This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft File: atCw5EzIalF2lUfCKteWGEtUsJI.mft (raw, json) Hash identifier: VVJzKZ9wtNaoCVqCWMznWgCD+REEUFNmxT9H0mIeVHI= Subject key identifier: E7:6B:62:E7:55:2B:F8:F3:E9:34:68:89:FA:DF:8C:75:18:A2:A8:C3 Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92 Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092 Certificate serial: 019B3EDA0F92DC71895C25DE94D352B5A2FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft Manifest number: 0787 Signing time: Sun 21 Dec 2025 03:00:36 +0000 Manifest this update: Sun 21 Dec 2025 03:00:36 +0000 Manifest next update: Mon 22 Dec 2025 03:00:36 +0000 Files and hashes: 1: C8VQvbdXFSWxY9cUSyaRplGLG8M.roa (hash: dJ/UlGmOEoPz5t5fntmBN/tksB6x5Nidm+UzZouks14=) 2: atCw5EzIalF2lUfCKteWGEtUsJI.crl (hash: fhPpxbmJI7X97Y6mlzr20PM5salS1fFmW+qEPdzpcS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:0f:92:dc:71:89:5c:25:de:94:d3:52:b5:a2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092 Validity Not Before: Dec 21 03:00:36 2025 GMT Not After : Dec 22 03:00:36 2025 GMT Subject: CN=e76b62e7552bf8f3e9346889fadf8c7518a2a8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:6d:1f:3e:48:86:f7:e0:0b:1f:ea:f0:1f: 7e:5d:ab:35:71:8d:13:e9:51:d1:fa:2d:4e:e2:a5: b1:06:d1:2a:e8:ab:f2:94:6e:7f:bd:92:5c:dd:31: 7f:ec:70:bc:3a:53:d0:0f:dc:a7:8a:c2:17:1b:0e: f7:d2:bc:90:01:99:1b:26:a7:3b:77:a0:43:29:a0: 34:30:e3:b8:65:b7:84:14:38:90:05:88:f6:41:ff: 79:96:51:68:e9:f5:37:45:1a:61:68:2c:cf:75:93: 9f:9e:b7:ce:0b:db:da:32:54:92:ea:44:1f:39:f1: a8:b5:40:ae:f7:99:53:f4:d7:32:31:10:10:bc:d1: 5a:fc:bf:00:da:a3:5a:88:b8:5b:04:e7:86:94:52: 54:85:e8:3d:a2:61:64:66:22:42:25:ea:e6:a5:25: 93:b6:83:2f:0c:0c:97:fa:0b:0a:bc:d9:c1:45:99: f2:4a:d9:37:b6:b2:99:ab:83:f8:b2:78:62:2f:c1: 24:e0:88:ea:b7:c1:0f:b5:a2:d1:e3:99:e6:11:39: ef:6d:41:b8:e0:3f:62:38:d7:c7:86:bd:5a:1a:fe: 3f:88:da:3d:cf:d9:19:58:9e:e8:8e:df:89:72:31: b6:da:d0:d9:ab:fe:03:1f:2d:c8:07:18:74:7b:86: eb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6B:62:E7:55:2B:F8:F3:E9:34:68:89:FA:DF:8C:75:18:A2:A8:C3 X509v3 Authority Key Identifier: keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:98:b5:19:68:33:e0:8c:ff:76:88:3d:19:af:1d:36:fd:0e: 53:38:91:a1:54:8b:3d:41:15:44:08:91:23:0c:0c:9a:1d:54: 1a:02:be:ee:bd:82:9b:db:c6:44:36:62:6a:c6:dc:0e:8e:5e: 43:06:29:bd:47:98:39:37:86:1b:9e:ba:5d:97:13:dc:a8:50: 17:0e:a8:43:82:14:a9:be:7e:f0:12:ad:87:d4:c8:31:88:a9: f3:5c:5d:91:8b:d8:58:4a:ca:2d:0f:16:6d:00:31:76:83:97: 60:50:94:ac:a1:53:44:73:35:96:66:35:ad:8b:a8:17:ad:eb: 4a:fa:27:cd:64:95:cd:88:42:26:a9:c5:7f:2d:b5:99:36:01: 90:b9:d4:5b:45:76:ec:40:a6:96:d9:15:65:b2:e7:26:15:59: 29:d0:b8:b6:5f:6e:7d:4a:a0:f9:f8:29:bb:60:4a:5a:48:a1: f9:32:95:42:6a:59:4b:6d:a9:f8:80:11:74:d9:ea:7d:9b:6c: a7:32:f0:68:4d:15:11:22:30:1b:35:e3:22:d2:48:29:94:ac: ec:fe:4e:69:25:3b:e9:3c:9b:1f:24:14:f2:83:0a:da:78:6c: 66:4f:bc:64:6e:89:d6:17:a5:6b:79:23:16:6a:39:54:64:e7: b3:41:e0:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2g+S3HGJXCXelNNStaL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZDBiMGU0NGNjODZhNTE3Njk1NDdjMjJhZDc5NjE4NGI1 NGIwOTIwHhcNMjUxMjIxMDMwMDM2WhcNMjUxMjIyMDMwMDM2WjAzMTEwLwYDVQQD EyhlNzZiNjJlNzU1MmJmOGYzZTkzNDY4ODlmYWRmOGM3NTE4YTJhOGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEhtHz5IhvfgCx/q8B9+Xas1cY0T 6VHR+i1O4qWxBtEq6KvylG5/vZJc3TF/7HC8OlPQD9ynisIXGw730ryQAZkbJqc7 d6BDKaA0MOO4ZbeEFDiQBYj2Qf95llFo6fU3RRphaCzPdZOfnrfOC9vaMlSS6kQf OfGotUCu95lT9NcyMRAQvNFa/L8A2qNaiLhbBOeGlFJUheg9omFkZiJCJermpSWT toMvDAyX+gsKvNnBRZnyStk3trKZq4P4snhiL8Ek4Ijqt8EPtaLR45nmETnvbUG4 4D9iONfHhr1aGv4/iNo9z9kZWJ7ojt+JcjG22tDZq/4DHy3IBxh0e4brlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdrYudVK/jz6TRoifrfjHUYoqjDMB8GA1UdIwQY MBaAFGrQsORMyGpRdpVHwirXlhhLVLCSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81YTFlZjctZjNhNC00NzNjLWE2OWMt NDgyMjVmMzExMWNmLzEvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81YTFlZjctZjNhNC00NzNjLWE2OWMtNDgyMjVmMzExMWNm LzEvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZi1GWgz 4Iz/dog9Ga8dNv0OUziRoVSLPUEVRAiRIwwMmh1UGgK+7r2Cm9vGRDZiasbcDo5e QwYpvUeYOTeGG566XZcT3KhQFw6oQ4IUqb5+8BKth9TIMYip81xdkYvYWErKLQ8W bQAxdoOXYFCUrKFTRHM1lmY1rYuoF63rSvonzWSVzYhCJqnFfy21mTYBkLnUW0V2 7ECmltkVZbLnJhVZKdC4tl9ufUqg+fgpu2BKWkih+TKVQmpZS22p+IARdNnqfZts pzLwaE0VESIwGzXjItJIKZSs7P5OaSU76TybHyQU8oMK2nhsZk+8ZG6J1hela3kj Fmo5VGTns0HgUw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:13 2025 by rpki-client