This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft File: AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json) Hash identifier: aXI5p0r5VxYLuqpNhOeMLrpaEVqE7PqSLUfd20P3/No= Subject key identifier: 46:FD:1E:C7:13:71:98:F9:5E:EE:47:1F:17:11:FB:C3:08:17:74:61 Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18 Certificate issuer: /CN=00cb6701ff829394db69ce67c30ad8735f126018 Certificate serial: 019B194D252522C18A6D49446AF56D3AB429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft Manifest number: 0459 Signing time: Sat 13 Dec 2025 20:00:44 +0000 Manifest this update: Sat 13 Dec 2025 20:00:44 +0000 Manifest next update: Sun 14 Dec 2025 20:00:44 +0000 Files and hashes: 1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: NhhGgMGYbrmbQIGpAE2+4FqQg0hE1spCottWao1fDxY=) 2: VHRVXn6aDGinTjiE7BA05enfH2Q.roa (hash: HWebi466PogM3Mfy4s/kKB9Ol8sTTEX1NAe07QPFw7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:25:25:22:c1:8a:6d:49:44:6a:f5:6d:3a:b4:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018 Validity Not Before: Dec 13 20:00:44 2025 GMT Not After : Dec 14 20:00:44 2025 GMT Subject: CN=46fd1ec7137198f95eee471f1711fbc308177461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:48:bf:c3:eb:3a:20:d8:98:b5:f3:f4:91: 2d:64:f9:5c:ca:71:e7:1f:8b:04:e6:df:ef:10:4d: 2c:74:fb:7c:dc:ab:ce:82:3a:ca:13:69:c4:fc:f2: e7:59:e2:67:c3:00:4c:30:b3:65:8b:c9:88:54:66: 95:b3:96:d1:d8:7e:ce:95:16:bb:0b:42:c6:e1:48: c9:7f:00:42:84:72:95:5e:bf:d3:26:b2:aa:cb:8c: c0:63:cf:e1:fa:84:ee:15:36:31:39:3f:a2:06:61: bb:8d:6f:32:3a:59:30:3f:19:61:8c:05:34:d8:e8: 5c:bc:47:e2:0a:49:21:27:77:d6:dc:6f:40:26:6c: d5:bb:5e:6e:df:9d:f8:61:0d:16:72:12:8b:98:5b: d7:e1:bf:c9:e5:8d:50:54:c4:ad:19:24:44:8a:ce: 14:79:17:e4:1a:86:d5:e6:f6:8f:9e:c2:95:35:6a: 74:f6:40:10:94:c9:01:22:d9:4b:1b:f4:ed:25:67: ac:2e:7b:72:34:aa:2e:14:e9:49:e3:62:a6:73:12: b1:60:18:6e:55:b5:1e:51:03:f3:30:2f:72:b5:82: ae:c1:e0:62:9f:81:0f:1f:c8:d1:0f:0b:eb:3e:b4: 6e:b1:01:e2:d9:fa:14:c1:2f:a9:36:4d:92:99:fe: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FD:1E:C7:13:71:98:F9:5E:EE:47:1F:17:11:FB:C3:08:17:74:61 X509v3 Authority Key Identifier: keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a4:cb:f9:0f:f0:14:c5:7d:f1:82:0d:9b:11:2b:3d:fb:41: 5e:3e:ef:98:b9:54:0e:07:10:8d:ba:01:92:56:6f:55:b9:7b: 2c:05:6c:3c:ed:22:3b:7b:9a:c0:05:de:25:94:85:20:47:5b: 0b:6d:dc:64:81:0d:1f:3b:b2:8b:e0:7d:ee:39:dd:f8:91:d9: 46:d5:11:1d:cf:54:9d:be:9f:0a:50:73:f5:9b:dd:2a:60:89: e1:58:f9:7b:33:7c:6d:2b:a5:9f:47:61:a3:e7:6b:e7:92:49: 77:21:41:88:ce:a8:67:05:70:db:f4:d6:81:8f:41:c2:9f:bc: 92:fe:12:12:60:be:5a:6b:f0:9a:4b:5e:4f:37:52:7b:23:6c: 3a:38:f1:35:41:8f:dd:de:9a:e2:3d:a4:6c:32:be:01:8b:9e: 97:cf:d8:7e:42:3f:41:ca:8e:42:e7:38:42:b6:1c:a9:47:dc: f2:ed:40:4b:7a:75:1d:86:9f:19:a4:de:e1:df:b8:6b:32:38: bf:e3:df:5a:49:1f:d3:fe:1c:8c:80:73:d6:ec:f0:45:8c:23: 92:34:2f:43:7f:3b:52:d3:b3:7e:67:cf:ac:36:a5:c7:f4:48: c9:74:fb:9e:09:3b:e5:f4:68:dd:c4:ab:6b:26:a9:d5:a4:78: 35:8d:f5:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTSUlIsGKbUlEavVtOrQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2I2NzAxZmY4MjkzOTRkYjY5Y2U2N2MzMGFkODczNWYx MjYwMTgwHhcNMjUxMjEzMjAwMDQ0WhcNMjUxMjE0MjAwMDQ0WjAzMTEwLwYDVQQD Eyg0NmZkMWVjNzEzNzE5OGY5NWVlZTQ3MWYxNzExZmJjMzA4MTc3NDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLxIv8PrOiDYmLXz9JEtZPlcynHn H4sE5t/vEE0sdPt83KvOgjrKE2nE/PLnWeJnwwBMMLNli8mIVGaVs5bR2H7OlRa7 C0LG4UjJfwBChHKVXr/TJrKqy4zAY8/h+oTuFTYxOT+iBmG7jW8yOlkwPxlhjAU0 2OhcvEfiCkkhJ3fW3G9AJmzVu15u3534YQ0WchKLmFvX4b/J5Y1QVMStGSREis4U eRfkGobV5vaPnsKVNWp09kAQlMkBItlLG/TtJWesLntyNKouFOlJ42KmcxKxYBhu VbUeUQPzMC9ytYKuweBin4EPH8jRDwvrPrRusQHi2foUwS+pNk2Smf6ZlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEb9HscTcZj5Xu5HHxcR+8MIF3RhMB8GA1UdIwQY MBaAFADLZwH/gpOU22nOZ8MK2HNfEmAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjct MjliM2UxMTFkY2VjLzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjctMjliM2UxMTFkY2Vj LzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqTL+Q/w FMV98YINmxErPftBXj7vmLlUDgcQjboBklZvVbl7LAVsPO0iO3uawAXeJZSFIEdb C23cZIENHzuyi+B97jnd+JHZRtURHc9Unb6fClBz9ZvdKmCJ4Vj5ezN8bSuln0dh o+dr55JJdyFBiM6oZwVw2/TWgY9Bwp+8kv4SEmC+WmvwmkteTzdSeyNsOjjxNUGP 3d6a4j2kbDK+AYuel8/YfkI/QcqOQuc4QrYcqUfc8u1AS3p1HYafGaTe4d+4azI4 v+PfWkkf0/4cjIBz1uzwRYwjkjQvQ387UtOzfmfPrDalx/RIyXT7ngk75fRo3cSr ayap1aR4NY317Q== -----END CERTIFICATE-----Generated at Sun Dec 14 00:08:14 2025 by rpki-client