This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json) Hash identifier: tWYtLDaca2hZGwBe/qxzJ9m9Y6sNoRNLc2KhyE5CDxU= Subject key identifier: 8C:CC:33:3B:CF:B5:57:44:02:8B:9A:40:60:2F:74:AE:61:CF:96:3D Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83 Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183 Certificate serial: 019B2B53988ECFDA4F5F8507D37000B77A26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft Manifest number: 149B Signing time: Wed 17 Dec 2025 08:00:57 +0000 Manifest this update: Wed 17 Dec 2025 08:00:57 +0000 Manifest next update: Thu 18 Dec 2025 08:00:57 +0000 Files and hashes: 1: 1-HJDRT0gD2nhMW6JUwz556mvKj8.roa (hash: JYyO1+sMj5YlHliO+us6FbC+ChQWiYGalwTjRduJQ2E=) 2: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: ltXDoDlZtcK0O6ys7EvGgfqz08NDf5SlvirKz+9P2HI=) 3: o2P4F8wGwS7Hu_Z9DavQWwnt9SU.roa (hash: vp0AJWW08FmlyogXHIG/NX7ZAqoKcGLBFnnNS6LdgqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:98:8e:cf:da:4f:5f:85:07:d3:70:00:b7:7a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183 Validity Not Before: Dec 17 08:00:57 2025 GMT Not After : Dec 18 08:00:57 2025 GMT Subject: CN=8ccc333bcfb55744028b9a40602f74ae61cf963d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:13:70:4c:0a:f7:64:d9:75:51:7e:38:17: fa:90:6d:27:5a:2c:d3:c7:a0:91:ba:c7:9b:6d:23: a5:0f:44:6b:06:b2:9a:3f:ef:13:0f:ec:bc:dd:5a: a0:fa:fb:5a:e7:3f:94:6e:4c:c4:0e:6c:f8:ab:03: e4:b9:fc:d9:b0:7c:3b:32:ec:7c:2b:1a:0a:c9:14: b9:04:6e:0c:a7:99:82:4e:a4:6e:41:e6:94:0d:b0: f6:0f:35:e2:68:f9:3c:e7:2b:3b:61:69:84:89:2a: 92:44:7f:46:22:4e:7a:42:6f:86:5e:6e:be:cd:5e: c5:25:31:71:3f:7d:64:14:bb:44:64:a7:80:3d:a3: 51:73:71:25:ed:07:c6:6f:41:d0:25:06:1b:41:a0: 04:09:3f:73:43:18:57:a5:c9:0d:e0:77:a5:b5:4c: ab:54:5c:9c:b2:bb:1a:da:cd:ae:be:42:2f:ce:c0: 20:93:26:90:66:59:6a:8b:6b:32:49:51:b5:77:13: 1d:30:ed:a1:0e:be:00:61:af:dc:63:3c:c7:ea:9e: db:f7:9d:92:46:62:40:4d:3e:b9:58:ae:05:b5:2e: d8:86:ed:97:15:2c:ca:b3:83:f6:93:0b:45:9d:0d: df:8f:ba:9d:5e:fd:d8:2d:93:7f:d8:c3:33:5d:d3: 45:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CC:33:3B:CF:B5:57:44:02:8B:9A:40:60:2F:74:AE:61:CF:96:3D X509v3 Authority Key Identifier: keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:8d:c9:fd:6d:76:1b:30:a8:cb:61:ca:db:80:90:bb:c2:48: 87:d0:50:7c:e0:71:51:3a:04:f1:d8:c8:03:65:a8:d3:6f:93: a2:9a:7e:e2:1c:53:92:df:73:3a:5b:fe:9a:57:ec:3b:76:e0: 8f:f0:d2:ff:22:98:66:7a:ea:62:16:c2:bd:e2:19:df:d9:03: 64:ec:64:2a:59:b0:ad:fd:75:00:4d:2b:fc:fb:dd:b2:a9:e2: 2c:31:8c:d1:1a:79:1e:bd:04:91:17:f6:f9:52:87:4c:99:b7: 43:20:9c:e2:a0:aa:d7:d4:cb:b2:0c:29:32:a8:13:4b:6a:13: 7d:6b:dd:7f:1a:1c:33:cd:46:10:00:68:93:12:6e:9d:42:0e: 9a:6b:e8:51:0d:19:bf:7a:1a:6e:de:c3:ff:52:73:7b:0f:49: 4f:4e:24:db:a9:43:d2:5e:3b:c9:c9:ee:54:f6:22:92:eb:7b: 3d:bb:55:6b:97:72:93:25:80:08:8f:7a:a7:85:06:82:37:dc: 8c:0f:a5:51:52:c4:1b:a7:87:1e:bb:82:3e:a6:63:c0:15:2d: 7e:52:55:33:ce:7d:57:df:12:3a:ec:81:d4:22:2d:25:cd:5e: 88:6c:f9:86:cd:a0:ec:fb:29:4e:5b:e0:a9:2b:9b:a7:63:32: f9:54:34:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU5iOz9pPX4UH03AAt3omMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZDBlODg4ODVlZjQ4YjIwYzg3Yjc2ZmQ4NWQ0MmU2ZWIz ZDcxODMwHhcNMjUxMjE3MDgwMDU3WhcNMjUxMjE4MDgwMDU3WjAzMTEwLwYDVQQD Eyg4Y2NjMzMzYmNmYjU1NzQ0MDI4YjlhNDA2MDJmNzRhZTYxY2Y5NjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUoTcEwK92TZdVF+OBf6kG0nWizT x6CRusebbSOlD0RrBrKaP+8TD+y83Vqg+vta5z+UbkzEDmz4qwPkufzZsHw7Mux8 KxoKyRS5BG4Mp5mCTqRuQeaUDbD2DzXiaPk85ys7YWmEiSqSRH9GIk56Qm+GXm6+ zV7FJTFxP31kFLtEZKeAPaNRc3El7QfGb0HQJQYbQaAECT9zQxhXpckN4HeltUyr VFycsrsa2s2uvkIvzsAgkyaQZllqi2sySVG1dxMdMO2hDr4AYa/cYzzH6p7b952S RmJATT65WK4FtS7Yhu2XFSzKs4P2kwtFnQ3fj7qdXv3YLZN/2MMzXdNFpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzMMzvPtVdEAouaQGAvdK5hz5Y9MB8GA1UdIwQY MBaAFALQ6IiF70iyDIe3b9hdQubrPXGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDct OTUzYzY4NTA2ZDVjLzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDctOTUzYzY4NTA2ZDVj LzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANo3J/W12 GzCoy2HK24CQu8JIh9BQfOBxUToE8djIA2Wo02+Topp+4hxTkt9zOlv+mlfsO3bg j/DS/yKYZnrqYhbCveIZ39kDZOxkKlmwrf11AE0r/PvdsqniLDGM0Rp5Hr0EkRf2 +VKHTJm3QyCc4qCq19TLsgwpMqgTS2oTfWvdfxocM81GEABokxJunUIOmmvoUQ0Z v3oabt7D/1Jzew9JT04k26lD0l47ycnuVPYikut7PbtVa5dykyWACI96p4UGgjfc jA+lUVLEG6eHHruCPqZjwBUtflJVM859V98SOuyB1CItJc1eiGz5hs2g7PspTlvg qSubp2My+VQ0QQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:54:43 2025 by rpki-client