This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft File: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft (raw, json) Hash identifier: feH8KtlCfUQG63A+SaC9KcaYgDgvwz4k3L5BHAha4r8= Subject key identifier: FB:ED:B2:57:3F:E2:1B:B9:1B:93:2B:BB:D5:B3:F1:1D:FD:AB:08:9B Authority key identifier: 02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA Certificate issuer: /CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca Certificate serial: 019AF31C76DDEE0401ABB1732B823FAC427D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:02:00 +0000 Manifest this update: Sat 06 Dec 2025 10:02:00 +0000 Manifest next update: Sun 07 Dec 2025 10:02:00 +0000 Files and hashes: 1: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl (hash: Lpwqg4sBFhFiJeEDGzrycPPma4O6zFKX5ucKrU+EGAg=) 2: dL5tLsAU6PWlL4weQ4Up71k3hXA.roa (hash: ZvntQMrxSDwlXP02WdClHLb+VoQxqS4KZZo3fc10HIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:76:dd:ee:04:01:ab:b1:73:2b:82:3f:ac:42:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca Validity Not Before: Dec 6 10:02:00 2025 GMT Not After : Dec 7 10:02:00 2025 GMT Subject: CN=fbedb2573fe21bb91b932bbbd5b3f11dfdab089b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d3:11:fb:ba:d7:7e:a9:e0:ba:a0:b7:56:79: fd:52:56:49:99:c6:14:bf:a0:41:1a:e3:c1:e6:bf: 68:77:6d:bb:8f:22:5a:8b:37:72:f6:46:fa:d4:cd: d5:55:92:01:c1:ec:88:a8:ec:8e:63:11:c2:26:36: 8c:98:5d:b6:36:58:62:4d:36:82:4e:bd:c8:06:65: be:3b:70:8b:92:ff:bd:45:73:b6:cb:10:3a:46:46: 7d:11:11:c8:3b:8a:63:9c:8f:ad:0c:1b:9d:35:94: a6:0c:3d:61:78:d9:6a:85:32:39:9a:26:e4:77:97: 31:53:e0:e2:89:3b:37:fc:81:e6:03:a6:49:18:72: 50:07:5d:f3:69:05:c2:3e:ab:71:08:3e:ee:61:1f: df:70:6e:92:fc:fa:d1:57:ee:17:bf:e0:89:3b:77: 03:6f:52:f4:69:34:e8:52:a5:7f:74:95:27:12:e4: 47:77:1f:19:8c:57:43:a9:8a:b7:64:07:71:a3:49: 8c:b6:ee:6c:32:32:94:d5:c7:09:88:26:3b:2d:24: 50:a9:70:dd:d6:d6:f8:61:2f:71:70:55:70:57:a7: 00:72:5b:09:f3:e6:a9:ea:7e:ce:a4:5a:b0:ed:18: 54:3f:d9:09:88:97:40:e2:03:ff:59:81:8f:f4:ab: af:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:ED:B2:57:3F:E2:1B:B9:1B:93:2B:BB:D5:B3:F1:1D:FD:AB:08:9B X509v3 Authority Key Identifier: keyid:02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a2:d0:8f:f2:88:0b:a2:21:90:79:16:bb:55:be:fe:c5:be: ef:2f:02:24:db:e9:af:b9:d2:84:46:f9:96:df:bc:5b:32:92: a0:2a:0b:d3:dc:c3:76:ac:4e:76:39:51:b3:86:17:57:0b:5a: 58:a3:8b:52:43:8f:6a:72:9b:f1:7f:91:f7:7d:71:7f:71:1d: 21:07:dd:41:14:6a:d6:45:29:0c:67:51:bd:f8:59:c7:19:eb: 06:d5:d3:c5:59:df:4c:50:9a:95:03:49:ea:4f:ff:cd:b8:11: 2b:d5:ff:b9:cf:16:1e:4c:f4:30:b1:d1:66:2a:97:2a:a6:04: 56:b1:8d:89:94:20:21:38:e8:5a:d9:09:33:a7:8a:a4:e1:a0: 99:72:86:17:f3:31:74:ef:3a:d6:a9:b1:f7:ae:7e:f7:8e:07: f0:70:55:be:a0:ef:d2:b2:1a:63:73:fb:9a:4f:1a:fc:26:3c: cf:29:f1:c1:9b:c2:09:f2:65:d3:db:8a:65:48:81:aa:a4:86: a7:5a:8a:29:7f:e4:00:8f:00:98:2e:23:82:e1:9f:d3:ef:5c: 66:4a:80:c7:39:56:21:9b:72:60:14:35:a8:43:f3:cd:c8:f4: 38:27:70:70:12:2c:98:56:c3:85:52:43:25:81:ee:c7:3c:c7: 85:dd:b5:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHbd7gQBq7FzK4I/rEJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZGE0Y2QwNDRjNmU5ODczYWM4ZmQ5Y2ZkMzBmMWVjYjNk ODBiY2EwHhcNMjUxMjA2MTAwMjAwWhcNMjUxMjA3MTAwMjAwWjAzMTEwLwYDVQQD EyhmYmVkYjI1NzNmZTIxYmI5MWI5MzJiYmJkNWIzZjExZGZkYWIwODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdMR+7rXfqnguqC3Vnn9UlZJmcYU v6BBGuPB5r9od227jyJaizdy9kb61M3VVZIBweyIqOyOYxHCJjaMmF22NlhiTTaC Tr3IBmW+O3CLkv+9RXO2yxA6RkZ9ERHIO4pjnI+tDBudNZSmDD1heNlqhTI5mibk d5cxU+DiiTs3/IHmA6ZJGHJQB13zaQXCPqtxCD7uYR/fcG6S/PrRV+4Xv+CJO3cD b1L0aTToUqV/dJUnEuRHdx8ZjFdDqYq3ZAdxo0mMtu5sMjKU1ccJiCY7LSRQqXDd 1tb4YS9xcFVwV6cAclsJ8+ap6n7OpFqw7RhUP9kJiJdA4gP/WYGP9KuvFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvtslc/4hu5G5Mru9Wz8R39qwibMB8GA1UdIwQY MBaAFALaTNBExumHOsj9nP0w8eyz2AvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yOTM3M2UtYzMwOS00YzMyLWE2MDYt ZDY5MmMzNzI5YzQ4LzEvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8yOTM3M2UtYzMwOS00YzMyLWE2MDYtZDY5MmMzNzI5YzQ4 LzEvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaLQj/KI C6IhkHkWu1W+/sW+7y8CJNvpr7nShEb5lt+8WzKSoCoL09zDdqxOdjlRs4YXVwta WKOLUkOPanKb8X+R931xf3EdIQfdQRRq1kUpDGdRvfhZxxnrBtXTxVnfTFCalQNJ 6k//zbgRK9X/uc8WHkz0MLHRZiqXKqYEVrGNiZQgITjoWtkJM6eKpOGgmXKGF/Mx dO861qmx965+944H8HBVvqDv0rIaY3P7mk8a/CY8zynxwZvCCfJl09uKZUiBqqSG p1qKKX/kAI8AmC4jguGf0+9cZkqAxzlWIZtyYBQ1qEPzzcj0OCdwcBIsmFbDhVJD JYHuxzzHhd21aw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:37:22 2025 by rpki-client