This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json) Hash identifier: hidC1XS2GrLtcDvmJYRfAFdkf0h8aSTwcSBPK5Fw2X8= Subject key identifier: FB:52:88:6A:A0:83:53:B7:B4:39:AC:D3:37:69:22:A9:67:73:0F:95 Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98 Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398 Certificate serial: 019B3FED2DEF5F98315F74A218E86EE3C61A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft Manifest number: 0103 Signing time: Sun 21 Dec 2025 08:01:06 +0000 Manifest this update: Sun 21 Dec 2025 08:01:06 +0000 Manifest next update: Mon 22 Dec 2025 08:01:06 +0000 Files and hashes: 1: A_iHhKALil4lTEQzAUwPF3mIEBw.roa (hash: foFKLdP+k5Z9u1b7IqZhZYmzZ2C3HRJY7iqeg2B9yu0=) 2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: l0b9SkZkEXwNsQGRA6Q+CfKMeqmdb5lqccvK+uBOg2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:2d:ef:5f:98:31:5f:74:a2:18:e8:6e:e3:c6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398 Validity Not Before: Dec 21 08:01:06 2025 GMT Not After : Dec 22 08:01:06 2025 GMT Subject: CN=fb52886aa08353b7b439acd3376922a967730f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:11:7d:9f:20:81:6d:6b:a0:e6:0b:6c:1f: 96:69:b0:74:f0:f3:73:34:e2:51:16:fd:3b:da:4c: f9:6a:cc:7b:38:55:95:26:2e:72:11:2a:a0:eb:02: fc:51:ed:22:0b:39:63:78:f5:42:45:8c:b4:80:bd: 68:17:6e:45:f1:43:cb:a7:a3:45:9b:20:14:d0:01: b5:be:b9:35:20:67:0f:4f:fc:1a:04:a8:64:f7:1c: da:f4:2b:a0:92:8b:43:27:2b:60:4a:f0:a3:30:3d: 1f:ba:4d:da:fa:8f:3a:ff:d6:73:d1:b3:a5:6f:96: 06:7d:d7:4c:5f:6a:4a:21:49:32:10:13:a7:5b:79: 22:ec:9d:6f:3c:ca:e9:57:9e:73:e0:f2:e8:a7:3a: 96:cc:50:fd:92:c0:59:f3:15:c2:72:b4:a2:a1:7a: 2c:de:a8:c3:54:7a:65:fe:fe:e0:b6:77:eb:c2:c4: ae:38:a0:3f:71:3e:02:8d:e4:d9:b0:0a:19:e7:68: 7c:b5:8b:86:86:16:f3:c2:4c:e0:4e:0e:8b:63:06: aa:b0:f4:1f:4e:b8:cf:c0:8a:d8:f8:c8:cf:c2:16: 04:c6:87:3e:b4:7b:25:24:69:51:ef:0a:8f:69:ef: d7:49:e3:9a:20:9e:ca:c6:ed:14:a7:64:62:ec:8e: 46:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:52:88:6A:A0:83:53:B7:B4:39:AC:D3:37:69:22:A9:67:73:0F:95 X509v3 Authority Key Identifier: keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d2:57:52:bc:bc:59:cb:68:06:ed:2d:31:b0:fe:61:24:e0: 21:6d:db:dd:8f:be:5c:6b:62:a4:ee:f3:b7:d3:f3:12:aa:9e: c8:f5:f4:e5:38:61:a1:a2:99:b4:20:6a:55:a0:4a:4c:a2:d1: f1:fb:ea:29:24:fb:26:7f:94:2a:56:ea:bd:f8:23:27:c4:45: 39:e3:f9:d8:a3:1f:8b:14:03:7b:19:ae:0e:e5:80:1e:22:1e: b6:3d:08:df:80:86:4c:91:9b:09:d8:69:60:89:b7:29:7d:1c: ff:8f:38:26:cc:1e:98:68:e7:e4:99:13:27:3f:6d:ab:94:26: eb:eb:b1:05:79:8a:44:ed:65:41:ad:96:9f:fe:13:c4:70:c6: 87:7c:37:c5:b4:d2:87:9f:4b:a4:18:83:37:a0:c3:b5:6f:67: 76:ca:2f:b1:36:c3:90:09:00:e0:69:73:6c:c9:77:6a:81:97: e5:c9:26:a3:82:5d:06:40:29:a2:95:18:04:58:82:53:ac:9d: fc:16:9b:3f:5f:a4:ea:48:e9:9c:88:cf:fa:0f:45:cb:7b:7d: 56:6b:18:6e:01:08:15:86:c2:a5:2f:28:83:f3:91:ec:5b:f1: 7d:03:0b:9d:c0:bc:b0:27:c9:60:15:25:51:5c:0c:77:21:00: 49:12:40:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7S3vX5gxX3SiGOhu48YaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZDM4YmQ0YzBkMGU5ZjMwMjgwMjE5ODRjZDgzNTU2MDQ3 ZjYzOTgwHhcNMjUxMjIxMDgwMTA2WhcNMjUxMjIyMDgwMTA2WjAzMTEwLwYDVQQD EyhmYjUyODg2YWEwODM1M2I3YjQzOWFjZDMzNzY5MjJhOTY3NzMwZjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy8RfZ8ggW1roOYLbB+WabB08PNz NOJRFv072kz5asx7OFWVJi5yESqg6wL8Ue0iCzljePVCRYy0gL1oF25F8UPLp6NF myAU0AG1vrk1IGcPT/waBKhk9xza9CugkotDJytgSvCjMD0fuk3a+o86/9Zz0bOl b5YGfddMX2pKIUkyEBOnW3ki7J1vPMrpV55z4PLopzqWzFD9ksBZ8xXCcrSioXos 3qjDVHpl/v7gtnfrwsSuOKA/cT4CjeTZsAoZ52h8tYuGhhbzwkzgTg6LYwaqsPQf TrjPwIrY+MjPwhYExoc+tHslJGlR7wqPae/XSeOaIJ7Kxu0Up2Ri7I5GrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtSiGqgg1O3tDms0zdpIqlncw+VMB8GA1UdIwQY MBaAFGrTi9TA0OnzAoAhmEzYNVYEf2OYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2Yzkt Y2U3MDAwNzRhN2ZjLzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2YzktY2U3MDAwNzRhN2Zj LzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNJXUry8 WctoBu0tMbD+YSTgIW3b3Y++XGtipO7zt9PzEqqeyPX05ThhoaKZtCBqVaBKTKLR 8fvqKST7Jn+UKlbqvfgjJ8RFOeP52KMfixQDexmuDuWAHiIetj0I34CGTJGbCdhp YIm3KX0c/484JswemGjn5JkTJz9tq5Qm6+uxBXmKRO1lQa2Wn/4TxHDGh3w3xbTS h59LpBiDN6DDtW9ndsovsTbDkAkA4GlzbMl3aoGX5ckmo4JdBkApopUYBFiCU6yd /BabP1+k6kjpnIjP+g9Fy3t9VmsYbgEIFYbCpS8og/OR7FvxfQMLncC8sCfJYBUl UVwMdyEASRJApg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:48:09 2025 by rpki-client