This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft File: aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json) Hash identifier: m8tvD2QTbym2lz5O0wcuBsiIrZZTkFSowEwUsGKbJ48= Subject key identifier: 3D:5B:29:0C:9A:07:E6:EA:D6:44:A4:BF:AA:52:99:3D:A9:A2:5E:0A Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5 Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5 Certificate serial: 019AF088B36595E19DA40AD6FA5D0E0FB22D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft Manifest number: 1595 Signing time: Fri 05 Dec 2025 22:01:21 +0000 Manifest this update: Fri 05 Dec 2025 22:01:21 +0000 Manifest next update: Sat 06 Dec 2025 22:01:21 +0000 Files and hashes: 1: HSyzFVthhSBBD96mxsl0scilpJU.roa (hash: q5u2KllVdiR/BqAy2dqAoFzSZ6PBl0fHr1yzfwddNTg=) 2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: 38rjClHB5iT4N4TTnJz2h7fpd7+d2Stp0+FqJYmp2WI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b3:65:95:e1:9d:a4:0a:d6:fa:5d:0e:0f:b2:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5 Validity Not Before: Dec 5 22:01:21 2025 GMT Not After : Dec 6 22:01:21 2025 GMT Subject: CN=3d5b290c9a07e6ead644a4bfaa52993da9a25e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:f7:d1:5b:6f:06:99:60:f7:e0:e0:b9:45: 7e:ed:e7:16:60:99:99:20:31:c4:93:55:6a:cc:5a: b5:b0:84:70:01:eb:0e:ad:52:6e:88:da:09:07:87: e4:8f:f9:97:4c:f5:85:12:57:b7:24:ae:a4:f5:d4: 60:48:77:fc:7e:09:b6:bf:6e:e6:e1:c3:ec:a0:fc: d6:49:7e:ed:e3:26:0d:44:04:3a:fd:9f:9e:28:8b: be:55:14:80:5a:f3:68:3d:4c:c1:1c:20:fe:c1:f1: 5d:77:d0:af:cf:c2:d9:46:01:3e:bf:5f:d0:71:9d: a0:29:ad:8a:6a:aa:f9:80:91:76:69:db:bb:c4:cf: 83:c7:85:6b:d5:f0:87:4f:5f:88:5b:c8:9f:9d:c6: 50:35:e4:b1:e7:8a:d8:29:61:dd:25:01:55:d7:fd: 3d:b9:b1:60:c1:a9:8c:ff:91:21:cd:86:fb:27:1f: 92:17:a0:1b:6a:27:ad:99:fd:a5:44:2b:bb:a8:41: a3:be:9d:05:45:a5:30:1e:1f:0c:32:7e:61:df:65: 50:7f:4e:5a:67:2d:31:d5:59:38:97:17:84:5a:4a: c5:74:a3:9f:dd:e4:3b:73:f8:e6:91:b1:57:c2:c2: 7e:bc:09:5b:7b:a9:60:78:c4:dd:8b:72:f2:0d:92: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5B:29:0C:9A:07:E6:EA:D6:44:A4:BF:AA:52:99:3D:A9:A2:5E:0A X509v3 Authority Key Identifier: keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5a:16:cd:5c:a4:90:9a:08:ff:e0:3e:1d:8d:b1:49:42:6e: aa:b2:f3:1f:66:75:09:bc:d0:8b:80:1a:a4:4c:3f:9f:2b:a8: a9:5d:88:d9:f7:cf:11:69:85:68:93:5d:dc:9b:dc:0e:cf:b8: 39:5d:6b:45:38:d8:1c:78:14:c5:f4:d1:bd:36:ed:a8:f0:4d: 02:b4:82:ea:c3:0a:1b:18:70:e3:53:c7:82:1c:99:12:2a:ee: 63:a2:51:db:67:e5:bc:a0:cf:f7:ff:c7:f0:aa:3f:87:9e:4d: b1:76:55:b5:20:b4:d6:9a:95:e1:10:c5:b1:c7:25:ff:22:64: b0:68:10:f2:fa:74:5d:81:f2:cf:43:e6:7b:d8:a6:85:bc:17: 96:67:2c:92:4b:44:dd:33:d4:52:18:da:83:b9:a1:84:f2:87: 81:37:db:87:17:bb:aa:02:5c:71:93:f2:4e:b5:20:22:98:f3: 50:7f:59:83:1f:db:7d:02:eb:d5:f7:e5:85:5b:d2:50:9b:60: 09:ff:2e:59:8e:90:83:54:01:5f:4e:09:8f:c9:04:db:ec:64: 17:db:3a:b8:e3:7e:65:73:ab:6d:80:36:0e:62:aa:34:ff:69: 1a:f3:a9:d3:0e:b2:dd:a9:42:ce:63:15:45:72:ae:4c:35:1d: c3:b5:5a:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLNlleGdpArW+l0OD7ItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NjhmNjU2ODA1MzgwY2E4NmU3OTE3Mzc4OWQ2NjhkYzQw MWQ1YjUwHhcNMjUxMjA1MjIwMTIxWhcNMjUxMjA2MjIwMTIxWjAzMTEwLwYDVQQD EygzZDViMjkwYzlhMDdlNmVhZDY0NGE0YmZhYTUyOTkzZGE5YTI1ZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspH30VtvBplg9+DguUV+7ecWYJmZ IDHEk1VqzFq1sIRwAesOrVJuiNoJB4fkj/mXTPWFEle3JK6k9dRgSHf8fgm2v27m 4cPsoPzWSX7t4yYNRAQ6/Z+eKIu+VRSAWvNoPUzBHCD+wfFdd9Cvz8LZRgE+v1/Q cZ2gKa2Kaqr5gJF2adu7xM+Dx4Vr1fCHT1+IW8ifncZQNeSx54rYKWHdJQFV1/09 ubFgwamM/5EhzYb7Jx+SF6Abaietmf2lRCu7qEGjvp0FRaUwHh8MMn5h32VQf05a Zy0x1Vk4lxeEWkrFdKOf3eQ7c/jmkbFXwsJ+vAlbe6lgeMTdi3LyDZJWiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1bKQyaB+bq1kSkv6pSmT2pol4KMB8GA1UdIwQY MBaAFGho9laAU4DKhueRc3idZo3EAdW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZjIzYzEtMDQzYy00OTU2LWJmYjgt MjZjOWY5OTMyYmJjLzEvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZjIzYzEtMDQzYy00OTU2LWJmYjgtMjZjOWY5OTMyYmJj LzEvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1oWzVyk kJoI/+A+HY2xSUJuqrLzH2Z1CbzQi4AapEw/nyuoqV2I2ffPEWmFaJNd3JvcDs+4 OV1rRTjYHHgUxfTRvTbtqPBNArSC6sMKGxhw41PHghyZEiruY6JR22flvKDP9//H 8Ko/h55NsXZVtSC01pqV4RDFsccl/yJksGgQ8vp0XYHyz0Pme9imhbwXlmcskktE 3TPUUhjag7mhhPKHgTfbhxe7qgJccZPyTrUgIpjzUH9Zgx/bfQLr1fflhVvSUJtg Cf8uWY6Qg1QBX04Jj8kE2+xkF9s6uON+ZXOrbYA2DmKqNP9pGvOp0w6y3alCzmMV RXKuTDUdw7VakQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:12 2025 by rpki-client