This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft File: aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json) Hash identifier: pqYMJNX9NknQA2Q/IlTTOmfvRDqwbA/SBmhR8ZgCp8E= Subject key identifier: D0:9F:44:E1:E3:AF:9B:42:BA:71:65:F4:5A:7F:49:81:F0:5C:0A:1D Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f Certificate serial: 019B2D0B010980287C3EDBD33603140821DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 16:00:54 +0000 Manifest this update: Wed 17 Dec 2025 16:00:54 +0000 Manifest next update: Thu 18 Dec 2025 16:00:54 +0000 Files and hashes: 1: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (hash: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=) 2: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: aHmk1JwlyN4tW/v4DDFCTvwSJ2OPZzePuSm1dhf9zSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:01:09:80:28:7c:3e:db:d3:36:03:14:08:21:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f Validity Not Before: Dec 17 16:00:54 2025 GMT Not After : Dec 18 16:00:54 2025 GMT Subject: CN=d09f44e1e3af9b42ba7165f45a7f4981f05c0a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:5f:8c:16:87:a3:6c:99:4a:0d:ab:43:f4: d7:1f:23:f0:5f:f1:c9:27:13:96:bd:0e:d8:36:8c: bd:83:e9:b1:23:06:43:21:44:18:eb:2f:8e:72:9b: 7f:4f:cc:c8:76:8b:ae:34:e5:db:14:ca:55:72:4b: 8c:6f:37:85:20:71:bc:9d:67:fc:3d:b1:a2:36:7c: d2:05:d5:3c:8d:be:76:6b:ec:db:1b:c7:80:78:b9: bc:07:62:1d:cc:cd:dd:bc:06:58:e5:4c:f0:b0:97: e3:9b:d5:b2:f0:f2:6f:04:ee:a4:8f:57:b8:67:9a: b3:1c:b5:cc:18:60:0a:ec:26:f5:4f:01:92:f9:9f: fd:d8:21:13:7d:36:4c:15:68:fb:b5:25:6d:f9:bb: 0e:18:6f:17:b2:ad:30:e7:84:94:ae:4f:73:58:78: da:93:73:fe:e0:ba:92:84:d6:7d:d5:78:9f:70:eb: c1:ce:92:80:1a:63:9e:88:af:1b:1f:93:ae:48:7a: 51:03:85:99:e5:9c:44:d6:61:98:b3:78:6f:56:50: f9:5f:f8:74:6c:94:93:09:9f:91:01:03:3a:76:51: e8:cd:b2:4f:68:42:67:c3:fd:0f:dc:df:a7:80:e0: 24:6b:d4:00:7b:21:6c:49:6d:5d:52:4c:08:48:e6: 8e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9F:44:E1:E3:AF:9B:42:BA:71:65:F4:5A:7F:49:81:F0:5C:0A:1D X509v3 Authority Key Identifier: keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:fe:26:8c:a4:e4:33:8f:72:15:06:d6:c9:0c:55:30:f2:33: b6:1e:e0:7c:79:c7:45:2f:4f:46:96:63:de:2f:e1:dd:2b:17: a4:95:28:be:c7:55:b1:b0:34:12:51:f1:03:8b:37:c7:a9:1a: b1:46:83:1f:10:a5:8a:8c:d4:9c:ce:9c:1e:4c:a8:a9:2d:ac: aa:1f:d3:0d:94:df:7c:17:43:85:66:82:a1:08:f5:72:48:d5: ea:2c:1e:56:1a:cd:48:ea:86:87:78:4a:b9:b5:27:b8:f4:3e: 17:1c:4c:f2:f1:81:33:85:ad:93:53:26:c6:6b:2a:b4:0d:12: 01:92:d7:8c:e9:d7:ad:0a:fc:a2:b4:3a:53:91:1a:40:f3:11: 16:b2:1e:a4:22:46:f6:96:31:09:83:ca:85:22:11:e2:b3:27: 81:2e:5e:e0:64:e4:11:76:38:99:75:da:2c:c9:8e:ad:c5:9b: f2:d4:98:17:f8:4b:59:7f:cd:08:db:c8:82:3e:a5:6d:57:d7: 43:e5:5f:c2:ad:f3:6f:09:6e:f9:51:a1:b3:dc:1e:a4:ad:2f: 98:f9:f4:93:8f:45:75:24:a8:e8:05:ab:f8:bd:f4:4d:b8:3b: cb:af:e8:76:d7:b6:32:40:a7:36:5c:b1:11:40:20:fa:83:5d: bd:3e:0a:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCwEJgCh8PtvTNgMUCCHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMDg0NmJkYmIwODA1NWFjYmQ2YWI1OWQ5NTYwOTgxZTA0 NmVlNmYwHhcNMjUxMjE3MTYwMDU0WhcNMjUxMjE4MTYwMDU0WjAzMTEwLwYDVQQD EyhkMDlmNDRlMWUzYWY5YjQyYmE3MTY1ZjQ1YTdmNDk4MWYwNWMwYTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxpfjBaHo2yZSg2rQ/TXHyPwX/HJ JxOWvQ7YNoy9g+mxIwZDIUQY6y+Ocpt/T8zIdouuNOXbFMpVckuMbzeFIHG8nWf8 PbGiNnzSBdU8jb52a+zbG8eAeLm8B2IdzM3dvAZY5UzwsJfjm9Wy8PJvBO6kj1e4 Z5qzHLXMGGAK7Cb1TwGS+Z/92CETfTZMFWj7tSVt+bsOGG8Xsq0w54SUrk9zWHja k3P+4LqShNZ91XifcOvBzpKAGmOeiK8bH5OuSHpRA4WZ5ZxE1mGYs3hvVlD5X/h0 bJSTCZ+RAQM6dlHozbJPaEJnw/0P3N+ngOAka9QAeyFsSW1dUkwISOaOFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCfROHjr5tCunFl9Fp/SYHwXAodMB8GA1UdIwQY MBaAFGoIRr27CAVay9arWdlWCYHgRu5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDct Nzc5MTc1MmE5YzZlLzEvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDctNzc5MTc1MmE5YzZl LzEvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASf4mjKTk M49yFQbWyQxVMPIzth7gfHnHRS9PRpZj3i/h3SsXpJUovsdVsbA0ElHxA4s3x6ka sUaDHxCliozUnM6cHkyoqS2sqh/TDZTffBdDhWaCoQj1ckjV6iweVhrNSOqGh3hK ubUnuPQ+FxxM8vGBM4Wtk1MmxmsqtA0SAZLXjOnXrQr8orQ6U5EaQPMRFrIepCJG 9pYxCYPKhSIR4rMngS5e4GTkEXY4mXXaLMmOrcWb8tSYF/hLWX/NCNvIgj6lbVfX Q+Vfwq3zbwlu+VGhs9wepK0vmPn0k49FdSSo6AWr+L30Tbg7y6/odte2MkCnNlyx EUAg+oNdvT4KBA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:13:20 2025 by rpki-client