This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json) Hash identifier: ZyVcTsp96FaLH8AeCdVl61e9ffsRmz2JsuFPpJMoh7Y= Subject key identifier: A9:BA:00:F9:C1:AA:62:5D:2D:AF:1C:46:6B:2E:84:33:F3:D8:DB:19 Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13 Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113 Certificate serial: 019AF0BF420F4EA2EEB44E90E457C6257C47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft Manifest number: 092B Signing time: Fri 05 Dec 2025 23:00:57 +0000 Manifest this update: Fri 05 Dec 2025 23:00:57 +0000 Manifest next update: Sat 06 Dec 2025 23:00:57 +0000 Files and hashes: 1: 5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa (hash: iXzFw4W5Foz0uwg9MMW+CW99Q/qBQogltnHgfr+P8PQ=) 2: MTrzAX_D8XgoMN3mTBa0ASkLO-s.roa (hash: 5xLIJUhiZ8b7rVLgmWHwi35aSAKsu4l83lIArXRkd8w=) 3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: uxaURIIC7CbYZ7Dm0TlhD7HLrpUPpgEXXq/A10NCrVo=) 4: zBSuOK6TSZdyfy80PgMlJMzpxoY.roa (hash: fCR2rdLvuL4emdZ++ZNvy3Kaqpga8geFfxEmhxpqkvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:42:0f:4e:a2:ee:b4:4e:90:e4:57:c6:25:7c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113 Validity Not Before: Dec 5 23:00:57 2025 GMT Not After : Dec 6 23:00:57 2025 GMT Subject: CN=a9ba00f9c1aa625d2daf1c466b2e8433f3d8db19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:58:34:68:38:0d:1e:2f:b1:64:bd:79:b7:88: 10:7c:54:21:ed:8a:87:82:0b:50:6d:65:6b:43:d1: 9f:37:de:86:2f:87:ee:ad:3e:31:d0:f2:4e:56:16: 02:ec:56:eb:04:ab:ee:cb:4b:5c:70:22:8a:3c:58: f9:c8:e2:5f:b4:af:e4:95:94:1e:1d:ac:c0:e6:3f: bb:d9:e3:01:fe:3a:82:f8:14:53:69:30:8b:3a:65: 83:63:ba:24:3b:3d:02:d4:ae:f4:c6:65:1f:4a:1e: de:c4:ec:7b:91:93:21:e1:de:6c:1d:df:af:b0:f3: 07:4f:4c:ff:89:b3:6d:df:d4:32:61:57:fe:95:55: 9f:26:87:3e:10:bd:5f:ed:47:29:35:4a:9a:cd:e7: 98:65:a8:a8:98:53:6a:d6:d0:d9:53:51:80:ec:bd: a2:04:6b:ce:21:5d:e2:70:57:36:4a:21:82:69:d6: a8:12:27:47:ae:72:8a:12:7e:2a:2f:a8:08:a2:9c: 4a:8e:23:46:44:de:d4:f9:e8:15:54:ee:f8:f0:bb: 7c:98:51:bf:49:f5:01:dc:bc:93:cf:89:e4:2f:d0: 66:da:e8:02:4e:12:31:97:46:1f:d1:94:61:e5:11: 3c:d6:9e:9b:a9:49:33:a0:ed:ad:56:79:31:fb:32: ac:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BA:00:F9:C1:AA:62:5D:2D:AF:1C:46:6B:2E:84:33:F3:D8:DB:19 X509v3 Authority Key Identifier: keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c9:dd:fe:48:e3:5e:40:f1:76:7d:2f:1f:f3:9d:71:7c:c6: ef:0a:d6:e7:84:ae:6d:8b:27:66:eb:9e:c4:50:c2:6c:b1:3b: 96:26:76:e5:3e:de:69:67:bc:40:1a:f2:bd:89:16:28:2c:1e: 28:4a:54:b4:03:22:7d:b1:d1:9a:95:9e:80:0b:41:73:a6:26: 89:fc:d7:48:b7:76:74:ba:08:4f:74:05:54:d2:19:48:b8:c9: ac:80:cd:2b:a6:d2:c0:48:20:71:60:66:f2:58:1e:fd:1e:e0: 66:e5:34:99:89:30:72:24:0e:d7:45:71:01:03:77:bb:15:c8: 5e:c0:c8:b8:be:45:af:29:76:d6:26:a1:4e:8b:e8:a6:fd:e6: ba:8c:39:c5:3d:ea:83:f3:41:96:79:f2:6a:99:ed:ff:2e:f9: 65:af:ed:04:12:d4:fc:f3:e4:54:ed:65:42:f8:28:67:cf:72: ad:50:01:0e:a2:73:5a:6d:2b:25:9b:ad:8d:a7:e3:04:e0:af: fb:a8:90:3f:b7:99:7e:40:34:ad:32:3e:fa:60:05:d2:ea:64: 62:7d:ba:83:24:32:ad:57:c4:f6:c3:68:be:aa:7f:7e:c5:d7: 42:a7:f6:77:9c:7d:e7:b7:ae:1d:7e:99:b6:9c:d1:1d:95:f1: 5e:a0:72:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0IPTqLutE6Q5FfGJXxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NjM3MDgxY2E3YzJlYmE0MTAxMGFiZWFhZDY0YTdjNjFm NmExMTMwHhcNMjUxMjA1MjMwMDU3WhcNMjUxMjA2MjMwMDU3WjAzMTEwLwYDVQQD EyhhOWJhMDBmOWMxYWE2MjVkMmRhZjFjNDY2YjJlODQzM2YzZDhkYjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21g0aDgNHi+xZL15t4gQfFQh7YqH ggtQbWVrQ9GfN96GL4furT4x0PJOVhYC7FbrBKvuy0tccCKKPFj5yOJftK/klZQe HazA5j+72eMB/jqC+BRTaTCLOmWDY7okOz0C1K70xmUfSh7exOx7kZMh4d5sHd+v sPMHT0z/ibNt39QyYVf+lVWfJoc+EL1f7UcpNUqazeeYZaiomFNq1tDZU1GA7L2i BGvOIV3icFc2SiGCadaoEidHrnKKEn4qL6gIopxKjiNGRN7U+egVVO748Lt8mFG/ SfUB3LyTz4nkL9Bm2ugCThIxl0Yf0ZRh5RE81p6bqUkzoO2tVnkx+zKs1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKm6APnBqmJdLa8cRmsuhDPz2NsZMB8GA1UdIwQY MBaAFGhjcIHKfC66QQEKvqrWSnxh9qETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2Et ZTY2NzllN2I3OTVhLzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2EtZTY2NzllN2I3OTVh LzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8nd/kjj XkDxdn0vH/OdcXzG7wrW54SubYsnZuuexFDCbLE7liZ25T7eaWe8QBryvYkWKCwe KEpUtAMifbHRmpWegAtBc6YmifzXSLd2dLoIT3QFVNIZSLjJrIDNK6bSwEggcWBm 8lge/R7gZuU0mYkwciQO10VxAQN3uxXIXsDIuL5Fryl21iahTovopv3muow5xT3q g/NBlnnyapnt/y75Za/tBBLU/PPkVO1lQvgoZ89yrVABDqJzWm0rJZutjafjBOCv +6iQP7eZfkA0rTI++mAF0upkYn26gyQyrVfE9sNovqp/fsXXQqf2d5x957euHX6Z tpzRHZXxXqBywQ== -----END CERTIFICATE-----Generated at Sat Dec 6 02:11:10 2025 by rpki-client