This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json) Hash identifier: odRMXM7vMACPjzGNrO2QgIeBIlTpKTQjBq7VuoqSAZU= Subject key identifier: 92:9A:FC:F4:86:DF:10:5C:E5:E9:D2:D3:91:A8:1C:7F:55:14:0E:EB Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13 Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113 Certificate serial: 019B1F1849C4531E3527E5F3B1EC943DCFC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft Manifest number: 0943 Signing time: Sun 14 Dec 2025 23:00:43 +0000 Manifest this update: Sun 14 Dec 2025 23:00:43 +0000 Manifest next update: Mon 15 Dec 2025 23:00:43 +0000 Files and hashes: 1: 5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa (hash: iXzFw4W5Foz0uwg9MMW+CW99Q/qBQogltnHgfr+P8PQ=) 2: MTrzAX_D8XgoMN3mTBa0ASkLO-s.roa (hash: 5xLIJUhiZ8b7rVLgmWHwi35aSAKsu4l83lIArXRkd8w=) 3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: 7XfA//nntIrzQUg39/twBS2IBP5Zto0sar5Uc1q6gJY=) 4: zBSuOK6TSZdyfy80PgMlJMzpxoY.roa (hash: fCR2rdLvuL4emdZ++ZNvy3Kaqpga8geFfxEmhxpqkvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:18:49:c4:53:1e:35:27:e5:f3:b1:ec:94:3d:cf:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113 Validity Not Before: Dec 14 23:00:43 2025 GMT Not After : Dec 15 23:00:43 2025 GMT Subject: CN=929afcf486df105ce5e9d2d391a81c7f55140eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:59:d3:4a:46:3a:1e:d8:bb:23:d5:77:43: 6b:2d:24:67:98:6b:2b:f6:cd:10:97:6c:02:af:2f: 6a:4e:0d:c7:a7:02:ae:1b:ea:ca:45:06:37:79:5a: a3:89:22:87:01:67:a1:b1:42:b8:42:e4:17:a4:42: 81:2c:77:c6:21:31:f2:55:ee:a2:06:3b:a4:f0:26: 34:90:85:76:d8:57:dc:22:e6:a4:e1:f5:36:ee:3f: 6b:98:2f:2e:21:80:d2:eb:9b:ce:07:d6:67:a5:4a: a6:30:9b:32:81:4b:d4:26:99:0a:bd:b0:97:a2:8e: 48:6d:99:af:c8:e9:a9:96:f8:1d:cd:6e:f8:8c:6c: 5b:53:0d:11:88:df:b0:45:a0:2b:aa:4d:c8:22:97: be:46:ee:ce:f0:4c:8d:da:47:c6:d2:3a:cb:9e:cb: 3b:4f:31:67:65:14:ec:8e:40:81:b6:ea:ab:fd:03: a4:11:ed:3f:2e:ae:39:d1:c7:f7:15:8c:23:81:7d: d7:bb:20:1e:59:a6:da:e3:fd:7f:3a:ad:77:0d:4d: 67:8e:33:e0:24:50:4f:e4:00:3a:ec:21:80:66:b8: 7f:ae:c2:a3:2d:21:55:ec:87:2e:3c:53:10:3d:c0: 1d:3a:96:8f:d2:a6:d8:e0:92:39:2a:21:43:26:b7: df:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9A:FC:F4:86:DF:10:5C:E5:E9:D2:D3:91:A8:1C:7F:55:14:0E:EB X509v3 Authority Key Identifier: keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:54:6c:ed:bd:85:b4:3d:51:15:78:7b:ae:7e:43:c8:4d:11: b1:6f:47:88:52:d6:e2:09:53:3d:de:75:1c:e5:95:bf:7f:c6: 98:e0:11:50:f6:98:7c:e7:8f:99:3a:6f:a7:60:7e:55:05:9c: df:62:3d:07:43:b5:26:e1:99:03:3f:b6:da:c7:2c:d9:f7:89: a5:fc:79:d9:89:a7:1c:35:be:62:5a:0d:b7:86:1b:ba:ac:18: b1:3c:2a:aa:dd:b2:4b:54:2d:85:25:91:d9:5e:c3:34:d5:24: 65:7a:12:a3:45:1d:f9:42:5d:eb:cc:68:92:f6:b6:21:73:46: 9f:7e:34:04:d0:9d:ec:d8:83:94:63:74:66:ba:02:c9:f6:b9: 00:83:6f:c0:b5:ad:b8:d2:b3:69:47:27:d8:5e:4e:4b:d3:50: 9a:1a:ba:97:32:b2:00:69:9b:2a:e3:06:f3:94:10:6d:9b:54: 0e:63:a8:66:f5:93:b5:87:28:cd:df:4a:24:2d:2e:38:12:9a: aa:e9:98:31:dd:fd:42:4b:dd:07:4d:50:fb:91:e8:bd:26:26: 42:23:de:97:83:c4:c8:3f:71:a8:73:d8:e2:7d:d7:ac:fa:f5: da:64:63:53:1b:4f:28:4b:f8:9b:4b:d9:d5:18:14:99:24:1e: 9d:6e:a1:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfGEnEUx41J+XzseyUPc/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NjM3MDgxY2E3YzJlYmE0MTAxMGFiZWFhZDY0YTdjNjFm NmExMTMwHhcNMjUxMjE0MjMwMDQzWhcNMjUxMjE1MjMwMDQzWjAzMTEwLwYDVQQD Eyg5MjlhZmNmNDg2ZGYxMDVjZTVlOWQyZDM5MWE4MWM3ZjU1MTQwZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS5Z00pGOh7YuyPVd0NrLSRnmGsr 9s0Ql2wCry9qTg3HpwKuG+rKRQY3eVqjiSKHAWehsUK4QuQXpEKBLHfGITHyVe6i Bjuk8CY0kIV22FfcIuak4fU27j9rmC8uIYDS65vOB9ZnpUqmMJsygUvUJpkKvbCX oo5IbZmvyOmplvgdzW74jGxbUw0RiN+wRaArqk3IIpe+Ru7O8EyN2kfG0jrLnss7 TzFnZRTsjkCBtuqr/QOkEe0/Lq450cf3FYwjgX3XuyAeWaba4/1/Oq13DU1njjPg JFBP5AA67CGAZrh/rsKjLSFV7IcuPFMQPcAdOpaP0qbY4JI5KiFDJrff+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKa/PSG3xBc5enS05GoHH9VFA7rMB8GA1UdIwQY MBaAFGhjcIHKfC66QQEKvqrWSnxh9qETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2Et ZTY2NzllN2I3OTVhLzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2EtZTY2NzllN2I3OTVh LzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVRs7b2F tD1RFXh7rn5DyE0RsW9HiFLW4glTPd51HOWVv3/GmOARUPaYfOePmTpvp2B+VQWc 32I9B0O1JuGZAz+22scs2feJpfx52YmnHDW+YloNt4YbuqwYsTwqqt2yS1QthSWR 2V7DNNUkZXoSo0Ud+UJd68xokva2IXNGn340BNCd7NiDlGN0ZroCyfa5AINvwLWt uNKzaUcn2F5OS9NQmhq6lzKyAGmbKuMG85QQbZtUDmOoZvWTtYcozd9KJC0uOBKa qumYMd39QkvdB01Q+5HovSYmQiPel4PEyD9xqHPY4n3XrPr12mRjUxtPKEv4m0vZ 1RgUmSQenW6hQg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:57:20 2025 by rpki-client