This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft File: At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json) Hash identifier: guKgnGHGyDw1oqhA3U0t4wnn93LGs6w6g46CCbdmrd4= Subject key identifier: A8:3A:A2:67:87:A6:78:7B:45:D5:07:44:F3:21:CE:CA:57:C4:89:6B Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1 Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1 Certificate serial: 019AF5E611AA46B191F212787912FF4C7128 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 23:01:26 +0000 Manifest this update: Sat 06 Dec 2025 23:01:26 +0000 Manifest next update: Sun 07 Dec 2025 23:01:26 +0000 Files and hashes: 1: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: na/HP9fxqd88rXyrmSU8luyLjKMUbAJUREkweIN7++U=) 2: tHCbVYNtXVasJFwcwAVRKNWN-3Q.roa (hash: Ww9of/U+//ROw//qlU2ic3DOqjTFR4h9CkZcVWZJb4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:11:aa:46:b1:91:f2:12:78:79:12:ff:4c:71:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1 Validity Not Before: Dec 6 23:01:26 2025 GMT Not After : Dec 7 23:01:26 2025 GMT Subject: CN=a83aa26787a6787b45d50744f321ceca57c4896b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:53:03:0d:7e:81:05:30:61:a2:ec:a1:97:35: 51:03:d6:4d:c0:15:dc:26:e0:0a:97:b8:74:df:22: 07:56:5b:27:8b:3c:05:ab:63:4d:48:88:88:58:52: d2:6a:6b:5c:65:02:43:0b:33:ab:b4:13:2c:c0:90: 6c:4e:0e:a3:5d:1b:c0:a4:1a:76:8d:23:5b:a5:0d: 6c:18:a1:9b:eb:e3:d7:75:53:48:bf:c8:61:b3:a5: 6e:ba:6e:2c:e3:2f:b6:3c:09:a1:47:a4:b2:38:37: 6c:79:7d:6d:c6:e5:11:56:18:f8:38:9c:f6:9b:2f: 11:ca:7a:69:73:2d:ed:c1:4a:f7:75:0a:77:8d:08: 51:da:cc:15:9e:c5:02:8f:7a:67:2f:36:20:ea:d2: 51:43:79:d4:f8:12:2b:fe:3d:6f:a4:34:5a:f5:a7: 82:5c:fb:81:e6:ef:1c:97:9f:f8:ec:5b:cd:5f:e9: 46:64:d3:2b:7b:56:b9:70:69:3b:9c:a1:0a:ea:24: 6a:6e:9d:54:7b:02:2d:cd:1c:0a:ab:4c:d9:ef:4d: f1:48:72:65:60:b5:36:3e:97:15:34:38:fb:f3:33: 6f:50:10:7b:7d:67:bf:2e:3d:fa:a7:01:4f:58:8d: b8:5b:8e:a8:c6:ab:ae:a8:fc:b8:77:8d:73:37:5d: a6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3A:A2:67:87:A6:78:7B:45:D5:07:44:F3:21:CE:CA:57:C4:89:6B X509v3 Authority Key Identifier: keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fe:7d:f0:a5:ec:b9:96:df:2a:79:80:06:2b:72:5b:72:19: 07:3e:86:e1:a2:e9:ef:91:72:2a:7d:d2:ae:8a:1b:6e:59:a0: 07:f1:bb:fc:3b:0b:ed:d1:fc:2e:09:ff:95:9d:12:ba:92:76: 86:2b:eb:16:04:b5:6a:81:bc:52:04:38:c2:29:e3:f4:d7:66: 57:0b:3d:3b:13:fe:dd:34:5e:a8:b2:cb:a3:9d:e6:04:76:1b: b5:3b:74:94:62:ba:c3:47:cd:0b:82:d0:94:ee:63:30:ae:79: f1:06:f7:bf:0a:e8:60:9e:74:72:72:e6:dc:e4:ab:1b:0e:bd: 44:60:7e:a0:63:3b:4c:cc:5c:54:1f:c7:64:cb:fb:8a:a8:e5: cf:46:a9:83:74:7e:ec:90:51:c2:28:88:48:a2:e0:d6:c6:3f: bf:d7:97:7e:51:39:32:73:07:f9:37:3f:01:5f:7e:c9:6a:3c: 69:30:89:4a:f6:73:23:f1:35:b4:38:87:13:4b:30:e4:e4:60: a2:b6:35:de:e8:52:2e:04:1e:f1:88:b5:5b:31:6e:ae:d5:65: 42:c0:2e:d9:e5:c5:70:c5:ef:10:2d:b5:e0:69:36:20:61:03: 9b:e8:69:e9:1d:36:b0:5b:4f:50:b2:1a:99:51:9d:a6:94:94: f1:a4:bd:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15hGqRrGR8hJ4eRL/THEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZGY4MTI2ODgyOTMwMWYzZDY5ZWI5NmY4YWM2MTdmYTI1 MjU2YTEwHhcNMjUxMjA2MjMwMTI2WhcNMjUxMjA3MjMwMTI2WjAzMTEwLwYDVQQD EyhhODNhYTI2Nzg3YTY3ODdiNDVkNTA3NDRmMzIxY2VjYTU3YzQ4OTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lMDDX6BBTBhouyhlzVRA9ZNwBXc JuAKl7h03yIHVlsnizwFq2NNSIiIWFLSamtcZQJDCzOrtBMswJBsTg6jXRvApBp2 jSNbpQ1sGKGb6+PXdVNIv8hhs6Vuum4s4y+2PAmhR6SyODdseX1txuURVhj4OJz2 my8Rynppcy3twUr3dQp3jQhR2swVnsUCj3pnLzYg6tJRQ3nU+BIr/j1vpDRa9aeC XPuB5u8cl5/47FvNX+lGZNMre1a5cGk7nKEK6iRqbp1UewItzRwKq0zZ703xSHJl YLU2PpcVNDj78zNvUBB7fWe/Lj36pwFPWI24W46oxquuqPy4d41zN12mkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKg6omeHpnh7RdUHRPMhzspXxIlrMB8GA1UdIwQY MBaAFALfgSaIKTAfPWnrlvisYX+iUlahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wNjE3MTYtMDljNi00ODM4LWIxY2It M2U4NmQyYzI5OTY5LzEvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8wNjE3MTYtMDljNi00ODM4LWIxY2ItM2U4NmQyYzI5OTY5 LzEvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlf598KXs uZbfKnmABityW3IZBz6G4aLp75FyKn3SroobblmgB/G7/DsL7dH8Lgn/lZ0SupJ2 hivrFgS1aoG8UgQ4winj9NdmVws9OxP+3TReqLLLo53mBHYbtTt0lGK6w0fNC4LQ lO5jMK558Qb3vwroYJ50cnLm3OSrGw69RGB+oGM7TMxcVB/HZMv7iqjlz0apg3R+ 7JBRwiiISKLg1sY/v9eXflE5MnMH+Tc/AV9+yWo8aTCJSvZzI/E1tDiHE0sw5ORg orY13uhSLgQe8Yi1WzFurtVlQsAu2eXFcMXvEC214Gk2IGEDm+hp6R02sFtPULIa mVGdppSU8aS9nQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:37:59 2025 by rpki-client