This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft File: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft (raw, json) Hash identifier: Dj8hBvOwYzKfRNfqJFJwF/joOIgrIS1+I72ZUlZTAT4= Subject key identifier: C0:6D:79:15:E9:3C:4B:A6:0C:BF:7D:FB:2B:0C:35:4F:7E:40:CA:25 Authority key identifier: 02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA Certificate issuer: /CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca Certificate serial: 019B53AC164E972DCC6505847B9805215BB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 04:02:25 +0000 Manifest this update: Thu 25 Dec 2025 04:02:25 +0000 Manifest next update: Fri 26 Dec 2025 04:02:25 +0000 Files and hashes: 1: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl (hash: OUHeO5RYlTTEuDwr+CDD3/syqLT6U7V1TgarW9LaS60=) 2: dL5tLsAU6PWlL4weQ4Up71k3hXA.roa (hash: ZvntQMrxSDwlXP02WdClHLb+VoQxqS4KZZo3fc10HIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ac:16:4e:97:2d:cc:65:05:84:7b:98:05:21:5b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca Validity Not Before: Dec 25 04:02:25 2025 GMT Not After : Dec 26 04:02:25 2025 GMT Subject: CN=c06d7915e93c4ba60cbf7dfb2b0c354f7e40ca25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:88:b2:bf:cc:e8:d0:76:55:b2:40:1c:54:ed: b9:47:ea:5b:31:81:93:83:27:a7:a3:fb:89:88:52: ea:50:26:2c:8a:e5:9f:5e:78:7c:16:dd:f0:b3:a6: 4e:e7:c9:07:7b:04:a9:e4:f0:90:57:39:2f:b0:ec: 63:54:cc:28:89:d4:e4:d8:7a:97:22:33:80:09:e0: 6d:2b:46:03:11:f8:ac:bf:54:17:42:a5:31:98:df: a9:10:55:a9:f7:e7:15:8a:97:88:d8:17:b7:02:de: bd:d7:6e:f8:18:02:bd:aa:6a:81:36:90:53:6f:b5: b8:a1:91:45:8f:76:ad:53:be:67:95:7a:4b:35:a8: 0a:eb:91:dd:a7:c9:d2:47:ce:77:49:8e:df:da:3a: 90:6d:0f:7b:56:97:77:fd:df:a1:e8:6c:ef:de:e6: b1:67:d8:9c:3c:19:f1:3b:f8:fc:c6:8e:9d:5a:9f: 43:7a:7d:cc:37:64:34:f0:d7:61:f1:1d:c8:1b:15: f0:40:27:6a:73:4d:7f:9e:2c:36:b5:c6:25:b7:d1: ea:73:eb:94:39:f8:ad:d8:1b:e2:8a:8e:35:70:68: 4d:cf:af:80:d2:f9:dc:6e:22:3f:ea:8c:93:3b:0b: b1:46:9a:55:a9:8c:21:d6:ad:51:d5:fc:5b:5a:13: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6D:79:15:E9:3C:4B:A6:0C:BF:7D:FB:2B:0C:35:4F:7E:40:CA:25 X509v3 Authority Key Identifier: keyid:02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:9b:9e:fd:2e:eb:39:38:df:cf:ea:b0:0b:cd:5c:75:4d:2b: 5c:ed:69:6a:a8:71:ff:73:cd:1b:29:da:22:8e:53:83:7a:81: 5f:87:b2:e6:1a:75:da:14:17:49:5a:a6:40:39:21:f4:d7:73: c2:c2:ae:c1:cd:d0:b4:79:4b:8d:ab:0b:46:c8:ea:d2:0e:44: f3:75:2c:dd:bd:a2:a3:3e:08:b6:92:f0:30:c0:fe:56:87:d0: 9c:4e:30:6a:7b:33:ee:b1:2c:be:78:5b:b2:a7:96:9e:5e:f7: df:18:ad:c7:82:f2:64:d5:09:8f:27:76:36:0a:1f:76:6c:f1: 33:4a:67:0a:b0:5f:34:f7:4b:ba:4d:aa:ce:fb:aa:1c:66:d8: 55:ab:e2:7b:b4:79:98:53:e2:3e:08:1a:71:f6:f8:75:d8:47: 86:68:a2:5f:ba:ba:01:c2:96:43:31:85:02:6e:21:b1:b9:fb: c7:a6:51:94:af:cc:12:8f:8a:84:7b:61:48:a8:0a:51:a5:f4: 85:73:cc:b9:4c:e8:95:cc:72:ab:63:0d:65:f2:f1:d1:9e:42: 31:af:bf:9d:c3:17:5e:58:7a:19:5b:55:fd:81:ba:fc:85:db: 30:9b:9b:db:26:57:9d:3c:dd:58:5d:3f:9c:ea:db:a8:ac:2e: 92:1a:a7:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTrBZOly3MZQWEe5gFIVuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZGE0Y2QwNDRjNmU5ODczYWM4ZmQ5Y2ZkMzBmMWVjYjNk ODBiY2EwHhcNMjUxMjI1MDQwMjI1WhcNMjUxMjI2MDQwMjI1WjAzMTEwLwYDVQQD EyhjMDZkNzkxNWU5M2M0YmE2MGNiZjdkZmIyYjBjMzU0ZjdlNDBjYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Iiyv8zo0HZVskAcVO25R+pbMYGT gyeno/uJiFLqUCYsiuWfXnh8Ft3ws6ZO58kHewSp5PCQVzkvsOxjVMwoidTk2HqX IjOACeBtK0YDEfisv1QXQqUxmN+pEFWp9+cVipeI2Be3At691274GAK9qmqBNpBT b7W4oZFFj3atU75nlXpLNagK65Hdp8nSR853SY7f2jqQbQ97Vpd3/d+h6Gzv3uax Z9icPBnxO/j8xo6dWp9Den3MN2Q08Ndh8R3IGxXwQCdqc01/niw2tcYlt9Hqc+uU Ofit2Bviio41cGhNz6+A0vncbiI/6oyTOwuxRppVqYwh1q1R1fxbWhMCmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBteRXpPEumDL99+ysMNU9+QMolMB8GA1UdIwQY MBaAFALaTNBExumHOsj9nP0w8eyz2AvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yOTM3M2UtYzMwOS00YzMyLWE2MDYt ZDY5MmMzNzI5YzQ4LzEvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8yOTM3M2UtYzMwOS00YzMyLWE2MDYtZDY5MmMzNzI5YzQ4 LzEvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZue/S7r OTjfz+qwC81cdU0rXO1paqhx/3PNGynaIo5Tg3qBX4ey5hp12hQXSVqmQDkh9Ndz wsKuwc3QtHlLjasLRsjq0g5E83Us3b2ioz4ItpLwMMD+VofQnE4wansz7rEsvnhb sqeWnl733xitx4LyZNUJjyd2NgofdmzxM0pnCrBfNPdLuk2qzvuqHGbYVavie7R5 mFPiPggacfb4ddhHhmiiX7q6AcKWQzGFAm4hsbn7x6ZRlK/MEo+KhHthSKgKUaX0 hXPMuUzolcxyq2MNZfLx0Z5CMa+/ncMXXlh6GVtV/YG6/IXbMJub2yZXnTzdWF0/ nOrbqKwukhqn8Q== -----END CERTIFICATE-----Generated at Thu Dec 25 07:06:33 2025 by rpki-client