This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json) Hash identifier: 8o/EQmoLYisIN9zXMGavhXligy7IbedKKcOyV8JJZaA= Subject key identifier: DD:FE:FC:43:54:E5:54:9D:A2:DD:A6:2B:57:5A:E7:C8:10:D4:AD:14 Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83 Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183 Certificate serial: 019B40917D897CCDA0323FF48E9FC168E8A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft Manifest number: 14A6 Signing time: Sun 21 Dec 2025 11:00:35 +0000 Manifest this update: Sun 21 Dec 2025 11:00:35 +0000 Manifest next update: Mon 22 Dec 2025 11:00:35 +0000 Files and hashes: 1: 1-HJDRT0gD2nhMW6JUwz556mvKj8.roa (hash: JYyO1+sMj5YlHliO+us6FbC+ChQWiYGalwTjRduJQ2E=) 2: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: DAijtPOucHoA3UDejDi8RNFJ6xcUjE8nWkXHBVtJ54U=) 3: o2P4F8wGwS7Hu_Z9DavQWwnt9SU.roa (hash: vp0AJWW08FmlyogXHIG/NX7ZAqoKcGLBFnnNS6LdgqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:7d:89:7c:cd:a0:32:3f:f4:8e:9f:c1:68:e8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183 Validity Not Before: Dec 21 11:00:35 2025 GMT Not After : Dec 22 11:00:35 2025 GMT Subject: CN=ddfefc4354e5549da2dda62b575ae7c810d4ad14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:95:6a:2c:34:0c:1e:3c:99:de:9e:82:e5: fe:4b:6c:26:c6:3b:37:a2:3e:96:6b:e3:1b:08:7d: 08:cc:74:e7:bc:8e:58:16:aa:ec:2b:75:9e:d1:f2: 18:da:a4:5a:57:92:59:80:42:0e:db:fc:b2:93:6d: 1f:4e:2c:34:16:d4:f5:72:37:a6:16:be:b0:f4:73: 5d:b4:70:ca:2c:fd:67:6c:95:0e:b6:9e:18:ac:64: eb:b2:df:03:38:85:0f:82:37:46:4e:d2:80:56:10: 73:7c:dd:f3:92:eb:77:e5:fd:6f:69:2a:d4:15:54: 8a:fc:ce:d9:1b:cf:87:be:0c:55:11:10:b1:31:78: ca:45:2c:a8:c3:2e:da:8b:51:72:e9:a5:e5:3c:bd: cc:e6:67:74:b3:89:99:1e:ae:2e:a8:07:78:2b:77: 25:7f:a2:c7:a8:e9:4f:13:cc:f2:9c:93:46:c3:0d: 1b:37:c5:95:62:43:0a:a0:f4:9c:0d:e4:48:42:7f: 2e:b7:ff:71:f6:c5:59:75:c2:10:d4:55:4a:c0:1e: 24:16:a0:0b:c0:e7:4c:ce:ab:22:16:4e:97:7b:aa: f8:ba:3d:7f:86:8f:78:f2:90:a5:28:0d:8b:33:64: fe:8e:e6:85:a0:bb:a8:2f:53:a8:ec:db:b7:99:3b: b7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FE:FC:43:54:E5:54:9D:A2:DD:A6:2B:57:5A:E7:C8:10:D4:AD:14 X509v3 Authority Key Identifier: keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:52:af:f1:f1:26:6a:11:6f:be:7f:63:e7:f6:6c:aa:b3:c7: aa:ac:ef:46:de:6e:47:dc:ee:81:c1:ed:7f:f8:20:11:61:2b: 70:13:92:5f:55:ec:20:ac:c3:ee:9f:7f:b5:ff:ba:9f:f4:ad: e8:ec:4b:b2:8b:c3:e4:5a:30:26:68:9a:e5:eb:92:fd:a8:c6: 5b:0a:65:ac:ac:26:c2:90:87:a0:e4:d2:52:b9:12:6c:3e:7f: 90:2d:67:79:61:64:a2:09:b4:66:6c:00:26:50:aa:d7:b7:68: b1:d6:08:2e:b5:1c:fe:1c:5a:74:d5:5d:b9:b7:41:ae:cb:34: e1:b8:27:c2:0e:aa:87:cf:5a:46:ba:ed:5d:f3:69:9a:4a:cf: f7:eb:65:14:cd:60:81:a8:2b:28:2f:27:f5:49:6b:03:de:6e: a0:5f:af:0c:66:7a:f6:dc:3c:c3:2b:e6:d6:c5:79:67:45:20: 76:b2:10:10:ad:99:4f:32:21:3b:0b:35:fc:93:ff:d8:c8:55: 1c:1b:db:32:b6:7d:31:49:d9:3d:d9:5a:3b:ed:d6:ab:8a:23: 77:7f:78:10:08:76:2b:ac:38:6c:96:d5:2a:d6:87:3b:45:4f: 27:b2:b1:e7:d7:84:40:f0:36:4e:42:c3:66:da:bb:76:d5:8f: f2:53:10:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkX2JfM2gMj/0jp/BaOilMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZDBlODg4ODVlZjQ4YjIwYzg3Yjc2ZmQ4NWQ0MmU2ZWIz ZDcxODMwHhcNMjUxMjIxMTEwMDM1WhcNMjUxMjIyMTEwMDM1WjAzMTEwLwYDVQQD EyhkZGZlZmM0MzU0ZTU1NDlkYTJkZGE2MmI1NzVhZTdjODEwZDRhZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs66Vaiw0DB48md6eguX+S2wmxjs3 oj6Wa+MbCH0IzHTnvI5YFqrsK3We0fIY2qRaV5JZgEIO2/yyk20fTiw0FtT1cjem Fr6w9HNdtHDKLP1nbJUOtp4YrGTrst8DOIUPgjdGTtKAVhBzfN3zkut35f1vaSrU FVSK/M7ZG8+HvgxVERCxMXjKRSyowy7ai1Fy6aXlPL3M5md0s4mZHq4uqAd4K3cl f6LHqOlPE8zynJNGww0bN8WVYkMKoPScDeRIQn8ut/9x9sVZdcIQ1FVKwB4kFqAL wOdMzqsiFk6Xe6r4uj1/ho948pClKA2LM2T+juaFoLuoL1Oo7Nu3mTu3rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3+/ENU5VSdot2mK1da58gQ1K0UMB8GA1UdIwQY MBaAFALQ6IiF70iyDIe3b9hdQubrPXGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDct OTUzYzY4NTA2ZDVjLzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDctOTUzYzY4NTA2ZDVj LzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1Kv8fEm ahFvvn9j5/ZsqrPHqqzvRt5uR9zugcHtf/ggEWErcBOSX1XsIKzD7p9/tf+6n/St 6OxLsovD5FowJmia5euS/ajGWwplrKwmwpCHoOTSUrkSbD5/kC1neWFkogm0ZmwA JlCq17dosdYILrUc/hxadNVdubdBrss04bgnwg6qh89aRrrtXfNpmkrP9+tlFM1g gagrKC8n9UlrA95uoF+vDGZ69tw8wyvm1sV5Z0UgdrIQEK2ZTzIhOws1/JP/2MhV HBvbMrZ9MUnZPdlaO+3Wq4ojd394EAh2K6w4bJbVKtaHO0VPJ7Kx59eEQPA2TkLD Ztq7dtWP8lMQLw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:28:16 2025 by rpki-client