This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft File: aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json) Hash identifier: cevEcdjS0uU8IhTnGskOn2Et4lUpyEJ2r6pc7B+9Fxw= Subject key identifier: C1:70:D7:14:FC:D2:B8:96:88:7B:42:75:60:A8:F4:A9:34:E4:C6:9B Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10 Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410 Certificate serial: 019AF42DE5EAF16AF865205785F21FC1E187 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft Manifest number: 0F0A Signing time: Sat 06 Dec 2025 15:00:39 +0000 Manifest this update: Sat 06 Dec 2025 15:00:39 +0000 Manifest next update: Sun 07 Dec 2025 15:00:39 +0000 Files and hashes: 1: 2G8qCYpoVtySgAcA2OeugnFiYio.roa (hash: 4y9U4HthBDvGesI1zzlV+POhFy0POzpyZENkuQTD5Jg=) 2: AdYUGZij8DmxO3Ha06S--PKOAmc.roa (hash: VsJTbLEE5i06CunQsxcyU7AB2xtGSY0X2LHBs6SuerI=) 3: YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa (hash: 8I0SGpAqHedSzWDkPjUCH1zMcRg8of85FMjYoHGNCe0=) 4: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: 8f7a5K8MyN9FGLPZf8/R02f2TvSyDNCj2fauTEGnONA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:e5:ea:f1:6a:f8:65:20:57:85:f2:1f:c1:e1:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410 Validity Not Before: Dec 6 15:00:39 2025 GMT Not After : Dec 7 15:00:39 2025 GMT Subject: CN=c170d714fcd2b896887b427560a8f4a934e4c69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:56:e8:83:28:e1:e2:14:2b:1b:59:67:ba:45: d4:45:d4:b0:48:e5:33:13:21:7c:71:5c:59:b0:04: 6f:82:83:0f:5c:3a:c1:e4:21:e4:5b:83:33:d9:d4: 26:b6:69:a4:58:be:ea:2e:ef:1b:97:f8:e8:ba:75: df:8b:c8:0c:c5:27:db:35:8a:36:16:d1:d9:f5:9a: 2b:ef:03:24:53:f3:61:c2:76:16:6e:15:3a:7a:d7: db:13:f9:16:37:20:f8:f7:51:43:86:4b:33:0c:3a: 11:a4:f2:df:c5:a3:80:2d:4f:6b:37:d7:43:2d:bf: ef:c7:f0:fe:61:42:31:d7:bd:65:62:32:b3:55:36: b7:42:93:a6:af:9e:92:24:a9:35:40:f0:c3:5b:af: 30:e7:25:9e:57:17:b9:1f:70:fb:17:3e:7a:e3:c9: 16:41:42:19:0a:5a:44:30:b2:dd:b1:3d:cd:d4:ab: 8e:61:bb:a3:ce:72:eb:3d:ce:2e:ff:fd:d4:03:67: e9:91:53:b7:cf:b7:7a:0d:23:c1:b2:2d:5c:57:e5: 58:aa:96:7a:2b:24:4a:2c:25:2e:d0:fb:5d:15:d8: 32:be:78:bb:f8:f8:38:53:48:dc:68:21:de:cc:fd: c7:c2:55:f5:17:cf:cb:e2:f0:ae:ae:51:b8:f8:9d: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:70:D7:14:FC:D2:B8:96:88:7B:42:75:60:A8:F4:A9:34:E4:C6:9B X509v3 Authority Key Identifier: keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:9a:3c:2f:59:03:a7:9d:4e:e6:32:d2:45:b6:ed:10:6d:a5: bb:38:d5:b6:59:9a:10:e6:b7:e1:5f:91:e8:0f:b4:a5:80:4c: b2:f9:34:a0:ca:33:4b:cd:eb:bd:5a:71:a2:6f:9f:0b:1b:0e: b8:6c:34:6c:cd:b7:ee:d0:b4:8c:b4:0c:b2:51:de:5c:b5:84: 90:f2:99:16:6a:b2:c3:8d:54:00:92:4d:e3:95:2c:51:87:cf: 60:39:00:15:20:13:97:bf:93:03:83:7e:ae:b8:c1:53:1c:ee: 96:46:da:dd:78:48:b3:62:e3:e0:17:1b:2a:ad:15:72:47:2b: 7e:22:19:0c:84:97:19:48:30:e9:8b:22:25:c6:d8:76:fd:51: db:2e:cb:9c:3f:cc:b9:74:10:52:e3:8c:cf:4d:fa:0c:3e:bf: 93:88:81:3b:e1:3f:6b:f8:08:f8:7a:c8:0d:b7:3d:05:98:59: 21:f4:c5:9f:55:cc:be:2c:51:0d:4d:3d:09:51:3d:5f:90:85: 93:b8:eb:71:09:07:3d:5a:27:c4:ab:03:bd:25:a4:8c:19:89: 34:df:8c:57:e9:11:7e:40:3a:f7:cf:18:66:26:31:c8:b8:d4: 1d:a0:c6:b6:cf:ac:44:e7:60:a6:ea:6b:29:16:5a:9f:4c:3a: 5b:f8:47:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LeXq8Wr4ZSBXhfIfweGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzZhZGY4ZWVjYWJjMTA1MmUxZjc4M2QzYmNlNGExYzVk YjU0MTAwHhcNMjUxMjA2MTUwMDM5WhcNMjUxMjA3MTUwMDM5WjAzMTEwLwYDVQQD EyhjMTcwZDcxNGZjZDJiODk2ODg3YjQyNzU2MGE4ZjRhOTM0ZTRjNjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Vbogyjh4hQrG1lnukXURdSwSOUz EyF8cVxZsARvgoMPXDrB5CHkW4Mz2dQmtmmkWL7qLu8bl/jounXfi8gMxSfbNYo2 FtHZ9Zor7wMkU/NhwnYWbhU6etfbE/kWNyD491FDhkszDDoRpPLfxaOALU9rN9dD Lb/vx/D+YUIx171lYjKzVTa3QpOmr56SJKk1QPDDW68w5yWeVxe5H3D7Fz5648kW QUIZClpEMLLdsT3N1KuOYbujznLrPc4u//3UA2fpkVO3z7d6DSPBsi1cV+VYqpZ6 KyRKLCUu0PtdFdgyvni7+Pg4U0jcaCHezP3HwlX1F8/L4vCurlG4+J1u/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFw1xT80riWiHtCdWCo9Kk05MabMB8GA1UdIwQY MBaAFGjGrfjuyrwQUuH3g9O85KHF21QQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lNWQ4NjktMzBiYy00NDY1LWJkNmYt NDc3M2I2NjY5NzE2LzEvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9lNWQ4NjktMzBiYy00NDY1LWJkNmYtNDc3M2I2NjY5NzE2 LzEvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZo8L1kD p51O5jLSRbbtEG2luzjVtlmaEOa34V+R6A+0pYBMsvk0oMozS83rvVpxom+fCxsO uGw0bM237tC0jLQMslHeXLWEkPKZFmqyw41UAJJN45UsUYfPYDkAFSATl7+TA4N+ rrjBUxzulkba3XhIs2Lj4BcbKq0VckcrfiIZDISXGUgw6YsiJcbYdv1R2y7LnD/M uXQQUuOMz036DD6/k4iBO+E/a/gI+HrIDbc9BZhZIfTFn1XMvixRDU09CVE9X5CF k7jrcQkHPVonxKsDvSWkjBmJNN+MV+kRfkA6988YZiYxyLjUHaDGts+sROdgpupr KRZan0w6W/hHdw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:56 2025 by rpki-client