This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json) Hash identifier: TbWvpJG3LGvNKoP14tig2tCkVi2G7aWzarYH2fVkVuk= Subject key identifier: CD:45:A9:8A:C3:E3:CA:E3:80:D1:F5:6D:4D:32:86:B3:DA:E2:E0:A7 Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13 Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113 Certificate serial: 019B3A2178755A9D5542770F8C7557048C83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft Manifest number: 0951 Signing time: Sat 20 Dec 2025 05:00:30 +0000 Manifest this update: Sat 20 Dec 2025 05:00:30 +0000 Manifest next update: Sun 21 Dec 2025 05:00:30 +0000 Files and hashes: 1: 5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa (hash: iXzFw4W5Foz0uwg9MMW+CW99Q/qBQogltnHgfr+P8PQ=) 2: MTrzAX_D8XgoMN3mTBa0ASkLO-s.roa (hash: 5xLIJUhiZ8b7rVLgmWHwi35aSAKsu4l83lIArXRkd8w=) 3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: Hjy4vyPRywxczJIzN5Z2lVCZJ667q0jyqTV+re2L0pA=) 4: zBSuOK6TSZdyfy80PgMlJMzpxoY.roa (hash: fCR2rdLvuL4emdZ++ZNvy3Kaqpga8geFfxEmhxpqkvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:78:75:5a:9d:55:42:77:0f:8c:75:57:04:8c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113 Validity Not Before: Dec 20 05:00:30 2025 GMT Not After : Dec 21 05:00:30 2025 GMT Subject: CN=cd45a98ac3e3cae380d1f56d4d3286b3dae2e0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a8:61:a5:2c:ee:bb:cb:76:57:39:e5:e0:ba: c3:dd:31:cb:92:d6:1e:d3:64:ab:16:70:35:b9:e6: 24:61:85:6a:c9:4c:ff:1e:77:fd:27:2e:4b:b6:2a: f9:ed:47:de:05:2d:59:e6:a9:70:83:ef:cb:27:fe: 68:96:fd:3b:4e:1b:42:6f:7b:0d:37:5b:fd:c9:67: 70:2b:1f:2e:d0:6f:07:ce:ed:0d:d5:28:37:99:a3: bd:32:10:ab:70:fd:40:5a:1d:d0:0f:1e:ed:a4:b2: 4e:2d:30:be:28:bc:ad:87:35:de:6b:29:8a:a9:ba: e9:74:15:99:d4:9c:49:32:ca:fa:72:f5:4a:a9:71: b7:d7:e6:e8:ec:96:64:4e:68:09:14:52:fc:b3:94: 8e:23:4b:90:36:d7:d9:8b:63:32:65:77:50:d0:4b: 0b:a1:95:ab:ba:3a:63:a8:2d:ac:8a:26:92:22:a4: 38:ab:a5:00:7c:d2:0f:62:51:6d:eb:52:3d:8f:9f: ef:fa:29:25:fe:da:93:17:95:36:21:b3:2a:b8:71: c6:01:af:1b:62:6b:a0:e2:b8:da:a3:88:67:d2:5c: cf:4d:07:c7:61:19:5d:6e:4a:ca:b5:22:2d:7e:aa: 01:63:2a:fd:f8:cd:0c:d2:bc:58:4f:36:91:21:12: 5a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:45:A9:8A:C3:E3:CA:E3:80:D1:F5:6D:4D:32:86:B3:DA:E2:E0:A7 X509v3 Authority Key Identifier: keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:28:0e:9a:59:ef:78:2a:fc:33:1a:62:95:a3:6a:e5:aa:3a: 64:9f:39:c9:f9:0e:68:4b:79:e0:f5:d5:6b:e0:fe:39:3f:01: f1:5d:05:00:38:d4:7e:10:7a:dd:67:c4:7e:3f:c6:f8:11:66: 10:a1:83:b6:ef:42:44:f5:32:14:ac:b8:b8:da:90:a4:59:28: 42:c8:6e:79:5c:c6:53:ea:63:4d:81:3e:26:b3:c2:ab:c4:37: bf:f4:26:93:1c:e0:08:d3:8b:14:82:c8:fe:9a:0a:5d:04:ef: 63:33:de:20:73:d4:33:73:0a:d8:1d:51:57:18:81:ee:6a:d5: 48:b3:8b:3c:4f:93:5e:f8:98:e1:46:32:27:12:41:c9:fb:bc: e8:f8:4c:3b:27:ad:6a:f1:27:6b:8c:60:53:2f:40:58:20:21: 58:49:a6:de:ef:66:19:61:d4:f6:a6:c1:88:ff:62:a4:62:fb: 98:37:c1:a3:1f:1c:85:27:47:0a:ed:87:d7:76:36:cc:85:ac: 87:71:b6:4f:ce:67:2a:ba:75:b1:77:cb:9e:56:3a:a1:16:9f: 40:49:81:b8:87:ce:77:b4:d6:99:8e:fe:f5:3f:5a:f1:ff:e6: 75:22:b6:84:a9:67:49:eb:af:dd:d4:8d:6d:61:e7:96:25:dc: 3c:43:ed:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IXh1Wp1VQncPjHVXBIyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NjM3MDgxY2E3YzJlYmE0MTAxMGFiZWFhZDY0YTdjNjFm NmExMTMwHhcNMjUxMjIwMDUwMDMwWhcNMjUxMjIxMDUwMDMwWjAzMTEwLwYDVQQD EyhjZDQ1YTk4YWMzZTNjYWUzODBkMWY1NmQ0ZDMyODZiM2RhZTJlMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6hhpSzuu8t2Vznl4LrD3THLktYe 02SrFnA1ueYkYYVqyUz/Hnf9Jy5Ltir57UfeBS1Z5qlwg+/LJ/5olv07ThtCb3sN N1v9yWdwKx8u0G8Hzu0N1Sg3maO9MhCrcP1AWh3QDx7tpLJOLTC+KLythzXeaymK qbrpdBWZ1JxJMsr6cvVKqXG31+bo7JZkTmgJFFL8s5SOI0uQNtfZi2MyZXdQ0EsL oZWrujpjqC2siiaSIqQ4q6UAfNIPYlFt61I9j5/v+ikl/tqTF5U2IbMquHHGAa8b Ymug4rjao4hn0lzPTQfHYRldbkrKtSItfqoBYyr9+M0M0rxYTzaRIRJayQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1FqYrD48rjgNH1bU0yhrPa4uCnMB8GA1UdIwQY MBaAFGhjcIHKfC66QQEKvqrWSnxh9qETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2Et ZTY2NzllN2I3OTVhLzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2EtZTY2NzllN2I3OTVh LzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALigOmlnv eCr8MxpilaNq5ao6ZJ85yfkOaEt54PXVa+D+OT8B8V0FADjUfhB63WfEfj/G+BFm EKGDtu9CRPUyFKy4uNqQpFkoQshueVzGU+pjTYE+JrPCq8Q3v/QmkxzgCNOLFILI /poKXQTvYzPeIHPUM3MK2B1RVxiB7mrVSLOLPE+TXviY4UYyJxJByfu86PhMOyet avEna4xgUy9AWCAhWEmm3u9mGWHU9qbBiP9ipGL7mDfBox8chSdHCu2H13Y2zIWs h3G2T85nKrp1sXfLnlY6oRafQEmBuIfOd7TWmY7+9T9a8f/mdSK2hKlnSeuv3dSN bWHnliXcPEPtww== -----END CERTIFICATE-----Generated at Sat Dec 20 08:17:16 2025 by rpki-client