This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json) Hash identifier: g6Q96r3QS/04AJMN3eX8T90nLbKS5C7ewOa1lw+ivO8= Subject key identifier: CE:F2:68:EE:9E:C8:B6:F2:52:C7:D6:5C:7C:D4:C9:0B:5D:6F:08:5F Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68 Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68 Certificate serial: 019B2475F3EB7A5D03D8A1E5AEEEF2117C80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft Manifest number: 0A70 Signing time: Tue 16 Dec 2025 00:01:08 +0000 Manifest this update: Tue 16 Dec 2025 00:01:08 +0000 Manifest next update: Wed 17 Dec 2025 00:01:08 +0000 Files and hashes: 1: GRjGVnhDoWbQf18vA-j6jPrf8bk.roa (hash: zfy3Xeb5F33VM6wGODUsXEb4Wf9If41Lyk9PhoslocI=) 2: Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa (hash: tgY6PnqoOsKcCw452vOSzlvkg7P0cNWRWTWaQclJxEc=) 3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: gX4V7F5EnOApoTfF/iQ9qSKc4bxiCclXtWOVBFeko6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:75:f3:eb:7a:5d:03:d8:a1:e5:ae:ee:f2:11:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a016dad273047b18886691485dedd97171c4d68 Validity Not Before: Dec 16 00:01:08 2025 GMT Not After : Dec 17 00:01:08 2025 GMT Subject: CN=cef268ee9ec8b6f252c7d65c7cd4c90b5d6f085f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ff:00:e6:fa:d9:a3:a8:27:fb:10:d3:a9:9a: ca:f2:9e:d1:32:3c:2f:3a:2b:67:7a:e1:8e:bf:ad: da:b7:ca:f3:a7:4f:fb:1e:46:a6:f3:8d:7d:c8:68: 71:6a:45:88:be:07:2a:d9:22:82:56:74:e7:83:9a: df:e3:90:7b:24:19:b8:bf:21:eb:4c:9d:23:04:12: 50:70:98:f4:80:ce:99:eb:7e:1b:33:c2:13:6d:8e: 0e:b6:c3:b1:6b:fd:7d:a7:b2:73:c7:38:9b:15:88: 3a:e9:c0:2c:48:b2:39:92:26:84:b6:ac:f6:27:07: c8:69:27:7b:af:6e:74:fe:20:7b:bd:75:8a:e8:c9: 3a:ac:76:60:f7:da:01:2c:3b:df:a3:0f:b2:ec:58: b1:97:40:76:fc:8c:98:d6:2d:79:94:c3:4d:94:ea: c9:a6:b3:11:63:11:54:3d:47:c4:87:9a:ba:bc:a6: d9:fd:5b:41:3f:9f:51:50:e0:20:f0:42:4c:3a:4c: 92:c5:c0:65:5b:d1:52:34:95:8c:28:ed:0c:4e:4f: 4c:3b:16:9a:48:42:be:45:47:ea:00:6c:40:ca:c9: 61:9c:e6:79:36:31:ab:60:77:c4:25:4d:cb:a5:6c: d4:af:f7:3b:3b:10:00:12:82:32:1c:1c:8a:d5:3f: 3f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F2:68:EE:9E:C8:B6:F2:52:C7:D6:5C:7C:D4:C9:0B:5D:6F:08:5F X509v3 Authority Key Identifier: keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:23:fb:de:6e:61:5a:0b:a1:56:64:e2:5f:38:73:ac:43:28: f7:f0:78:c6:1c:d3:8b:f9:10:cf:07:11:33:6f:ea:bd:48:66: ec:9e:4a:4a:f7:a7:ee:eb:d2:06:ae:93:92:5a:9c:47:93:0c: 9e:72:c6:8a:06:2a:bc:38:6a:3c:35:d2:0d:44:83:63:3f:1f: 0b:81:a2:2b:ea:01:b0:24:ec:46:a6:df:d8:f3:2d:2b:ec:bf: f6:1b:29:59:c4:1a:ba:4a:e2:aa:4f:f1:46:de:76:32:27:87: 18:3d:81:8d:6b:ef:37:07:cf:b5:3d:37:b2:f8:1d:29:1d:37: 9b:60:72:2d:14:91:4a:01:e9:a5:11:8b:cf:f2:dc:9f:7e:ba: 77:82:85:18:0e:e1:e8:c6:6a:56:ad:fb:20:f6:42:21:f5:26: 54:e3:54:95:c1:ac:f9:65:3c:57:82:53:a8:74:9f:36:a7:9d: 23:41:f9:26:e3:60:dc:90:ec:1d:94:8d:52:98:ea:c5:45:53: 65:14:06:83:c0:30:db:ee:53:a4:23:c2:19:d5:48:81:1e:a0: db:b2:0a:eb:8e:69:bf:47:6a:88:a2:31:7b:32:ae:a8:ad:64: d1:59:d0:3f:21:7e:7d:f2:24:31:08:ed:d8:a5:c3:23:09:4d: de:ea:54:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdfPrel0D2KHlru7yEXyAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMDE2ZGFkMjczMDQ3YjE4ODg2NjkxNDg1ZGVkZDk3MTcx YzRkNjgwHhcNMjUxMjE2MDAwMTA4WhcNMjUxMjE3MDAwMTA4WjAzMTEwLwYDVQQD EyhjZWYyNjhlZTllYzhiNmYyNTJjN2Q2NWM3Y2Q0YzkwYjVkNmYwODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v8A5vrZo6gn+xDTqZrK8p7RMjwv OitneuGOv63at8rzp0/7Hkam8419yGhxakWIvgcq2SKCVnTng5rf45B7JBm4vyHr TJ0jBBJQcJj0gM6Z634bM8ITbY4OtsOxa/19p7JzxzibFYg66cAsSLI5kiaEtqz2 JwfIaSd7r250/iB7vXWK6Mk6rHZg99oBLDvfow+y7Fixl0B2/IyY1i15lMNNlOrJ prMRYxFUPUfEh5q6vKbZ/VtBP59RUOAg8EJMOkySxcBlW9FSNJWMKO0MTk9MOxaa SEK+RUfqAGxAyslhnOZ5NjGrYHfEJU3LpWzUr/c7OxAAEoIyHByK1T8/XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7yaO6eyLbyUsfWXHzUyQtdbwhfMB8GA1UdIwQY MBaAFGoBba0nMEexiIZpFIXe3ZcXHE1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMt Yzk1MjgwNDkzMmMyLzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMtYzk1MjgwNDkzMmMy LzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiP73m5h WguhVmTiXzhzrEMo9/B4xhzTi/kQzwcRM2/qvUhm7J5KSven7uvSBq6TklqcR5MM nnLGigYqvDhqPDXSDUSDYz8fC4GiK+oBsCTsRqbf2PMtK+y/9hspWcQaukriqk/x Rt52MieHGD2BjWvvNwfPtT03svgdKR03m2ByLRSRSgHppRGLz/Lcn366d4KFGA7h 6MZqVq37IPZCIfUmVONUlcGs+WU8V4JTqHSfNqedI0H5JuNg3JDsHZSNUpjqxUVT ZRQGg8Aw2+5TpCPCGdVIgR6g27IK645pv0dqiKIxezKuqK1k0VnQPyF+ffIkMQjt 2KXDIwlN3upU4g== -----END CERTIFICATE-----Generated at Tue Dec 16 04:12:51 2025 by rpki-client