This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft File: ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json) Hash identifier: N4EP/bIbsx+kvfmYjhN2Jf610Ob9ao1v/CiqK8q3/A8= Subject key identifier: FD:B3:EA:77:C7:9F:EB:20:06:45:FD:4C:8E:BB:1F:FF:F0:04:EB:EC Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63 Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63 Certificate serial: 019B23634A2EDD9949E7F63D926E9A9C7A9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft Manifest number: 0DFC Signing time: Mon 15 Dec 2025 19:01:08 +0000 Manifest this update: Mon 15 Dec 2025 19:01:08 +0000 Manifest next update: Tue 16 Dec 2025 19:01:08 +0000 Files and hashes: 1: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: U2ZVoFqRCWxFbJqq46MCzGXGsAk91KxWN4q3fIkde5g=) 2: pUM6ACWqLcQahA0lg8mmij4I6d4.roa (hash: UbfUIFFNnl9kUqI4HdZKMmMa2NoguiRD4aW6tenaTi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:4a:2e:dd:99:49:e7:f6:3d:92:6e:9a:9c:7a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63 Validity Not Before: Dec 15 19:01:08 2025 GMT Not After : Dec 16 19:01:08 2025 GMT Subject: CN=fdb3ea77c79feb200645fd4c8ebb1ffff004ebec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ec:d9:9b:34:ca:12:05:7c:be:b6:82:3c:d7: 5a:9a:53:93:3a:a1:c1:68:1b:e7:e2:d0:1a:b9:53: 9e:60:47:2b:98:61:43:87:2d:99:95:95:44:88:a1: 1c:8c:d6:79:a2:7c:04:b6:b0:3c:12:a6:d0:c4:83: e8:be:4f:63:29:46:3d:a4:ce:d5:7a:41:82:b7:c0: bc:49:b9:6e:d6:25:3a:12:fe:74:d8:de:9e:77:0d: 5e:b3:9c:66:a9:77:2b:c3:5b:4a:cd:6a:f6:89:20: a2:ec:08:58:4b:9d:da:74:e9:21:bf:c6:3a:74:9d: ae:78:81:b3:df:91:3f:ae:64:a8:3c:88:bc:24:7d: 47:d4:5e:38:94:ac:86:bf:1e:e7:17:10:25:93:a1: 03:97:09:a1:6f:37:77:7f:4a:3d:d4:05:2d:65:62: a4:5a:41:d7:02:16:98:d5:0d:db:ef:7d:b5:ac:15: ce:32:ca:3a:d6:8b:94:05:08:bd:18:69:9a:b4:11: 46:53:96:7b:fb:40:f0:4f:96:0b:76:92:36:20:e2: 3e:f4:d5:4c:6d:eb:68:32:d2:9d:28:c6:13:66:17: 12:95:ba:0d:76:69:04:83:02:0a:a7:77:fe:e5:a8: f4:cb:c6:04:cb:b1:7b:e3:18:a4:7b:ab:d5:70:6d: 37:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B3:EA:77:C7:9F:EB:20:06:45:FD:4C:8E:BB:1F:FF:F0:04:EB:EC X509v3 Authority Key Identifier: keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ec:10:fe:bc:17:ec:1d:9b:8b:c2:ec:58:61:95:25:37:48: a5:13:56:46:76:f0:35:64:9d:45:8b:d2:48:85:94:ed:05:94: 03:b3:bc:88:99:9d:fd:6d:f2:55:6b:b7:14:57:cf:b9:4a:5f: 3d:d1:7b:b6:45:d5:86:7d:e0:be:e4:a5:9c:1b:38:6f:1f:0f: 30:41:ed:21:6a:bc:be:b8:c1:1d:d7:0c:c5:06:15:28:3a:ab: 89:e3:0c:20:1e:a8:c6:5a:7f:72:4b:95:a4:92:11:05:22:08: 79:d3:1c:f8:a2:2f:6f:d6:b4:8e:8d:49:83:a3:0e:ff:35:ff: d3:3d:47:10:55:0d:50:c3:cc:54:57:b7:26:05:37:5f:41:63: 8c:4a:b5:15:b2:4a:0c:6e:14:1f:4e:b4:e6:9e:3c:5e:ca:f5: 8b:87:c1:7a:de:8d:24:01:f1:44:ed:01:5a:bc:ff:f3:a7:39: 7b:91:c5:06:90:1a:ef:9b:47:f1:b6:96:d1:44:be:56:e2:3d: 13:eb:11:c5:e3:9f:9f:8d:e1:1f:5f:d5:7a:25:f6:59:da:41: bb:59:52:fd:e2:db:38:0c:fd:88:09:58:7c:b5:21:ff:1f:7a: c9:6d:67:8e:68:72:a3:5a:5c:fc:ac:70:11:f6:79:d8:c7:d3: ed:c2:dc:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY0ou3ZlJ5/Y9km6anHqdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxM2M3NDEzMjU5NzE2MmNkYjJkZDYzNzYwYWJkOTk3MWUz MGJmNjMwHhcNMjUxMjE1MTkwMTA4WhcNMjUxMjE2MTkwMTA4WjAzMTEwLwYDVQQD EyhmZGIzZWE3N2M3OWZlYjIwMDY0NWZkNGM4ZWJiMWZmZmYwMDRlYmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+zZmzTKEgV8vraCPNdamlOTOqHB aBvn4tAauVOeYEcrmGFDhy2ZlZVEiKEcjNZ5onwEtrA8EqbQxIPovk9jKUY9pM7V ekGCt8C8Sblu1iU6Ev502N6edw1es5xmqXcrw1tKzWr2iSCi7AhYS53adOkhv8Y6 dJ2ueIGz35E/rmSoPIi8JH1H1F44lKyGvx7nFxAlk6EDlwmhbzd3f0o91AUtZWKk WkHXAhaY1Q3b7321rBXOMso61ouUBQi9GGmatBFGU5Z7+0DwT5YLdpI2IOI+9NVM betoMtKdKMYTZhcSlboNdmkEgwIKp3f+5aj0y8YEy7F74xike6vVcG03QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2z6nfHn+sgBkX9TI67H//wBOvsMB8GA1UdIwQY MBaAFAE8dBMllxYs2y3WN2Cr2ZceML9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTZjODAtMDNhMS00YTRjLTkxY2Yt MDY4Yjc3ZTkwM2EwLzEvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9jYTZjODAtMDNhMS00YTRjLTkxY2YtMDY4Yjc3ZTkwM2Ew LzEvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHewQ/rwX 7B2bi8LsWGGVJTdIpRNWRnbwNWSdRYvSSIWU7QWUA7O8iJmd/W3yVWu3FFfPuUpf PdF7tkXVhn3gvuSlnBs4bx8PMEHtIWq8vrjBHdcMxQYVKDqrieMMIB6oxlp/ckuV pJIRBSIIedMc+KIvb9a0jo1Jg6MO/zX/0z1HEFUNUMPMVFe3JgU3X0FjjEq1FbJK DG4UH0605p48Xsr1i4fBet6NJAHxRO0BWrz/86c5e5HFBpAa75tH8baW0US+VuI9 E+sRxeOfn43hH1/VeiX2WdpBu1lS/eLbOAz9iAlYfLUh/x96yW1njmhyo1pc/Kxw EfZ52MfT7cLc4Q== -----END CERTIFICATE-----Generated at Tue Dec 16 04:03:38 2025 by rpki-client