This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft File: AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json) Hash identifier: Y0QJSKEgEUS7Kwp2k6z52J3BwzwYeIc0D8KbaFGI1zg= Subject key identifier: 4F:A2:B5:17:31:07:10:5B:0D:DC:4C:AF:0B:3B:4E:04:30:2F:04:8B Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB Certificate issuer: /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb Certificate serial: 019AF1D208905DAAC98BC5BF4F608B01152C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft Manifest number: 11D1 Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: cfFqIQKD2avFQImIIeSoAxkLpsA2wVIQV1CeN3Z8oDk=) 2: mzTTUqHywuBobPS3UeYVNsDUJ_k.roa (hash: hsMBTi8GspJP9sz8q6TgdiXZybDG1BQNlqbzOxmeAmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:08:90:5d:aa:c9:8b:c5:bf:4f:60:8b:01:15:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=4fa2b5173107105b0ddc4caf0b3b4e04302f048b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:bb:07:5b:65:fc:98:a9:eb:7c:f9:9f:65: ab:a2:dc:fa:42:64:98:ec:bf:3d:5e:0f:49:fb:13: 2e:30:be:15:e1:f3:a5:99:6a:70:61:fe:b9:81:43: ab:9b:42:3b:d2:f2:8e:b2:d6:fb:46:c2:bc:cf:d7: 11:df:e3:f6:a6:c8:a4:07:e4:b5:3d:03:9e:31:2d: 94:19:51:60:ee:0e:bd:85:56:72:53:f5:b0:6d:38: 4c:f3:a9:fc:32:bc:44:a8:32:e0:f9:65:91:d2:a9: 88:c8:52:95:85:52:e8:e8:8a:b4:2c:e2:b8:64:47: 48:66:a5:9a:3b:cf:68:19:3a:ef:a5:d3:08:21:c3: e8:76:cf:42:b5:42:93:b7:ec:06:da:b6:c7:68:d1: 4d:a1:04:2e:32:57:2f:a4:2c:c9:79:a2:c1:99:64: ae:89:24:b9:23:51:75:31:7f:60:4f:de:c0:d8:46: 4b:8a:92:46:4a:94:31:97:58:12:ef:3a:b0:1c:22: 75:38:3c:a5:7e:13:f3:e6:3f:6f:3c:53:d6:b2:c6: 60:60:91:18:98:1a:09:29:01:10:77:cc:f0:67:7d: b5:68:77:51:d1:de:42:95:51:7d:6e:b2:c5:ea:da: 95:d2:7a:ad:47:a0:c3:45:b3:12:50:33:19:fc:26: b1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A2:B5:17:31:07:10:5B:0D:DC:4C:AF:0B:3B:4E:04:30:2F:04:8B X509v3 Authority Key Identifier: keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:4c:db:1a:45:05:eb:52:c0:7a:94:1f:20:50:d8:20:2d:f5: d7:08:51:4c:f9:c6:a8:54:ea:a5:1b:21:85:e6:14:1d:1d:61: 88:36:57:b2:d3:8f:83:22:8d:25:cc:4a:f9:44:53:68:76:af: a2:87:a3:e2:84:d0:1d:72:1b:c8:c1:d1:1a:0e:48:e5:ab:27: c1:50:18:ff:94:1b:3c:c2:dd:c8:17:0a:1b:84:08:f0:09:32: 5e:51:d6:b7:5e:d4:5c:68:ed:70:90:7f:c4:b9:39:a5:f9:58: 87:55:95:28:12:f0:ee:c0:38:86:56:83:0d:db:ca:13:4d:f2: 1e:b2:3d:a0:6b:bd:9d:16:65:cf:94:c5:51:1d:4b:36:ad:b5: 63:64:82:d9:87:c9:fc:09:9c:ce:20:03:de:e4:75:16:30:f0: 0a:00:be:91:47:c7:aa:e9:d9:13:df:01:4c:20:13:0e:fb:ee: 59:e0:f6:4f:6a:eb:fb:30:13:7a:0f:eb:e5:ef:09:f8:c3:b4: fe:79:de:f3:38:aa:6a:44:78:8e:56:dc:13:57:9a:bd:2d:43: 57:1b:3e:5f:f7:9d:d0:6e:df:92:f4:36:3d:05:58:5d:b3:22: a8:58:4c:6e:d3:09:70:22:f2:96:c5:fd:19:30:c2:9a:4c:17: ea:08:44:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0giQXarJi8W/T2CLARUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMDM2MTZjYTJmOWFlZmE3MGMzOTE0Y2NlOTBkY2UwOTcw NmNmYmIwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD Eyg0ZmEyYjUxNzMxMDcxMDViMGRkYzRjYWYwYjNiNGUwNDMwMmYwNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4a7B1tl/Jip63z5n2Wrotz6QmSY 7L89Xg9J+xMuML4V4fOlmWpwYf65gUOrm0I70vKOstb7RsK8z9cR3+P2psikB+S1 PQOeMS2UGVFg7g69hVZyU/WwbThM86n8MrxEqDLg+WWR0qmIyFKVhVLo6Iq0LOK4 ZEdIZqWaO89oGTrvpdMIIcPods9CtUKTt+wG2rbHaNFNoQQuMlcvpCzJeaLBmWSu iSS5I1F1MX9gT97A2EZLipJGSpQxl1gS7zqwHCJ1ODylfhPz5j9vPFPWssZgYJEY mBoJKQEQd8zwZ321aHdR0d5ClVF9brLF6tqV0nqtR6DDRbMSUDMZ/Cax3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+itRcxBxBbDdxMrws7TgQwLwSLMB8GA1UdIwQY MBaAFAIDYWyi+a76cMORTM6Q3OCXBs+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEt Yzg3Y2E5ZjJiOTVmLzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEtYzg3Y2E5ZjJiOTVm LzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUzbGkUF 61LAepQfIFDYIC311whRTPnGqFTqpRshheYUHR1hiDZXstOPgyKNJcxK+URTaHav ooej4oTQHXIbyMHRGg5I5asnwVAY/5QbPMLdyBcKG4QI8AkyXlHWt17UXGjtcJB/ xLk5pflYh1WVKBLw7sA4hlaDDdvKE03yHrI9oGu9nRZlz5TFUR1LNq21Y2SC2YfJ /AmcziAD3uR1FjDwCgC+kUfHqunZE98BTCATDvvuWeD2T2rr+zATeg/r5e8J+MO0 /nne8ziqakR4jlbcE1eavS1DVxs+X/ed0G7fkvQ2PQVYXbMiqFhMbtMJcCLylsX9 GTDCmkwX6ghEuw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:34 2025 by rpki-client