This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json) Hash identifier: jSqRxW0Dns1CEk6KZXtn5tyqi+Ae6TWcWTvGqyatyto= Subject key identifier: 0A:FF:8B:73:AC:91:F7:94:95:90:87:32:2C:28:4E:8C:0D:69:CC:ED Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82 Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082 Certificate serial: 019AF7D45704153E75B09CED08FD73ECE25D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft Manifest number: 1264 Signing time: Sun 07 Dec 2025 08:01:19 +0000 Manifest this update: Sun 07 Dec 2025 08:01:19 +0000 Manifest next update: Mon 08 Dec 2025 08:01:19 +0000 Files and hashes: 1: FSst80BStcOZoxcVEEn7HUNlaMg.roa (hash: MkzJ0Sac3ZN5iWdcIOjWwvYuR5zj6qypIoySO/md3YQ=) 2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: Ur8x8cZJU5HpUvHNYa9/h8oL2OR+kLTYg/C8J1oOjpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:57:04:15:3e:75:b0:9c:ed:08:fd:73:ec:e2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082 Validity Not Before: Dec 7 08:01:19 2025 GMT Not After : Dec 8 08:01:19 2025 GMT Subject: CN=0aff8b73ac91f794959087322c284e8c0d69cced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:93:a3:f2:48:6c:08:3e:2a:8a:7b:54:4f:19: eb:7c:d9:be:5d:f5:93:5b:4b:71:3d:40:15:22:96: 25:b2:67:ef:6f:94:b4:3c:93:52:60:3a:c4:fb:de: 54:0d:dd:c2:20:fc:45:69:15:81:c2:8d:09:8b:db: d6:b0:99:dc:8d:ea:ed:bf:cf:8b:a3:03:9c:59:5e: b4:f4:b9:a8:ae:eb:fc:44:67:77:7d:38:5e:88:98: bf:5e:e9:fc:65:c7:88:26:a0:f9:25:17:bb:6f:73: df:4b:e8:00:98:5f:1c:41:16:fc:fe:cc:b6:80:a4: cc:6e:06:c1:a7:12:be:b4:fd:5c:34:70:a9:c3:3a: c0:84:2a:f9:8f:91:01:71:63:96:ad:8d:3b:8a:3a: 48:f4:8a:ce:1f:2e:ad:6f:1b:9e:ef:23:fb:88:78: 19:2a:7e:a3:11:2f:25:9c:42:75:5f:17:fb:bd:d8: 49:23:d5:a6:b4:ee:48:35:63:a1:a7:86:3a:b8:48: 29:46:67:10:25:0d:17:40:69:72:ac:48:88:ad:1b: b1:c1:ad:22:91:ec:9b:a9:7f:f7:f9:eb:ca:84:6c: 44:d8:07:94:8e:c6:d3:36:3b:4d:c9:28:62:17:3e: ae:80:d9:af:3d:22:86:7a:fd:a6:8a:12:e6:5d:ea: b0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FF:8B:73:AC:91:F7:94:95:90:87:32:2C:28:4E:8C:0D:69:CC:ED X509v3 Authority Key Identifier: keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3c:72:48:cd:f8:43:9a:1e:aa:ba:31:91:c9:2a:6e:22:eb: 46:1e:f4:7c:38:50:32:fc:b1:1c:62:ea:b8:9a:21:1a:c8:d3: 79:9b:57:30:3b:77:99:08:61:1d:97:7b:ec:ba:df:35:5e:30: 07:f9:45:e3:9c:21:93:e1:65:08:26:0b:62:77:91:c5:6e:bb: 5a:37:65:38:39:8c:9e:0b:1e:eb:68:33:b0:80:bc:73:c1:40: 3e:c1:87:e9:80:31:eb:21:71:39:38:8e:dd:42:54:c5:52:2a: ed:46:e6:12:3c:a9:59:59:8f:fe:e1:0c:8d:f8:de:b0:4d:5c: d5:26:94:f7:d7:36:d2:d4:43:a6:7f:9b:7c:01:38:e6:34:ad: cd:71:1e:ba:44:be:cc:23:ca:11:98:3e:58:45:4d:04:8a:a3: 86:7e:d0:cb:47:0f:dc:8d:a0:17:48:85:a1:02:5f:a1:20:4f: 01:32:44:73:0e:5b:9e:79:25:ac:47:09:98:cf:bb:ef:33:23: 06:01:74:f0:8f:91:fd:97:cc:00:53:fb:df:9b:f7:e8:58:ac: e3:28:60:4c:3f:38:3f:39:43:2d:06:68:0e:f1:f6:34:da:fc: aa:96:b0:ea:b6:7c:5e:52:be:e5:4e:74:7e:ad:48:fb:f3:46: c4:db:08:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31FcEFT51sJztCP1z7OJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDAyZDZiYjg1YTk4NmJjODhkYmNkOTMzMjA5NDU0ZTVi NWUwODIwHhcNMjUxMjA3MDgwMTE5WhcNMjUxMjA4MDgwMTE5WjAzMTEwLwYDVQQD EygwYWZmOGI3M2FjOTFmNzk0OTU5MDg3MzIyYzI4NGU4YzBkNjljY2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJOj8khsCD4qintUTxnrfNm+XfWT W0txPUAVIpYlsmfvb5S0PJNSYDrE+95UDd3CIPxFaRWBwo0Ji9vWsJncjertv8+L owOcWV609Lmoruv8RGd3fTheiJi/Xun8ZceIJqD5JRe7b3PfS+gAmF8cQRb8/sy2 gKTMbgbBpxK+tP1cNHCpwzrAhCr5j5EBcWOWrY07ijpI9IrOHy6tbxue7yP7iHgZ Kn6jES8lnEJ1Xxf7vdhJI9WmtO5INWOhp4Y6uEgpRmcQJQ0XQGlyrEiIrRuxwa0i keybqX/3+evKhGxE2AeUjsbTNjtNyShiFz6ugNmvPSKGev2mihLmXeqwiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAr/i3OskfeUlZCHMiwoTowNacztMB8GA1UdIwQY MBaAFK8ALWu4WphryI282TMglFTlteCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndBdGE3aGFtR3ZJamJ6Wk15Q1VWT1cxNElJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hMmVkYTItZTg4NS00NjQwLTljODQt ZDZlZjhlOTE0MzA3LzEvcndBdGE3aGFtR3ZJamJ6Wk15Q1VWT1cxNElJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9hMmVkYTItZTg4NS00NjQwLTljODQtZDZlZjhlOTE0MzA3 LzEvcndBdGE3aGFtR3ZJamJ6Wk15Q1VWT1cxNElJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzxySM34 Q5oeqroxkckqbiLrRh70fDhQMvyxHGLquJohGsjTeZtXMDt3mQhhHZd77LrfNV4w B/lF45whk+FlCCYLYneRxW67WjdlODmMngse62gzsIC8c8FAPsGH6YAx6yFxOTiO 3UJUxVIq7UbmEjypWVmP/uEMjfjesE1c1SaU99c20tRDpn+bfAE45jStzXEeukS+ zCPKEZg+WEVNBIqjhn7Qy0cP3I2gF0iFoQJfoSBPATJEcw5bnnklrEcJmM+77zMj BgF08I+R/ZfMAFP735v36Fis4yhgTD84PzlDLQZoDvH2NNr8qpaw6rZ8XlK+5U50 fq1I+/NGxNsIsQ== -----END CERTIFICATE-----Generated at Sun Dec 7 11:36:30 2025 by rpki-client