This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json) Hash identifier: ffutgVUoK2YiMkjgAMb443BQlXkqe4WMJ9wXap5cncc= Subject key identifier: 21:75:B9:C0:61:43:67:D4:B3:11:6D:E9:B3:64:3D:90:6F:9C:A1:33 Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68 Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68 Certificate serial: 019AF051BE25284B265A7D7E5B1485F1B67C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft Manifest number: 0A55 Signing time: Fri 05 Dec 2025 21:01:20 +0000 Manifest this update: Fri 05 Dec 2025 21:01:20 +0000 Manifest next update: Sat 06 Dec 2025 21:01:20 +0000 Files and hashes: 1: GRjGVnhDoWbQf18vA-j6jPrf8bk.roa (hash: zfy3Xeb5F33VM6wGODUsXEb4Wf9If41Lyk9PhoslocI=) 2: Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa (hash: tgY6PnqoOsKcCw452vOSzlvkg7P0cNWRWTWaQclJxEc=) 3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: IL+WIbemU4TNJFwhHzL5B00WdwznlX3mJMY1SaZF+7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:be:25:28:4b:26:5a:7d:7e:5b:14:85:f1:b6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a016dad273047b18886691485dedd97171c4d68 Validity Not Before: Dec 5 21:01:20 2025 GMT Not After : Dec 6 21:01:20 2025 GMT Subject: CN=2175b9c0614367d4b3116de9b3643d906f9ca133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:60:83:09:67:bd:24:93:4d:cd:a0:79:ff: dd:86:2a:bc:d1:4e:a2:bc:ba:e0:fb:9f:bf:db:04: e2:01:52:0a:e0:e9:47:cc:07:89:5f:21:75:9b:41: fc:70:cc:45:80:c5:64:d4:b5:ad:fd:7c:2d:7d:0b: 63:47:9c:94:27:da:fd:af:03:08:6a:9a:68:e3:6d: 04:47:93:77:1a:e0:e4:02:a4:84:81:e5:e7:19:24: b6:1a:1e:cd:47:af:7b:1c:0f:5a:b3:9b:7d:89:aa: 1d:1c:73:b8:dc:09:ea:35:ed:77:11:e1:5d:8c:29: 95:33:15:e0:e9:62:0e:24:95:f8:85:d7:6f:45:10: 4a:0e:f3:87:3c:c0:22:70:eb:dc:c2:ab:4e:2f:8d: d2:1f:1a:eb:86:18:50:da:d5:72:5b:85:34:bd:85: 94:15:94:cc:20:cd:93:7a:fb:46:7a:ac:b4:d8:28: b7:e5:ca:c5:39:d5:9b:81:83:ae:67:bd:c8:ec:d1: a0:4a:9f:83:74:7e:2f:40:b2:72:4e:9a:62:a2:29: d9:1e:08:d2:2e:4c:7e:71:2a:f5:c5:d0:f7:66:99: da:d8:ce:f0:82:bf:32:09:04:04:d1:a7:eb:42:c5: ae:00:6e:8a:93:0c:b6:b3:f4:6f:eb:d2:62:73:35: 7e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:75:B9:C0:61:43:67:D4:B3:11:6D:E9:B3:64:3D:90:6F:9C:A1:33 X509v3 Authority Key Identifier: keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f7:61:74:d7:38:02:37:93:cf:25:a4:b9:ad:7d:f2:68:b1: e9:a5:62:cb:b0:2c:d2:8b:d4:c9:05:a5:d9:83:54:47:26:ee: 4a:6e:05:24:8b:cb:e0:93:fc:4a:a1:7b:a5:59:a5:4f:dd:66: 0b:98:3b:f0:d4:d8:75:9a:bd:e9:fc:73:e8:6b:09:d8:74:16: b6:47:c0:c0:64:d2:d0:d5:28:fb:a6:34:dd:63:9e:c6:da:88: 53:52:eb:92:55:79:26:a2:84:8a:9b:e9:c4:3e:50:a7:b2:2e: 4e:6d:ac:7f:77:96:c9:44:5a:e3:c3:72:d3:43:cb:ba:83:fc: c0:77:e9:75:73:e3:fb:b2:e1:26:41:25:8f:78:11:71:d5:03: 87:3e:ce:29:f5:34:b0:25:54:02:48:cc:e2:b6:22:84:68:98: 57:07:8b:ee:6a:fd:c0:36:f9:a1:c3:e9:dd:06:8c:4a:e9:7b: b1:9e:aa:7f:00:bc:07:c2:21:e1:69:8c:f7:b5:1f:fc:c0:23: 81:e3:af:b1:7e:95:4e:b4:c3:24:bb:d0:d6:ed:5a:91:ed:59: de:9a:e0:14:72:4e:ad:fa:ab:4e:8d:a2:22:b3:d6:f3:64:30: cd:1b:4a:c2:ba:e4:98:a9:58:82:2e:90:81:b0:b8:8f:ad:f4: 42:c4:b0:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUb4lKEsmWn1+WxSF8bZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMDE2ZGFkMjczMDQ3YjE4ODg2NjkxNDg1ZGVkZDk3MTcx YzRkNjgwHhcNMjUxMjA1MjEwMTIwWhcNMjUxMjA2MjEwMTIwWjAzMTEwLwYDVQQD EygyMTc1YjljMDYxNDM2N2Q0YjMxMTZkZTliMzY0M2Q5MDZmOWNhMTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLhggwlnvSSTTc2gef/dhiq80U6i vLrg+5+/2wTiAVIK4OlHzAeJXyF1m0H8cMxFgMVk1LWt/XwtfQtjR5yUJ9r9rwMI appo420ER5N3GuDkAqSEgeXnGSS2Gh7NR697HA9as5t9iaodHHO43AnqNe13EeFd jCmVMxXg6WIOJJX4hddvRRBKDvOHPMAicOvcwqtOL43SHxrrhhhQ2tVyW4U0vYWU FZTMIM2TevtGeqy02Ci35crFOdWbgYOuZ73I7NGgSp+DdH4vQLJyTppioinZHgjS Lkx+cSr1xdD3Zpna2M7wgr8yCQQE0afrQsWuAG6Kkwy2s/Rv69JiczV+HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCF1ucBhQ2fUsxFt6bNkPZBvnKEzMB8GA1UdIwQY MBaAFGoBba0nMEexiIZpFIXe3ZcXHE1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMt Yzk1MjgwNDkzMmMyLzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMtYzk1MjgwNDkzMmMy LzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvdhdNc4 AjeTzyWkua198mix6aViy7As0ovUyQWl2YNURybuSm4FJIvL4JP8SqF7pVmlT91m C5g78NTYdZq96fxz6GsJ2HQWtkfAwGTS0NUo+6Y03WOextqIU1LrklV5JqKEipvp xD5Qp7IuTm2sf3eWyURa48Ny00PLuoP8wHfpdXPj+7LhJkElj3gRcdUDhz7OKfU0 sCVUAkjM4rYihGiYVweL7mr9wDb5ocPp3QaMSul7sZ6qfwC8B8Ih4WmM97Uf/MAj geOvsX6VTrTDJLvQ1u1ake1Z3prgFHJOrfqrTo2iIrPW82QwzRtKwrrkmKlYgi6Q gbC4j630QsSw1w== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:26 2025 by rpki-client