This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft File: aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json) Hash identifier: pdNWW07t2bnyzOxPb2gJrxoKbFro47Z8eh8B38RlW6M= Subject key identifier: B7:D7:CD:B4:DB:42:53:81:E6:05:73:9C:46:66:D3:D6:C7:76:35:57 Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5 Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5 Certificate serial: 019B5CAE307FFAB527B596801F6919CD5366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft Manifest number: 15CD Signing time: Fri 26 Dec 2025 22:01:17 +0000 Manifest this update: Fri 26 Dec 2025 22:01:17 +0000 Manifest next update: Sat 27 Dec 2025 22:01:17 +0000 Files and hashes: 1: HSyzFVthhSBBD96mxsl0scilpJU.roa (hash: q5u2KllVdiR/BqAy2dqAoFzSZ6PBl0fHr1yzfwddNTg=) 2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: opvbpfxWWaKwrFgOKjWdJ2yyN7gi4rqs1Nrr1hShvoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ae:30:7f:fa:b5:27:b5:96:80:1f:69:19:cd:53:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5 Validity Not Before: Dec 26 22:01:17 2025 GMT Not After : Dec 27 22:01:17 2025 GMT Subject: CN=b7d7cdb4db425381e605739c4666d3d6c7763557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:16:e3:87:1f:11:c3:14:07:ea:ac:e3:63:7c: 16:d2:15:6f:0a:ac:1d:16:2c:97:b9:1c:58:9d:ba: 68:eb:b6:86:19:ac:7f:8e:6b:ee:ef:04:92:4a:67: 22:c3:20:39:99:5e:0e:d1:9d:e7:11:81:f3:47:d6: 99:1f:29:f1:e4:58:31:34:c9:bd:49:91:62:d7:c7: 74:38:3b:5b:93:e2:04:76:67:95:d8:27:49:f8:b2: 16:37:e7:fb:a0:f6:90:23:39:10:4e:95:8c:7d:42: 3b:bf:b4:e1:4a:fb:1b:f2:20:5c:8a:01:e9:00:be: 4e:a1:87:41:cf:a4:97:a5:99:3b:11:b3:06:d6:46: 3c:51:f4:b0:52:e8:e4:06:bd:da:a5:5e:b3:6a:64: ac:19:9d:c3:28:6b:6b:db:09:b9:f3:29:3a:68:76: f5:0f:9d:3f:45:2b:9d:72:57:94:5d:21:f7:d7:bb: 86:cd:7c:55:dd:a9:44:ca:64:4b:46:50:0f:6d:88: 2a:3a:6f:94:a6:f6:fe:58:a2:68:03:86:12:a9:8e: 87:62:83:61:02:fb:d8:cd:2d:aa:4a:e3:5d:e3:61: 87:5e:9d:74:b0:38:e5:da:8d:b4:92:8e:f5:63:3c: 98:d3:62:ae:79:7c:03:63:19:71:20:77:b8:85:96: 13:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D7:CD:B4:DB:42:53:81:E6:05:73:9C:46:66:D3:D6:C7:76:35:57 X509v3 Authority Key Identifier: keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:22:2a:8e:df:c1:3c:22:eb:a5:0c:62:0e:a2:25:1c:b7:83: d1:fd:14:d1:01:b4:d0:89:40:22:07:e0:20:e8:d2:4b:c1:0a: 21:88:b1:79:70:9e:84:89:7d:a9:37:fe:a3:82:49:27:5e:ab: 5d:c6:81:81:98:25:4c:08:77:b5:94:36:57:22:e3:74:f6:e9: 98:e9:5f:99:b9:f8:b5:1d:1a:1b:de:b2:dd:55:27:b4:55:73: 62:c9:02:85:50:53:b9:64:01:68:08:f7:50:93:3a:c1:06:69: 8b:45:52:a5:70:ec:ab:96:fc:05:68:07:74:a3:a5:26:27:cb: 55:09:38:e6:e4:d9:40:9c:97:a1:0b:8b:1f:bd:ad:7f:db:05: 38:84:c0:09:24:c2:22:cc:6d:56:9e:3c:cd:70:9f:ad:7c:2d: b8:5c:1c:73:e0:24:fa:db:05:c9:5b:0f:ae:49:d0:67:7a:a9: 92:97:79:cd:32:31:df:ff:65:f7:46:da:c8:63:23:3e:59:0e: 07:6e:7f:38:89:1b:c2:36:4e:38:c0:ff:5e:54:a9:ac:a5:b2: 5e:14:b2:d3:ab:72:fe:39:ea:a6:d6:da:dd:9d:5c:cb:98:5b: a2:8d:6c:ee:bd:37:71:6c:d2:90:66:81:94:05:2f:1e:aa:a1: 24:9b:16:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrjB/+rUntZaAH2kZzVNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NjhmNjU2ODA1MzgwY2E4NmU3OTE3Mzc4OWQ2NjhkYzQw MWQ1YjUwHhcNMjUxMjI2MjIwMTE3WhcNMjUxMjI3MjIwMTE3WjAzMTEwLwYDVQQD EyhiN2Q3Y2RiNGRiNDI1MzgxZTYwNTczOWM0NjY2ZDNkNmM3NzYzNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xbjhx8RwxQH6qzjY3wW0hVvCqwd FiyXuRxYnbpo67aGGax/jmvu7wSSSmciwyA5mV4O0Z3nEYHzR9aZHynx5FgxNMm9 SZFi18d0ODtbk+IEdmeV2CdJ+LIWN+f7oPaQIzkQTpWMfUI7v7ThSvsb8iBcigHp AL5OoYdBz6SXpZk7EbMG1kY8UfSwUujkBr3apV6zamSsGZ3DKGtr2wm58yk6aHb1 D50/RSudcleUXSH317uGzXxV3alEymRLRlAPbYgqOm+Upvb+WKJoA4YSqY6HYoNh AvvYzS2qSuNd42GHXp10sDjl2o20ko71YzyY02KueXwDYxlxIHe4hZYTiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfXzbTbQlOB5gVznEZm09bHdjVXMB8GA1UdIwQY MBaAFGho9laAU4DKhueRc3idZo3EAdW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZjIzYzEtMDQzYy00OTU2LWJmYjgt MjZjOWY5OTMyYmJjLzEvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZjIzYzEtMDQzYy00OTU2LWJmYjgtMjZjOWY5OTMyYmJj LzEvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSIqjt/B PCLrpQxiDqIlHLeD0f0U0QG00IlAIgfgIOjSS8EKIYixeXCehIl9qTf+o4JJJ16r XcaBgZglTAh3tZQ2VyLjdPbpmOlfmbn4tR0aG96y3VUntFVzYskChVBTuWQBaAj3 UJM6wQZpi0VSpXDsq5b8BWgHdKOlJifLVQk45uTZQJyXoQuLH72tf9sFOITACSTC IsxtVp48zXCfrXwtuFwcc+Ak+tsFyVsPrknQZ3qpkpd5zTIx3/9l90bayGMjPlkO B25/OIkbwjZOOMD/XlSprKWyXhSy06ty/jnqptba3Z1cy5hboo1s7r03cWzSkGaB lAUvHqqhJJsWow== -----END CERTIFICATE-----Generated at Sat Dec 27 02:50:18 2025 by rpki-client