This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft File: AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json) Hash identifier: zkC0ssgbMKKW6ZHKezWIUZf3xxp4mc8k+uhOFu74+RA= Subject key identifier: B2:74:44:23:56:F6:BC:42:B0:5B:75:2B:4E:AA:DB:6F:D1:E0:99:91 Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18 Certificate issuer: /CN=00cb6701ff829394db69ce67c30ad8735f126018 Certificate serial: 019B28C00D9D5E4C9961FD73086F9397B1D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft Manifest number: 0461 Signing time: Tue 16 Dec 2025 20:00:33 +0000 Manifest this update: Tue 16 Dec 2025 20:00:33 +0000 Manifest next update: Wed 17 Dec 2025 20:00:33 +0000 Files and hashes: 1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: 17EXwg2wJxfKvnr3ocrPCPv/7Odn4OTr+FR2NDOdZ1Q=) 2: VHRVXn6aDGinTjiE7BA05enfH2Q.roa (hash: HWebi466PogM3Mfy4s/kKB9Ol8sTTEX1NAe07QPFw7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:0d:9d:5e:4c:99:61:fd:73:08:6f:93:97:b1:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018 Validity Not Before: Dec 16 20:00:33 2025 GMT Not After : Dec 17 20:00:33 2025 GMT Subject: CN=b274442356f6bc42b05b752b4eaadb6fd1e09991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6d:e5:54:7a:f8:aa:2a:d0:d2:9c:17:6f:0e: 4c:ee:32:de:9a:c9:8c:65:74:45:98:64:12:61:02: a1:77:cd:83:e3:c7:02:9d:7c:b7:31:9a:4c:40:0a: f8:71:a3:5c:75:d0:4e:3e:84:c3:a7:68:aa:88:c6: 4c:7d:bd:d8:78:8a:60:3b:7d:60:3f:af:8b:06:79: 77:e9:58:fb:8d:41:b6:23:09:5e:ff:6d:54:01:d5: 86:16:67:50:35:76:66:26:e6:a3:9e:4f:cc:4c:55: 18:72:c1:c2:cf:fb:78:6f:96:5b:7e:91:1a:75:ef: ac:45:67:0d:e7:6c:12:72:ef:08:62:d8:9c:46:5f: 4d:91:b3:c6:02:12:08:1d:55:79:e7:f2:64:d1:0d: 1d:b4:c9:f1:3c:e2:33:77:75:19:12:c5:53:d4:ad: 52:0b:61:d1:a8:ff:77:43:9a:bd:e9:b0:7c:72:77: fd:af:85:ce:21:27:64:6d:29:7c:7e:c3:2f:45:20: fb:e6:3e:cd:9e:db:63:ac:ed:bb:ac:17:40:7f:f7: 64:76:49:72:e5:d7:f4:fe:d1:84:18:4f:a7:b3:e9: a9:6e:bc:f6:1f:9f:ad:85:31:03:d6:9a:73:2d:3a: 4a:ed:08:bf:1e:f5:ab:d6:a0:f9:f5:1b:c5:ec:d9: 23:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:74:44:23:56:F6:BC:42:B0:5B:75:2B:4E:AA:DB:6F:D1:E0:99:91 X509v3 Authority Key Identifier: keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:34:32:e1:f3:f4:f3:92:1e:49:c3:9b:43:f6:5f:b0:fd:c3: 16:bb:59:aa:a7:23:d7:7e:5e:8e:b8:c9:cc:40:b8:6f:38:72: 0d:a3:f4:00:5d:0c:6a:a0:01:5d:42:39:4f:1c:a9:ef:ba:8e: ca:56:37:d8:ec:e5:c6:6c:87:1e:40:82:a0:df:f3:29:b3:c6: 86:9c:85:f5:5d:9a:d2:41:c5:df:5f:27:70:c0:55:70:3f:bb: 0e:e9:4f:7a:41:22:fa:ed:a4:d5:83:a5:b6:9e:20:d4:0d:61: 26:da:f2:6a:e9:84:b8:03:59:ad:54:2e:09:b9:09:e8:0f:0c: 13:a8:bd:7e:66:ac:3d:7b:7e:27:0f:af:59:ed:bb:f7:3d:e4: 40:80:a6:79:86:23:f8:a4:da:90:20:76:31:89:06:43:64:6c: 9e:a5:97:56:f4:f6:d5:d9:1d:cc:a5:9a:75:d1:a9:9d:af:c1: 17:0f:06:1d:34:1e:79:4c:87:1f:9a:40:66:1e:ae:51:54:a6: 50:32:9d:ed:49:99:26:62:4d:4d:d2:cf:51:c5:1e:0b:23:7b: 5f:1c:dc:80:5d:6b:5c:6a:20:f2:b0:b8:98:9b:a3:a0:01:da: 90:5f:35:d0:c6:6b:e1:fc:14:dc:a2:2e:6b:6f:7d:28:cd:47: 04:ca:d6:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowA2dXkyZYf1zCG+Tl7HTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2I2NzAxZmY4MjkzOTRkYjY5Y2U2N2MzMGFkODczNWYx MjYwMTgwHhcNMjUxMjE2MjAwMDMzWhcNMjUxMjE3MjAwMDMzWjAzMTEwLwYDVQQD EyhiMjc0NDQyMzU2ZjZiYzQyYjA1Yjc1MmI0ZWFhZGI2ZmQxZTA5OTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W3lVHr4qirQ0pwXbw5M7jLemsmM ZXRFmGQSYQKhd82D48cCnXy3MZpMQAr4caNcddBOPoTDp2iqiMZMfb3YeIpgO31g P6+LBnl36Vj7jUG2Iwle/21UAdWGFmdQNXZmJuajnk/MTFUYcsHCz/t4b5ZbfpEa de+sRWcN52wScu8IYticRl9NkbPGAhIIHVV55/Jk0Q0dtMnxPOIzd3UZEsVT1K1S C2HRqP93Q5q96bB8cnf9r4XOISdkbSl8fsMvRSD75j7NnttjrO27rBdAf/dkdkly 5df0/tGEGE+ns+mpbrz2H5+thTED1ppzLTpK7Qi/HvWr1qD59RvF7NkjBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJ0RCNW9rxCsFt1K06q22/R4JmRMB8GA1UdIwQY MBaAFADLZwH/gpOU22nOZ8MK2HNfEmAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjct MjliM2UxMTFkY2VjLzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjctMjliM2UxMTFkY2Vj LzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjQy4fP0 85IeScObQ/ZfsP3DFrtZqqcj135ejrjJzEC4bzhyDaP0AF0MaqABXUI5Txyp77qO ylY32OzlxmyHHkCCoN/zKbPGhpyF9V2a0kHF318ncMBVcD+7DulPekEi+u2k1YOl tp4g1A1hJtryaumEuANZrVQuCbkJ6A8ME6i9fmasPXt+Jw+vWe279z3kQICmeYYj +KTakCB2MYkGQ2RsnqWXVvT21dkdzKWaddGpna/BFw8GHTQeeUyHH5pAZh6uUVSm UDKd7UmZJmJNTdLPUcUeCyN7XxzcgF1rXGog8rC4mJujoAHakF810MZr4fwU3KIu a299KM1HBMrWjg== -----END CERTIFICATE-----Generated at Tue Dec 16 23:20:35 2025 by rpki-client