This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json) Hash identifier: i/LixvTAIaRfdV3nB10BdVRpQOH+g0A8QN6f+7a1tRQ= Subject key identifier: C4:D7:B5:CF:0A:BC:4F:50:A1:80:C3:3F:34:C0:83:6E:8A:B9:CE:57 Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19 Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19 Certificate serial: 019B3DC7B49F7301CBE27816BA0AD60D8B30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft Manifest number: 03D8 Signing time: Sat 20 Dec 2025 22:00:56 +0000 Manifest this update: Sat 20 Dec 2025 22:00:56 +0000 Manifest next update: Sun 21 Dec 2025 22:00:56 +0000 Files and hashes: 1: 0ZwVYpJfrbJyYn_YtY3RuMq5lcg.roa (hash: gf6HtAdxN0GhhrFPeZ2e6ZRLEIlkoJtABmVeq8td+ik=) 2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: lw4cMfNun6TKlsQvU6jUlwPnB1LYGjaFgzHN2schfEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:b4:9f:73:01:cb:e2:78:16:ba:0a:d6:0d:8b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19 Validity Not Before: Dec 20 22:00:56 2025 GMT Not After : Dec 21 22:00:56 2025 GMT Subject: CN=c4d7b5cf0abc4f50a180c33f34c0836e8ab9ce57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:fb:fa:1d:ab:e7:ef:de:52:45:f5:f3:45:ae: 96:62:42:37:a5:c0:37:4d:0d:0c:fe:0c:1a:db:ad: 4a:dc:e6:b6:32:10:0f:ff:5e:81:30:8e:ff:e5:53: 95:72:af:f8:69:71:c7:29:26:71:12:c3:4b:1c:14: a3:62:5b:5e:fb:45:97:98:c9:9a:ca:cc:80:09:fc: c4:5d:2f:4e:61:df:9e:cf:2e:54:27:ae:71:d6:ca: e6:d8:70:3f:05:2e:90:dd:b1:58:e2:2d:5c:7c:4c: 80:f9:e1:72:2b:ec:23:c4:99:30:cf:7e:f5:07:07: 28:68:a7:01:93:7f:6e:e8:f9:ac:d1:80:b8:d3:da: 23:5a:da:40:f9:53:d7:d5:50:ae:fe:86:ba:fa:7a: b2:46:64:2e:a6:27:d4:fa:5c:df:99:ec:a8:74:46: 3f:dc:9d:01:f6:bb:be:3e:c8:5b:32:ad:aa:51:1a: af:62:42:80:90:05:45:d5:f7:30:02:c7:c2:a2:7e: a6:7c:bf:d4:4d:07:ff:3c:15:1a:76:04:23:d7:4d: 80:c8:d7:d6:4b:93:57:85:81:b6:c1:27:d8:20:2f: d1:9d:d1:21:12:9d:24:14:41:6c:09:e4:54:be:fe: d7:ad:12:a6:3d:3c:17:10:f8:8e:77:19:ce:8d:15: 9c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D7:B5:CF:0A:BC:4F:50:A1:80:C3:3F:34:C0:83:6E:8A:B9:CE:57 X509v3 Authority Key Identifier: keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:3c:21:8e:e5:c3:c0:28:56:89:d7:77:83:30:c1:33:ca:d6: 2a:e9:6c:a8:c8:04:6b:8f:00:85:77:8c:90:f8:f6:ed:47:f1: 16:5e:9c:77:55:98:6a:e7:b6:cc:c9:1a:19:d7:ea:55:f5:ff: 6d:9b:fe:60:2e:8e:7b:e3:cf:81:d1:59:c1:f4:48:5d:ff:9c: 54:78:11:6d:b9:91:74:08:af:a5:9c:c2:94:77:27:05:a3:88: 72:95:26:ab:5d:34:e5:50:5e:b7:ba:79:2c:77:90:53:6e:fd: 08:40:94:a3:1b:2e:a4:f1:45:da:e7:70:94:97:3a:1b:29:b5: 80:05:29:fb:5c:21:7b:21:0f:92:d5:df:8f:c8:1c:9d:72:08: 2e:b2:b7:34:d2:6e:da:7c:12:4c:ac:97:56:f3:84:07:07:f3: 33:a2:98:b3:64:85:7e:42:5a:1b:41:03:cc:42:c4:28:bf:81: 4b:8f:27:ee:c5:8d:52:a4:74:59:cc:5d:4c:08:ac:52:5e:8c: ee:7d:c0:7c:25:36:03:cb:3b:31:99:09:6b:e1:94:fb:3f:aa: 0c:6b:56:af:a9:00:58:02:c7:a1:72:98:9f:1c:0c:e4:76:e8: 8b:6b:a4:c9:80:81:5d:b3:5f:00:1a:25:a9:06:f0:18:4a:a8: 87:7f:7b:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x7SfcwHL4ngWugrWDYswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZDcwZWYyNWU1MjJjMGQyNmU5NzdhMWQyNGZmNzdlYWQz YWRhMTkwHhcNMjUxMjIwMjIwMDU2WhcNMjUxMjIxMjIwMDU2WjAzMTEwLwYDVQQD EyhjNGQ3YjVjZjBhYmM0ZjUwYTE4MGMzM2YzNGMwODM2ZThhYjljZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fv6Havn795SRfXzRa6WYkI3pcA3 TQ0M/gwa261K3Oa2MhAP/16BMI7/5VOVcq/4aXHHKSZxEsNLHBSjYlte+0WXmMma ysyACfzEXS9OYd+ezy5UJ65x1srm2HA/BS6Q3bFY4i1cfEyA+eFyK+wjxJkwz371 BwcoaKcBk39u6Pms0YC409ojWtpA+VPX1VCu/oa6+nqyRmQupifU+lzfmeyodEY/ 3J0B9ru+PshbMq2qURqvYkKAkAVF1fcwAsfCon6mfL/UTQf/PBUadgQj102AyNfW S5NXhYG2wSfYIC/RndEhEp0kFEFsCeRUvv7XrRKmPTwXEPiOdxnOjRWcSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTXtc8KvE9QoYDDPzTAg26Kuc5XMB8GA1UdIwQY MBaAFGrXDvJeUiwNJul3odJP936tOtoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yMzk2OGEtZmEzNi00NjU0LWJmYmYt OTQwNGUxNzcyMDBlLzEvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8yMzk2OGEtZmEzNi00NjU0LWJmYmYtOTQwNGUxNzcyMDBl LzEvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDwhjuXD wChWidd3gzDBM8rWKulsqMgEa48AhXeMkPj27UfxFl6cd1WYaue2zMkaGdfqVfX/ bZv+YC6Oe+PPgdFZwfRIXf+cVHgRbbmRdAivpZzClHcnBaOIcpUmq1005VBet7p5 LHeQU279CECUoxsupPFF2udwlJc6Gym1gAUp+1wheyEPktXfj8gcnXIILrK3NNJu 2nwSTKyXVvOEBwfzM6KYs2SFfkJaG0EDzELEKL+BS48n7sWNUqR0WcxdTAisUl6M 7n3AfCU2A8s7MZkJa+GU+z+qDGtWr6kAWALHoXKYnxwM5Hboi2ukyYCBXbNfABol qQbwGEqoh397dw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:30:46 2025 by rpki-client