This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/610b54-4174-4605-8c56-b8a3e9cfeaf7/1/atwsIKz5mPCjL-cp_bLMnRoBP9I.mft File: atwsIKz5mPCjL-cp_bLMnRoBP9I.mft (raw, json) Hash identifier: eZihubgMUHPiOuhY/UWNyW7Ey+1PQ8BFwMocx0eJg9M= Subject key identifier: 30:9B:6F:4E:F2:89:BB:EF:C3:7F:CB:E8:20:6E:CC:9F:62:B0:C7:D5 Authority key identifier: 6A:DC:2C:20:AC:F9:98:F0:A3:2F:E7:29:FD:B2:CC:9D:1A:01:3F:D2 Certificate issuer: /CN=6adc2c20acf998f0a32fe729fdb2cc9d1a013fd2 Certificate serial: 019B5A1AE5321535BC5A471634269D2FD852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atwsIKz5mPCjL-cp_bLMnRoBP9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/610b54-4174-4605-8c56-b8a3e9cfeaf7/1/atwsIKz5mPCjL-cp_bLMnRoBP9I.mft Manifest number: 78 Signing time: Fri 26 Dec 2025 10:01:10 +0000 Manifest this update: Fri 26 Dec 2025 10:01:10 +0000 Manifest next update: Sat 27 Dec 2025 10:01:10 +0000 Files and hashes: 1: atwsIKz5mPCjL-cp_bLMnRoBP9I.crl (hash: Ge4LQz7Sr8Ps4z6lMCaDYMvjMFqO71y5RZ9QmFguXrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/610b54-4174-4605-8c56-b8a3e9cfeaf7/1/atwsIKz5mPCjL-cp_bLMnRoBP9I.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/610b54-4174-4605-8c56-b8a3e9cfeaf7/1/atwsIKz5mPCjL-cp_bLMnRoBP9I.mft rsync://rpki.ripe.net/repository/DEFAULT/atwsIKz5mPCjL-cp_bLMnRoBP9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:e5:32:15:35:bc:5a:47:16:34:26:9d:2f:d8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6adc2c20acf998f0a32fe729fdb2cc9d1a013fd2 Validity Not Before: Dec 26 10:01:10 2025 GMT Not After : Dec 27 10:01:10 2025 GMT Subject: CN=309b6f4ef289bbefc37fcbe8206ecc9f62b0c7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:eb:95:63:c2:05:a5:cb:49:6a:66:d7:f7:ff: 38:98:1b:f0:3c:6c:13:43:88:ac:3f:bd:a0:ac:9a: e6:1a:d9:4e:e5:c1:42:66:78:cd:77:63:ae:21:da: 8e:6e:7c:a8:5e:55:f1:b9:ef:7b:46:c9:ab:5f:41: 63:70:e1:17:45:aa:8a:b4:73:67:3d:b4:8d:23:31: 7c:52:57:ca:0b:43:85:bf:d9:ae:05:a2:69:18:8e: a6:6a:1e:1d:87:a5:35:07:20:01:56:d1:90:d6:5d: aa:75:99:3f:22:c1:f7:72:b1:09:65:85:18:19:66: 10:e4:1d:23:e5:93:02:3f:5b:d2:44:66:b3:28:b8: 6d:d1:21:14:6c:64:36:0d:85:1e:86:6d:73:35:b7: 61:6f:ec:d6:66:c6:d2:bb:bb:23:95:b8:6a:f6:a1: 6b:01:99:fc:4f:5f:bd:a3:d6:4a:bf:ee:43:8d:2f: f3:39:87:3a:11:72:fa:f9:5c:70:95:0b:c8:2c:4f: b6:29:66:41:a0:06:a1:7c:61:f8:cc:3a:62:66:2d: 74:40:63:73:b7:6d:89:6a:b7:40:28:35:e7:f7:c7: 2b:10:f1:29:4b:50:76:8e:16:f1:6a:d3:89:d7:94: d1:e0:78:99:e9:a9:e4:39:13:8c:2a:03:04:a5:a3: b7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9B:6F:4E:F2:89:BB:EF:C3:7F:CB:E8:20:6E:CC:9F:62:B0:C7:D5 X509v3 Authority Key Identifier: keyid:6A:DC:2C:20:AC:F9:98:F0:A3:2F:E7:29:FD:B2:CC:9D:1A:01:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atwsIKz5mPCjL-cp_bLMnRoBP9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/610b54-4174-4605-8c56-b8a3e9cfeaf7/1/atwsIKz5mPCjL-cp_bLMnRoBP9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/610b54-4174-4605-8c56-b8a3e9cfeaf7/1/atwsIKz5mPCjL-cp_bLMnRoBP9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c9:c7:cb:07:2b:1f:6e:6d:80:4d:38:3f:f9:df:a2:77:e7: fb:08:bb:34:03:1b:0d:9e:6e:10:98:65:62:25:90:f3:f9:f2: 48:76:30:8e:e1:ce:4c:ed:d9:24:f6:35:c5:81:1f:a6:ae:fb: 33:08:6c:84:f0:21:9a:19:5b:98:45:ab:dc:d7:43:25:f5:53: d9:3f:3b:9f:5e:c1:4f:08:55:25:4f:0f:22:27:60:0c:65:28: 29:d2:f3:74:88:46:1e:a4:4e:50:cd:a5:b1:95:b6:00:02:08: a3:9f:00:b7:ca:f9:93:54:3e:8a:9d:67:b9:04:e0:ac:43:dd: 92:d1:a0:aa:45:41:0e:3a:4c:d3:60:30:cd:5e:ff:6b:43:0a: 62:ba:e8:79:58:fe:78:00:94:b1:dd:cb:70:46:a6:c0:42:44: 1c:3c:7c:ef:95:b4:f1:3b:c8:ad:db:31:06:e5:4a:6e:3e:a6: c2:56:32:7d:16:36:e4:f1:9d:26:72:6b:1f:1f:d6:ca:e2:8e: c3:29:21:14:ed:34:be:bc:7d:37:e4:32:44:d8:8a:b9:0f:5d: 22:04:a4:ef:77:a0:55:5f:a6:28:fe:3c:b2:98:46:5a:a3:fa: a8:52:93:4a:37:5c:f3:15:5d:74:5a:33:4d:1d:53:17:b0:fd: 99:32:0f:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGuUyFTW8WkcWNCadL9hSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZGMyYzIwYWNmOTk4ZjBhMzJmZTcyOWZkYjJjYzlkMWEw MTNmZDIwHhcNMjUxMjI2MTAwMTEwWhcNMjUxMjI3MTAwMTEwWjAzMTEwLwYDVQQD EygzMDliNmY0ZWYyODliYmVmYzM3ZmNiZTgyMDZlY2M5ZjYyYjBjN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuuVY8IFpctJambX9/84mBvwPGwT Q4isP72grJrmGtlO5cFCZnjNd2OuIdqObnyoXlXxue97RsmrX0FjcOEXRaqKtHNn PbSNIzF8UlfKC0OFv9muBaJpGI6mah4dh6U1ByABVtGQ1l2qdZk/IsH3crEJZYUY GWYQ5B0j5ZMCP1vSRGazKLht0SEUbGQ2DYUehm1zNbdhb+zWZsbSu7sjlbhq9qFr AZn8T1+9o9ZKv+5DjS/zOYc6EXL6+VxwlQvILE+2KWZBoAahfGH4zDpiZi10QGNz t22JardAKDXn98crEPEpS1B2jhbxatOJ15TR4HiZ6ankOROMKgMEpaO3dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCbb07yibvvw3/L6CBuzJ9isMfVMB8GA1UdIwQY MBaAFGrcLCCs+Zjwoy/nKf2yzJ0aAT/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXR3c0lLejVtUENqTC1jcF9iTE1uUm9CUDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MTBiNTQtNDE3NC00NjA1LThjNTYt YjhhM2U5Y2ZlYWY3LzEvYXR3c0lLejVtUENqTC1jcF9iTE1uUm9CUDlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82MTBiNTQtNDE3NC00NjA1LThjNTYtYjhhM2U5Y2ZlYWY3 LzEvYXR3c0lLejVtUENqTC1jcF9iTE1uUm9CUDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsnHywcr H25tgE04P/nfonfn+wi7NAMbDZ5uEJhlYiWQ8/nySHYwjuHOTO3ZJPY1xYEfpq77 MwhshPAhmhlbmEWr3NdDJfVT2T87n17BTwhVJU8PIidgDGUoKdLzdIhGHqROUM2l sZW2AAIIo58At8r5k1Q+ip1nuQTgrEPdktGgqkVBDjpM02AwzV7/a0MKYrroeVj+ eACUsd3LcEamwEJEHDx875W08TvIrdsxBuVKbj6mwlYyfRY25PGdJnJrHx/WyuKO wykhFO00vrx9N+QyRNiKuQ9dIgSk73egVV+mKP48sphGWqP6qFKTSjdc8xVddFoz TR1TF7D9mTIPcw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:17 2025 by rpki-client