This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft File: ag1malTV4bw1XA1yUDpFj8Do4Gw.mft (raw, json) Hash identifier: 5ntkDenYpdZpSYHgusmOenMxRFFGd9h9DCTLUX6zA7s= Subject key identifier: C6:94:2C:10:F7:10:6E:48:8D:DE:BA:1F:5E:44:68:56:EA:9E:50:E4 Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c Certificate serial: 019B2C669C1BA5C5C3649DC7CAD182334B16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 13:01:20 +0000 Manifest this update: Wed 17 Dec 2025 13:01:20 +0000 Manifest next update: Thu 18 Dec 2025 13:01:20 +0000 Files and hashes: 1: Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa (hash: L0pLG2iq3DWnmdVA1LNHGmiPWiH4T8eZ9Q5L7k/ukzQ=) 2: ag1malTV4bw1XA1yUDpFj8Do4Gw.crl (hash: QE3cOBIm1d4DrAvwUdAeNzne2lTQotn+JdaBqpzk3qk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:9c:1b:a5:c5:c3:64:9d:c7:ca:d1:82:33:4b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c Validity Not Before: Dec 17 13:01:20 2025 GMT Not After : Dec 18 13:01:20 2025 GMT Subject: CN=c6942c10f7106e488ddeba1f5e446856ea9e50e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:9f:76:46:13:82:2d:11:ab:89:4e:e0:1d: 0a:7d:9a:2a:85:46:74:e1:c1:1a:43:2c:0a:3a:60: 78:30:bc:50:97:00:16:8a:49:02:8f:2f:ce:96:32: 39:2a:11:16:f8:6b:b3:39:14:f6:b3:97:0a:d5:bd: a7:2e:df:a7:e6:84:e7:10:5b:c9:2e:ac:27:cf:67: 6d:1f:22:cd:18:b0:d3:43:6f:c2:67:ef:0e:1e:b4: a8:f9:89:d2:ed:0b:ea:81:ca:48:a7:cb:ba:ea:8d: 54:7e:c2:70:b6:82:76:f1:21:e1:01:40:9d:fc:81: b4:a6:d4:9c:b6:f7:43:ce:ce:09:db:55:27:22:14: 41:ea:a8:96:70:6b:12:11:4f:60:83:6e:20:e7:c4: 50:db:03:9c:c6:8f:40:63:e2:ca:ce:9d:86:12:fa: 1c:af:9e:72:f8:7c:9d:36:28:7e:ba:f9:5c:2a:56: 67:4b:2d:f5:7c:44:b1:96:bf:5c:b1:55:cf:82:8e: 7f:09:85:6a:09:ca:20:cf:48:83:20:17:ee:58:f5: cf:fd:47:96:fc:42:66:ea:ee:a7:fa:74:6f:b8:df: 37:fb:af:cd:5e:14:a7:65:3b:c0:41:28:da:68:c8: c9:bd:c8:63:8a:31:aa:ef:d4:24:f0:94:c5:ec:ef: 42:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:94:2C:10:F7:10:6E:48:8D:DE:BA:1F:5E:44:68:56:EA:9E:50:E4 X509v3 Authority Key Identifier: keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:5a:b9:75:e6:23:94:0b:4e:7d:c7:8c:0c:e1:28:38:dd:6f: 88:13:76:01:54:82:ca:ac:41:81:3b:d5:e2:19:a4:17:0d:27: fd:1d:fe:4e:81:9a:38:6d:9f:c0:97:76:fa:29:00:e9:34:a5: c0:4d:ac:86:30:e5:eb:26:5c:c2:f6:aa:0a:57:0d:a7:cf:9b: a0:19:a6:24:3c:60:d5:25:3b:1d:2d:81:99:5b:ac:93:f7:24: e5:04:3a:77:e8:f5:35:d7:f7:f5:e8:97:30:82:77:4f:a7:3b: 76:8b:24:c9:bc:fa:31:aa:5c:47:49:74:15:41:e4:4b:71:aa: 2e:45:d9:ce:87:ab:7f:06:79:b4:d9:2b:29:b6:4f:f7:f4:8f: db:d3:85:75:c2:c3:22:41:d3:19:ca:e2:e9:ea:89:05:87:fd: 37:33:78:24:9f:c2:7e:db:1d:12:34:49:f4:29:63:c1:aa:ec: 57:c8:63:97:ae:26:b4:87:b4:33:a5:2c:77:58:c2:8a:f2:aa: 36:c9:b7:35:af:14:e8:95:8d:76:06:6e:53:ed:ed:de:f9:24: 11:ed:b8:70:97:7d:4a:96:86:c4:e0:2e:5e:9c:38:04:d0:6b: cb:5a:b6:59:2a:35:90:45:95:0e:7d:fc:ab:dc:16:c3:6b:de: 68:54:fb:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZpwbpcXDZJ3HytGCM0sWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMGQ2NjZhNTRkNWUxYmMzNTVjMGQ3MjUwM2E0NThmYzBl OGUwNmMwHhcNMjUxMjE3MTMwMTIwWhcNMjUxMjE4MTMwMTIwWjAzMTEwLwYDVQQD EyhjNjk0MmMxMGY3MTA2ZTQ4OGRkZWJhMWY1ZTQ0Njg1NmVhOWU1MGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSqfdkYTgi0Rq4lO4B0KfZoqhUZ0 4cEaQywKOmB4MLxQlwAWikkCjy/OljI5KhEW+GuzORT2s5cK1b2nLt+n5oTnEFvJ Lqwnz2dtHyLNGLDTQ2/CZ+8OHrSo+YnS7QvqgcpIp8u66o1UfsJwtoJ28SHhAUCd /IG0ptSctvdDzs4J21UnIhRB6qiWcGsSEU9gg24g58RQ2wOcxo9AY+LKzp2GEvoc r55y+HydNih+uvlcKlZnSy31fESxlr9csVXPgo5/CYVqCcogz0iDIBfuWPXP/UeW /EJm6u6n+nRvuN83+6/NXhSnZTvAQSjaaMjJvchjijGq79Qk8JTF7O9CYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaULBD3EG5Ijd66H15EaFbqnlDkMB8GA1UdIwQY MBaAFGoNZmpU1eG8NVwNclA6RY/A6OBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZTg0MmItNGNjNy00ZTA3LTk4Mjct YTgyYWQ1NGRlZmJjLzEvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hZTg0MmItNGNjNy00ZTA3LTk4MjctYTgyYWQ1NGRlZmJj LzEvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVq5deYj lAtOfceMDOEoON1viBN2AVSCyqxBgTvV4hmkFw0n/R3+ToGaOG2fwJd2+ikA6TSl wE2shjDl6yZcwvaqClcNp8+boBmmJDxg1SU7HS2BmVusk/ck5QQ6d+j1Ndf39eiX MIJ3T6c7doskybz6MapcR0l0FUHkS3GqLkXZzoerfwZ5tNkrKbZP9/SP29OFdcLD IkHTGcri6eqJBYf9NzN4JJ/CftsdEjRJ9CljwarsV8hjl64mtIe0M6Usd1jCivKq Nsm3Na8U6JWNdgZuU+3t3vkkEe24cJd9SpaGxOAuXpw4BNBry1q2WSo1kEWVDn38 q9wWw2veaFT7ww== -----END CERTIFICATE-----Generated at Wed Dec 17 21:05:31 2025 by rpki-client