a:26:63:8d:99:91:10:d8:9f:c3:4c:2d:eb:2a: 39:42:13:cd:1d:7a:20:cb:37:37:86:6f:05:37:a3: 50:de:28:ba:2f:95:3a:00:9a:9c:f0:6c:e7:da:73: 02:59:60:83:aa:b8:6d:79:7c:a7:82:77:31:7a:1e: 9a:43:b3:98:e0:9d:12:e4:c2:5c:76:89:3c:2e:bd: 61:51:07:1b:a1:6b:42:94:7c:a4:db:a4:64:11:e3: 16:cc:9f:80:53:84:76:bd:a4:48:64:7f:e3:99:fa: a3:ee:09:a0:45:36:ca:ea:db:59:95:60:bc:18:ce: c3:d6:94:3e:fd:0f:9c:ff:df:db:39:15:40:29:0e: 4e:9b:6b:d8:c9:29:44:b2:37:c4:95:08:04:4e:e3: 41:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:27:E4:8C:5F:3C:75:A5:FE:5D:56:F1:4E:8E:C0:7A:BC:24:CF:BA X509v3 Authority Key Identifier: keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:0d:bc:d4:b9:e2:69:f3:a0:84:04:4e:e4:6f:51:65:85:ed: 06:f1:b0:f8:b1:1e:25:7b:e5:da:36:06:a3:b6:d6:32:ff:b9: e4:6c:e7:64:3a:60:3b:c3:30:08:49:ce:1e:d0:ec:f4:ab:27: 19:2c:59:96:27:44:a8:55:22:d8:2a:4c:9d:e2:b8:02:d6:b9: a4:7a:bb:c6:ee:13:af:5b:46:39:a6:ba:4b:9e:28:c0:35:86: 0c:a6:e4:ec:af:9f:67:2b:c2:06:a0:77:8e:b4:1a:b2:1e:35: 22:02:ce:e3:7b:12:2b:29:d5:77:aa:7b:81:4c:4c:da:82:bf: b1:4b:0e:1c:d4:91:81:9d:c5:57:6e:09:f6:52:a8:22:1c:0a: 16:00:10:70:44:72:f3:68:b5:eb:1a:66:a4:6d:48:66:e7:da: fc:56:e5:a7:00:3e:d0:0d:8d:d9:a3:f2:93:65:27:3d:a4:ff: ee:af:c9:ab:ba:35:21:a6:8d:ea:fe:b6:dd:30:86:a6:5c:99: 8d:b0:00:15:78:34:0a:cb:da:bd:e9:b1:8a:bb:c6:ee:b7:16: 19:03:6c:5f:c7:91:da:cb:14:6a:70:2f:3f:25:63:f9:59:8d: c9:5e:01:67:13:39:86:5b:8b:a6:3a:6c:a7:b0:f3:2c:e4:f1: aa:4d:86:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsIIzX0azNEWzONO/ZvdbrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNjQyYjYwN2I5NGExNDNmZjQxYzU1NGM5MTNiZDVhNjUx ZjhjMDUwHhcNMjUxMjI5MjIwMDMxWhcNMjUxMjMwMjIwMDMxWjAzMTEwLwYDVQQD EyhhMjI3ZTQ4YzVmM2M3NWE1ZmU1ZDU2ZjE0ZThlYzA3YWJjMjRjZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFw56UjSHPCpjvUfkrxCxSDuiC1h AGO+l5sztfIfM+DG9PRkVldWV13ByGJlwXUdOEsO36EEds/7NTnie2ZEsS0zgBfH U+rG1wCN+0e9JIslppl0uIYEGCvLK8bUmb5QlVioiV+1/nR4SiZjjZmRENifw0wt 6yo5QhPNHXogyzc3hm8FN6NQ3ii6L5U6AJqc8Gzn2nMCWWCDqrhteXyngncxeh6a Q7OY4J0S5MJcdok8Lr1hUQcboWtClHyk26RkEeMWzJ+AU4R2vaRIZH/jmfqj7gmg RTbK6ttZlWC8GM7D1pQ+/Q+c/9/bORVAKQ5Om2vYySlEsjfElQgETuNBJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIn5IxfPHWl/l1W8U6OwHq8JM+6MB8GA1UdIwQY MBaAFABkK2B7lKFD/0HFVMkTvVplH4wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUt MTliYzdiZGNjYmMxLzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUtMTliYzdiZGNjYmMx LzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIw281Lni afOghARO5G9RZYXtBvGw+LEeJXvl2jYGo7bWMv+55GznZDpgO8MwCEnOHtDs9Ksn GSxZlidEqFUi2CpMneK4Ata5pHq7xu4Tr1tGOaa6S54owDWGDKbk7K+fZyvCBqB3 jrQash41IgLO43sSKynVd6p7gUxM2oK/sUsOHNSRgZ3FV24J9lKoIhwKFgAQcERy 82i16xpmpG1IZufa/FblpwA+0A2N2aPyk2UnPaT/7q/Jq7o1IaaN6v623TCGplyZ jbAAFXg0CsvavemxirvG7rcWGQNsX8eR2ssUanAvPyVj+VmNyV4BZxM5hluLpjps p7DzLOTxqk2GFQ== -----END CERTIFICATE-----Generated at Mon Dec 29 23:44:46 2025 by rpki-client