This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft File: AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json) Hash identifier: BWO7+noT75Q522XbEQsiQfj0kjR4V9rUYa1KIuEYonM= Subject key identifier: 9C:1F:22:F7:54:5F:F7:51:C7:E4:64:6B:65:86:E0:87:6C:D1:C5:9E Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB Certificate issuer: /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb Certificate serial: 019B3D233D9EF18D998370117E25ABE39733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft Manifest number: 11F8 Signing time: Sat 20 Dec 2025 19:01:18 +0000 Manifest this update: Sat 20 Dec 2025 19:01:18 +0000 Manifest next update: Sun 21 Dec 2025 19:01:18 +0000 Files and hashes: 1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: xKKrhhX7ZouacTlSQYZPcGPFb2BTeOTjGcfYBnFiQK8=) 2: mzTTUqHywuBobPS3UeYVNsDUJ_k.roa (hash: hsMBTi8GspJP9sz8q6TgdiXZybDG1BQNlqbzOxmeAmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:3d:9e:f1:8d:99:83:70:11:7e:25:ab:e3:97:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb Validity Not Before: Dec 20 19:01:18 2025 GMT Not After : Dec 21 19:01:18 2025 GMT Subject: CN=9c1f22f7545ff751c7e4646b6586e0876cd1c59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:44:9b:a6:96:9a:bb:b8:17:0c:7a:c7:57:e7: 84:7e:dd:aa:32:b1:21:73:f9:8c:be:c7:a8:8a:7f: b4:62:18:69:c6:3a:a1:d3:9e:49:51:a0:9c:22:ee: a7:81:4c:ff:c6:b0:31:85:29:e2:3d:58:6e:9e:6f: 6b:97:59:38:70:ec:c2:2a:8c:37:e9:ad:ae:c8:bf: 1b:fd:65:07:f6:f9:b0:51:44:e5:6e:f7:0b:2e:8d: ca:f1:00:6f:9f:ae:d6:27:dd:98:e5:42:15:54:7b: 42:e7:c8:c0:d1:98:73:1c:39:f3:13:06:9c:ca:09: 52:26:81:a3:df:87:e1:4d:1a:54:2b:45:af:f1:82: 8f:fd:7f:b1:26:78:35:11:fa:a0:4d:b5:0c:08:96: a1:81:76:60:72:aa:ec:1d:e0:bb:c5:e1:0a:82:28: e1:26:6c:4a:c3:35:b1:49:b8:8a:ba:2b:3f:70:8a: 7b:f8:68:7a:ef:cd:ba:dd:20:f4:d3:31:4b:26:33: a3:5d:6b:64:79:68:65:62:c6:3e:27:b7:bd:4f:00: 1e:34:f2:b7:33:d3:a6:fd:dc:76:8d:4c:16:e0:e3: 73:3c:e9:c7:81:4d:95:d3:19:98:95:47:ff:de:26: 2c:97:87:74:d9:1d:e5:6c:17:5b:d0:49:2e:6a:3c: 72:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1F:22:F7:54:5F:F7:51:C7:E4:64:6B:65:86:E0:87:6C:D1:C5:9E X509v3 Authority Key Identifier: keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ac:3a:8e:5c:b7:b2:e7:46:ce:81:d6:4a:7d:a9:41:c7:8d: 41:fe:4c:d9:91:6e:bb:d5:da:3c:fe:bb:7f:dc:32:04:b2:8e: 8b:ca:8e:96:f6:67:0f:90:94:c5:01:4c:c0:69:7a:cc:23:9f: 60:5a:b5:09:62:74:b4:2f:51:9e:7b:0f:51:11:40:9f:8b:38: 1e:56:31:1d:30:c7:12:2f:89:54:a8:83:ff:f5:79:e7:64:9f: 77:71:7d:c2:cc:97:f8:48:d2:87:93:ce:13:f5:07:f2:22:9a: 59:91:96:91:a7:b0:4c:68:44:47:ed:b9:45:db:d3:57:8b:6a: 4e:77:c8:22:48:d2:45:75:8c:6c:1e:2b:a5:01:b9:62:4d:0a: d7:e8:0d:cf:e1:a5:42:02:18:3f:b3:32:ff:5d:54:f5:be:d1: 1d:cc:5b:ae:ef:85:65:6d:80:91:38:1e:eb:98:88:e4:40:56: 5f:50:a3:10:11:cd:d1:fd:3f:20:01:d2:d2:23:a1:53:17:ec: 46:90:aa:b9:08:76:39:fb:2b:5a:29:52:23:ab:27:ff:14:6d: 41:e6:c6:18:c1:32:2e:0a:08:d8:ec:7e:c2:88:ac:97:66:29: 13:1d:de:f9:4a:da:1b:59:6e:e0:8b:2a:98:be:35:91:70:3d: 7a:50:2d:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iz2e8Y2Zg3ARfiWr45czMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMDM2MTZjYTJmOWFlZmE3MGMzOTE0Y2NlOTBkY2UwOTcw NmNmYmIwHhcNMjUxMjIwMTkwMTE4WhcNMjUxMjIxMTkwMTE4WjAzMTEwLwYDVQQD Eyg5YzFmMjJmNzU0NWZmNzUxYzdlNDY0NmI2NTg2ZTA4NzZjZDFjNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0Sbppaau7gXDHrHV+eEft2qMrEh c/mMvseoin+0Yhhpxjqh055JUaCcIu6ngUz/xrAxhSniPVhunm9rl1k4cOzCKow3 6a2uyL8b/WUH9vmwUUTlbvcLLo3K8QBvn67WJ92Y5UIVVHtC58jA0ZhzHDnzEwac yglSJoGj34fhTRpUK0Wv8YKP/X+xJng1EfqgTbUMCJahgXZgcqrsHeC7xeEKgijh JmxKwzWxSbiKuis/cIp7+Gh678263SD00zFLJjOjXWtkeWhlYsY+J7e9TwAeNPK3 M9Om/dx2jUwW4ONzPOnHgU2V0xmYlUf/3iYsl4d02R3lbBdb0EkuajxynwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwfIvdUX/dRx+Rka2WG4Ids0cWeMB8GA1UdIwQY MBaAFAIDYWyi+a76cMORTM6Q3OCXBs+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEt Yzg3Y2E5ZjJiOTVmLzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEtYzg3Y2E5ZjJiOTVm LzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqw6jly3 sudGzoHWSn2pQceNQf5M2ZFuu9XaPP67f9wyBLKOi8qOlvZnD5CUxQFMwGl6zCOf YFq1CWJ0tC9RnnsPURFAn4s4HlYxHTDHEi+JVKiD//V552Sfd3F9wsyX+EjSh5PO E/UH8iKaWZGWkaewTGhER+25RdvTV4tqTnfIIkjSRXWMbB4rpQG5Yk0K1+gNz+Gl QgIYP7My/11U9b7RHcxbru+FZW2AkTge65iI5EBWX1CjEBHN0f0/IAHS0iOhUxfs RpCquQh2OfsrWilSI6sn/xRtQebGGMEyLgoI2Ox+woisl2YpEx3e+UraG1lu4Isq mL41kXA9elAtzg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:04:42 2025 by rpki-client