This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft File: aGOaIXWXlv46HZGfm1c362jXCOQ.mft (raw, json) Hash identifier: ksshJc+4Ir67fAoacn5V7+dmUamqSai9yhaZVRrMcsg= Subject key identifier: 52:C2:BE:55:01:4E:14:A8:06:61:7F:9B:6B:01:81:55:E2:A7:18:A9 Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4 Certificate issuer: /CN=68639a21759796fe3a1d919f9b5737eb68d708e4 Certificate serial: 019B4CCD80A43EFB2BF1DE8DA1B2F516A971 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft Manifest number: 14DA Signing time: Tue 23 Dec 2025 20:01:34 +0000 Manifest this update: Tue 23 Dec 2025 20:01:34 +0000 Manifest next update: Wed 24 Dec 2025 20:01:34 +0000 Files and hashes: 1: HaUn7tg_GQoLwUeKln7B89E1Zus.roa (hash: UBP04zlDEuw8zGqO58s8vILU4LoszVd4p1cFKyVRANw=) 2: Vaj_SKghwhMr5GkrNo3CpxB4bEs.roa (hash: 2ufypWC+H0u1FT85vML3Y3XXLbc7QafpFQUC4EhAO8E=) 3: aGOaIXWXlv46HZGfm1c362jXCOQ.crl (hash: iQzyKua+xvIhnDfK3R44zNiFNG7/ctxcsYsMjH7WbF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cd:80:a4:3e:fb:2b:f1:de:8d:a1:b2:f5:16:a9:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4 Validity Not Before: Dec 23 20:01:34 2025 GMT Not After : Dec 24 20:01:34 2025 GMT Subject: CN=52c2be55014e14a806617f9b6b018155e2a718a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e8:bb:ca:72:45:ad:53:bc:03:68:f0:da:45: f0:af:39:ef:4b:9f:43:98:16:98:e4:62:5d:ca:4e: 83:73:16:4a:48:bf:c9:c3:98:2f:e3:69:08:d8:e9: 06:88:b4:9a:b7:51:55:dd:f6:16:0b:ed:6f:2b:25: 70:43:1d:ed:6a:ed:d8:b2:2a:19:43:9e:ba:eb:01: 19:b4:8c:2a:59:9e:72:38:8f:5b:9e:bd:9a:91:b1: fe:ae:53:27:e5:08:99:5e:a9:27:ed:ad:04:f4:57: be:be:89:c0:8e:c7:a8:4c:b8:26:8f:d8:28:54:01: 47:6d:3b:09:dc:04:c3:40:95:88:f6:02:e6:72:3b: 22:8e:b1:33:58:96:f8:01:49:a9:a0:97:a5:b6:72: 62:64:77:da:61:0e:72:9e:e4:91:21:ba:38:0a:c9: 92:e4:78:eb:f9:a5:48:26:9b:3e:58:a9:a5:2c:fc: 5e:b7:be:8d:3b:2a:b1:83:1c:25:79:4c:f8:c5:61: 2d:a5:c3:f6:22:90:80:a6:d9:c7:b8:7b:d0:53:8b: d2:42:87:6a:0d:4b:99:7d:9d:90:da:d6:25:9c:15: 10:2d:59:80:5b:53:88:26:b0:fc:a6:45:ce:df:05: 1c:b1:b4:49:ca:57:b9:3f:01:b3:76:de:c9:55:63: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C2:BE:55:01:4E:14:A8:06:61:7F:9B:6B:01:81:55:E2:A7:18:A9 X509v3 Authority Key Identifier: keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d6:05:19:76:38:e2:9d:f1:2c:a6:b9:d5:40:6d:4d:a4:cb: bc:ff:bd:3f:0f:9f:77:54:48:e4:ab:b5:b6:5b:cf:d3:5a:a4: 02:c8:dc:38:4e:43:b0:97:01:16:09:da:52:0c:a9:8b:63:d7: 81:1b:ad:0b:72:5c:f0:97:18:d2:e1:18:fa:15:16:f9:df:07: 6c:4e:fa:9d:ce:17:7d:ba:f0:10:e0:e9:fb:ae:af:48:57:1c: 72:d0:ec:99:89:a8:a9:47:35:ce:61:b9:89:6c:f3:12:1f:53: 25:e8:94:56:b2:c3:c5:63:cd:0c:c7:e3:03:db:5c:35:cf:ca: f9:83:0d:10:d1:45:e6:7c:70:93:db:67:fa:16:e4:7e:14:cd: b7:df:8a:be:c9:2c:4c:6c:79:50:db:6d:e6:0e:a2:3c:b4:57: de:f6:4f:37:9a:76:98:35:eb:74:c4:a1:c5:b1:0a:92:38:a2: d4:d3:8f:bd:88:a2:f3:63:95:c2:d1:98:4b:98:6a:f7:08:e5: e8:63:e4:8c:4b:ce:68:c8:ac:75:e3:4f:c9:c1:81:ae:42:80: f4:31:2d:5f:bc:d0:99:c8:ae:b7:ec:91:27:13:d4:12:a2:53: da:d1:43:73:de:3a:53:1e:2f:d4:31:ac:a4:70:06:a0:07:bb: 10:62:36:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzYCkPvsr8d6NobL1FqlxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NjM5YTIxNzU5Nzk2ZmUzYTFkOTE5ZjliNTczN2ViNjhk NzA4ZTQwHhcNMjUxMjIzMjAwMTM0WhcNMjUxMjI0MjAwMTM0WjAzMTEwLwYDVQQD Eyg1MmMyYmU1NTAxNGUxNGE4MDY2MTdmOWI2YjAxODE1NWUyYTcxOGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOi7ynJFrVO8A2jw2kXwrznvS59D mBaY5GJdyk6DcxZKSL/Jw5gv42kI2OkGiLSat1FV3fYWC+1vKyVwQx3tau3YsioZ Q5666wEZtIwqWZ5yOI9bnr2akbH+rlMn5QiZXqkn7a0E9Fe+vonAjseoTLgmj9go VAFHbTsJ3ATDQJWI9gLmcjsijrEzWJb4AUmpoJeltnJiZHfaYQ5ynuSRIbo4CsmS 5Hjr+aVIJps+WKmlLPxet76NOyqxgxwleUz4xWEtpcP2IpCAptnHuHvQU4vSQodq DUuZfZ2Q2tYlnBUQLVmAW1OIJrD8pkXO3wUcsbRJyle5PwGzdt7JVWNmYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLCvlUBThSoBmF/m2sBgVXipxipMB8GA1UdIwQY MBaAFGhjmiF1l5b+Oh2Rn5tXN+to1wjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lNTY4MTEtOTgwMS00NTk1LTg3ZTct MTNkMTY4ZDU5YjExLzEvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9lNTY4MTEtOTgwMS00NTk1LTg3ZTctMTNkMTY4ZDU5YjEx LzEvYUdPYUlYV1hsdjQ2SFpHZm0xYzM2MmpYQ09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdYFGXY4 4p3xLKa51UBtTaTLvP+9Pw+fd1RI5Ku1tlvP01qkAsjcOE5DsJcBFgnaUgypi2PX gRutC3Jc8JcY0uEY+hUW+d8HbE76nc4XfbrwEODp+66vSFccctDsmYmoqUc1zmG5 iWzzEh9TJeiUVrLDxWPNDMfjA9tcNc/K+YMNENFF5nxwk9tn+hbkfhTNt9+Kvsks TGx5UNtt5g6iPLRX3vZPN5p2mDXrdMShxbEKkjii1NOPvYii82OVwtGYS5hq9wjl 6GPkjEvOaMisdeNPycGBrkKA9DEtX7zQmciut+yRJxPUEqJT2tFDc946Ux4v1DGs pHAGoAe7EGI2vQ== -----END CERTIFICATE-----Generated at Tue Dec 23 22:39:43 2025 by rpki-client