This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json) Hash identifier: z/FpUQ10pZyXVJgro+8BhpaCCsaxFgssoN1eYun0P4U= Subject key identifier: 08:AD:9F:EB:4F:DC:35:84:EB:69:FC:AD:B1:E7:E2:39:A6:E4:79:01 Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82 Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082 Certificate serial: 019B45132DC07B379968F2D24E0BD1C26932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft Manifest number: 128C Signing time: Mon 22 Dec 2025 08:00:43 +0000 Manifest this update: Mon 22 Dec 2025 08:00:43 +0000 Manifest next update: Tue 23 Dec 2025 08:00:43 +0000 Files and hashes: 1: FSst80BStcOZoxcVEEn7HUNlaMg.roa (hash: MkzJ0Sac3ZN5iWdcIOjWwvYuR5zj6qypIoySO/md3YQ=) 2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: 90zUMByrv6S52ZXDepgGregX86WdlyHROyHO1EpbkBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:2d:c0:7b:37:99:68:f2:d2:4e:0b:d1:c2:69:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082 Validity Not Before: Dec 22 08:00:43 2025 GMT Not After : Dec 23 08:00:43 2025 GMT Subject: CN=08ad9feb4fdc3584eb69fcadb1e7e239a6e47901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:1d:bd:15:06:54:b6:7f:a0:00:52:c7:ae: 42:f0:ce:9c:18:7e:7e:dd:63:16:cf:1e:59:29:7d: 66:9e:d6:f1:77:3d:de:93:4d:54:19:4b:92:8f:de: e9:42:af:1f:5b:36:5c:9a:71:3d:7e:b7:ea:42:a5: bb:ee:16:24:2f:d5:f8:9c:59:a2:f3:2c:40:e7:cc: 10:89:54:80:31:30:22:20:c3:77:fd:27:09:55:93: 13:43:ac:99:cc:3f:33:e5:29:75:d6:7b:52:a7:99: 51:65:fa:c2:1d:1d:36:7e:8e:25:58:b1:f9:c6:03: a7:86:37:75:97:be:0e:52:7e:cc:05:1c:22:b6:45: 2d:27:59:69:6c:93:a8:52:73:d2:f5:03:5b:73:bb: 60:d6:6b:d1:fe:68:9f:42:28:89:97:07:2e:79:5c: 26:ad:11:d2:34:bc:10:9d:74:cb:73:3d:34:16:4f: 65:07:b6:48:ec:f9:51:f7:bd:d4:a8:f3:68:89:5e: c6:86:2f:01:4a:9d:3b:9f:6f:3b:df:ba:18:dd:7b: 2d:cd:43:c7:91:f4:fa:05:74:ed:d9:70:80:40:37: 04:89:ff:21:53:18:af:b8:89:e9:45:ae:b0:a9:9a: e5:20:31:77:c3:4a:75:f1:2e:6b:0c:f1:1c:ca:1e: 47:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AD:9F:EB:4F:DC:35:84:EB:69:FC:AD:B1:E7:E2:39:A6:E4:79:01 X509v3 Authority Key Identifier: keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f8:a7:8c:a9:ab:af:1c:44:3c:1d:e2:69:c7:93:f3:ea:ea: 99:7e:2e:de:f5:8b:87:15:71:14:2e:7e:95:79:ab:8e:00:58: 13:db:a0:b4:ff:27:86:73:39:4e:59:55:66:8f:ce:57:97:d0: 40:42:4f:85:3c:26:97:e0:8b:96:b2:ae:e0:c6:24:bb:0d:c7: 18:53:47:18:7f:bd:d7:08:ec:6f:2c:d6:77:31:b2:de:85:9d: f8:e9:56:ce:14:47:89:9a:31:c2:56:fb:ea:9f:e1:f4:63:6e: 6e:8d:09:c7:1d:61:03:8b:c3:2e:2f:16:31:29:a8:77:6c:48: ba:1c:86:de:a1:30:e8:26:72:6e:fd:4d:d6:6f:b3:1f:45:9c: 58:50:77:ca:aa:70:a1:4f:5a:cf:47:a5:ca:41:68:79:5f:4b: 38:90:a5:30:e6:bc:13:5a:16:ac:ab:9d:1a:10:4a:49:f8:9a: 06:f5:87:0b:ef:27:2d:a0:f6:10:f0:59:ed:9a:f3:b6:12:a3: fb:8e:54:67:19:8a:70:5e:d2:f2:8b:7b:74:ac:ab:5f:eb:eb: 91:77:12:e4:32:82:0f:fd:ce:27:f0:1a:98:a2:1e:5b:cc:ca: 67:66:4c:64:5c:0d:2d:e3:a7:8d:cb:30:22:7a:1f:da:2f:07: 11:1a:93:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFEy3AezeZaPLSTgvRwmkyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDAyZDZiYjg1YTk4NmJjODhkYmNkOTMzMjA5NDU0ZTVi NWUwODIwHhcNMjUxMjIyMDgwMDQzWhcNMjUxMjIzMDgwMDQzWjAzMTEwLwYDVQQD EygwOGFkOWZlYjRmZGMzNTg0ZWI2OWZjYWRiMWU3ZTIzOWE2ZTQ3OTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwYdvRUGVLZ/oABSx65C8M6cGH5+ 3WMWzx5ZKX1mntbxdz3ek01UGUuSj97pQq8fWzZcmnE9frfqQqW77hYkL9X4nFmi 8yxA58wQiVSAMTAiIMN3/ScJVZMTQ6yZzD8z5Sl11ntSp5lRZfrCHR02fo4lWLH5 xgOnhjd1l74OUn7MBRwitkUtJ1lpbJOoUnPS9QNbc7tg1mvR/mifQiiJlwcueVwm rRHSNLwQnXTLcz00Fk9lB7ZI7PlR973UqPNoiV7Ghi8BSp07n28737oY3XstzUPH kfT6BXTt2XCAQDcEif8hUxivuInpRa6wqZrlIDF3w0p18S5rDPEcyh5HvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAitn+tP3DWE62n8rbHn4jmm5HkBMB8GA1UdIwQY MBaAFK8ALWu4WphryI282TMglFTlteCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndBdGE3aGFtR3ZJamJ6Wk15Q1VWT1cxNElJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hMmVkYTItZTg4NS00NjQwLTljODQt ZDZlZjhlOTE0MzA3LzEvcndBdGE3aGFtR3ZJamJ6Wk15Q1VWT1cxNElJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9hMmVkYTItZTg4NS00NjQwLTljODQtZDZlZjhlOTE0MzA3 LzEvcndBdGE3aGFtR3ZJamJ6Wk15Q1VWT1cxNElJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/injKmr rxxEPB3iaceT8+rqmX4u3vWLhxVxFC5+lXmrjgBYE9ugtP8nhnM5TllVZo/OV5fQ QEJPhTwml+CLlrKu4MYkuw3HGFNHGH+91wjsbyzWdzGy3oWd+OlWzhRHiZoxwlb7 6p/h9GNubo0Jxx1hA4vDLi8WMSmod2xIuhyG3qEw6CZybv1N1m+zH0WcWFB3yqpw oU9az0elykFoeV9LOJClMOa8E1oWrKudGhBKSfiaBvWHC+8nLaD2EPBZ7ZrzthKj +45UZxmKcF7S8ot7dKyrX+vrkXcS5DKCD/3OJ/AamKIeW8zKZ2ZMZFwNLeOnjcsw Inof2i8HERqTJA== -----END CERTIFICATE-----Generated at Mon Dec 22 09:42:21 2025 by rpki-client