This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft File: aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft (raw, json) Hash identifier: JNLsLJR31INS6KP7qEf8GsLRn4nIINyIirwi+jBXLLM= Subject key identifier: 57:72:7F:F7:C3:9C:03:90:4F:6A:F2:D4:DB:A9:6A:4A:E6:82:D7:27 Authority key identifier: 68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50 Certificate issuer: /CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450 Certificate serial: 019B4A0464161A2A079AEFCDF37348D5668A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 07:02:40 +0000 Manifest this update: Tue 23 Dec 2025 07:02:40 +0000 Manifest next update: Wed 24 Dec 2025 07:02:40 +0000 Files and hashes: 1: Hpq861GqA5RqLih08GH13MdllW0.roa (hash: 6UGmd69y3tVELywuvYudCcD/UUgHO86OmDHx4Pt/TNE=) 2: aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl (hash: n92no6uLzQLKRB/GiyO2Jbr/neVF/Ohn2i+btzrRRQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:64:16:1a:2a:07:9a:ef:cd:f3:73:48:d5:66:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450 Validity Not Before: Dec 23 07:02:40 2025 GMT Not After : Dec 24 07:02:40 2025 GMT Subject: CN=57727ff7c39c03904f6af2d4dba96a4ae682d727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:5c:8e:f8:ad:72:b9:23:ae:61:19:8b:32: b4:7f:3a:f9:13:cb:a7:94:fa:09:6d:0b:03:55:34: 89:de:79:ff:89:88:81:ea:d5:ec:f9:6d:ba:88:fb: 7d:6f:5a:0a:8c:dc:d8:64:4c:72:ba:44:88:f7:75: 02:9b:f7:e1:5d:d9:34:ed:6d:3c:46:98:d2:ef:50: ff:71:7a:5f:e1:9f:78:62:8b:be:f2:57:81:63:a3: 76:21:30:43:20:67:f4:d3:53:f3:a5:39:1a:dc:5e: 45:f0:38:95:e1:33:52:0d:87:36:13:f4:60:a5:86: b2:a1:53:e3:47:f6:0c:fa:3d:34:65:3d:45:2f:a5: 8d:cc:77:b1:42:fd:bc:10:58:a1:8f:ed:52:52:cc: 76:87:e8:2c:29:68:ad:31:b8:cf:ee:27:3e:dc:7c: cf:12:15:28:9a:b0:72:35:b2:6c:9f:f8:07:8b:47: 68:4f:11:34:4c:60:41:cf:4b:c2:60:c8:19:b0:a7: 01:0d:f6:17:ad:ea:12:13:ca:55:3c:0a:0f:b1:bb: de:e4:e6:dd:bd:21:9e:3a:fe:53:e4:69:b4:94:f7: 71:fc:58:ee:72:59:fa:f3:e5:5d:b6:80:d4:2e:d8: 44:d7:a9:76:41:4a:8b:49:71:e2:c9:16:54:58:51: b7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:72:7F:F7:C3:9C:03:90:4F:6A:F2:D4:DB:A9:6A:4A:E6:82:D7:27 X509v3 Authority Key Identifier: keyid:68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:df:f7:5a:ca:2e:ff:2a:06:a2:a1:fb:09:33:45:e6:e2:71: 57:c7:00:b0:4d:34:ee:d9:69:3d:00:9b:60:a3:d5:2b:3a:02: 43:8f:08:ac:9b:db:07:06:63:31:32:1f:3e:6c:e0:08:b8:cf: 26:d5:ee:99:fa:2c:a8:5f:36:ea:df:04:51:c5:85:57:70:d3: 28:45:e4:09:1e:54:fe:ec:8d:e9:58:80:fb:a8:ad:88:04:b4: 61:24:96:d5:35:dc:40:b6:84:76:72:2c:cd:23:f4:db:72:12: 61:dd:26:b4:7b:62:d7:19:0a:19:07:66:97:8e:0c:2b:00:93: e2:5b:d7:e5:ae:35:d3:03:95:30:f0:73:0c:8d:3b:b2:4c:f5: 01:52:ac:a6:6c:2b:30:f8:b2:83:7c:7c:ca:26:af:0c:ee:90: bf:db:f7:16:0f:38:6c:bf:65:cb:b0:13:48:e5:e9:50:09:a0: dc:57:31:fa:8f:3c:40:db:89:53:e4:de:8b:1c:02:e2:59:a1: d9:cf:57:0a:fe:52:fd:bc:53:4c:68:8d:e1:dd:e5:8d:ba:b0: b3:e5:4c:36:8e:73:d2:46:13:da:0c:45:05:ea:81:11:97:bd: 43:f4:a6:1c:86:e9:8c:12:ad:0d:e1:54:9f:c6:99:cc:8f:eb: 1b:76:3a:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBGQWGioHmu/N83NI1WaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NmQxODQwNDkzZWVlMzQ1ZjhjMDJhZDhhYTdmMGYwZjQx YmE0NTAwHhcNMjUxMjIzMDcwMjQwWhcNMjUxMjI0MDcwMjQwWjAzMTEwLwYDVQQD Eyg1NzcyN2ZmN2MzOWMwMzkwNGY2YWYyZDRkYmE5NmE0YWU2ODJkNzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx5cjvitcrkjrmEZizK0fzr5E8un lPoJbQsDVTSJ3nn/iYiB6tXs+W26iPt9b1oKjNzYZExyukSI93UCm/fhXdk07W08 RpjS71D/cXpf4Z94You+8leBY6N2ITBDIGf001PzpTka3F5F8DiV4TNSDYc2E/Rg pYayoVPjR/YM+j00ZT1FL6WNzHexQv28EFihj+1SUsx2h+gsKWitMbjP7ic+3HzP EhUomrByNbJsn/gHi0doTxE0TGBBz0vCYMgZsKcBDfYXreoSE8pVPAoPsbve5Obd vSGeOv5T5Gm0lPdx/Fjucln68+VdtoDULthE16l2QUqLSXHiyRZUWFG3MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdyf/fDnAOQT2ry1NupakrmgtcnMB8GA1UdIwQY MBaAFGhtGEBJPu40X4wCrYqn8PD0G6RQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUcwWVFFay03alJmakFLdGlxZnc4UFFicEZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lNDJlY2YtNzhmZi00YjU4LTg3NjAt ODI2ZDA1Y2NmZTI1LzEvYUcwWVFFay03alJmakFLdGlxZnc4UFFicEZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9lNDJlY2YtNzhmZi00YjU4LTg3NjAtODI2ZDA1Y2NmZTI1 LzEvYUcwWVFFay03alJmakFLdGlxZnc4UFFicEZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABt/3Wsou /yoGoqH7CTNF5uJxV8cAsE007tlpPQCbYKPVKzoCQ48IrJvbBwZjMTIfPmzgCLjP JtXumfosqF826t8EUcWFV3DTKEXkCR5U/uyN6ViA+6itiAS0YSSW1TXcQLaEdnIs zSP023ISYd0mtHti1xkKGQdml44MKwCT4lvX5a410wOVMPBzDI07skz1AVKspmwr MPiyg3x8yiavDO6Qv9v3Fg84bL9ly7ATSOXpUAmg3Fcx+o88QNuJU+TeixwC4lmh 2c9XCv5S/bxTTGiN4d3ljbqws+VMNo5z0kYT2gxFBeqBEZe9Q/SmHIbpjBKtDeFU n8aZzI/rG3Y62w== -----END CERTIFICATE-----Generated at Tue Dec 23 13:04:39 2025 by rpki-client