This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json) Hash identifier: boK+eBod5NfSeryTIwqxvNSzKlwzbxFxk+mg+N6Urf0= Subject key identifier: 86:83:46:8F:F3:A4:E5:57:A4:57:9E:4B:3A:51:F6:41:77:D5:E3:1D Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13 Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113 Certificate serial: 019AF2AD9BA474754CC8839D25A7BF6216E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft Manifest number: 092C Signing time: Sat 06 Dec 2025 08:00:55 +0000 Manifest this update: Sat 06 Dec 2025 08:00:55 +0000 Manifest next update: Sun 07 Dec 2025 08:00:55 +0000 Files and hashes: 1: 5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa (hash: iXzFw4W5Foz0uwg9MMW+CW99Q/qBQogltnHgfr+P8PQ=) 2: MTrzAX_D8XgoMN3mTBa0ASkLO-s.roa (hash: 5xLIJUhiZ8b7rVLgmWHwi35aSAKsu4l83lIArXRkd8w=) 3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: UWHkju9u0X4XRW0M9zOWCBhQMSw3RquVFhPIM20yZp4=) 4: zBSuOK6TSZdyfy80PgMlJMzpxoY.roa (hash: fCR2rdLvuL4emdZ++ZNvy3Kaqpga8geFfxEmhxpqkvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:9b:a4:74:75:4c:c8:83:9d:25:a7:bf:62:16:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113 Validity Not Before: Dec 6 08:00:55 2025 GMT Not After : Dec 7 08:00:55 2025 GMT Subject: CN=8683468ff3a4e557a4579e4b3a51f64177d5e31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:86:f7:90:2c:ca:50:58:2d:71:f1:02:0f:42: 30:af:b8:b5:cf:6a:63:8e:2f:87:a1:3a:c0:09:e8: b2:dc:ca:5c:fc:aa:da:f7:a0:8d:bd:6a:73:ed:40: 29:75:27:da:3d:19:4e:30:8f:74:07:76:f7:c1:e0: 2c:d1:c1:fb:8a:e5:74:f4:52:d3:b7:72:ff:c9:0c: e7:0b:7b:46:e5:20:58:a1:2f:54:8e:01:3f:67:23: 9c:ba:3a:a5:16:18:7d:88:3a:56:72:83:7f:ab:cb: 6c:27:58:5e:cb:ee:69:17:28:87:59:5c:6f:7a:c7: 24:6d:64:83:79:b0:5c:f0:68:f0:ac:60:d0:5d:39: b5:14:9d:72:27:e8:50:c2:56:6b:95:ab:e6:53:0e: 36:64:6a:aa:53:bd:46:18:c2:4f:e4:b1:42:4f:0f: 7b:93:39:bd:d8:cf:d9:1a:85:d4:26:46:c4:2d:e6: de:c5:dc:2f:f9:8a:47:59:f2:c2:db:77:ad:9d:f9: 7f:78:2c:e0:06:e0:3d:92:4e:9b:65:c8:4e:71:2f: d3:f3:91:85:89:6d:34:4c:04:74:c6:20:66:f2:b3: 60:0d:51:a7:54:6f:4c:7b:e3:22:dd:b3:8d:f4:e8: 30:69:68:03:02:4e:ac:95:6b:d2:ef:fb:b3:61:e6: da:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:83:46:8F:F3:A4:E5:57:A4:57:9E:4B:3A:51:F6:41:77:D5:E3:1D X509v3 Authority Key Identifier: keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4d:3c:2a:b6:ef:d7:44:9d:cc:c5:db:c4:f5:6c:7a:93:44: f1:8c:a0:6b:49:00:ed:67:83:32:a4:60:7f:14:70:52:8a:93: 55:0b:5d:48:0d:e0:73:23:10:dd:81:eb:6b:b1:31:ff:a7:76: 22:96:7f:f4:2e:d2:5f:a8:e4:b8:aa:a3:de:5d:6b:b7:ab:8e: 02:60:ca:80:ab:d4:28:d1:d6:15:9a:a6:86:85:8f:27:11:82: d1:ff:9d:0c:91:f3:4a:40:5b:dc:3a:fe:4e:d7:77:5a:71:eb: 01:69:37:c3:e4:11:a8:ee:a8:fb:3c:c9:33:80:8c:e3:b7:a6: 4d:82:8a:8f:7e:77:46:09:ef:87:aa:f3:33:00:7f:d1:6b:37: a1:85:77:b1:61:b2:1b:b3:09:0b:4b:81:4c:a3:c1:d1:27:06: eb:3c:d7:55:79:a9:46:b9:62:9f:da:65:e0:a7:45:cb:73:4c: 21:a9:49:05:d8:3f:d7:3e:30:1a:5e:2f:a4:50:cf:27:f2:ca: 5a:d1:7b:ef:6f:a8:9a:37:44:9e:98:a9:9d:5d:a9:76:8b:22: 9e:8a:c5:b7:b2:79:e4:34:49:14:64:76:58:dd:98:5d:69:63: 37:dd:50:c0:98:c8:00:d7:73:10:87:40:5b:ec:21:85:25:ed: 0f:76:be:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZukdHVMyIOdJae/YhbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NjM3MDgxY2E3YzJlYmE0MTAxMGFiZWFhZDY0YTdjNjFm NmExMTMwHhcNMjUxMjA2MDgwMDU1WhcNMjUxMjA3MDgwMDU1WjAzMTEwLwYDVQQD Eyg4NjgzNDY4ZmYzYTRlNTU3YTQ1NzllNGIzYTUxZjY0MTc3ZDVlMzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYb3kCzKUFgtcfECD0Iwr7i1z2pj ji+HoTrACeiy3Mpc/Kra96CNvWpz7UApdSfaPRlOMI90B3b3weAs0cH7iuV09FLT t3L/yQznC3tG5SBYoS9UjgE/ZyOcujqlFhh9iDpWcoN/q8tsJ1hey+5pFyiHWVxv esckbWSDebBc8GjwrGDQXTm1FJ1yJ+hQwlZrlavmUw42ZGqqU71GGMJP5LFCTw97 kzm92M/ZGoXUJkbELebexdwv+YpHWfLC23etnfl/eCzgBuA9kk6bZchOcS/T85GF iW00TAR0xiBm8rNgDVGnVG9Me+Mi3bON9OgwaWgDAk6slWvS7/uzYebaJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaDRo/zpOVXpFeeSzpR9kF31eMdMB8GA1UdIwQY MBaAFGhjcIHKfC66QQEKvqrWSnxh9qETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2Et ZTY2NzllN2I3OTVhLzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2EtZTY2NzllN2I3OTVh LzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjE08Krbv 10SdzMXbxPVsepNE8Yyga0kA7WeDMqRgfxRwUoqTVQtdSA3gcyMQ3YHra7Ex/6d2 IpZ/9C7SX6jkuKqj3l1rt6uOAmDKgKvUKNHWFZqmhoWPJxGC0f+dDJHzSkBb3Dr+ Ttd3WnHrAWk3w+QRqO6o+zzJM4CM47emTYKKj353Rgnvh6rzMwB/0Ws3oYV3sWGy G7MJC0uBTKPB0ScG6zzXVXmpRrlin9pl4KdFy3NMIalJBdg/1z4wGl4vpFDPJ/LK WtF772+omjdEnpipnV2pdosinorFt7J55DRJFGR2WN2YXWljN91QwJjIANdzEIdA W+whhSXtD3a+PA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:59 2025 by rpki-client