This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft File: At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json) Hash identifier: nVktMIdLUlHl1+0ropzc65QThwqA1SQQNihFj+cCsEE= Subject key identifier: BD:82:C7:C6:1E:84:DE:58:A5:27:DA:EA:36:B0:B8:62:C2:78:F8:5F Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1 Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1 Certificate serial: 019B2DE731311B04908554E2101BD70A5051 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 20:01:24 +0000 Manifest this update: Wed 17 Dec 2025 20:01:24 +0000 Manifest next update: Thu 18 Dec 2025 20:01:24 +0000 Files and hashes: 1: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: nn4D0QjoRF0aQSoqvQYCFg8AnviOjPPigsOpSOQN/S4=) 2: tHCbVYNtXVasJFwcwAVRKNWN-3Q.roa (hash: Ww9of/U+//ROw//qlU2ic3DOqjTFR4h9CkZcVWZJb4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 20:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e7:31:31:1b:04:90:85:54:e2:10:1b:d7:0a:50:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1 Validity Not Before: Dec 17 20:01:24 2025 GMT Not After : Dec 18 20:01:24 2025 GMT Subject: CN=bd82c7c61e84de58a527daea36b0b862c278f85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0a:5c:a0:dd:1a:b2:35:06:6a:a5:24:61:43: 89:39:68:86:de:7f:f7:f9:5d:c5:ac:18:f4:1c:66: ac:b3:f6:a1:5a:57:9b:74:ba:91:3d:04:26:30:b7: 70:e2:7f:ba:1d:40:85:cc:5d:ec:58:6d:75:da:bb: 05:8f:27:6e:27:a9:04:dd:a5:d8:51:29:19:e1:3d: b9:9b:d7:fa:61:e2:96:76:f8:4f:f0:4f:bf:4f:aa: 90:6e:04:97:2d:ce:ae:8e:ac:24:01:b0:c8:b2:1a: e0:40:a9:05:5a:79:0c:80:af:13:3d:74:21:4c:70: 6b:19:8d:92:b7:8d:7d:56:e9:49:8d:95:df:f9:4d: 38:35:a1:71:e8:5d:04:ad:c3:54:15:7f:20:44:76: bd:77:38:99:d6:ac:00:bf:f4:d9:0a:b1:e3:41:8c: 9f:36:c3:2d:67:ea:bd:a6:be:55:e5:a8:07:e4:1a: e5:78:77:79:9f:d3:fb:d3:ac:ca:25:ae:2f:de:14: 59:4c:6c:e7:ef:8e:ea:36:83:5f:2e:89:2b:70:95: bb:73:15:05:f3:6d:59:8f:de:65:cb:4e:44:a1:fd: ef:fa:a3:9e:12:d2:07:79:d9:57:14:15:9b:ba:18: 7f:49:31:b0:e8:d5:2b:5e:8c:2e:b0:32:1e:f6:04: db:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:82:C7:C6:1E:84:DE:58:A5:27:DA:EA:36:B0:B8:62:C2:78:F8:5F X509v3 Authority Key Identifier: keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:89:b8:29:f0:b6:a0:c0:83:30:93:7b:7e:11:92:15:ec:98: 3e:29:41:52:b6:f9:ff:28:e7:01:64:ae:17:89:85:21:87:ab: ab:31:81:30:a3:e6:5d:64:b5:2d:47:54:bc:e1:c8:d3:93:42: 1d:62:50:f9:c4:eb:59:b7:99:af:cb:9d:ce:16:6a:37:ef:6a: 5c:be:36:33:c9:68:c9:53:4a:7a:4f:02:13:38:3a:7a:bf:a0: ab:18:fe:61:37:4c:e9:97:11:7a:9c:09:cc:e4:79:cc:45:a9: 63:ab:dd:9d:b0:01:7f:ed:2c:c0:c6:26:c9:ee:53:18:0f:0e: 72:ad:77:db:27:76:e6:b2:04:d2:2b:2e:77:2c:90:5d:89:39: ca:60:e4:75:f4:7e:c9:98:ac:c3:17:78:51:b8:4b:f0:52:10: 4c:09:ca:fc:dc:6f:f9:d9:db:4c:e0:b8:c5:01:59:be:f8:4e: a6:59:6f:d2:16:bf:1b:e8:7d:6d:21:ef:9b:47:c2:21:02:66: 2a:a6:01:2d:05:70:d6:50:4f:c6:62:29:83:d7:07:e3:ae:42: 87:f3:fc:34:48:86:ef:06:8b:e2:c7:e1:0b:cd:05:56:4c:e2: ab:b6:63:e4:37:24:05:4f:62:50:18:5c:d8:a5:4e:50:a5:6c: 3c:10:85:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5zExGwSQhVTiEBvXClBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZGY4MTI2ODgyOTMwMWYzZDY5ZWI5NmY4YWM2MTdmYTI1 MjU2YTEwHhcNMjUxMjE3MjAwMTI0WhcNMjUxMjE4MjAwMTI0WjAzMTEwLwYDVQQD EyhiZDgyYzdjNjFlODRkZTU4YTUyN2RhZWEzNmIwYjg2MmMyNzhmODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gpcoN0asjUGaqUkYUOJOWiG3n/3 +V3FrBj0HGass/ahWlebdLqRPQQmMLdw4n+6HUCFzF3sWG112rsFjyduJ6kE3aXY USkZ4T25m9f6YeKWdvhP8E+/T6qQbgSXLc6ujqwkAbDIshrgQKkFWnkMgK8TPXQh THBrGY2St419VulJjZXf+U04NaFx6F0ErcNUFX8gRHa9dziZ1qwAv/TZCrHjQYyf NsMtZ+q9pr5V5agH5BrleHd5n9P706zKJa4v3hRZTGzn747qNoNfLokrcJW7cxUF 821Zj95ly05Eof3v+qOeEtIHedlXFBWbuhh/STGw6NUrXowusDIe9gTbowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2Cx8YehN5YpSfa6jawuGLCePhfMB8GA1UdIwQY MBaAFALfgSaIKTAfPWnrlvisYX+iUlahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wNjE3MTYtMDljNi00ODM4LWIxY2It M2U4NmQyYzI5OTY5LzEvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8wNjE3MTYtMDljNi00ODM4LWIxY2ItM2U4NmQyYzI5OTY5 LzEvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbom4KfC2 oMCDMJN7fhGSFeyYPilBUrb5/yjnAWSuF4mFIYerqzGBMKPmXWS1LUdUvOHI05NC HWJQ+cTrWbeZr8udzhZqN+9qXL42M8loyVNKek8CEzg6er+gqxj+YTdM6ZcRepwJ zOR5zEWpY6vdnbABf+0swMYmye5TGA8Ocq132yd25rIE0isudyyQXYk5ymDkdfR+ yZiswxd4UbhL8FIQTAnK/Nxv+dnbTOC4xQFZvvhOpllv0ha/G+h9bSHvm0fCIQJm KqYBLQVw1lBPxmIpg9cH465Ch/P8NEiG7waL4sfhC80FVkziq7Zj5DckBU9iUBhc 2KVOUKVsPBCFEg== -----END CERTIFICATE-----Generated at Thu Dec 18 05:53:26 2025 by rpki-client