This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft File: AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json) Hash identifier: 9qhrT3EzGIvzE7LNIaZeuJPviNJxUXaTKdUSIpvVBG4= Subject key identifier: 76:D2:C8:B2:65:67:F7:D3:E1:71:A2:5F:86:63:29:C3:9D:22:86:A2 Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2 Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2 Certificate serial: 019AF276CFB320A1CA896EB9989F68FD4961 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft Manifest number: 0A94 Signing time: Sat 06 Dec 2025 07:01:03 +0000 Manifest this update: Sat 06 Dec 2025 07:01:03 +0000 Manifest next update: Sun 07 Dec 2025 07:01:03 +0000 Files and hashes: 1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: +Ls6tbhlklNZqdVZ6P3dunqJm/dvWGHbhyGFf4I1B7Y=) 2: KWN7lbu9UX4daUEdNDAK3ZMrFAk.roa (hash: WqU1UFiFL55OvehHLohuI3Znyc7Zm1Aa844JXIgkQ7A=) 3: RuH2k0iAjasiUyAH22AdPFV5Ae0.roa (hash: +Reg0vgoBRw6w4QQfuC6Wd/elCxMYo7/ChLckPoqJlc=) 4: wC6GvOL96y7ng1OaBtu0ACc0Uv8.roa (hash: Pb/46jJY/4NqGVEPi/tZl2cVHTdO0P2kZSbGSJnkcFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:cf:b3:20:a1:ca:89:6e:b9:98:9f:68:fd:49:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2 Validity Not Before: Dec 6 07:01:03 2025 GMT Not After : Dec 7 07:01:03 2025 GMT Subject: CN=76d2c8b26567f7d3e171a25f866329c39d2286a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:ed:48:71:76:fd:93:92:f3:4b:f3:ed:28: 69:68:18:61:43:4b:c3:2d:4c:8f:75:9c:cc:c2:6a: fe:93:c2:75:74:7b:bc:ed:ba:c2:72:6e:61:d9:55: e5:9f:06:de:ec:4f:be:51:22:b3:06:78:15:9d:7c: 67:da:8a:e1:03:95:9c:a6:94:f6:38:3c:5a:ee:3c: 8d:04:d4:f0:3c:46:ef:bc:c7:81:f3:a3:16:98:64: 2b:0e:e5:a2:d7:9f:38:60:0e:b5:16:f9:83:90:43: 7f:4d:42:ef:63:b2:3e:34:29:f9:61:a8:52:ca:42: c0:68:d3:9a:89:27:86:47:68:0d:dc:22:99:40:c9: 8f:14:17:52:25:df:b1:1e:6b:c1:c4:9c:af:a8:0b: 32:e9:84:13:5b:15:c5:15:5e:45:6e:05:2f:2f:8d: 11:82:e9:7b:3f:a0:af:31:72:b6:ac:ea:6e:ee:a3: 4d:e8:ed:4f:07:a7:fc:e9:4c:68:ef:4a:85:17:95: 6d:67:83:db:59:59:cb:74:4a:75:26:88:6b:85:52: c7:04:1e:eb:bf:95:48:93:47:5d:a7:31:7b:0d:cd: 23:16:e8:71:43:3d:ed:4c:f4:70:42:b1:fe:f4:92: 35:3f:ec:97:65:65:c8:e0:ca:f2:b5:2d:9f:9f:ad: 00:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D2:C8:B2:65:67:F7:D3:E1:71:A2:5F:86:63:29:C3:9D:22:86:A2 X509v3 Authority Key Identifier: keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:4f:13:45:27:4f:a4:42:9a:98:4c:aa:69:50:10:e7:40:58: 9a:43:b3:25:46:9f:3b:4e:5c:b3:9d:56:4d:0a:a3:fa:6e:9b: 1b:3c:a2:9e:df:ba:83:a2:30:1b:6e:58:8a:78:10:db:07:5a: f1:b4:79:bf:b0:32:2b:a5:5f:a4:47:3e:f3:d0:05:73:f6:88: a6:0f:9b:86:0c:78:27:4e:e8:dc:3b:28:6f:3f:8b:24:93:45: ab:2a:ff:31:46:ce:2f:c9:e4:2a:c0:e2:f6:d3:1e:2c:4b:2a: c6:05:05:96:8f:3c:e5:7e:47:b4:be:d2:ea:e1:cf:08:f1:e1: 0f:13:86:50:8e:6a:7c:83:f2:7c:6f:4c:fa:09:a7:2f:02:b1: 8f:21:42:11:34:83:1e:f7:43:64:98:90:d1:ff:7b:04:1f:07: 9a:24:9f:43:9a:ce:6f:68:eb:8a:b8:31:17:51:d5:83:95:7b: 75:55:44:33:7f:d1:2f:0d:15:3f:ab:8c:71:ea:db:98:cb:06: cb:d8:6b:9d:e9:cf:a6:60:c1:a4:d6:25:cc:4f:cd:a0:93:b9: 48:ca:0f:92:79:dd:94:49:be:0d:6c:48:96:73:1f:8c:09:a1: 9b:00:af:63:4c:74:6a:fd:57:b9:65:ed:ac:06:60:40:9b:45: 63:87:a9:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryds+zIKHKiW65mJ9o/UlhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNmIwNmI1ZDBmZjEwMDBlMTBjNDI3NmVlYTA4ODBhZjIw OWQ3YTIwHhcNMjUxMjA2MDcwMTAzWhcNMjUxMjA3MDcwMTAzWjAzMTEwLwYDVQQD Eyg3NmQyYzhiMjY1NjdmN2QzZTE3MWEyNWY4NjYzMjljMzlkMjI4NmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLTtSHF2/ZOS80vz7ShpaBhhQ0vD LUyPdZzMwmr+k8J1dHu87brCcm5h2VXlnwbe7E++USKzBngVnXxn2orhA5WcppT2 ODxa7jyNBNTwPEbvvMeB86MWmGQrDuWi1584YA61FvmDkEN/TULvY7I+NCn5YahS ykLAaNOaiSeGR2gN3CKZQMmPFBdSJd+xHmvBxJyvqAsy6YQTWxXFFV5FbgUvL40R gul7P6CvMXK2rOpu7qNN6O1PB6f86Uxo70qFF5VtZ4PbWVnLdEp1JohrhVLHBB7r v5VIk0ddpzF7Dc0jFuhxQz3tTPRwQrH+9JI1P+yXZWXI4MrytS2fn60AnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbSyLJlZ/fT4XGiX4ZjKcOdIoaiMB8GA1UdIwQY MBaAFABrBrXQ/xAA4QxCdu6giAryCdeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQt NTdjOTU1YzljODVkLzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQtNTdjOTU1YzljODVk LzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGU8TRSdP pEKamEyqaVAQ50BYmkOzJUafO05cs51WTQqj+m6bGzyint+6g6IwG25YingQ2wda 8bR5v7AyK6VfpEc+89AFc/aIpg+bhgx4J07o3Dsobz+LJJNFqyr/MUbOL8nkKsDi 9tMeLEsqxgUFlo885X5HtL7S6uHPCPHhDxOGUI5qfIPyfG9M+gmnLwKxjyFCETSD HvdDZJiQ0f97BB8HmiSfQ5rOb2jrirgxF1HVg5V7dVVEM3/RLw0VP6uMcerbmMsG y9hrnenPpmDBpNYlzE/NoJO5SMoPknndlEm+DWxIlnMfjAmhmwCvY0x0av1XuWXt rAZgQJtFY4epug== -----END CERTIFICATE-----Generated at Sat Dec 6 14:25:24 2025 by rpki-client