This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json) Hash identifier: tBqlLniSMZB/iJOfW5pzPosgm5jsPIrfnVd6JtPqbJw= Subject key identifier: 49:5D:39:A5:AD:CD:A1:F2:C9:93:E2:84:C1:FD:38:0F:DC:99:C0:9C Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19 Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19 Certificate serial: 019AF27736E77827ED050953480484B6D530 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft Manifest number: 03B1 Signing time: Sat 06 Dec 2025 07:01:30 +0000 Manifest this update: Sat 06 Dec 2025 07:01:30 +0000 Manifest next update: Sun 07 Dec 2025 07:01:30 +0000 Files and hashes: 1: 0ZwVYpJfrbJyYn_YtY3RuMq5lcg.roa (hash: gf6HtAdxN0GhhrFPeZ2e6ZRLEIlkoJtABmVeq8td+ik=) 2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: kOlEAhp8b1JdbQARUaXd0zen+4VttIV65e7tWo8LzkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:36:e7:78:27:ed:05:09:53:48:04:84:b6:d5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19 Validity Not Before: Dec 6 07:01:30 2025 GMT Not After : Dec 7 07:01:30 2025 GMT Subject: CN=495d39a5adcda1f2c993e284c1fd380fdc99c09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6f:9e:e7:01:b7:03:50:72:ed:ba:c9:6f:11: df:69:cd:fb:d0:b5:11:b3:f1:7b:ba:0d:e1:95:6d: 48:58:98:5b:75:4b:26:33:be:a3:f3:13:9a:0d:29: 19:e8:2a:7f:1d:42:b3:7c:64:1a:52:6b:cf:04:2d: c2:78:78:ca:f6:b7:79:2b:f7:be:68:8f:21:93:6d: ee:6e:20:dd:b6:cd:f1:66:31:b5:86:80:1e:fa:bb: 1d:01:15:3e:dc:cb:7a:32:d7:85:66:aa:56:f2:bc: 8f:ae:55:50:a7:fa:33:e6:1f:98:e0:40:6c:21:5b: db:ed:8a:33:12:71:7b:47:b6:9f:08:3d:bf:28:4b: 5c:80:7f:a9:42:72:0a:a1:9f:01:f2:e6:b4:f6:cb: d2:fb:3d:ad:44:b5:00:f3:bf:e3:26:a1:3e:9e:f4: a7:f1:41:bb:50:98:0c:f5:2b:b2:8a:04:a5:3d:4d: dc:91:42:18:b4:4b:dd:9a:e1:73:02:31:d3:a3:fe: f6:d5:1f:d0:7e:05:3f:ba:02:cf:78:8c:1d:da:a6: 86:5a:1d:69:e2:70:3c:12:90:3e:b5:4f:71:f2:36: a2:dc:41:01:6d:b1:78:f2:ff:4a:21:d7:96:dc:77: 4a:9f:33:39:e0:b4:ae:d6:68:e7:fa:ce:86:b8:03: c3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5D:39:A5:AD:CD:A1:F2:C9:93:E2:84:C1:FD:38:0F:DC:99:C0:9C X509v3 Authority Key Identifier: keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:21:44:08:99:f1:56:e5:19:f7:5d:2b:06:63:b5:96:a3:6a: f8:8a:4a:64:75:85:40:58:ac:1d:f2:3e:17:54:f3:8c:83:83: f3:6c:a8:e2:b8:ed:39:5e:52:30:25:9f:29:e0:b5:07:ed:b0: a7:9d:5e:50:cc:9c:39:dc:f5:63:8e:5e:b9:5e:38:b6:5c:11: 4a:5b:32:8d:4b:c5:91:ff:99:33:09:19:ea:8a:16:fc:71:61: 78:22:07:b2:a7:12:46:1e:23:a9:00:57:06:7f:ef:06:7d:50: f6:97:06:19:13:ce:c3:34:fd:35:e9:5d:04:7e:ba:1f:fc:38: ad:7b:8a:1d:70:a2:e1:1f:fb:f8:8b:20:67:bb:4e:04:66:84: 51:d3:a4:92:15:67:8e:e1:b2:84:9d:9a:29:d8:de:66:51:46: a2:38:70:5b:a8:17:97:2e:5e:33:b2:c6:b7:a2:bb:ee:85:22: 48:76:fa:c1:2d:ea:94:d8:fb:7d:b7:7d:84:8c:4a:76:07:93: 5e:76:8f:3c:e2:cb:f7:72:a1:73:cd:80:0b:d7:35:d9:05:ee: cd:e4:56:db:38:1f:0a:67:68:40:c5:1e:9d:c8:23:3f:5d:eb: c9:49:c1:99:8f:78:4e:be:db:03:1f:ea:29:8c:8a:9f:65:ab: 06:2b:41:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzbneCftBQlTSASEttUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZDcwZWYyNWU1MjJjMGQyNmU5NzdhMWQyNGZmNzdlYWQz YWRhMTkwHhcNMjUxMjA2MDcwMTMwWhcNMjUxMjA3MDcwMTMwWjAzMTEwLwYDVQQD Eyg0OTVkMzlhNWFkY2RhMWYyYzk5M2UyODRjMWZkMzgwZmRjOTljMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2+e5wG3A1By7brJbxHfac370LUR s/F7ug3hlW1IWJhbdUsmM76j8xOaDSkZ6Cp/HUKzfGQaUmvPBC3CeHjK9rd5K/e+ aI8hk23ubiDdts3xZjG1hoAe+rsdARU+3Mt6MteFZqpW8ryPrlVQp/oz5h+Y4EBs IVvb7YozEnF7R7afCD2/KEtcgH+pQnIKoZ8B8ua09svS+z2tRLUA87/jJqE+nvSn 8UG7UJgM9SuyigSlPU3ckUIYtEvdmuFzAjHTo/721R/QfgU/ugLPeIwd2qaGWh1p 4nA8EpA+tU9x8jai3EEBbbF48v9KIdeW3HdKnzM54LSu1mjn+s6GuAPD/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEldOaWtzaHyyZPihMH9OA/cmcCcMB8GA1UdIwQY MBaAFGrXDvJeUiwNJul3odJP936tOtoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yMzk2OGEtZmEzNi00NjU0LWJmYmYt OTQwNGUxNzcyMDBlLzEvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8yMzk2OGEtZmEzNi00NjU0LWJmYmYtOTQwNGUxNzcyMDBl LzEvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAviFECJnx VuUZ910rBmO1lqNq+IpKZHWFQFisHfI+F1TzjIOD82yo4rjtOV5SMCWfKeC1B+2w p51eUMycOdz1Y45euV44tlwRSlsyjUvFkf+ZMwkZ6ooW/HFheCIHsqcSRh4jqQBX Bn/vBn1Q9pcGGRPOwzT9NeldBH66H/w4rXuKHXCi4R/7+IsgZ7tOBGaEUdOkkhVn juGyhJ2aKdjeZlFGojhwW6gXly5eM7LGt6K77oUiSHb6wS3qlNj7fbd9hIxKdgeT XnaPPOLL93Khc82AC9c12QXuzeRW2zgfCmdoQMUencgjP13ryUnBmY94Tr7bAx/q KYyKn2WrBitB3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:30 2025 by rpki-client