This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft File: ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json) Hash identifier: cjy/kNBRjOWlCOvo6bect2g+dyyGBIskfHmsBciBkf8= Subject key identifier: 3B:B8:26:98:98:67:C6:B6:03:ED:01:FF:50:43:F0:A4:4C:A9:64:6C Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63 Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63 Certificate serial: 019AF12D4CC2EBE92A97FF409673FE84ED49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft Manifest number: 0DE2 Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: 0IjRFBMQjW0U9g8a3MXFCFZAWDeyr/GkRr3EVvOCAuM=) 2: pUM6ACWqLcQahA0lg8mmij4I6d4.roa (hash: UbfUIFFNnl9kUqI4HdZKMmMa2NoguiRD4aW6tenaTi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4c:c2:eb:e9:2a:97:ff:40:96:73:fe:84:ed:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63 Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=3bb826989867c6b603ed01ff5043f0a44ca9646c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e7:ab:85:f3:f8:dd:cf:33:ad:38:59:b1:6c: ab:c4:3b:a7:36:29:51:0b:ff:3d:47:d6:5d:03:99: 2a:b6:95:4e:20:84:8f:1d:6d:61:97:a7:65:e8:e2: b8:7f:45:39:a8:90:50:e3:c8:51:4e:cd:f4:a8:ef: 6d:b4:28:04:b5:9d:d5:73:bd:ed:d4:a9:bf:03:b0: 1d:04:1f:e4:81:2b:49:af:b8:36:07:0c:6c:53:fe: e0:25:54:0b:5a:f0:0b:6b:88:35:9a:76:0d:50:0e: ca:c1:7c:55:f6:5d:21:83:20:4b:af:35:28:a5:d8: 91:06:f5:9a:11:23:d0:97:e2:f7:ba:19:6c:7e:d3: 03:1c:4f:ed:8d:70:15:68:cf:eb:dd:58:2d:32:d1: 30:92:0c:ef:01:96:d6:90:c0:b3:c5:fe:02:c4:ab: ec:df:ef:1e:3f:5a:42:37:a9:12:d7:d8:4d:e5:28: 0b:96:c3:f7:f3:d4:4d:88:cd:fc:82:4c:26:fe:31: 87:fc:d4:c8:b5:e0:7a:8f:23:d0:f3:ea:d1:38:2f: 71:b7:66:0a:08:c7:06:bd:8b:e0:32:bd:e8:b6:ce: 24:5e:2d:cf:03:de:24:76:3c:cf:69:46:d0:b3:27: 56:a2:72:e9:b1:e7:e1:d2:c4:e7:b8:96:14:a7:0b: de:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B8:26:98:98:67:C6:B6:03:ED:01:FF:50:43:F0:A4:4C:A9:64:6C X509v3 Authority Key Identifier: keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b7:eb:9c:8b:6b:bf:df:20:8a:2c:1c:5a:f8:6c:75:5d:8f: 55:78:ce:7c:00:34:10:dd:85:11:6e:16:de:c0:9c:fe:b9:2e: 9b:b4:e5:69:de:31:6c:6d:a8:d7:37:5e:2d:e7:7e:78:79:b9: 83:27:96:23:a8:57:63:71:cf:08:cd:a3:02:da:77:ff:83:4b: 83:98:78:a8:48:2e:1f:b6:71:19:bb:44:80:be:55:9d:0f:e6: bd:ec:ff:02:b1:6c:53:b9:91:61:97:b7:a7:9b:17:47:19:0e: 76:ab:99:81:7b:8b:13:81:9f:9e:35:91:99:a5:46:2b:b7:e5: 29:8a:d4:b6:32:3f:14:93:87:5d:4f:32:e8:79:f2:3a:34:e6: 53:85:22:11:70:5e:64:6a:04:42:3f:38:fd:05:7f:b0:ea:5b: 69:fb:55:62:01:62:7e:0e:2a:a1:8d:e6:d1:67:2f:90:7c:d6: 40:3f:fd:4d:9b:6d:30:6d:3f:60:c9:67:fb:d8:43:c8:f2:db: 5e:31:f7:fa:cf:20:f3:d6:79:21:9f:1f:e6:75:72:96:d1:52: e2:a1:59:80:14:f7:be:e5:bb:bb:99:c4:1e:6b:da:ca:53:3b: 30:84:3b:71:5e:41:a5:06:76:3a:dd:25:55:ab:ee:57:2a:54: 8a:d3:50:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUzC6+kql/9AlnP+hO1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxM2M3NDEzMjU5NzE2MmNkYjJkZDYzNzYwYWJkOTk3MWUz MGJmNjMwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD EygzYmI4MjY5ODk4NjdjNmI2MDNlZDAxZmY1MDQzZjBhNDRjYTk2NDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOerhfP43c8zrThZsWyrxDunNilR C/89R9ZdA5kqtpVOIISPHW1hl6dl6OK4f0U5qJBQ48hRTs30qO9ttCgEtZ3Vc73t 1Km/A7AdBB/kgStJr7g2BwxsU/7gJVQLWvALa4g1mnYNUA7KwXxV9l0hgyBLrzUo pdiRBvWaESPQl+L3uhlsftMDHE/tjXAVaM/r3VgtMtEwkgzvAZbWkMCzxf4CxKvs 3+8eP1pCN6kS19hN5SgLlsP389RNiM38gkwm/jGH/NTIteB6jyPQ8+rROC9xt2YK CMcGvYvgMr3ots4kXi3PA94kdjzPaUbQsydWonLpsefh0sTnuJYUpwvekwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDu4JpiYZ8a2A+0B/1BD8KRMqWRsMB8GA1UdIwQY MBaAFAE8dBMllxYs2y3WN2Cr2ZceML9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTZjODAtMDNhMS00YTRjLTkxY2Yt MDY4Yjc3ZTkwM2EwLzEvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9jYTZjODAtMDNhMS00YTRjLTkxY2YtMDY4Yjc3ZTkwM2Ew LzEvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrfrnItr v98giiwcWvhsdV2PVXjOfAA0EN2FEW4W3sCc/rkum7Tlad4xbG2o1zdeLed+eHm5 gyeWI6hXY3HPCM2jAtp3/4NLg5h4qEguH7ZxGbtEgL5VnQ/mvez/ArFsU7mRYZe3 p5sXRxkOdquZgXuLE4GfnjWRmaVGK7flKYrUtjI/FJOHXU8y6HnyOjTmU4UiEXBe ZGoEQj84/QV/sOpbaftVYgFifg4qoY3m0WcvkHzWQD/9TZttMG0/YMln+9hDyPLb XjH3+s8g89Z5IZ8f5nVyltFS4qFZgBT3vuW7u5nEHmvaylM7MIQ7cV5BpQZ2Ot0l VavuVypUitNQPw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:54 2025 by rpki-client