This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json) Hash identifier: Hlc4qX93cn7rjj4U/mmzSiWUlsTyt+Tygd2FWi+FfUQ= Subject key identifier: 6A:81:62:B8:77:D0:25:02:83:85:AA:F6:93:57:26:E2:C8:80:2D:C5 Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98 Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398 Certificate serial: 019AFC5551C8F85E6258EF196E09A3A9E2D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft Manifest number: E0 Signing time: Mon 08 Dec 2025 05:00:40 +0000 Manifest this update: Mon 08 Dec 2025 05:00:40 +0000 Manifest next update: Tue 09 Dec 2025 05:00:40 +0000 Files and hashes: 1: A_iHhKALil4lTEQzAUwPF3mIEBw.roa (hash: foFKLdP+k5Z9u1b7IqZhZYmzZ2C3HRJY7iqeg2B9yu0=) 2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: sFlRQwagJLHXTWMMEGRdRc3BLzpfVhacg/5NNPqQvLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:55:51:c8:f8:5e:62:58:ef:19:6e:09:a3:a9:e2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398 Validity Not Before: Dec 8 05:00:40 2025 GMT Not After : Dec 9 05:00:40 2025 GMT Subject: CN=6a8162b877d025028385aaf6935726e2c8802dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:c7:c6:8e:e4:a0:a6:24:e0:11:f3:ac:b7: e5:69:fd:b3:0d:48:50:eb:f3:f7:37:6b:89:79:bc: 36:d9:35:36:f8:94:c4:50:86:f5:57:4a:63:74:df: 7e:43:0d:5a:10:06:bd:ad:bc:58:81:26:8c:32:90: 93:27:07:e8:db:65:72:60:32:1a:68:dd:c3:b5:ea: e2:9d:05:46:f8:06:fe:84:f9:09:16:bf:f2:e2:a3: f7:3d:0f:48:76:0e:23:08:50:6f:03:6e:17:10:58: 07:55:a1:25:e3:ad:c3:07:02:06:68:93:26:f0:0d: 0e:28:47:46:8b:92:ab:0f:ff:a8:54:93:3f:ad:4c: f6:a6:a5:ee:b3:83:e8:a2:c1:3c:23:67:4e:13:2e: 3a:d2:49:d7:00:7e:b3:46:2d:d4:31:2f:f1:4b:f2: 50:93:fe:ec:8f:65:be:d9:95:1a:bf:63:45:ae:79: 48:70:75:c1:27:82:04:3f:ab:d9:1c:34:38:68:15: 64:34:15:e7:ad:0a:aa:5f:c0:40:b1:b1:0a:43:98: 77:b5:51:d5:06:0a:1f:d6:72:43:13:1f:92:1f:bb: 8a:75:8a:2a:78:03:29:be:2e:ba:1f:ca:e2:75:f3: e8:5b:22:ec:9e:71:40:19:16:75:4f:cb:82:73:4c: f5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:81:62:B8:77:D0:25:02:83:85:AA:F6:93:57:26:E2:C8:80:2D:C5 X509v3 Authority Key Identifier: keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c4:c8:4b:11:52:81:b8:27:29:1f:cc:bb:c0:94:dd:60:74: 7f:d7:3c:a4:65:bd:83:69:df:61:bc:c4:b2:1f:fa:20:69:7a: d2:6b:ed:e4:ce:25:8e:2e:9a:b4:3c:3a:7f:65:71:cf:90:f8: c5:c3:59:74:e7:03:c3:a7:89:51:b3:fd:3a:3e:7c:39:c4:5b: a5:66:64:d7:d6:6b:e8:01:c1:29:f6:2f:4e:ac:47:bb:aa:17: ea:91:1b:e7:8f:04:53:3a:8f:e9:1f:f8:a7:0a:9f:2a:59:d0: 8d:ef:c1:17:18:be:bc:c4:32:06:19:1c:56:8a:e8:da:f4:fe: 35:4b:08:ec:09:24:ff:c5:52:74:c8:5c:7b:c9:d1:5d:4c:a6: 78:8c:d5:7c:2f:90:7f:8d:32:9f:0c:24:1b:e9:9b:ee:8d:ab: 2f:78:b8:aa:61:b6:80:b2:9d:09:62:44:f7:08:e5:02:a2:2e: 97:f7:41:88:11:19:fb:d6:94:c9:94:e3:76:de:3f:a2:b5:71: ed:9f:99:3a:4b:91:c4:11:9d:59:65:95:bc:47:56:35:dc:47: 84:61:e6:e6:a2:ee:ec:6b:f0:f7:97:a7:b5:d5:05:91:3e:dd: bc:5e:6b:4f:e0:e1:fe:a5:7a:25:c9:f4:bb:71:d7:f0:20:22: 50:d1:09:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8VVHI+F5iWO8ZbgmjqeLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZDM4YmQ0YzBkMGU5ZjMwMjgwMjE5ODRjZDgzNTU2MDQ3 ZjYzOTgwHhcNMjUxMjA4MDUwMDQwWhcNMjUxMjA5MDUwMDQwWjAzMTEwLwYDVQQD Eyg2YTgxNjJiODc3ZDAyNTAyODM4NWFhZjY5MzU3MjZlMmM4ODAyZGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjjHxo7koKYk4BHzrLflaf2zDUhQ 6/P3N2uJebw22TU2+JTEUIb1V0pjdN9+Qw1aEAa9rbxYgSaMMpCTJwfo22VyYDIa aN3DterinQVG+Ab+hPkJFr/y4qP3PQ9Idg4jCFBvA24XEFgHVaEl463DBwIGaJMm 8A0OKEdGi5KrD/+oVJM/rUz2pqXus4PoosE8I2dOEy460knXAH6zRi3UMS/xS/JQ k/7sj2W+2ZUav2NFrnlIcHXBJ4IEP6vZHDQ4aBVkNBXnrQqqX8BAsbEKQ5h3tVHV Bgof1nJDEx+SH7uKdYoqeAMpvi66H8ridfPoWyLsnnFAGRZ1T8uCc0z1zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqBYrh30CUCg4Wq9pNXJuLIgC3FMB8GA1UdIwQY MBaAFGrTi9TA0OnzAoAhmEzYNVYEf2OYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2Yzkt Y2U3MDAwNzRhN2ZjLzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2YzktY2U3MDAwNzRhN2Zj LzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsTISxFS gbgnKR/Mu8CU3WB0f9c8pGW9g2nfYbzEsh/6IGl60mvt5M4lji6atDw6f2Vxz5D4 xcNZdOcDw6eJUbP9Oj58OcRbpWZk19Zr6AHBKfYvTqxHu6oX6pEb548EUzqP6R/4 pwqfKlnQje/BFxi+vMQyBhkcVoro2vT+NUsI7Akk/8VSdMhce8nRXUymeIzVfC+Q f40ynwwkG+mb7o2rL3i4qmG2gLKdCWJE9wjlAqIul/dBiBEZ+9aUyZTjdt4/orVx 7Z+ZOkuRxBGdWWWVvEdWNdxHhGHm5qLu7Gvw95entdUFkT7dvF5rT+Dh/qV6Jcn0 u3HX8CAiUNEJEQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:42 2025 by rpki-client