This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json) Hash identifier: ajZbTTihfnzhzCE/ZGtcypNPI23A6W6Glq1ERNdayrM= Subject key identifier: 2F:C0:AA:7B:1A:A4:1F:84:04:70:1D:A8:71:0F:B2:C5:5E:42:A6:54 Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83 Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183 Certificate serial: 019B34FB2D947354B88C1E9C9380ABA5F870 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft Manifest number: 14A0 Signing time: Fri 19 Dec 2025 05:00:35 +0000 Manifest this update: Fri 19 Dec 2025 05:00:35 +0000 Manifest next update: Sat 20 Dec 2025 05:00:35 +0000 Files and hashes: 1: 1-HJDRT0gD2nhMW6JUwz556mvKj8.roa (hash: JYyO1+sMj5YlHliO+us6FbC+ChQWiYGalwTjRduJQ2E=) 2: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: E4umJas2Dg1dJSSLjbrU/6DhRNtmddeEl/QwsRmvQrg=) 3: o2P4F8wGwS7Hu_Z9DavQWwnt9SU.roa (hash: vp0AJWW08FmlyogXHIG/NX7ZAqoKcGLBFnnNS6LdgqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:2d:94:73:54:b8:8c:1e:9c:93:80:ab:a5:f8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183 Validity Not Before: Dec 19 05:00:35 2025 GMT Not After : Dec 20 05:00:35 2025 GMT Subject: CN=2fc0aa7b1aa41f8404701da8710fb2c55e42a654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5c:bc:fc:12:af:cf:a6:95:3b:42:16:2c:5e: b4:f7:77:1a:e8:07:66:eb:19:14:63:fc:91:42:dc: df:78:3e:d3:55:4a:21:6f:df:d0:8c:95:bf:d4:c3: b9:ce:97:1e:da:fc:a1:f6:f9:15:4e:33:54:ee:e3: 6d:12:b1:a0:cc:b4:8c:cf:bc:97:79:59:49:85:0c: 05:8e:31:2f:04:a0:20:0c:13:96:4f:a6:ab:c6:76: 90:c3:eb:56:ca:0d:76:66:81:71:75:10:cf:05:13: 27:d3:75:51:66:8e:1c:80:a8:8e:3d:4d:8f:b8:96: 87:36:d7:3c:38:78:ba:b2:61:8b:d9:c2:fd:2e:4c: 10:0a:2f:86:a3:24:99:00:7d:da:a7:02:df:2e:78: 7c:db:3e:4b:0b:31:2d:9c:85:57:74:ac:46:02:85: e4:ee:0e:d3:de:99:92:f1:3d:c5:67:78:b2:b4:1c: bc:43:bf:2b:73:13:ad:51:33:f3:d9:17:f9:26:21: 58:f9:61:c3:88:8a:e2:30:24:b0:70:07:d5:ac:88: 99:4d:59:f9:7c:e9:8c:03:88:ab:c9:06:45:87:b3: 0c:8e:f4:b0:0d:cf:c9:19:93:d2:88:47:67:99:a8: 58:03:01:54:07:ae:30:df:eb:2a:f3:fc:4c:9f:6a: ad:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C0:AA:7B:1A:A4:1F:84:04:70:1D:A8:71:0F:B2:C5:5E:42:A6:54 X509v3 Authority Key Identifier: keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:23:fc:6b:a5:f5:5d:13:70:54:66:2a:9f:63:b7:71:84:87: 17:f2:d7:a6:2c:c9:cd:ce:70:63:30:ca:87:1a:93:db:09:c2: eb:26:86:ee:20:16:95:c2:8f:41:6c:e8:21:00:b7:b0:7a:9a: a6:18:70:5d:c8:b0:69:78:35:c8:19:a7:2a:db:4b:0f:42:f8: 16:66:c1:e1:4c:7e:78:1e:7f:4c:0c:9f:44:72:1b:98:04:bf: 0f:8e:5d:51:ed:30:9a:e3:77:97:0b:77:61:7d:21:a7:c9:92: 21:37:97:52:5c:ef:38:40:9e:ec:ac:f1:3d:49:f3:96:63:cb: 38:fd:93:05:4f:14:48:58:f3:74:ab:ac:8b:03:c8:fd:03:af: 4c:81:64:69:8c:f2:0c:3a:a7:67:f4:d5:2d:a8:e1:af:01:3c: a2:42:d8:96:4c:5e:f0:30:8c:66:6f:59:bc:cc:c2:ad:95:1a: 92:6d:a8:b0:4d:b9:95:3b:7a:a4:4b:14:f2:04:c1:76:11:05: c6:6e:9e:cd:aa:43:15:79:7e:d9:75:0c:d0:91:09:d6:46:4b: a9:fa:d6:75:09:de:17:37:0f:cc:18:d1:92:07:c4:5b:cd:af: 0e:a1:b1:95:1d:10:f7:59:a9:c5:f9:53:92:91:84:1f:6e:5c: 00:37:f1:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+y2Uc1S4jB6ck4CrpfhwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZDBlODg4ODVlZjQ4YjIwYzg3Yjc2ZmQ4NWQ0MmU2ZWIz ZDcxODMwHhcNMjUxMjE5MDUwMDM1WhcNMjUxMjIwMDUwMDM1WjAzMTEwLwYDVQQD EygyZmMwYWE3YjFhYTQxZjg0MDQ3MDFkYTg3MTBmYjJjNTVlNDJhNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ly8/BKvz6aVO0IWLF6093ca6Adm 6xkUY/yRQtzfeD7TVUohb9/QjJW/1MO5zpce2vyh9vkVTjNU7uNtErGgzLSMz7yX eVlJhQwFjjEvBKAgDBOWT6arxnaQw+tWyg12ZoFxdRDPBRMn03VRZo4cgKiOPU2P uJaHNtc8OHi6smGL2cL9LkwQCi+GoySZAH3apwLfLnh82z5LCzEtnIVXdKxGAoXk 7g7T3pmS8T3FZ3iytBy8Q78rcxOtUTPz2Rf5JiFY+WHDiIriMCSwcAfVrIiZTVn5 fOmMA4iryQZFh7MMjvSwDc/JGZPSiEdnmahYAwFUB64w3+sq8/xMn2qthQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/AqnsapB+EBHAdqHEPssVeQqZUMB8GA1UdIwQY MBaAFALQ6IiF70iyDIe3b9hdQubrPXGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDct OTUzYzY4NTA2ZDVjLzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDctOTUzYzY4NTA2ZDVj LzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiP8a6X1 XRNwVGYqn2O3cYSHF/LXpizJzc5wYzDKhxqT2wnC6yaG7iAWlcKPQWzoIQC3sHqa phhwXciwaXg1yBmnKttLD0L4FmbB4Ux+eB5/TAyfRHIbmAS/D45dUe0wmuN3lwt3 YX0hp8mSITeXUlzvOECe7KzxPUnzlmPLOP2TBU8USFjzdKusiwPI/QOvTIFkaYzy DDqnZ/TVLajhrwE8okLYlkxe8DCMZm9ZvMzCrZUakm2osE25lTt6pEsU8gTBdhEF xm6ezapDFXl+2XUM0JEJ1kZLqfrWdQneFzcPzBjRkgfEW82vDqGxlR0Q91mpxflT kpGEH25cADfx8w== -----END CERTIFICATE-----Generated at Fri Dec 19 14:29:41 2025 by rpki-client