This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft File: ag1malTV4bw1XA1yUDpFj8Do4Gw.mft (raw, json) Hash identifier: WTZAzD0kOGdB8EIoMqFXCmmM5gYdOk8l8uVelIkdK/Q= Subject key identifier: 3A:D3:34:EB:58:BE:C6:CB:10:D1:07:CF:39:4A:3A:18:A0:D1:B2:FB Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c Certificate serial: 019B5ABFCC2F22F0DB2A7113AED4779C917A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 13:01:17 +0000 Manifest this update: Fri 26 Dec 2025 13:01:17 +0000 Manifest next update: Sat 27 Dec 2025 13:01:17 +0000 Files and hashes: 1: Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa (hash: L0pLG2iq3DWnmdVA1LNHGmiPWiH4T8eZ9Q5L7k/ukzQ=) 2: ag1malTV4bw1XA1yUDpFj8Do4Gw.crl (hash: xvrdGQjbO1rX6WzOON19tVNwdRK62Sxb2NK0n6ovstc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:cc:2f:22:f0:db:2a:71:13:ae:d4:77:9c:91:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c Validity Not Before: Dec 26 13:01:17 2025 GMT Not After : Dec 27 13:01:17 2025 GMT Subject: CN=3ad334eb58bec6cb10d107cf394a3a18a0d1b2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:2a:a7:15:d7:38:d2:45:f5:80:51:92:81: b4:40:2f:c0:80:b6:70:c0:05:75:34:91:80:8a:77: 89:0c:9a:f7:24:95:74:32:9a:54:00:f0:3a:80:0b: 60:c0:5c:ec:bb:14:ca:f3:10:b7:14:e9:3c:91:35: cb:16:18:a9:14:78:f8:55:c4:8a:36:d4:81:a6:96: 97:f4:cd:2d:a5:46:fb:80:47:36:df:04:8b:ba:52: 54:52:1b:70:af:08:58:a8:51:d4:f2:5a:5f:07:60: 36:7f:38:60:48:71:80:f4:5c:f1:80:11:e5:65:21: 17:b1:87:b9:5e:21:ea:53:39:42:38:23:b6:b2:b1: 72:c7:30:bc:86:e2:82:e8:36:8b:f9:be:6d:f9:68: 0d:0d:61:a3:e8:e0:97:62:5d:7f:76:2f:86:c9:be: 58:a9:5a:39:4e:b7:21:4a:39:09:6c:96:80:99:11: 12:a6:da:42:6a:d8:15:67:c8:52:e4:31:91:14:ea: 67:2c:01:f1:ae:97:bf:1f:f1:7d:c1:2f:6d:aa:b9: 38:bb:1c:0b:a2:15:fd:bc:df:a8:1c:42:ae:f4:ba: f3:96:e5:0e:c7:05:97:ec:c4:a9:31:23:d9:bf:30: 67:7f:d9:0d:b6:de:4d:34:fd:30:d3:ed:8f:19:ca: 29:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D3:34:EB:58:BE:C6:CB:10:D1:07:CF:39:4A:3A:18:A0:D1:B2:FB X509v3 Authority Key Identifier: keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:22:b3:71:da:29:6a:b3:47:e5:df:d3:3a:84:25:90:66:e0: 85:94:06:af:d2:0a:1e:3e:8c:40:5c:af:a0:30:35:c3:b4:5c: ed:66:52:98:da:2a:5e:67:5b:d4:d7:05:89:06:11:61:05:b6: 11:8f:67:23:cf:a9:76:77:72:c9:01:49:1e:6a:62:44:f4:75: ee:13:a0:e2:1b:8b:60:f3:8d:43:5c:9e:db:2f:18:35:5e:ca: 38:7b:0c:48:5f:ea:e3:66:5c:9a:99:81:d4:1d:8a:56:c4:48: 80:ae:d2:8b:2d:7f:2f:10:ef:88:eb:d8:c9:8e:4b:db:ef:f9: 67:aa:9e:d5:ca:e7:dc:57:29:12:0e:60:9d:2d:4b:18:6f:a6: c0:d3:48:42:fb:06:60:4d:47:b1:9d:eb:20:37:1b:64:45:95: 33:2b:2d:9e:fe:b8:d0:97:9b:75:b5:ef:b9:47:fa:d9:b9:59: f7:04:d4:ad:a6:04:22:93:3d:c2:74:06:42:b5:a0:43:8c:21: 56:06:29:77:73:b7:f4:d6:68:6d:5c:c7:c0:40:e1:a8:1e:d1: ed:b7:ff:d9:71:79:c7:bb:77:22:b3:28:c9:57:7d:8b:6c:6e: 5d:bf:dd:47:ae:d4:ed:96:c9:6e:a0:a8:07:18:9e:0b:fb:63: 90:c4:2e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav8wvIvDbKnETrtR3nJF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMGQ2NjZhNTRkNWUxYmMzNTVjMGQ3MjUwM2E0NThmYzBl OGUwNmMwHhcNMjUxMjI2MTMwMTE3WhcNMjUxMjI3MTMwMTE3WjAzMTEwLwYDVQQD EygzYWQzMzRlYjU4YmVjNmNiMTBkMTA3Y2YzOTRhM2ExOGEwZDFiMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7AqpxXXONJF9YBRkoG0QC/AgLZw wAV1NJGAineJDJr3JJV0MppUAPA6gAtgwFzsuxTK8xC3FOk8kTXLFhipFHj4VcSK NtSBppaX9M0tpUb7gEc23wSLulJUUhtwrwhYqFHU8lpfB2A2fzhgSHGA9FzxgBHl ZSEXsYe5XiHqUzlCOCO2srFyxzC8huKC6DaL+b5t+WgNDWGj6OCXYl1/di+Gyb5Y qVo5TrchSjkJbJaAmRESptpCatgVZ8hS5DGRFOpnLAHxrpe/H/F9wS9tqrk4uxwL ohX9vN+oHEKu9LrzluUOxwWX7MSpMSPZvzBnf9kNtt5NNP0w0+2PGcopoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrTNOtYvsbLENEHzzlKOhig0bL7MB8GA1UdIwQY MBaAFGoNZmpU1eG8NVwNclA6RY/A6OBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZTg0MmItNGNjNy00ZTA3LTk4Mjct YTgyYWQ1NGRlZmJjLzEvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hZTg0MmItNGNjNy00ZTA3LTk4MjctYTgyYWQ1NGRlZmJj LzEvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyKzcdop arNH5d/TOoQlkGbghZQGr9IKHj6MQFyvoDA1w7Rc7WZSmNoqXmdb1NcFiQYRYQW2 EY9nI8+pdndyyQFJHmpiRPR17hOg4huLYPONQ1ye2y8YNV7KOHsMSF/q42ZcmpmB 1B2KVsRIgK7Siy1/LxDviOvYyY5L2+/5Z6qe1crn3FcpEg5gnS1LGG+mwNNIQvsG YE1HsZ3rIDcbZEWVMystnv640JebdbXvuUf62blZ9wTUraYEIpM9wnQGQrWgQ4wh VgYpd3O39NZobVzHwEDhqB7R7bf/2XF5x7t3IrMoyVd9i2xuXb/dR67U7ZbJbqCo BxieC/tjkMQuIQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:02 2025 by rpki-client