This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json) Hash identifier: HgGohyM2Ixvu+ONNQ92dwq6legNFbN/13MxQj/j6Z6k= Subject key identifier: 5C:EC:3F:9B:C6:B4:DA:3C:29:8C:8A:30:1C:A5:B2:5C:B9:A5:7B:96 Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98 Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398 Certificate serial: 019AF0BF6B0AECEA6C6A4C9735B5FE432872 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft Manifest number: DA Signing time: Fri 05 Dec 2025 23:01:07 +0000 Manifest this update: Fri 05 Dec 2025 23:01:07 +0000 Manifest next update: Sat 06 Dec 2025 23:01:07 +0000 Files and hashes: 1: A_iHhKALil4lTEQzAUwPF3mIEBw.roa (hash: foFKLdP+k5Z9u1b7IqZhZYmzZ2C3HRJY7iqeg2B9yu0=) 2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: NAvetv6dyuZUSc8KC3C91XNpiOcAIaXDEgzCyPNyJ3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6b:0a:ec:ea:6c:6a:4c:97:35:b5:fe:43:28:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398 Validity Not Before: Dec 5 23:01:07 2025 GMT Not After : Dec 6 23:01:07 2025 GMT Subject: CN=5cec3f9bc6b4da3c298c8a301ca5b25cb9a57b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:fc:db:f4:5b:f0:4c:b3:93:35:c4:12:86: 15:8c:de:40:f9:f5:ab:81:9c:d8:ac:7a:fd:8a:bf: ef:b8:8c:80:2b:94:7b:d8:49:8a:c3:6c:db:e3:93: 7b:71:a0:a0:7c:1e:a4:be:71:d6:f2:2e:c5:b7:62: b5:5f:7a:2e:44:a5:01:93:55:35:c0:27:f0:af:fc: df:88:0f:56:dd:c1:2f:a0:83:85:0d:76:63:c3:e2: a1:da:3b:a1:6a:f9:18:a1:e7:c4:e3:b4:81:d3:5a: 93:80:ea:98:c3:32:4a:80:80:8b:3c:41:b8:92:b7: 7b:d8:f4:7a:f7:d3:23:ce:c3:99:9f:31:89:c4:5b: 74:c1:f7:87:ac:d3:85:72:22:08:49:68:5b:05:5c: e8:21:62:9a:03:69:2e:2c:5f:de:8f:5f:94:46:ea: 4b:1b:89:b7:b7:a5:57:3c:18:9d:d8:5a:da:79:7f: 33:f3:80:34:72:44:d5:c6:2e:f9:5e:51:b2:01:e7: 29:e4:39:e9:b7:12:30:5e:c9:40:3f:8b:bd:c6:73: 1e:23:64:ef:21:21:65:d4:cb:c2:79:78:4e:fc:a7: ef:c6:0a:a9:c2:ee:6d:c9:bd:77:37:6b:01:9e:0e: 16:99:8b:2a:f3:13:f5:f3:f0:64:9a:58:64:50:5e: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EC:3F:9B:C6:B4:DA:3C:29:8C:8A:30:1C:A5:B2:5C:B9:A5:7B:96 X509v3 Authority Key Identifier: keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:42:cb:68:ca:4c:78:58:8a:39:db:57:2d:ea:ea:f6:1e:38: ab:2d:cc:4f:95:91:8b:ed:e3:23:97:60:ff:9a:cc:c6:c3:ac: f4:f1:de:77:4c:54:e3:c4:d7:eb:4f:0b:68:c0:ba:bc:80:fb: 97:32:f2:be:37:dc:ca:5b:cc:1e:85:a8:84:64:59:ec:9f:bf: 18:c4:ad:73:20:40:d5:f8:ed:02:b3:fc:e4:dc:4d:84:4e:b6: a7:d0:16:94:e2:ab:0a:98:25:a0:cb:43:3b:4d:35:7c:75:a1: 5c:fd:af:4f:ae:65:ae:17:4c:7f:31:6a:8e:0e:a0:dd:dd:84: b6:76:3e:39:ac:8d:b8:4e:6a:d9:46:f9:21:23:e5:fb:89:48: 7c:0a:bd:8f:bd:36:9e:70:06:9e:b5:18:f0:dc:2e:00:1d:a9: 5e:bd:5d:28:22:7c:5b:e9:28:4b:d9:4f:3a:4b:e7:0e:ae:0c: 90:15:2c:e8:9c:1d:0f:63:7e:bc:26:a0:67:e5:1e:43:0b:0b: 79:fe:50:4b:4a:7c:fc:75:0a:c2:14:0f:d8:96:69:1e:0e:4b: 99:69:fc:3f:e9:e4:28:89:ae:f8:90:ff:3e:8c:77:01:2a:fb: 7f:08:95:55:66:fb:59:b4:0f:61:18:49:54:21:9d:74:95:95: 2e:a4:99:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2sK7OpsakyXNbX+QyhyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZDM4YmQ0YzBkMGU5ZjMwMjgwMjE5ODRjZDgzNTU2MDQ3 ZjYzOTgwHhcNMjUxMjA1MjMwMTA3WhcNMjUxMjA2MjMwMTA3WjAzMTEwLwYDVQQD Eyg1Y2VjM2Y5YmM2YjRkYTNjMjk4YzhhMzAxY2E1YjI1Y2I5YTU3Yjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHn82/Rb8EyzkzXEEoYVjN5A+fWr gZzYrHr9ir/vuIyAK5R72EmKw2zb45N7caCgfB6kvnHW8i7Ft2K1X3ouRKUBk1U1 wCfwr/zfiA9W3cEvoIOFDXZjw+Kh2juhavkYoefE47SB01qTgOqYwzJKgICLPEG4 krd72PR699MjzsOZnzGJxFt0wfeHrNOFciIISWhbBVzoIWKaA2kuLF/ej1+URupL G4m3t6VXPBid2FraeX8z84A0ckTVxi75XlGyAecp5DnptxIwXslAP4u9xnMeI2Tv ISFl1MvCeXhO/Kfvxgqpwu5tyb13N2sBng4WmYsq8xP18/BkmlhkUF7LGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzsP5vGtNo8KYyKMBylsly5pXuWMB8GA1UdIwQY MBaAFGrTi9TA0OnzAoAhmEzYNVYEf2OYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2Yzkt Y2U3MDAwNzRhN2ZjLzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2YzktY2U3MDAwNzRhN2Zj LzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikLLaMpM eFiKOdtXLerq9h44qy3MT5WRi+3jI5dg/5rMxsOs9PHed0xU48TX608LaMC6vID7 lzLyvjfcylvMHoWohGRZ7J+/GMStcyBA1fjtArP85NxNhE62p9AWlOKrCpgloMtD O001fHWhXP2vT65lrhdMfzFqjg6g3d2EtnY+OayNuE5q2Ub5ISPl+4lIfAq9j702 nnAGnrUY8NwuAB2pXr1dKCJ8W+koS9lPOkvnDq4MkBUs6JwdD2N+vCagZ+UeQwsL ef5QS0p8/HUKwhQP2JZpHg5LmWn8P+nkKImu+JD/Pox3ASr7fwiVVWb7WbQPYRhJ VCGddJWVLqSZew== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:34 2025 by rpki-client