This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft File: aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json) Hash identifier: iTDdtZip+OWln7s7W4rlAmISNpOL2lTLRdlIqfBg+aE= Subject key identifier: BC:88:AD:1E:D0:8A:A5:4F:5A:D6:EE:9B:C1:64:83:AF:A4:3E:A6:F7 Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10 Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410 Certificate serial: 019AACB94A763CB7AF7FC154A0BEAD95B325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft Manifest number: 0EE5 Signing time: Sat 22 Nov 2025 18:00:15 +0000 Manifest this update: Sat 22 Nov 2025 18:00:15 +0000 Manifest next update: Sun 23 Nov 2025 18:00:15 +0000 Files and hashes: 1: 2G8qCYpoVtySgAcA2OeugnFiYio.roa (hash: 4y9U4HthBDvGesI1zzlV+POhFy0POzpyZENkuQTD5Jg=) 2: AdYUGZij8DmxO3Ha06S--PKOAmc.roa (hash: VsJTbLEE5i06CunQsxcyU7AB2xtGSY0X2LHBs6SuerI=) 3: YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa (hash: 8I0SGpAqHedSzWDkPjUCH1zMcRg8of85FMjYoHGNCe0=) 4: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: FdVF2mPD1xzcQlHIkU2NQQMdkdNQnnPAjFAAoJv6SIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:4a:76:3c:b7:af:7f:c1:54:a0:be:ad:95:b3:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410 Validity Not Before: Nov 22 18:00:15 2025 GMT Not After : Nov 23 18:00:15 2025 GMT Subject: CN=bc88ad1ed08aa54f5ad6ee9bc16483afa43ea6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:66:da:d1:86:38:6d:a9:3f:ef:c8:6a:92: 16:1a:49:50:01:ed:4f:b7:f1:7e:cd:9d:f7:7e:dd: 52:e5:d1:89:cb:01:76:3c:e2:e2:32:2f:f4:52:d3: 6d:dc:82:0c:b1:5d:0e:f4:fb:2a:4a:b4:56:1d:f1: 16:6e:c9:82:cc:c4:c2:c5:7a:49:3c:39:33:b1:a5: ea:e6:1a:00:80:d0:da:aa:db:a3:19:1e:3f:00:65: c7:18:28:cf:6b:c8:66:ba:d8:66:6b:5c:9f:a2:58: f1:40:3d:e8:77:2b:31:9f:24:f1:61:c4:02:2c:82: e0:ad:9d:dc:33:eb:f0:ed:bd:7d:86:bc:f4:6a:f6: 96:d3:c0:0c:79:63:23:d9:00:2b:05:7a:14:86:45: 74:21:b6:cb:58:c3:e5:df:49:50:06:0e:04:bd:55: 44:f2:88:ca:0f:b9:a8:92:45:19:49:bc:be:d6:9b: 2a:00:31:9e:13:1c:40:27:7b:cb:3d:99:7e:d7:6b: aa:69:b9:25:b8:43:4d:9e:b0:be:55:5a:5d:78:ad: b5:02:a8:b6:1c:ed:f1:56:a5:a0:37:ef:ce:35:fb: ea:15:57:ed:5e:7f:98:44:b9:dc:dc:0b:8e:35:46: d3:6d:34:89:28:1f:9d:eb:f7:1d:86:24:8e:e5:f2: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:88:AD:1E:D0:8A:A5:4F:5A:D6:EE:9B:C1:64:83:AF:A4:3E:A6:F7 X509v3 Authority Key Identifier: keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c0:74:74:08:3e:ae:3c:58:43:36:ea:c5:c5:7f:52:2c:6f: 96:a4:78:ea:e9:b9:b2:9a:24:7b:c4:af:7b:3d:f9:74:be:1e: c5:b2:0a:79:75:0e:b7:6b:9a:46:0b:1c:51:d2:6d:18:08:cb: 8e:20:05:15:8e:fb:4d:25:f2:e3:d4:cc:29:3a:0b:7c:a3:6d: 4f:f7:2c:58:16:f7:9c:b6:1a:ad:b0:10:88:76:af:b3:bc:83: 26:37:ec:f7:5c:ba:69:0c:d4:4c:9c:69:b6:6c:dc:e6:db:07: bc:10:7d:7e:31:24:22:28:c0:0b:47:a7:0e:b7:eb:e1:ff:ea: b1:a6:63:43:ba:38:b6:0e:39:fb:01:d8:e3:fc:da:33:3d:71: c1:92:ee:73:65:e9:4e:0a:3a:a7:6c:bb:fa:16:db:14:f6:0b: 12:5c:32:41:7f:15:6c:91:9d:76:9b:19:2c:1a:7d:77:a0:58: d6:2f:10:b7:97:0e:52:9b:4b:2d:4b:06:f7:af:5c:b2:86:74: 9f:02:6c:e7:b9:8f:ea:fc:e7:a6:85:60:80:ea:50:71:b7:98: fe:fd:f2:bb:07:8e:af:af:6c:7a:3d:cd:e0:73:c0:eb:34:1b: 39:4d:b4:69:ba:43:8b:74:43:f2:d9:33:a1:64:6f:00:6a:43: 88:21:4d:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsuUp2PLevf8FUoL6tlbMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzZhZGY4ZWVjYWJjMTA1MmUxZjc4M2QzYmNlNGExYzVk YjU0MTAwHhcNMjUxMTIyMTgwMDE1WhcNMjUxMTIzMTgwMDE1WjAzMTEwLwYDVQQD EyhiYzg4YWQxZWQwOGFhNTRmNWFkNmVlOWJjMTY0ODNhZmE0M2VhNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Bm2tGGOG2pP+/IapIWGklQAe1P t/F+zZ33ft1S5dGJywF2POLiMi/0UtNt3IIMsV0O9PsqSrRWHfEWbsmCzMTCxXpJ PDkzsaXq5hoAgNDaqtujGR4/AGXHGCjPa8hmuthma1yfoljxQD3odysxnyTxYcQC LILgrZ3cM+vw7b19hrz0avaW08AMeWMj2QArBXoUhkV0IbbLWMPl30lQBg4EvVVE 8ojKD7mokkUZSby+1psqADGeExxAJ3vLPZl+12uqabkluENNnrC+VVpdeK21Aqi2 HO3xVqWgN+/ONfvqFVftXn+YRLnc3AuONUbTbTSJKB+d6/cdhiSO5fKS7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyIrR7QiqVPWtbum8Fkg6+kPqb3MB8GA1UdIwQY MBaAFGjGrfjuyrwQUuH3g9O85KHF21QQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lNWQ4NjktMzBiYy00NDY1LWJkNmYt NDc3M2I2NjY5NzE2LzEvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9lNWQ4NjktMzBiYy00NDY1LWJkNmYtNDc3M2I2NjY5NzE2 LzEvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsB0dAg+ rjxYQzbqxcV/UixvlqR46um5spoke8Svez35dL4exbIKeXUOt2uaRgscUdJtGAjL jiAFFY77TSXy49TMKToLfKNtT/csWBb3nLYarbAQiHavs7yDJjfs91y6aQzUTJxp tmzc5tsHvBB9fjEkIijAC0enDrfr4f/qsaZjQ7o4tg45+wHY4/zaMz1xwZLuc2Xp Tgo6p2y7+hbbFPYLElwyQX8VbJGddpsZLBp9d6BY1i8Qt5cOUptLLUsG969csoZ0 nwJs57mP6vznpoVggOpQcbeY/v3yuweOr69sej3N4HPA6zQbOU20abpDi3RD8tkz oWRvAGpDiCFNvQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:39:22 2025 by rpki-client