This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json) Hash identifier: a8XERwKgIuBvm6smR+HBjnCNH1NIVL50QV4shsBpptw= Subject key identifier: 29:98:7E:FF:30:37:01:8C:E9:7A:15:B7:5A:F4:A4:EF:D0:0C:95:72 Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49 Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49 Certificate serial: 019BF80878AE63FB44B45567CFB80CE6CFEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 02:01:03 +0000 Manifest this update: Mon 26 Jan 2026 02:01:03 +0000 Manifest next update: Tue 27 Jan 2026 02:01:03 +0000 Files and hashes: 1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: FVTMS4yGJ3NNMOFdG58zubWVYuIxh2pKy9E0kCrAhtY=) 2: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (hash: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:78:ae:63:fb:44:b4:55:67:cf:b8:0c:e6:cf:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49 Validity Not Before: Jan 26 02:01:03 2026 GMT Not After : Jan 27 02:01:03 2026 GMT Subject: CN=29987eff3037018ce97a15b75af4a4efd00c9572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:92:ba:e8:fa:75:a9:37:ab:4f:cc:bf:3f: 13:8e:08:d7:a8:ab:29:f4:c1:ff:7d:3a:8d:12:23: b9:6b:84:5d:05:a2:df:46:69:e2:bf:f3:39:c2:5a: 31:fc:28:26:ca:d5:a4:3c:29:eb:e9:a0:f3:5d:94: af:8a:ff:07:5b:35:7c:5a:cd:3f:ad:92:3c:62:89: a3:25:ab:48:37:9b:65:02:89:dc:6f:4a:fc:f6:88: ca:dd:1c:85:85:9a:ec:69:bb:c9:2c:4d:9a:86:63: 7e:af:72:4f:3a:a5:54:c4:cf:63:ff:f1:a2:3d:b3: c9:1c:23:91:bf:52:20:4b:50:46:71:97:f2:fd:83: f3:3c:d7:94:4f:34:59:08:12:2e:9d:55:cf:f2:0d: a2:27:f0:d3:c4:4d:66:d9:70:51:2a:45:51:af:28: 44:2f:86:25:f2:63:a6:59:2b:dd:c1:bf:2a:53:87: 81:05:65:54:da:4b:1e:d3:9d:2c:e5:77:b7:83:05: 51:79:c6:ff:0c:37:f9:9e:b2:63:bd:cb:24:8d:6d: 55:e7:b0:3a:53:14:79:9b:67:f1:de:c0:6a:a5:8d: e7:4c:f4:9e:23:3e:1a:33:01:a3:39:7a:1c:e0:9e: 47:33:7c:c4:d3:b7:0f:3b:47:ed:cb:88:4e:13:77: f2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:98:7E:FF:30:37:01:8C:E9:7A:15:B7:5A:F4:A4:EF:D0:0C:95:72 X509v3 Authority Key Identifier: keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:67:24:5c:fb:c8:35:d4:14:7f:e6:26:a8:70:15:32:50:a1: e5:45:d4:8d:23:0b:f2:73:2f:7a:eb:cc:b4:db:72:4b:bd:dd: 5e:2c:1b:8a:ee:53:e3:19:1b:bc:fc:35:5b:09:84:ec:ea:0f: 63:0f:1f:c1:ef:09:8d:8d:68:ed:58:91:4a:8a:89:f5:22:a5: cb:17:a1:12:23:9c:d0:3f:5b:a9:a6:d7:ba:47:7c:9b:1a:7d: 4a:35:6f:57:de:95:e1:71:8f:88:19:b7:f9:7f:6c:e2:ee:12: 80:6f:25:b0:cf:c5:93:86:55:2e:de:2b:56:e2:0e:85:cd:32: ba:27:5d:ad:1f:81:bc:4d:72:1f:f3:f2:19:53:2b:6b:3e:4e: 97:8b:78:34:77:0b:8f:dc:e6:1e:58:bf:8c:a7:32:51:17:21: d1:bf:73:83:c8:cf:84:54:64:a2:08:91:d6:77:f4:93:11:2c: d9:e3:79:0f:02:18:a7:07:a2:d6:7f:a0:91:ed:76:0b:a8:7c: 3f:f0:9b:3f:de:24:37:7b:b5:dd:4e:1e:fd:3e:fa:dc:48:e3: 53:5d:10:f9:88:4d:2f:9c:a2:07:fa:de:d7:b4:3e:23:d1:cc: c6:ca:b8:23:d7:22:ac:ad:90:11:de:50:0e:78:e1:ab:e1:1c: c2:7b:e4:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CHiuY/tEtFVnz7gM5s/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMDRjYTRhOTY2MTYzMWM0ZWM2MTVhM2E2ZDE1ZDIyMDMw ZGNmNDkwHhcNMjYwMTI2MDIwMTAzWhcNMjYwMTI3MDIwMTAzWjAzMTEwLwYDVQQD EygyOTk4N2VmZjMwMzcwMThjZTk3YTE1Yjc1YWY0YTRlZmQwMGM5NTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriWSuuj6dak3q0/Mvz8TjgjXqKsp 9MH/fTqNEiO5a4RdBaLfRmniv/M5wlox/CgmytWkPCnr6aDzXZSviv8HWzV8Ws0/ rZI8YomjJatIN5tlAoncb0r89ojK3RyFhZrsabvJLE2ahmN+r3JPOqVUxM9j//Gi PbPJHCORv1IgS1BGcZfy/YPzPNeUTzRZCBIunVXP8g2iJ/DTxE1m2XBRKkVRryhE L4Yl8mOmWSvdwb8qU4eBBWVU2kse050s5Xe3gwVRecb/DDf5nrJjvcskjW1V57A6 UxR5m2fx3sBqpY3nTPSeIz4aMwGjOXoc4J5HM3zE07cPO0fty4hOE3fyvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmYfv8wNwGM6XoVt1r0pO/QDJVyMB8GA1UdIwQY MBaAFGoEykqWYWMcTsYVo6bRXSIDDc9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMt ODExM2RhNjdlZjc1LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMtODExM2RhNjdlZjc1 LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2ckXPvI NdQUf+YmqHAVMlCh5UXUjSML8nMveuvMtNtyS73dXiwbiu5T4xkbvPw1WwmE7OoP Yw8fwe8JjY1o7ViRSoqJ9SKlyxehEiOc0D9bqabXukd8mxp9SjVvV96V4XGPiBm3 +X9s4u4SgG8lsM/Fk4ZVLt4rVuIOhc0yuiddrR+BvE1yH/PyGVMraz5Ol4t4NHcL j9zmHli/jKcyURch0b9zg8jPhFRkogiR1nf0kxEs2eN5DwIYpwei1n+gke12C6h8 P/CbP94kN3u13U4e/T763EjjU10Q+YhNL5yiB/re17Q+I9HMxsq4I9cirK2QEd5Q Dnjhq+Ecwnvk+g== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:54 2026 by rpki-client