This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft File: AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json) Hash identifier: 0B8w9ZXcitmsu/u5gBkX5MkZD2OBu6YW/BzcE03Q1/g= Subject key identifier: B7:F4:77:A3:65:0D:F3:9C:79:FB:B3:D4:F8:76:94:AE:33:50:A3:C3 Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18 Certificate issuer: /CN=00cb6701ff829394db69ce67c30ad8735f126018 Certificate serial: 019AF49BA17E3F589D46CE61121A769DC2DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft Manifest number: 0446 Signing time: Sat 06 Dec 2025 17:00:31 +0000 Manifest this update: Sat 06 Dec 2025 17:00:31 +0000 Manifest next update: Sun 07 Dec 2025 17:00:31 +0000 Files and hashes: 1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: 84Tv4IKv5RvS5QNiivpO1K9KVpXX7kOklPPi323DLfY=) 2: VHRVXn6aDGinTjiE7BA05enfH2Q.roa (hash: HWebi466PogM3Mfy4s/kKB9Ol8sTTEX1NAe07QPFw7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:a1:7e:3f:58:9d:46:ce:61:12:1a:76:9d:c2:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018 Validity Not Before: Dec 6 17:00:31 2025 GMT Not After : Dec 7 17:00:31 2025 GMT Subject: CN=b7f477a3650df39c79fbb3d4f87694ae3350a3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f0:97:09:57:42:47:20:20:ca:d2:38:d3:60: 57:b4:6f:b6:b2:84:fe:5c:bd:1d:22:3f:85:da:a1: a2:3f:4f:a3:cf:82:11:ad:a6:54:72:09:04:c1:61: 1b:86:18:f7:ef:04:7f:96:f4:6d:ca:f7:4a:8d:62: 0f:db:a4:12:6c:bb:05:d0:35:0f:46:4b:73:26:b0: ca:f7:93:a8:d1:46:a7:f5:68:50:44:b6:ac:1e:8d: d6:e2:41:d0:48:ac:30:48:9d:3a:b7:a7:e1:b8:17: 39:e2:66:7d:83:80:82:82:cb:c0:3c:d8:ae:31:65: 5e:2b:4a:0b:73:cb:dd:5a:51:33:f8:0f:7c:12:32: 5a:0c:0e:7f:1c:27:01:b0:c3:f3:9d:48:56:2b:8f: 7d:82:53:59:43:31:15:46:d7:e1:d0:b6:e2:ce:de: 30:a3:d0:21:cc:29:a9:d9:fc:da:79:a0:29:a1:de: ec:92:35:12:d3:88:e8:af:3e:1b:c9:07:7a:2b:ab: bb:7d:4c:68:92:28:28:ba:01:9c:13:5d:18:c5:3a: f8:4f:9d:1f:ef:3d:45:e0:65:31:c8:2d:95:97:75: 30:83:93:48:2c:18:7b:ef:7e:f9:70:1b:a4:a6:85: fc:3b:bd:06:cc:60:b0:5a:e6:85:87:b2:4d:a1:da: 84:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F4:77:A3:65:0D:F3:9C:79:FB:B3:D4:F8:76:94:AE:33:50:A3:C3 X509v3 Authority Key Identifier: keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a0:1f:f0:7c:78:fb:13:7c:0b:73:15:cf:67:b6:79:a0:06: d2:7b:36:eb:2f:12:3d:b6:2a:51:d3:dd:ef:81:7d:2f:b3:6d: e6:11:97:50:9c:77:f3:40:3d:cf:64:87:50:6e:51:a1:6b:06: b7:29:3a:76:e7:27:a5:1a:f6:e6:c0:0c:e0:41:64:f6:89:eb: 89:b0:65:64:4b:33:6d:3b:8a:1b:a2:71:1b:9d:8a:48:8c:ce: 38:d8:5a:7c:de:fc:48:50:55:ce:96:63:71:75:37:1b:e6:51: 1b:9a:5a:42:02:d7:29:d7:54:86:a4:e3:93:7f:e8:d5:c5:10: d4:88:01:3c:90:6f:58:4f:6d:9c:09:5d:a8:17:bf:3d:ee:f7: 50:c3:52:82:0e:de:51:4b:63:c7:60:80:8f:e9:2d:f2:eb:79: 20:fe:c4:8b:4c:99:aa:be:0a:62:51:7b:bb:62:b6:fc:ac:a4: 9a:bc:2e:fc:b5:d0:5b:51:42:a5:c3:f3:92:05:e3:12:97:b8: d3:cb:bf:98:6f:aa:7a:20:ba:31:35:16:4e:66:aa:a1:95:49: 93:50:2e:4c:c1:01:06:e2:e2:a6:d1:5d:e3:ab:5f:b2:a5:9a: 3c:e3:d4:d0:69:b3:4c:ef:18:93:20:bd:35:c9:70:df:57:ba: 18:a6:ec:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m6F+P1idRs5hEhp2ncLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2I2NzAxZmY4MjkzOTRkYjY5Y2U2N2MzMGFkODczNWYx MjYwMTgwHhcNMjUxMjA2MTcwMDMxWhcNMjUxMjA3MTcwMDMxWjAzMTEwLwYDVQQD EyhiN2Y0NzdhMzY1MGRmMzljNzlmYmIzZDRmODc2OTRhZTMzNTBhM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/CXCVdCRyAgytI402BXtG+2soT+ XL0dIj+F2qGiP0+jz4IRraZUcgkEwWEbhhj37wR/lvRtyvdKjWIP26QSbLsF0DUP RktzJrDK95Oo0Uan9WhQRLasHo3W4kHQSKwwSJ06t6fhuBc54mZ9g4CCgsvAPNiu MWVeK0oLc8vdWlEz+A98EjJaDA5/HCcBsMPznUhWK499glNZQzEVRtfh0Lbizt4w o9AhzCmp2fzaeaApod7skjUS04jorz4byQd6K6u7fUxokigougGcE10YxTr4T50f 7z1F4GUxyC2Vl3Uwg5NILBh77375cBukpoX8O70GzGCwWuaFh7JNodqE+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLf0d6NlDfOcefuz1Ph2lK4zUKPDMB8GA1UdIwQY MBaAFADLZwH/gpOU22nOZ8MK2HNfEmAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjct MjliM2UxMTFkY2VjLzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjctMjliM2UxMTFkY2Vj LzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6Af8Hx4 +xN8C3MVz2e2eaAG0ns26y8SPbYqUdPd74F9L7Nt5hGXUJx380A9z2SHUG5RoWsG tyk6ducnpRr25sAM4EFk9onribBlZEszbTuKG6JxG52KSIzOONhafN78SFBVzpZj cXU3G+ZRG5paQgLXKddUhqTjk3/o1cUQ1IgBPJBvWE9tnAldqBe/Pe73UMNSgg7e UUtjx2CAj+kt8ut5IP7Ei0yZqr4KYlF7u2K2/Kykmrwu/LXQW1FCpcPzkgXjEpe4 08u/mG+qeiC6MTUWTmaqoZVJk1AuTMEBBuLiptFd46tfsqWaPOPU0GmzTO8YkyC9 Nclw31e6GKbszQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:51:52 2025 by rpki-client