This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json) Hash identifier: sHiFEnN0E/Gd+wFUGUBpMDjANvPvFTcVhU64yiUFq4U= Subject key identifier: 2D:61:C5:C7:E6:78:C7:E7:6E:E1:23:9E:AE:D0:BA:17:91:5A:97:5D Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19 Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19 Certificate serial: 019B476FF493C72F0450C90D441396E1A4E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft Manifest number: 03DD Signing time: Mon 22 Dec 2025 19:01:17 +0000 Manifest this update: Mon 22 Dec 2025 19:01:17 +0000 Manifest next update: Tue 23 Dec 2025 19:01:17 +0000 Files and hashes: 1: 0ZwVYpJfrbJyYn_YtY3RuMq5lcg.roa (hash: gf6HtAdxN0GhhrFPeZ2e6ZRLEIlkoJtABmVeq8td+ik=) 2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: 5Wye2JKq1Z5at8Ec/OBnTgVwQhG/n4h5b6jLZOXaMW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:f4:93:c7:2f:04:50:c9:0d:44:13:96:e1:a4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19 Validity Not Before: Dec 22 19:01:17 2025 GMT Not After : Dec 23 19:01:17 2025 GMT Subject: CN=2d61c5c7e678c7e76ee1239eaed0ba17915a975d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:b3:1a:e3:fa:80:d4:59:4b:53:c5:01:0d:8e: 56:c2:b1:ee:2e:33:ef:8b:5c:f7:9b:82:d8:64:df: 48:07:aa:bd:96:5a:c9:74:88:07:f0:60:06:c2:38: cb:0f:fb:94:47:1d:53:43:a8:ee:05:99:28:c7:aa: 4a:b6:c7:5c:93:7c:7c:37:71:f6:e1:85:75:67:6f: cf:92:6a:52:da:b1:71:8a:75:c1:3e:95:91:1f:17: d1:42:cd:c5:ea:5f:a9:3e:a2:3b:17:81:16:77:cb: 02:b9:54:02:c0:b9:7a:7c:59:02:9a:93:bc:76:49: 8f:d3:58:fa:d7:9a:9f:94:ec:8d:50:95:9e:0f:8a: d4:ef:5e:ba:a7:b6:2b:0d:4e:f6:02:bf:d7:57:b5: 9c:89:fd:a4:6a:2f:8f:14:6f:0a:87:ab:eb:28:06: bc:97:e9:e5:74:68:65:e6:f2:91:b5:da:c4:e9:23: 77:86:12:85:a6:d8:8a:35:58:1d:e8:78:52:40:a7: 3a:0d:75:0c:7f:af:b9:75:70:91:a7:a3:57:76:4a: ed:eb:db:fb:5d:60:e9:e3:25:b8:61:2f:0d:98:4e: ff:6e:c1:07:40:0a:0f:28:16:51:59:25:67:d8:aa: 6b:0e:31:5e:16:db:6a:a2:f0:7d:3e:4d:55:e0:db: 53:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:61:C5:C7:E6:78:C7:E7:6E:E1:23:9E:AE:D0:BA:17:91:5A:97:5D X509v3 Authority Key Identifier: keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:c6:9e:02:57:cb:98:34:46:f3:43:fc:da:28:49:0d:4c:e1: e9:43:fd:cf:9c:7c:ed:f0:0f:bc:3f:26:39:7f:62:a7:fa:68: 8d:5c:ce:cc:93:98:d9:d0:c7:d9:3c:fb:88:10:4e:ce:34:d0: 67:07:e4:ea:4f:f0:fb:9a:43:21:a3:44:05:0f:50:5e:dd:29: b5:05:b3:d7:1d:c2:53:d0:ff:ba:12:1b:25:92:b3:ce:5b:39: 04:50:5d:ce:92:13:07:74:0e:b1:d0:f8:62:52:59:a5:b8:07: 58:94:15:72:20:60:0f:01:be:86:d4:32:9d:6c:20:58:95:77: cf:ec:c6:3f:34:1f:8e:35:d9:a6:c4:e8:16:c8:6c:33:c8:c8: 09:2d:18:35:f6:fd:7a:46:d7:65:a0:e5:38:4a:05:e4:1b:98: 81:7e:65:b7:c1:b8:ea:94:10:fc:71:9c:cb:5a:59:88:48:d1: 8f:d6:28:b2:37:01:e3:2f:bf:18:0b:06:de:f7:33:63:d3:1b: b0:3d:a7:aa:fd:e3:39:d3:12:01:c7:47:b1:66:06:e9:eb:b2: 39:95:4e:24:e8:15:c6:aa:47:31:31:f3:89:3c:b1:58:2f:06: 3a:53:7e:60:9d:84:54:bc:c5:f6:d8:92:e1:eb:d1:4c:d6:d6: 10:38:6a:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb/STxy8EUMkNRBOW4aTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZDcwZWYyNWU1MjJjMGQyNmU5NzdhMWQyNGZmNzdlYWQz YWRhMTkwHhcNMjUxMjIyMTkwMTE3WhcNMjUxMjIzMTkwMTE3WjAzMTEwLwYDVQQD EygyZDYxYzVjN2U2NzhjN2U3NmVlMTIzOWVhZWQwYmExNzkxNWE5NzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bMa4/qA1FlLU8UBDY5WwrHuLjPv i1z3m4LYZN9IB6q9llrJdIgH8GAGwjjLD/uURx1TQ6juBZkox6pKtsdck3x8N3H2 4YV1Z2/PkmpS2rFxinXBPpWRHxfRQs3F6l+pPqI7F4EWd8sCuVQCwLl6fFkCmpO8 dkmP01j615qflOyNUJWeD4rU7166p7YrDU72Ar/XV7Wcif2kai+PFG8Kh6vrKAa8 l+nldGhl5vKRtdrE6SN3hhKFptiKNVgd6HhSQKc6DXUMf6+5dXCRp6NXdkrt69v7 XWDp4yW4YS8NmE7/bsEHQAoPKBZRWSVn2KprDjFeFttqovB9Pk1V4NtT9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1hxcfmeMfnbuEjnq7QuheRWpddMB8GA1UdIwQY MBaAFGrXDvJeUiwNJul3odJP936tOtoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yMzk2OGEtZmEzNi00NjU0LWJmYmYt OTQwNGUxNzcyMDBlLzEvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8yMzk2OGEtZmEzNi00NjU0LWJmYmYtOTQwNGUxNzcyMDBl LzEvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMaeAlfL mDRG80P82ihJDUzh6UP9z5x87fAPvD8mOX9ip/pojVzOzJOY2dDH2Tz7iBBOzjTQ Zwfk6k/w+5pDIaNEBQ9QXt0ptQWz1x3CU9D/uhIbJZKzzls5BFBdzpITB3QOsdD4 YlJZpbgHWJQVciBgDwG+htQynWwgWJV3z+zGPzQfjjXZpsToFshsM8jICS0YNfb9 ekbXZaDlOEoF5BuYgX5lt8G46pQQ/HGcy1pZiEjRj9YosjcB4y+/GAsG3vczY9Mb sD2nqv3jOdMSAcdHsWYG6euyOZVOJOgVxqpHMTHziTyxWC8GOlN+YJ2EVLzF9tiS 4evRTNbWEDhq9A== -----END CERTIFICATE-----Generated at Mon Dec 22 20:33:37 2025 by rpki-client