This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft File: atCw5EzIalF2lUfCKteWGEtUsJI.mft (raw, json) Hash identifier: 8DVb47vhSVK/GxzLklIXrX7GgjYWSByXmsnJvLQwvok= Subject key identifier: 99:BA:9C:08:36:20:20:75:5F:6A:EF:B8:D0:A9:7C:40:A9:3B:BA:8C Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92 Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092 Certificate serial: 019B25BF8B7E9B9A33DB711AEAA7F40BE1CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft Manifest number: 077A Signing time: Tue 16 Dec 2025 06:01:08 +0000 Manifest this update: Tue 16 Dec 2025 06:01:08 +0000 Manifest next update: Wed 17 Dec 2025 06:01:08 +0000 Files and hashes: 1: C8VQvbdXFSWxY9cUSyaRplGLG8M.roa (hash: dJ/UlGmOEoPz5t5fntmBN/tksB6x5Nidm+UzZouks14=) 2: atCw5EzIalF2lUfCKteWGEtUsJI.crl (hash: 5zU4F3lDDbGubSAjjrtAs6DCd6ThDAVa/Zj7uCZVbhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:8b:7e:9b:9a:33:db:71:1a:ea:a7:f4:0b:e1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092 Validity Not Before: Dec 16 06:01:08 2025 GMT Not After : Dec 17 06:01:08 2025 GMT Subject: CN=99ba9c08362020755f6aefb8d0a97c40a93bba8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:bf:57:70:6a:f6:eb:0b:23:84:f6:4d:7f: e6:b4:d5:ae:e6:e7:3b:2d:e9:1f:5e:1a:87:da:d1: 49:5f:4a:ec:b1:c4:9f:86:f5:a3:4b:ad:c0:f1:35: b6:cd:1c:61:61:97:43:b3:e4:d1:a8:00:bb:fd:50: 37:96:c4:d7:ef:76:f4:11:bc:bb:93:e2:44:1d:16: 20:13:4f:19:d7:e4:09:66:7c:76:a6:81:d0:c2:46: 75:9e:45:fc:ef:4c:1b:3c:b4:01:e0:e3:d7:11:f9: ba:ac:8a:77:e2:80:f9:3f:d2:bd:b1:cb:1b:72:f1: 75:04:5d:43:54:9d:eb:8f:b6:a4:c2:65:3b:04:de: 6c:ba:46:3f:47:57:e9:3d:e7:26:6c:48:a5:ac:be: ff:c8:76:75:ac:59:59:85:1a:e6:06:7c:96:2c:8d: 76:67:53:e8:76:d9:61:ef:f7:66:c7:10:81:e7:87: a7:9f:4e:fd:10:34:b4:04:5c:87:bd:71:d1:11:5f: cc:f6:bf:a5:f0:5e:f0:dd:95:95:88:64:d8:3c:e0: 33:88:f4:19:3f:d1:cc:3a:86:52:8c:81:0b:1a:68: 00:92:73:22:49:f0:6e:15:dc:f2:5c:33:76:b0:1e: c6:bb:98:82:98:0e:4f:83:9b:49:5b:68:ba:a7:d7: ee:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BA:9C:08:36:20:20:75:5F:6A:EF:B8:D0:A9:7C:40:A9:3B:BA:8C X509v3 Authority Key Identifier: keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:6f:92:90:a2:4f:c1:a6:a5:36:23:e2:cf:45:08:9d:d6:51: 55:03:34:30:1d:72:9f:29:77:0a:f9:0d:4d:d5:32:1b:4e:6e: 0d:f0:f9:14:54:ef:36:5e:73:01:28:f4:84:4e:50:92:ab:a7: d5:a4:26:38:84:67:11:26:7c:14:49:13:fd:69:3e:9b:2b:7f: 9c:ea:84:98:c9:fe:09:57:52:ee:c2:6e:fb:67:22:67:15:8c: ea:f5:cb:8b:33:07:fe:05:03:d8:1e:65:25:50:b7:24:c9:a9: f4:eb:1b:15:b8:a7:be:74:03:04:e0:cf:a4:9d:3f:ea:f0:76: c5:7a:f7:90:a0:dd:36:08:f3:a7:71:66:0e:c2:7d:d8:43:96: 1b:d8:3a:f0:04:4b:b7:f8:9c:a7:06:23:2e:d2:f1:75:2b:3b: 6a:97:e7:12:14:26:d7:88:ec:51:dc:ec:fe:ac:42:ce:0f:2e: 02:bc:f4:16:2e:6c:c4:4d:eb:d2:33:87:35:b3:63:47:3c:63: ea:d3:99:84:d3:6b:23:3d:73:61:5e:f8:65:79:8c:fe:69:d4: 19:84:fb:92:3a:90:fb:44:0a:b3:98:2b:b4:5a:f8:1b:2e:bd: 3c:05:85:ab:4c:c1:1a:26:6a:3a:c4:7c:af:46:88:3b:84:88: 95:d2:b5:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv4t+m5oz23Ea6qf0C+HKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZDBiMGU0NGNjODZhNTE3Njk1NDdjMjJhZDc5NjE4NGI1 NGIwOTIwHhcNMjUxMjE2MDYwMTA4WhcNMjUxMjE3MDYwMTA4WjAzMTEwLwYDVQQD Eyg5OWJhOWMwODM2MjAyMDc1NWY2YWVmYjhkMGE5N2M0MGE5M2JiYThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDq/V3Bq9usLI4T2TX/mtNWu5uc7 LekfXhqH2tFJX0rsscSfhvWjS63A8TW2zRxhYZdDs+TRqAC7/VA3lsTX73b0Eby7 k+JEHRYgE08Z1+QJZnx2poHQwkZ1nkX870wbPLQB4OPXEfm6rIp34oD5P9K9scsb cvF1BF1DVJ3rj7akwmU7BN5sukY/R1fpPecmbEilrL7/yHZ1rFlZhRrmBnyWLI12 Z1Podtlh7/dmxxCB54enn079EDS0BFyHvXHREV/M9r+l8F7w3ZWViGTYPOAziPQZ P9HMOoZSjIELGmgAknMiSfBuFdzyXDN2sB7Gu5iCmA5Pg5tJW2i6p9fuPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJm6nAg2ICB1X2rvuNCpfECpO7qMMB8GA1UdIwQY MBaAFGrQsORMyGpRdpVHwirXlhhLVLCSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81YTFlZjctZjNhNC00NzNjLWE2OWMt NDgyMjVmMzExMWNmLzEvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81YTFlZjctZjNhNC00NzNjLWE2OWMtNDgyMjVmMzExMWNm LzEvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOG+SkKJP waalNiPiz0UIndZRVQM0MB1ynyl3CvkNTdUyG05uDfD5FFTvNl5zASj0hE5Qkqun 1aQmOIRnESZ8FEkT/Wk+myt/nOqEmMn+CVdS7sJu+2ciZxWM6vXLizMH/gUD2B5l JVC3JMmp9OsbFbinvnQDBODPpJ0/6vB2xXr3kKDdNgjzp3FmDsJ92EOWG9g68ARL t/icpwYjLtLxdSs7apfnEhQm14jsUdzs/qxCzg8uArz0Fi5sxE3r0jOHNbNjRzxj 6tOZhNNrIz1zYV74ZXmM/mnUGYT7kjqQ+0QKs5grtFr4Gy69PAWFq0zBGiZqOsR8 r0aIO4SIldK1xQ== -----END CERTIFICATE-----Generated at Tue Dec 16 14:26:58 2025 by rpki-client