This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json) Hash identifier: UxKBFyRhn/UYpWB7xP6gDbmTLVYZ4m1MHceO7189wJ0= Subject key identifier: B7:7B:51:B2:CA:31:73:52:5F:77:31:E2:F0:16:F9:F8:DF:D6:48:9B Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49 Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49 Certificate serial: 019B5A51ADD0C69E17B618516D3064899198 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 11:01:00 +0000 Manifest this update: Fri 26 Dec 2025 11:01:00 +0000 Manifest next update: Sat 27 Dec 2025 11:01:00 +0000 Files and hashes: 1: 1y00I_lr4dZnPswtulIObxWKqNI.roa (hash: B9wbQnXjTiDMVW+/AnVX4UUAGDb3Y2f5WOlbfFrBXa8=) 2: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: iq7PmxOCSMP5Ndul6C1BKQ6WEsLakMAXv6TrW1jglns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:ad:d0:c6:9e:17:b6:18:51:6d:30:64:89:91:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49 Validity Not Before: Dec 26 11:01:00 2025 GMT Not After : Dec 27 11:01:00 2025 GMT Subject: CN=b77b51b2ca3173525f7731e2f016f9f8dfd6489b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:1f:7f:de:29:cb:dc:eb:a3:0f:de:30:87: 0f:31:1d:9a:9d:77:d7:af:f0:00:60:4e:fa:b3:c4: 42:48:d2:79:48:3d:ac:7b:b2:b3:1b:60:bf:71:67: 4b:df:6d:e9:9f:a7:fe:da:13:fa:dd:0e:9e:de:51: 00:cc:72:ab:41:1e:e6:a8:ee:3d:e3:cb:48:cd:a3: 2a:d6:06:b8:10:4e:81:9f:99:a3:55:bd:5b:5e:2f: 96:0b:7d:66:f1:37:b5:a3:09:ea:f0:8d:a9:73:26: 8e:f0:0f:db:04:97:be:98:0a:78:b1:4d:85:71:90: ec:e3:db:18:98:d4:7c:33:6e:7c:4f:ff:ef:c7:7e: 93:9e:ec:24:75:36:e4:9c:c7:3d:05:2b:3d:f9:44: a4:ae:81:10:63:c1:05:c4:28:68:1b:cb:1a:6e:9e: 97:2c:10:e3:7c:d6:0a:0e:0f:07:df:94:40:56:a6: d1:8b:44:e5:f3:fa:bf:6e:f0:80:43:86:1e:ef:4d: 7b:90:58:5c:eb:8d:8d:c6:59:61:02:10:de:bb:a3: 73:c4:f2:f3:16:14:ba:fe:5a:6c:10:74:56:71:94: 16:90:a4:f5:ea:d6:9e:be:05:4f:c8:5e:2d:a8:30: 77:59:35:08:db:59:c9:b6:fc:1a:1f:05:98:1c:c9: 19:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7B:51:B2:CA:31:73:52:5F:77:31:E2:F0:16:F9:F8:DF:D6:48:9B X509v3 Authority Key Identifier: keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f1:04:dd:22:2c:6c:af:2d:f3:de:27:4c:b8:5e:84:b6:e7: 21:e3:89:15:0d:3f:e7:a6:8f:9f:04:e2:17:29:bb:2a:54:51: 29:89:f7:75:15:9d:c2:5c:ac:cf:eb:2a:91:6b:e8:7a:37:85: 06:77:89:1b:99:5a:0e:b0:b6:90:54:ee:64:13:00:14:68:69: 77:bc:90:6e:bf:fd:16:ed:6f:4f:8b:4c:92:a2:30:1b:b3:26: b6:60:55:47:38:7f:db:4d:03:8a:57:8b:0b:b8:a5:95:10:0d: 77:6d:39:45:92:da:79:73:0a:02:f4:99:57:7c:80:06:b9:d3: 85:ff:dc:0a:0d:ca:b9:35:cf:e3:fa:16:95:8a:14:ca:28:9d: d0:23:64:d6:8b:1e:cc:32:dc:47:d2:10:a8:66:1a:6f:ae:1a: d4:55:83:0e:92:19:f7:de:5b:1a:2f:99:fb:0a:7e:a1:04:b2: 85:d2:32:83:81:92:14:94:07:e0:08:cc:50:98:ca:29:62:c7: 66:2d:1c:2e:f4:5b:0b:d0:4f:98:db:b0:f8:d9:eb:82:f5:26: a7:95:13:f8:6b:66:67:a9:5b:22:f7:c4:4b:5e:c5:7a:a9:d0: 99:d6:33:09:f4:93:95:9d:12:56:4a:fb:b0:6d:2b:23:21:a7: 64:6f:40:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUa3Qxp4XthhRbTBkiZGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMDRjYTRhOTY2MTYzMWM0ZWM2MTVhM2E2ZDE1ZDIyMDMw ZGNmNDkwHhcNMjUxMjI2MTEwMTAwWhcNMjUxMjI3MTEwMTAwWjAzMTEwLwYDVQQD EyhiNzdiNTFiMmNhMzE3MzUyNWY3NzMxZTJmMDE2ZjlmOGRmZDY0ODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlgff94py9zrow/eMIcPMR2anXfX r/AAYE76s8RCSNJ5SD2se7KzG2C/cWdL323pn6f+2hP63Q6e3lEAzHKrQR7mqO49 48tIzaMq1ga4EE6Bn5mjVb1bXi+WC31m8Te1ownq8I2pcyaO8A/bBJe+mAp4sU2F cZDs49sYmNR8M258T//vx36TnuwkdTbknMc9BSs9+USkroEQY8EFxChoG8sabp6X LBDjfNYKDg8H35RAVqbRi0Tl8/q/bvCAQ4Ye7017kFhc642NxllhAhDeu6NzxPLz FhS6/lpsEHRWcZQWkKT16taevgVPyF4tqDB3WTUI21nJtvwaHwWYHMkZFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLd7UbLKMXNSX3cx4vAW+fjf1kibMB8GA1UdIwQY MBaAFGoEykqWYWMcTsYVo6bRXSIDDc9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMt ODExM2RhNjdlZjc1LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMtODExM2RhNjdlZjc1 LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfEE3SIs bK8t894nTLhehLbnIeOJFQ0/56aPnwTiFym7KlRRKYn3dRWdwlysz+sqkWvoejeF BneJG5laDrC2kFTuZBMAFGhpd7yQbr/9Fu1vT4tMkqIwG7MmtmBVRzh/200DileL C7illRANd205RZLaeXMKAvSZV3yABrnThf/cCg3KuTXP4/oWlYoUyiid0CNk1ose zDLcR9IQqGYab64a1FWDDpIZ995bGi+Z+wp+oQSyhdIyg4GSFJQH4AjMUJjKKWLH Zi0cLvRbC9BPmNuw+NnrgvUmp5UT+GtmZ6lbIvfES17FeqnQmdYzCfSTlZ0SVkr7 sG0rIyGnZG9A7A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:24 2025 by rpki-client