This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft File: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft (raw, json) Hash identifier: MOzdN+XWClLAqzQBS9YFNzhnD8nqt1tHvbJvnllZXv0= Subject key identifier: 4C:8B:0A:7F:A7:7F:8F:D8:19:6D:2B:3C:3F:81:8C:1F:86:4A:B1:61 Authority key identifier: 01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04 Certificate issuer: /CN=013f6db0fd57d19f9ee15242a2e4167efb522d04 Certificate serial: 019AF31C74744070D292E2B2DF0854F9AE15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft Manifest number: 0C38 Signing time: Sat 06 Dec 2025 10:01:59 +0000 Manifest this update: Sat 06 Dec 2025 10:01:59 +0000 Manifest next update: Sun 07 Dec 2025 10:01:59 +0000 Files and hashes: 1: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl (hash: sHC4iAH8hUeUGIXc1RtWGaGGzJR2U72qmmrVfZgUnBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:74:74:40:70:d2:92:e2:b2:df:08:54:f9:ae:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=013f6db0fd57d19f9ee15242a2e4167efb522d04 Validity Not Before: Dec 6 10:01:59 2025 GMT Not After : Dec 7 10:01:59 2025 GMT Subject: CN=4c8b0a7fa77f8fd8196d2b3c3f818c1f864ab161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a3:75:d0:47:5c:cd:cf:0e:12:82:4b:c4:a0: ca:ce:6c:8a:12:9e:bb:e8:f1:17:e8:86:86:ef:6e: b1:62:6d:c5:23:75:f5:24:fd:de:0b:48:c6:58:02: 11:5a:7d:0a:57:ca:f8:64:4e:a7:e9:d4:8b:19:81: db:d2:f7:f9:11:5e:43:4e:18:15:02:2e:51:df:50: 46:52:77:5d:49:ed:33:cc:ed:03:e8:1e:5d:6f:15: 72:41:aa:fd:ee:5f:95:04:25:de:bb:ed:3e:73:e1: 3d:12:ed:64:a1:bb:cb:cf:1a:16:1b:9c:a3:f2:11: 14:7e:71:79:6d:01:7d:16:4d:82:ac:f6:90:95:bf: 5e:b6:8b:69:d0:86:90:49:0b:76:ce:b1:8b:7f:c9: a4:a8:63:3b:d0:3f:e3:4d:6f:3a:16:b6:1f:c7:b3: 73:1b:b8:83:55:af:af:0f:2c:65:b6:83:05:97:c5: 78:93:40:30:d1:be:42:e7:d7:1d:1d:47:75:ca:03: bf:c8:bb:73:fd:68:b6:bb:2e:8b:80:72:2a:de:53: 2f:d0:51:2e:fc:23:72:2a:b6:f0:9f:17:14:88:e1: 3d:e3:e4:5b:41:25:6a:e6:75:2e:48:32:63:6f:f2: 5d:44:57:a4:20:26:77:44:d7:9b:60:51:cf:2a:61: 37:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8B:0A:7F:A7:7F:8F:D8:19:6D:2B:3C:3F:81:8C:1F:86:4A:B1:61 X509v3 Authority Key Identifier: keyid:01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:e3:3f:34:f7:53:c9:32:39:49:c4:60:19:cb:3f:57:bd:09: 83:07:00:84:6a:c0:31:09:90:ce:4c:4c:4c:6d:27:f6:4a:13: e8:00:33:95:59:35:3e:bf:4d:8f:18:3b:92:ab:5e:27:03:b3: d7:33:33:63:a1:2a:f9:83:c5:6a:27:6a:ef:cd:1b:6e:81:7c: 42:69:94:d6:d9:1c:5a:93:1c:43:96:8c:86:06:e5:7b:ac:d6: 20:de:63:41:d3:da:83:1c:78:49:62:8c:50:04:a6:6d:51:48: c8:cb:89:13:d2:f6:28:39:93:b7:90:6d:26:f7:15:c2:91:8d: 93:17:04:14:b8:c5:ec:13:bb:7f:25:0f:69:f4:7a:f0:70:77: ab:4b:1a:3e:3b:5c:aa:f5:72:60:ec:f5:5c:15:94:4d:13:eb: f6:c0:5a:88:3b:91:02:6e:10:e2:93:c0:04:43:4a:d9:67:11: 21:47:10:b8:d3:3b:ac:06:12:b4:36:0d:e2:2a:a2:35:d6:46: 40:63:71:43:5e:3d:10:2a:d5:b9:50:00:54:84:25:3f:3e:01: 06:0d:66:63:e0:94:2f:43:7b:2c:ff:32:df:4a:1b:a4:61:6d: 1d:d7:cb:62:b4:1e:d7:ae:00:ea:3c:f4:f8:40:2a:a3:f1:b0: 02:8a:3e:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHR0QHDSkuKy3whU+a4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxM2Y2ZGIwZmQ1N2QxOWY5ZWUxNTI0MmEyZTQxNjdlZmI1 MjJkMDQwHhcNMjUxMjA2MTAwMTU5WhcNMjUxMjA3MTAwMTU5WjAzMTEwLwYDVQQD Eyg0YzhiMGE3ZmE3N2Y4ZmQ4MTk2ZDJiM2MzZjgxOGMxZjg2NGFiMTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KN10Edczc8OEoJLxKDKzmyKEp67 6PEX6IaG726xYm3FI3X1JP3eC0jGWAIRWn0KV8r4ZE6n6dSLGYHb0vf5EV5DThgV Ai5R31BGUnddSe0zzO0D6B5dbxVyQar97l+VBCXeu+0+c+E9Eu1kobvLzxoWG5yj 8hEUfnF5bQF9Fk2CrPaQlb9etotp0IaQSQt2zrGLf8mkqGM70D/jTW86FrYfx7Nz G7iDVa+vDyxltoMFl8V4k0Aw0b5C59cdHUd1ygO/yLtz/Wi2uy6LgHIq3lMv0FEu /CNyKrbwnxcUiOE94+RbQSVq5nUuSDJjb/JdRFekICZ3RNebYFHPKmE3iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyLCn+nf4/YGW0rPD+BjB+GSrFhMB8GA1UdIwQY MBaAFAE/bbD9V9GfnuFSQqLkFn77Ui0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVQ5dHNQMVgwWi1lNFZKQ291UVdmdnRTTFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNjMzMDctNGEwZi00MDUzLThmYzMt ZjUzNTU3ODk4NGMyLzEvQVQ5dHNQMVgwWi1lNFZKQ291UVdmdnRTTFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mNjMzMDctNGEwZi00MDUzLThmYzMtZjUzNTU3ODk4NGMy LzEvQVQ5dHNQMVgwWi1lNFZKQ291UVdmdnRTTFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvOM/NPdT yTI5ScRgGcs/V70JgwcAhGrAMQmQzkxMTG0n9koT6AAzlVk1Pr9Njxg7kqteJwOz 1zMzY6Eq+YPFaidq780bboF8QmmU1tkcWpMcQ5aMhgble6zWIN5jQdPagxx4SWKM UASmbVFIyMuJE9L2KDmTt5BtJvcVwpGNkxcEFLjF7BO7fyUPafR68HB3q0saPjtc qvVyYOz1XBWUTRPr9sBaiDuRAm4Q4pPABENK2WcRIUcQuNM7rAYStDYN4iqiNdZG QGNxQ149ECrVuVAAVIQlPz4BBg1mY+CUL0N7LP8y30obpGFtHdfLYrQe164A6jz0 +EAqo/GwAoo+qg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:39:18 2025 by rpki-client