This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft File: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft (raw, json) Hash identifier: S0dWTEL3DcZEwyha92MmS1chG+NztSXNwOgUscXSXfQ= Subject key identifier: A4:74:18:30:41:3E:FE:9C:FF:F0:6B:05:47:42:E1:6E:C7:AC:FA:93 Authority key identifier: 01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04 Certificate issuer: /CN=013f6db0fd57d19f9ee15242a2e4167efb522d04 Certificate serial: 019B30E9666F93FF91665D00575403CAF015 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft Manifest number: 0C58 Signing time: Thu 18 Dec 2025 10:02:40 +0000 Manifest this update: Thu 18 Dec 2025 10:02:40 +0000 Manifest next update: Fri 19 Dec 2025 10:02:40 +0000 Files and hashes: 1: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl (hash: 0t0Sx2sGv3YxWqVflvPgIDUsgneGL62bfapGr4aJXT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:66:6f:93:ff:91:66:5d:00:57:54:03:ca:f0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=013f6db0fd57d19f9ee15242a2e4167efb522d04 Validity Not Before: Dec 18 10:02:40 2025 GMT Not After : Dec 19 10:02:40 2025 GMT Subject: CN=a4741830413efe9cfff06b054742e16ec7acfa93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e1:c9:94:8c:96:23:5c:cb:6e:10:7f:b0:dd: 00:1d:df:3c:1e:72:1f:cc:13:7e:63:10:b8:6f:41: 95:49:21:fc:08:19:c2:c1:2b:b6:fb:42:27:15:cd: 7b:a8:76:c9:0b:e3:2e:15:04:ea:f7:44:6f:5c:9d: 4c:60:e9:e3:d6:a8:d1:55:ea:1a:ef:c7:c1:2e:f7: 4e:29:1a:3e:64:67:7b:f5:02:58:43:8f:43:ec:6e: 56:44:78:12:f3:87:2a:fe:7c:61:12:63:8a:22:96: 35:e3:94:fc:9e:fc:bc:cb:cc:f2:37:9b:b3:5b:fe: 1b:4f:ad:6d:20:d7:b0:ab:42:11:94:80:e1:69:e6: 1c:a8:b3:ce:db:63:50:12:62:91:7e:47:c9:9c:c5: 77:a6:d4:89:9d:24:e9:95:e8:67:bc:2d:06:4a:12: cf:bc:47:56:3a:7a:cc:f7:17:8a:a0:8d:09:ce:92: 49:5a:bf:c5:7a:d5:fc:8d:32:dc:49:b4:df:15:98: 83:1c:bc:65:5c:8e:b6:c2:12:da:56:eb:83:ab:96: e7:b2:35:cb:62:e4:33:c3:b6:90:c7:cd:e0:9c:89: 96:86:d8:67:3d:cc:76:16:15:f5:b6:13:2d:5e:ec: 6e:73:eb:c0:2c:05:98:ed:0b:3f:4d:ac:09:31:51: d9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:74:18:30:41:3E:FE:9C:FF:F0:6B:05:47:42:E1:6E:C7:AC:FA:93 X509v3 Authority Key Identifier: keyid:01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4b:1f:02:a6:dd:12:60:db:7e:ed:27:bf:b2:c4:83:e2:95: 1a:62:26:15:80:1f:97:02:2e:0d:48:00:24:fe:a1:63:34:e6: 78:7b:a0:23:1e:5d:07:41:4e:61:96:60:63:ed:15:6d:40:fd: fb:2d:4a:c1:16:f3:f0:62:d1:ba:bc:7a:68:ae:98:89:7e:ac: 6b:f7:a4:65:b6:e5:38:e3:94:18:ad:34:89:fe:21:5a:32:90: bf:ee:4e:8a:4d:20:47:82:24:ea:34:48:a6:c3:cb:c6:70:bc: ef:bc:c1:35:db:c4:16:40:22:fb:48:e5:79:86:0b:df:0d:67: ca:ec:4d:79:d0:73:68:08:1e:cb:2f:ce:0b:0b:aa:bd:ca:fb: e9:c6:c8:44:d6:fa:67:c4:5a:6e:88:c1:8c:11:85:bc:fe:5d: 85:4d:d7:a4:58:39:16:9a:30:0f:84:9a:72:dc:8f:59:00:6f: 51:91:26:ed:b5:8b:40:3e:26:d5:19:bf:75:ed:d2:dd:33:45: cf:27:5a:36:1f:8f:59:42:f1:3c:0d:44:cb:b1:dc:9c:8a:d6: 99:8e:42:ae:71:68:4f:e6:fc:ae:be:b2:56:9c:69:9c:a0:c0: fe:2c:a6:d7:a2:91:f4:5c:09:ef:44:7c:f3:14:c3:30:8e:ea: 96:97:09:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6WZvk/+RZl0AV1QDyvAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxM2Y2ZGIwZmQ1N2QxOWY5ZWUxNTI0MmEyZTQxNjdlZmI1 MjJkMDQwHhcNMjUxMjE4MTAwMjQwWhcNMjUxMjE5MTAwMjQwWjAzMTEwLwYDVQQD EyhhNDc0MTgzMDQxM2VmZTljZmZmMDZiMDU0NzQyZTE2ZWM3YWNmYTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+HJlIyWI1zLbhB/sN0AHd88HnIf zBN+YxC4b0GVSSH8CBnCwSu2+0InFc17qHbJC+MuFQTq90RvXJ1MYOnj1qjRVeoa 78fBLvdOKRo+ZGd79QJYQ49D7G5WRHgS84cq/nxhEmOKIpY145T8nvy8y8zyN5uz W/4bT61tINewq0IRlIDhaeYcqLPO22NQEmKRfkfJnMV3ptSJnSTplehnvC0GShLP vEdWOnrM9xeKoI0JzpJJWr/FetX8jTLcSbTfFZiDHLxlXI62whLaVuuDq5bnsjXL YuQzw7aQx83gnImWhthnPcx2FhX1thMtXuxuc+vALAWY7Qs/TawJMVHZrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKR0GDBBPv6c//BrBUdC4W7HrPqTMB8GA1UdIwQY MBaAFAE/bbD9V9GfnuFSQqLkFn77Ui0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVQ5dHNQMVgwWi1lNFZKQ291UVdmdnRTTFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNjMzMDctNGEwZi00MDUzLThmYzMt ZjUzNTU3ODk4NGMyLzEvQVQ5dHNQMVgwWi1lNFZKQ291UVdmdnRTTFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mNjMzMDctNGEwZi00MDUzLThmYzMtZjUzNTU3ODk4NGMy LzEvQVQ5dHNQMVgwWi1lNFZKQ291UVdmdnRTTFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEsfAqbd EmDbfu0nv7LEg+KVGmImFYAflwIuDUgAJP6hYzTmeHugIx5dB0FOYZZgY+0VbUD9 +y1KwRbz8GLRurx6aK6YiX6sa/ekZbblOOOUGK00if4hWjKQv+5Oik0gR4Ik6jRI psPLxnC877zBNdvEFkAi+0jleYYL3w1nyuxNedBzaAgeyy/OCwuqvcr76cbIRNb6 Z8RabojBjBGFvP5dhU3XpFg5FpowD4SactyPWQBvUZEm7bWLQD4m1Rm/de3S3TNF zydaNh+PWULxPA1Ey7HcnIrWmY5CrnFoT+b8rr6yVpxpnKDA/iym16KR9FwJ70R8 8xTDMI7qlpcJRg== -----END CERTIFICATE-----Generated at Thu Dec 18 17:42:55 2025 by rpki-client