This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft File: AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json) Hash identifier: Q1yggrToluEQYhtHsF5CZy/Jew9Jxe6/aM6jez+rp/Y= Subject key identifier: 09:47:87:89:8C:D4:79:63:52:44:96:1A:81:65:63:E6:68:EB:2A:84 Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2 Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2 Certificate serial: 019B3DC81C563DDCA532ECF4C6416CF10896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft Manifest number: 0ABB Signing time: Sat 20 Dec 2025 22:01:23 +0000 Manifest this update: Sat 20 Dec 2025 22:01:23 +0000 Manifest next update: Sun 21 Dec 2025 22:01:23 +0000 Files and hashes: 1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: 0K6RyZ+sDNPiLEJmh614onEhA7z5G6ONHYRlTA+qtIA=) 2: KWN7lbu9UX4daUEdNDAK3ZMrFAk.roa (hash: WqU1UFiFL55OvehHLohuI3Znyc7Zm1Aa844JXIgkQ7A=) 3: RuH2k0iAjasiUyAH22AdPFV5Ae0.roa (hash: +Reg0vgoBRw6w4QQfuC6Wd/elCxMYo7/ChLckPoqJlc=) 4: wC6GvOL96y7ng1OaBtu0ACc0Uv8.roa (hash: Pb/46jJY/4NqGVEPi/tZl2cVHTdO0P2kZSbGSJnkcFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:1c:56:3d:dc:a5:32:ec:f4:c6:41:6c:f1:08:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2 Validity Not Before: Dec 20 22:01:23 2025 GMT Not After : Dec 21 22:01:23 2025 GMT Subject: CN=094787898cd479635244961a816563e668eb2a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:79:75:6f:97:c6:28:58:c9:b0:48:8b:a7: 3e:44:70:75:e2:da:84:a9:60:3c:9b:65:96:6b:cb: 13:78:93:11:36:dc:3a:2c:7a:23:99:36:be:f9:37: 35:cc:e0:03:58:9b:a4:ce:81:a3:3d:a2:f7:5e:f0: 42:ca:9f:41:3b:ed:38:af:7e:a6:20:0e:34:27:1e: 7c:ab:e2:aa:f9:12:9d:07:dd:69:9f:75:fc:52:bb: 09:26:4d:97:83:66:df:e4:bc:24:bd:e2:c6:02:10: 74:41:5b:9b:ab:93:aa:26:6e:a4:55:bf:48:1e:0b: 81:3c:ed:f0:99:05:24:c0:db:c3:89:af:4a:b7:a7: 4a:25:20:af:7f:ef:6f:fb:5c:c7:a7:c8:07:2d:9b: 42:ea:8f:09:5a:c0:a2:16:cd:05:03:55:32:ab:ca: 67:df:68:1a:56:d5:e1:db:a0:8d:3d:d3:30:c0:15: b6:4a:97:88:b2:9c:5d:23:e9:ed:77:83:cf:38:40: 2d:63:0a:83:aa:2e:81:f3:62:63:51:13:a1:f9:62: 41:fc:33:01:26:64:8d:2c:54:d9:56:bb:8e:83:18: 4a:7f:73:a4:26:b9:45:a0:3d:1f:bb:69:9c:a1:ec: 57:1b:57:d2:d0:ae:3d:5e:66:b9:87:18:be:2b:bb: d1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:47:87:89:8C:D4:79:63:52:44:96:1A:81:65:63:E6:68:EB:2A:84 X509v3 Authority Key Identifier: keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ae:14:27:31:cf:a5:85:29:ee:81:d3:81:19:34:55:7d:4d: c5:31:ba:ab:da:64:c6:8c:ee:de:e5:9e:57:e7:9b:6c:66:4d: 51:ad:e8:40:79:62:7d:b7:1b:a0:b4:00:77:30:05:fd:a6:12: 8f:b7:1a:60:91:28:1c:a9:8a:21:c5:8a:43:1a:f0:86:54:cb: 33:21:35:e4:7d:39:28:ac:42:97:68:04:5c:a8:3a:46:66:9c: 5b:71:80:9e:70:c1:26:b0:e0:7f:ec:13:cf:37:d7:2b:cc:06: b1:bb:2d:ca:3b:1d:39:96:56:b6:3f:7e:31:98:c5:62:68:00: 97:72:17:b3:95:06:ac:b5:47:52:58:37:f1:08:28:27:57:69: e1:8c:39:26:9e:20:e2:f9:31:d4:9f:a5:03:fc:43:0d:8c:28: 7b:70:d2:1c:18:d7:51:a8:1a:2e:a1:0f:f4:dd:25:cd:6d:53: ce:dd:c5:30:b8:03:27:ba:4e:9b:a1:a1:c7:e5:95:bf:97:08: 39:c9:4d:d3:f0:b6:1c:85:72:00:f7:a3:bc:2f:84:54:7c:37: b2:33:09:68:5d:24:97:76:02:b1:ff:83:09:b7:f0:42:c0:fa: 2d:73:97:ee:ee:36:01:6e:fa:33:ca:a9:2d:5f:a6:1e:59:3c: c8:ff:ed:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yBxWPdylMuz0xkFs8QiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNmIwNmI1ZDBmZjEwMDBlMTBjNDI3NmVlYTA4ODBhZjIw OWQ3YTIwHhcNMjUxMjIwMjIwMTIzWhcNMjUxMjIxMjIwMTIzWjAzMTEwLwYDVQQD EygwOTQ3ODc4OThjZDQ3OTYzNTI0NDk2MWE4MTY1NjNlNjY4ZWIyYTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWV5dW+XxihYybBIi6c+RHB14tqE qWA8m2WWa8sTeJMRNtw6LHojmTa++Tc1zOADWJukzoGjPaL3XvBCyp9BO+04r36m IA40Jx58q+Kq+RKdB91pn3X8UrsJJk2Xg2bf5LwkveLGAhB0QVubq5OqJm6kVb9I HguBPO3wmQUkwNvDia9Kt6dKJSCvf+9v+1zHp8gHLZtC6o8JWsCiFs0FA1Uyq8pn 32gaVtXh26CNPdMwwBW2SpeIspxdI+ntd4PPOEAtYwqDqi6B82JjUROh+WJB/DMB JmSNLFTZVruOgxhKf3OkJrlFoD0fu2mcoexXG1fS0K49Xma5hxi+K7vR7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlHh4mM1HljUkSWGoFlY+Zo6yqEMB8GA1UdIwQY MBaAFABrBrXQ/xAA4QxCdu6giAryCdeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQt NTdjOTU1YzljODVkLzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQtNTdjOTU1YzljODVk LzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAda4UJzHP pYUp7oHTgRk0VX1NxTG6q9pkxozu3uWeV+ebbGZNUa3oQHlifbcboLQAdzAF/aYS j7caYJEoHKmKIcWKQxrwhlTLMyE15H05KKxCl2gEXKg6RmacW3GAnnDBJrDgf+wT zzfXK8wGsbstyjsdOZZWtj9+MZjFYmgAl3IXs5UGrLVHUlg38QgoJ1dp4Yw5Jp4g 4vkx1J+lA/xDDYwoe3DSHBjXUagaLqEP9N0lzW1Tzt3FMLgDJ7pOm6Ghx+WVv5cI OclN0/C2HIVyAPejvC+EVHw3sjMJaF0kl3YCsf+DCbfwQsD6LXOX7u42AW76M8qp LV+mHlk8yP/twQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:04:39 2025 by rpki-client