This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft File: atCw5EzIalF2lUfCKteWGEtUsJI.mft (raw, json) Hash identifier: IdFcyh7rS94HNIRzIJNfylEmr3kpZNVvqX5H0p7t578= Subject key identifier: 7B:4E:1C:67:80:79:3D:91:BC:26:3F:2B:DD:89:BD:FA:15:E6:A5:83 Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92 Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092 Certificate serial: 019AF389B548AC609896155617287E6BB024 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft Manifest number: 0760 Signing time: Sat 06 Dec 2025 12:01:19 +0000 Manifest this update: Sat 06 Dec 2025 12:01:19 +0000 Manifest next update: Sun 07 Dec 2025 12:01:19 +0000 Files and hashes: 1: C8VQvbdXFSWxY9cUSyaRplGLG8M.roa (hash: dJ/UlGmOEoPz5t5fntmBN/tksB6x5Nidm+UzZouks14=) 2: atCw5EzIalF2lUfCKteWGEtUsJI.crl (hash: cOG7U/aLOVXi9SI3uNnnSG80CBr9IB2Ns0g9Z80VZsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:b5:48:ac:60:98:96:15:56:17:28:7e:6b:b0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092 Validity Not Before: Dec 6 12:01:19 2025 GMT Not After : Dec 7 12:01:19 2025 GMT Subject: CN=7b4e1c6780793d91bc263f2bdd89bdfa15e6a583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:fc:70:4b:c5:02:39:df:4d:20:1c:13:c9: 18:17:8b:2c:15:86:c9:6b:7f:2b:3e:65:b3:b6:cc: 76:53:1b:27:9c:69:7a:3a:58:98:1b:eb:2d:fb:6d: 13:98:39:c5:73:d8:f4:9e:59:ac:e0:14:7e:b3:8b: 02:ba:9c:f6:13:3e:d1:a4:cc:13:13:60:2c:8f:72: 21:4f:4c:eb:7b:9d:7e:d5:4b:6f:89:ea:1f:8b:14: e0:2e:3c:ce:5d:b1:93:70:98:c4:5f:b3:19:5f:10: 32:19:6b:4c:61:e6:b7:7a:70:df:67:de:01:69:45: fb:18:f1:8e:6d:d4:2e:90:ec:bc:c0:c0:e0:84:19: 37:84:eb:ea:ea:ee:65:d8:9e:0f:a3:40:0f:08:2f: 79:b4:6d:07:7d:bb:bb:32:ea:57:9f:19:4a:74:cc: 38:5f:97:be:03:63:da:0e:0b:ce:89:89:6e:10:eb: 21:39:1b:f7:85:97:2a:6d:35:c9:52:2e:43:d4:70: ea:04:da:c3:cc:73:e8:e0:6d:3d:89:75:81:2e:0f: d1:76:3d:00:e1:18:45:29:82:74:79:5e:e5:b3:55: 57:32:11:7b:6d:33:30:f0:a9:47:a8:2e:bd:b7:07: 55:c7:7b:3f:b5:bc:04:db:96:be:e3:dc:c3:04:d2: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4E:1C:67:80:79:3D:91:BC:26:3F:2B:DD:89:BD:FA:15:E6:A5:83 X509v3 Authority Key Identifier: keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:af:f0:29:20:38:d3:ba:71:37:d7:9b:72:67:6d:d4:97:ee: 11:cd:c9:23:e8:b5:d5:14:9f:72:b4:1c:ae:48:10:c7:61:a4: e6:86:a2:e9:09:b1:ad:f5:55:69:54:99:3f:23:ea:1a:9c:e9: 16:00:9c:2c:b5:55:45:c7:fe:0d:aa:4c:76:0d:e7:f0:16:f7: 56:98:7a:a8:b6:52:8c:99:dd:fe:79:a8:8d:5f:94:20:be:d4: 14:56:18:a4:0d:f4:8e:2b:3b:e0:00:55:6f:3c:a4:0f:8b:92: e9:0f:95:b0:7a:26:93:83:71:4a:69:9c:d3:e6:45:4e:e2:ea: 75:c3:30:f5:6d:d0:56:5b:66:d8:e0:0b:81:6a:9a:5b:1a:37: a0:5c:75:85:cd:41:e4:5c:02:cd:b2:3b:d9:84:61:e0:8b:fa: 50:c0:79:16:ae:d0:94:61:88:5b:3a:d4:ed:fc:8d:e9:31:39: c0:5f:0b:1d:cd:42:68:6e:1a:e6:54:12:fa:f6:11:9f:d4:e8: d3:51:7c:81:10:fb:63:9c:36:8b:05:7c:ac:da:1a:b8:0b:bb: a5:73:ff:3f:e7:4e:8d:d3:02:03:b8:31:87:13:47:b3:df:59: 1b:b1:89:af:10:c1:3a:c0:41:60:19:57:04:a0:f5:ae:6f:3a: de:98:8a:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibVIrGCYlhVWFyh+a7AkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZDBiMGU0NGNjODZhNTE3Njk1NDdjMjJhZDc5NjE4NGI1 NGIwOTIwHhcNMjUxMjA2MTIwMTE5WhcNMjUxMjA3MTIwMTE5WjAzMTEwLwYDVQQD Eyg3YjRlMWM2NzgwNzkzZDkxYmMyNjNmMmJkZDg5YmRmYTE1ZTZhNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB78cEvFAjnfTSAcE8kYF4ssFYbJ a38rPmWztsx2UxsnnGl6OliYG+st+20TmDnFc9j0nlms4BR+s4sCupz2Ez7RpMwT E2Asj3IhT0zre51+1UtvieofixTgLjzOXbGTcJjEX7MZXxAyGWtMYea3enDfZ94B aUX7GPGObdQukOy8wMDghBk3hOvq6u5l2J4Po0APCC95tG0Hfbu7MupXnxlKdMw4 X5e+A2PaDgvOiYluEOshORv3hZcqbTXJUi5D1HDqBNrDzHPo4G09iXWBLg/Rdj0A 4RhFKYJ0eV7ls1VXMhF7bTMw8KlHqC69twdVx3s/tbwE25a+49zDBNLS8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtOHGeAeT2RvCY/K92JvfoV5qWDMB8GA1UdIwQY MBaAFGrQsORMyGpRdpVHwirXlhhLVLCSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81YTFlZjctZjNhNC00NzNjLWE2OWMt NDgyMjVmMzExMWNmLzEvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81YTFlZjctZjNhNC00NzNjLWE2OWMtNDgyMjVmMzExMWNm LzEvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2q/wKSA4 07pxN9ebcmdt1JfuEc3JI+i11RSfcrQcrkgQx2Gk5oai6QmxrfVVaVSZPyPqGpzp FgCcLLVVRcf+DapMdg3n8Bb3Vph6qLZSjJnd/nmojV+UIL7UFFYYpA30jis74ABV bzykD4uS6Q+VsHomk4NxSmmc0+ZFTuLqdcMw9W3QVltm2OALgWqaWxo3oFx1hc1B 5FwCzbI72YRh4Iv6UMB5Fq7QlGGIWzrU7fyN6TE5wF8LHc1CaG4a5lQS+vYRn9To 01F8gRD7Y5w2iwV8rNoauAu7pXP/P+dOjdMCA7gxhxNHs99ZG7GJrxDBOsBBYBlX BKD1rm863piKuA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:36:27 2025 by rpki-client