This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft File: aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json) Hash identifier: aZhoK817HWKy2cgPN26Tz6xCdnlRCv4haEc5NGSlInU= Subject key identifier: 57:82:6C:B4:3B:22:FA:22:79:A5:D9:8C:68:4D:C6:C9:F1:62:5D:CB Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f Certificate serial: 019AF12CF38F5D29D5E164EFD77101FB6238 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:00:46 +0000 Manifest this update: Sat 06 Dec 2025 01:00:46 +0000 Manifest next update: Sun 07 Dec 2025 01:00:46 +0000 Files and hashes: 1: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (hash: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=) 2: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: yQKNm2ORZTMP75aoQkblAlkU5zaaPQG4RxzsqYhe6ZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f3:8f:5d:29:d5:e1:64:ef:d7:71:01:fb:62:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f Validity Not Before: Dec 6 01:00:46 2025 GMT Not After : Dec 7 01:00:46 2025 GMT Subject: CN=57826cb43b22fa2279a5d98c684dc6c9f1625dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:29:1e:f5:d7:27:52:e6:12:3a:9c:62:7b: 71:0c:79:96:85:9a:c0:93:c0:d5:3e:e4:95:2f:aa: 5d:a2:aa:43:79:74:c1:6c:69:6c:30:6c:e8:c0:23: e6:14:7d:58:35:05:f5:cd:c8:8c:a1:d0:da:1f:21: 07:51:91:38:92:5c:de:46:03:4e:20:d5:90:bb:09: ec:76:f2:33:9e:b9:5c:5d:07:57:23:ac:d1:5a:c2: 2d:74:e7:28:15:d0:ba:8c:66:f9:2e:2a:b6:4b:b2: a6:91:8c:96:a4:a7:ac:b7:c3:30:97:f4:7b:ba:56: 89:69:1f:86:e5:92:06:83:69:e4:5b:0e:b8:5d:e0: f7:df:68:57:b0:5a:4c:92:8b:aa:bd:6a:40:fa:a0: ea:d0:65:67:8e:d1:bc:07:65:d2:13:28:fa:bc:3a: a6:f5:e5:8d:46:45:29:ed:4b:78:a3:9f:98:cf:1d: d8:fd:3b:07:80:be:6c:1a:b2:be:98:52:81:b7:44: 81:cf:98:a5:8e:28:a2:16:cd:c2:a6:6e:a9:d2:ca: 1b:92:bf:e8:89:2e:25:91:b5:e9:c7:7d:54:2f:55: aa:ed:c8:72:64:3c:4d:69:d2:52:ce:f1:8e:1c:2c: c7:e3:b6:6c:03:e3:84:f9:6e:e9:54:aa:0e:95:0e: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:82:6C:B4:3B:22:FA:22:79:A5:D9:8C:68:4D:C6:C9:F1:62:5D:CB X509v3 Authority Key Identifier: keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:07:49:58:2c:eb:c8:24:f1:7c:c2:77:36:25:0f:e9:8c:0e: 3d:0d:33:11:04:6e:fe:d4:77:7a:ff:a0:51:ac:05:c3:65:a4: 18:9f:a7:db:cf:f1:16:38:3d:b9:38:84:61:7e:96:3a:1f:c9: da:2f:a3:5b:ac:8e:a9:f0:20:64:2e:d8:95:e0:bc:21:89:f0: d8:1e:72:bd:e6:5a:b7:13:c6:cc:74:f6:37:c5:de:22:83:5a: 84:12:52:b7:b6:1a:c4:92:b3:27:8c:e6:b4:1b:8d:ea:d5:14: 87:64:00:11:6a:57:35:70:7e:ec:ea:69:b4:30:b0:30:de:ec: e5:4e:6f:14:b5:3a:58:55:4a:18:d3:60:4c:f5:a2:c7:28:90: 27:1b:16:5e:e1:8f:f7:e6:77:68:e7:7b:34:b4:a5:70:2a:c3: 5d:4f:17:47:97:d9:93:04:40:82:35:73:8a:9f:ef:9f:2b:0e: 68:8b:aa:26:4e:f2:7d:b8:e5:88:fa:f9:2f:27:f3:0d:b1:d6: 15:b7:26:59:64:f5:38:e4:26:67:3a:4b:38:24:81:e0:ab:e3: 21:e2:7e:0e:6c:ba:5c:a4:94:2f:18:43:3a:2c:69:84:a0:6f: a8:96:49:b6:fb:0e:7e:e4:b7:59:07:9d:42:31:2e:a9:1f:84: 7d:db:7c:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPOPXSnV4WTv13EB+2I4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMDg0NmJkYmIwODA1NWFjYmQ2YWI1OWQ5NTYwOTgxZTA0 NmVlNmYwHhcNMjUxMjA2MDEwMDQ2WhcNMjUxMjA3MDEwMDQ2WjAzMTEwLwYDVQQD Eyg1NzgyNmNiNDNiMjJmYTIyNzlhNWQ5OGM2ODRkYzZjOWYxNjI1ZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBMpHvXXJ1LmEjqcYntxDHmWhZrA k8DVPuSVL6pdoqpDeXTBbGlsMGzowCPmFH1YNQX1zciModDaHyEHUZE4klzeRgNO INWQuwnsdvIznrlcXQdXI6zRWsItdOcoFdC6jGb5Liq2S7KmkYyWpKest8Mwl/R7 ulaJaR+G5ZIGg2nkWw64XeD332hXsFpMkouqvWpA+qDq0GVnjtG8B2XSEyj6vDqm 9eWNRkUp7Ut4o5+Yzx3Y/TsHgL5sGrK+mFKBt0SBz5iljiiiFs3Cpm6p0sobkr/o iS4lkbXpx31UL1Wq7chyZDxNadJSzvGOHCzH47ZsA+OE+W7pVKoOlQ6aBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeCbLQ7IvoieaXZjGhNxsnxYl3LMB8GA1UdIwQY MBaAFGoIRr27CAVay9arWdlWCYHgRu5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDct Nzc5MTc1MmE5YzZlLzEvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDctNzc5MTc1MmE5YzZl LzEvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAdJWCzr yCTxfMJ3NiUP6YwOPQ0zEQRu/tR3ev+gUawFw2WkGJ+n28/xFjg9uTiEYX6WOh/J 2i+jW6yOqfAgZC7YleC8IYnw2B5yveZatxPGzHT2N8XeIoNahBJSt7YaxJKzJ4zm tBuN6tUUh2QAEWpXNXB+7OpptDCwMN7s5U5vFLU6WFVKGNNgTPWixyiQJxsWXuGP 9+Z3aOd7NLSlcCrDXU8XR5fZkwRAgjVzip/vnysOaIuqJk7yfbjliPr5LyfzDbHW FbcmWWT1OOQmZzpLOCSB4KvjIeJ+Dmy6XKSULxhDOixphKBvqJZJtvsOfuS3WQed QjEuqR+Efdt8HA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:22 2025 by rpki-client