This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json) Hash identifier: g/FyncA1on9rTSZxuu5cvw6IWFl4HyhzMAQf7YKOAgs= Subject key identifier: 5C:B3:9B:1E:4C:74:BF:DC:EE:AF:63:C6:18:C3:E4:D6:4F:B0:D1:21 Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05 Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05 Certificate serial: 019AF0888B21926556FC320DFED2EFB8EB54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft Manifest number: 1765 Signing time: Fri 05 Dec 2025 22:01:11 +0000 Manifest this update: Fri 05 Dec 2025 22:01:11 +0000 Manifest next update: Sat 06 Dec 2025 22:01:11 +0000 Files and hashes: 1: 1-BqPUmwLhiY4Yhx0LfgUMnThGxA.roa (hash: K4n04vrpGIt/U+DsbhlaysS9N4rLWgryrsGr6i9waUc=) 2: 1nS0uX-20m5q3S5s2ax-hzltY7M.roa (hash: fPbs3orCk/9uH211HxlkX/O3dh9FAzUrv0hFLfs7bIc=) 3: 2MWwWUq-nPd7Gzhb6Z0417winfw.roa (hash: JU/lw4BXm/KV3NT2WmLhKrIC3zR0XBpPPnNeGokCO90=) 4: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: TtlZl+oyzFGlKKPppLYiLy8CmUgmGrx0tUD3gVZRTqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:8b:21:92:65:56:fc:32:0d:fe:d2:ef:b8:eb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05 Validity Not Before: Dec 5 22:01:11 2025 GMT Not After : Dec 6 22:01:11 2025 GMT Subject: CN=5cb39b1e4c74bfdceeaf63c618c3e4d64fb0d121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8d:8b:0c:62:d2:29:31:b1:30:21:12:2d:d2: 21:61:c3:84:99:21:cf:77:b5:1f:c0:f8:35:5c:c9: 4b:b1:b4:30:e4:f8:7e:2c:cf:b6:d1:56:aa:42:20: d4:08:f0:9e:df:46:e2:54:70:08:eb:ee:a1:12:d3: 80:69:0f:a5:11:98:2c:fe:1b:0f:55:99:28:22:0f: ff:1b:6c:9d:10:a6:df:98:12:0d:0e:3c:39:d7:70: 2e:e2:3e:3d:e3:24:72:3b:2e:26:f7:e9:4a:6a:42: a9:dc:86:fb:4e:33:39:1e:d8:95:f7:16:5f:17:15: 27:3a:01:e7:33:f0:46:62:45:c2:d2:2f:ee:c5:ba: b1:a2:c0:84:5d:5c:20:80:31:25:c4:f1:f6:31:39: 9f:a8:e7:df:cd:21:fc:fa:05:4b:06:5e:75:22:83: 57:b9:95:8d:b0:71:fc:a1:cb:9d:7f:bf:48:8d:e8: 24:1a:23:13:c6:df:ad:76:d1:7d:b3:2f:18:03:92: bc:ee:85:57:29:da:45:7a:ad:1c:aa:b5:aa:22:f6: 99:f3:63:a1:8b:b4:d8:d5:96:d7:1b:8c:d0:df:d8: 64:cb:83:86:9b:7b:53:94:7d:77:e9:2c:be:c1:2b: 0e:bd:bc:17:7b:8c:ef:53:35:86:54:3d:84:4a:d7: 72:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B3:9B:1E:4C:74:BF:DC:EE:AF:63:C6:18:C3:E4:D6:4F:B0:D1:21 X509v3 Authority Key Identifier: keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ad:af:69:6a:1e:fe:b5:fa:9b:d8:81:f0:a5:d9:21:2b:60: 45:02:c9:a5:af:2a:46:d7:97:c7:ce:b7:96:93:73:8b:23:2a: e9:e3:34:3d:57:cc:20:af:c1:0a:e6:90:94:28:bb:ad:cf:04: d5:61:0b:61:cf:50:57:8a:3d:dd:f5:2d:2e:9c:6a:2c:80:0f: 77:0d:06:2e:fc:bf:3f:3f:f5:b6:95:09:89:ac:a9:9e:05:ce: fd:0d:13:b0:da:d5:31:7e:2f:54:b1:63:95:5d:64:6c:aa:5c: 64:68:03:d7:e2:8a:aa:27:b8:f0:54:6f:0b:09:eb:85:a7:d6: 33:6c:bb:b2:fa:65:de:d0:a7:41:50:cf:51:a2:18:85:4d:bf: 42:be:49:81:a5:29:17:25:d6:b2:53:2e:e6:79:92:3a:ec:cd: c7:98:4d:5b:d1:15:b8:31:ab:a0:b6:9d:f6:44:55:9f:98:26: 69:a4:a3:aa:c8:c4:d3:9b:6d:8c:ed:95:89:b4:94:df:db:21: 93:11:eb:d1:d2:0b:35:d9:c2:8c:9c:8a:ac:31:b0:0c:32:e2: da:83:f2:3c:6f:d3:4d:94:16:cc:ea:9e:36:a3:07:02:87:6c: 7e:1c:0c:3d:0c:55:42:9b:9f:05:8f:5f:55:97:95:6b:b4:ea: ad:b9:6d:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiIshkmVW/DIN/tLvuOtUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNjQyYjYwN2I5NGExNDNmZjQxYzU1NGM5MTNiZDVhNjUx ZjhjMDUwHhcNMjUxMjA1MjIwMTExWhcNMjUxMjA2MjIwMTExWjAzMTEwLwYDVQQD Eyg1Y2IzOWIxZTRjNzRiZmRjZWVhZjYzYzYxOGMzZTRkNjRmYjBkMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo2LDGLSKTGxMCESLdIhYcOEmSHP d7UfwPg1XMlLsbQw5Ph+LM+20VaqQiDUCPCe30biVHAI6+6hEtOAaQ+lEZgs/hsP VZkoIg//G2ydEKbfmBINDjw513Au4j494yRyOy4m9+lKakKp3Ib7TjM5HtiV9xZf FxUnOgHnM/BGYkXC0i/uxbqxosCEXVwggDElxPH2MTmfqOffzSH8+gVLBl51IoNX uZWNsHH8ocudf79IjegkGiMTxt+tdtF9sy8YA5K87oVXKdpFeq0cqrWqIvaZ82Oh i7TY1ZbXG4zQ39hky4OGm3tTlH136Sy+wSsOvbwXe4zvUzWGVD2EStdyzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyzmx5MdL/c7q9jxhjD5NZPsNEhMB8GA1UdIwQY MBaAFABkK2B7lKFD/0HFVMkTvVplH4wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUt MTliYzdiZGNjYmMxLzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUtMTliYzdiZGNjYmMx LzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdq2vaWoe /rX6m9iB8KXZIStgRQLJpa8qRteXx863lpNziyMq6eM0PVfMIK/BCuaQlCi7rc8E 1WELYc9QV4o93fUtLpxqLIAPdw0GLvy/Pz/1tpUJiaypngXO/Q0TsNrVMX4vVLFj lV1kbKpcZGgD1+KKqie48FRvCwnrhafWM2y7svpl3tCnQVDPUaIYhU2/Qr5JgaUp FyXWslMu5nmSOuzNx5hNW9EVuDGroLad9kRVn5gmaaSjqsjE05ttjO2VibSU39sh kxHr0dILNdnCjJyKrDGwDDLi2oPyPG/TTZQWzOqeNqMHAodsfhwMPQxVQpufBY9f VZeVa7TqrbltFg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:31 2025 by rpki-client