This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft File: aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json) Hash identifier: V9GCKo487GFnIG2gIr7iH4ABUF4tMBpP0eLD/w44lxA= Subject key identifier: CB:21:AC:D6:1C:4D:1D:71:DE:F9:32:DF:1A:F1:B4:08:51:D6:1C:EA Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5 Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5 Certificate serial: 019B32316CDC7BC45D564D5FD6FC6C8B6954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft Manifest number: 15B7 Signing time: Thu 18 Dec 2025 16:00:58 +0000 Manifest this update: Thu 18 Dec 2025 16:00:58 +0000 Manifest next update: Fri 19 Dec 2025 16:00:58 +0000 Files and hashes: 1: HSyzFVthhSBBD96mxsl0scilpJU.roa (hash: q5u2KllVdiR/BqAy2dqAoFzSZ6PBl0fHr1yzfwddNTg=) 2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: CMDSkUaX6DNZJq2RsSv2SLti6XnK4+t3w1M/8dvTxYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:6c:dc:7b:c4:5d:56:4d:5f:d6:fc:6c:8b:69:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5 Validity Not Before: Dec 18 16:00:58 2025 GMT Not After : Dec 19 16:00:58 2025 GMT Subject: CN=cb21acd61c4d1d71def932df1af1b40851d61cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f6:7b:a6:4a:72:3f:1d:0a:9e:eb:4c:47:1c: 1a:d0:93:d2:6d:46:2b:2f:c6:63:50:de:12:83:7f: bf:62:2f:8f:80:57:15:87:f6:78:2b:9b:f7:2e:e1: 30:69:3d:a4:73:74:4d:dc:e8:5a:51:14:47:cd:5b: 75:62:cf:cb:73:89:23:f4:28:e6:40:4e:8d:b8:1f: 20:d5:1a:d1:86:ce:9b:55:c0:0f:bf:6c:2d:38:e8: 90:d3:7f:7d:86:a1:8e:4f:11:a7:0f:1f:f5:56:a5: 07:a5:70:9a:39:51:73:3b:93:eb:99:62:f6:ad:63: 3d:bb:7f:4c:b0:63:bb:62:48:61:b7:31:f4:64:c5: 16:9d:f3:99:f8:43:13:1a:7d:89:ee:57:2a:c6:42: 4c:a3:e4:32:c2:9c:d7:94:7a:d3:6a:8f:90:a0:4f: 27:eb:1c:2d:32:39:0b:65:4d:73:cc:f4:c8:bc:8b: 62:3e:78:8c:bb:ac:a0:2a:2d:02:12:ec:1a:73:9e: 7d:27:95:a7:81:93:eb:37:d7:ab:7d:67:d5:51:90: 55:74:8c:4d:f3:5c:49:4f:95:04:a5:13:99:d2:23: 7a:05:14:ad:e0:1f:48:75:f8:c7:9c:fc:f7:67:18: 5e:7f:d9:c9:07:72:ed:72:d4:88:e4:50:b0:8e:db: c3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:21:AC:D6:1C:4D:1D:71:DE:F9:32:DF:1A:F1:B4:08:51:D6:1C:EA X509v3 Authority Key Identifier: keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:8a:b1:00:b3:31:ee:29:2b:78:71:55:6b:de:b7:9d:32:9b: a3:f3:f2:fa:a9:37:57:eb:26:b8:6b:84:7b:b3:3b:bc:6d:02: 6f:7a:8a:62:c1:dc:a9:4f:01:ea:23:c8:3f:47:87:e4:5c:c4: fc:50:49:9f:8e:9b:a5:20:9a:99:00:e7:88:46:ef:e9:9e:9d: 26:de:c1:ba:5b:e8:f4:14:24:3e:fd:b9:20:8a:f9:a4:89:a8: bc:52:15:d1:d7:27:cf:85:09:d4:da:bb:48:2c:6e:67:b9:2f: 69:7d:10:98:da:34:ce:7b:6e:ff:72:fe:05:5e:db:15:87:6a: 20:0e:7e:ea:4d:86:bf:7c:a9:64:52:dc:3d:cd:10:f7:78:b8: c4:63:bc:59:d7:79:7b:cb:6c:92:23:fe:29:03:ba:2a:ee:c7: 8e:76:59:f1:54:71:0a:60:e5:bf:d1:57:3f:fd:d6:78:37:5c: 01:c6:cd:a2:90:a4:36:f5:f5:90:2a:5e:fe:df:1d:26:06:a1: 2a:c4:01:dc:9b:a9:2f:5e:56:ce:f0:03:17:bb:e4:71:2a:b0: f6:57:67:57:cc:40:56:01:c1:35:a9:66:bc:3f:89:de:12:39: 4b:98:73:e5:c8:64:7b:7d:5f:2a:7c:97:96:94:c6:7c:00:76: f6:95:df:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMWzce8RdVk1f1vxsi2lUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NjhmNjU2ODA1MzgwY2E4NmU3OTE3Mzc4OWQ2NjhkYzQw MWQ1YjUwHhcNMjUxMjE4MTYwMDU4WhcNMjUxMjE5MTYwMDU4WjAzMTEwLwYDVQQD EyhjYjIxYWNkNjFjNGQxZDcxZGVmOTMyZGYxYWYxYjQwODUxZDYxY2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofZ7pkpyPx0KnutMRxwa0JPSbUYr L8ZjUN4Sg3+/Yi+PgFcVh/Z4K5v3LuEwaT2kc3RN3OhaURRHzVt1Ys/Lc4kj9Cjm QE6NuB8g1RrRhs6bVcAPv2wtOOiQ0399hqGOTxGnDx/1VqUHpXCaOVFzO5PrmWL2 rWM9u39MsGO7YkhhtzH0ZMUWnfOZ+EMTGn2J7lcqxkJMo+QywpzXlHrTao+QoE8n 6xwtMjkLZU1zzPTIvItiPniMu6ygKi0CEuwac559J5WngZPrN9erfWfVUZBVdIxN 81xJT5UEpROZ0iN6BRSt4B9IdfjHnPz3Zxhef9nJB3LtctSI5FCwjtvDtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMshrNYcTR1x3vky3xrxtAhR1hzqMB8GA1UdIwQY MBaAFGho9laAU4DKhueRc3idZo3EAdW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZjIzYzEtMDQzYy00OTU2LWJmYjgt MjZjOWY5OTMyYmJjLzEvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZjIzYzEtMDQzYy00OTU2LWJmYjgtMjZjOWY5OTMyYmJj LzEvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIqxALMx 7ikreHFVa963nTKbo/Py+qk3V+smuGuEe7M7vG0Cb3qKYsHcqU8B6iPIP0eH5FzE /FBJn46bpSCamQDniEbv6Z6dJt7Bulvo9BQkPv25IIr5pImovFIV0dcnz4UJ1Nq7 SCxuZ7kvaX0QmNo0zntu/3L+BV7bFYdqIA5+6k2Gv3ypZFLcPc0Q93i4xGO8Wdd5 e8tskiP+KQO6Ku7HjnZZ8VRxCmDlv9FXP/3WeDdcAcbNopCkNvX1kCpe/t8dJgah KsQB3JupL15WzvADF7vkcSqw9ldnV8xAVgHBNalmvD+J3hI5S5hz5chke31fKnyX lpTGfAB29pXf7Q== -----END CERTIFICATE-----Generated at Fri Dec 19 00:53:04 2025 by rpki-client