This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft File: ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json) Hash identifier: XRROTjnwwS2SjxFCwfEAATom0+XuUxST7boIj/Ezx8g= Subject key identifier: 21:A9:0C:7E:B6:86:F3:A9:BD:B1:24:6D:C9:1F:CF:EF:5D:ED:4E:CF Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db Certificate serial: 019B446E32DA0C022DCF57D92C02A7EBD1A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft Manifest number: 08C0 Signing time: Mon 22 Dec 2025 05:00:31 +0000 Manifest this update: Mon 22 Dec 2025 05:00:31 +0000 Manifest next update: Tue 23 Dec 2025 05:00:31 +0000 Files and hashes: 1: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: qtIFVl8Kn+E+EewmhJGK6gkxcDdO8mRBWfheJvAPpWY=) 2: OgXWLzQBIYvEON5mUedF6bX5aTo.roa (hash: nqpCSiGASiQpy5G6Vl9R55sQwkNptiylFtL8c3H2opE=) 3: yPU6A9p-LMtjN4Omcmkv4NrsXlo.roa (hash: 0sZjX5MFgI0oqX6xUWy5gWW3/d8I6ijHH576HLysTY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:32:da:0c:02:2d:cf:57:d9:2c:02:a7:eb:d1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db Validity Not Before: Dec 22 05:00:31 2025 GMT Not After : Dec 23 05:00:31 2025 GMT Subject: CN=21a90c7eb686f3a9bdb1246dc91fcfef5ded4ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:20:e7:61:b5:cd:ec:f4:f7:c5:60:2d:41: 7b:e1:4d:93:94:88:bd:fa:f5:c8:a6:0d:27:08:53: 61:68:4a:27:c3:fd:01:b5:e9:06:30:70:24:6f:91: 05:b7:3c:86:f7:1d:c4:1f:e4:e3:ce:42:9d:df:d6: 15:9d:72:57:af:88:8c:d5:78:c4:d9:b2:3c:2c:60: b0:fb:3e:08:d7:14:eb:25:46:16:97:9d:92:35:12: 7b:39:c6:e5:94:72:36:0d:3f:e9:6d:b6:dc:5d:0b: da:6d:fd:ee:e4:dd:fa:4f:51:d5:17:45:54:78:f5: e6:1b:1b:e8:d3:71:03:fd:51:e0:d4:8d:c9:d5:18: b3:81:54:e1:c9:bc:ab:2b:56:10:2d:a3:c1:5c:11: 54:1e:e0:a7:f1:1e:31:ca:6a:9a:5f:00:b2:c6:e0: 7d:15:d7:c1:7d:1e:8b:35:b6:96:e2:4e:59:86:ec: fe:41:4e:1a:71:99:b1:e8:98:5e:11:25:4c:5a:d1: 50:0e:7d:31:40:ce:bf:3c:8b:79:73:7b:5b:07:2f: b5:69:2e:50:2d:f3:2f:c6:ea:b2:1d:1c:a7:d4:c9: ca:ee:5f:fe:26:1f:bf:4e:eb:d5:e6:92:d9:34:8c: 7d:9b:c9:2d:0f:ac:86:51:0b:dd:48:5a:ec:46:c1: 26:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A9:0C:7E:B6:86:F3:A9:BD:B1:24:6D:C9:1F:CF:EF:5D:ED:4E:CF X509v3 Authority Key Identifier: keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:77:70:ec:81:98:bf:5a:8d:c8:79:85:7d:c7:05:c6:55:55: a1:3a:f2:06:18:1f:e7:c8:3f:18:7f:8d:c5:f0:24:92:0b:69: 7c:12:5d:a2:00:ae:20:0e:71:7c:fb:77:5c:7f:fa:73:42:2b: 5a:a7:ed:0d:53:87:f5:55:5a:4b:a7:ec:99:37:c5:11:52:42: 59:46:24:6e:19:3f:02:f7:3e:dc:6c:6f:af:1b:75:37:bc:38: c7:49:b2:15:7e:a7:d3:20:14:55:95:3b:6f:f9:86:06:5c:a4: b7:c6:e0:e8:02:b4:e0:5b:11:05:05:31:5c:63:e3:69:2a:b6: 85:19:c7:84:f1:52:25:10:5a:5c:30:7b:a2:07:3f:b9:04:39: eb:e5:8b:a2:29:d1:6c:10:b3:9a:c9:f3:8e:c5:33:f7:dc:3e: 88:ba:89:9b:af:8b:90:a0:77:19:f7:9d:17:d9:a2:7e:02:35: 27:09:26:7f:e4:b4:51:60:88:e2:56:43:48:33:46:d9:31:71: 76:b8:93:3c:4e:83:f0:54:ad:f2:c3:9c:7c:9a:d3:0e:b0:64: 30:b2:8f:48:16:f5:de:21:da:e9:5b:a1:34:cf:8b:f6:5b:a9: 72:02:5f:eb:cc:a6:10:a9:4f:fd:ab:c2:83:c2:6c:89:7f:43: 7b:85:b4:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbjLaDAItz1fZLAKn69GlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMzRjOTdmYmIwNDg2YjVjNjZkMTNjYWIxYThiMjk4NDYw NTIxZGIwHhcNMjUxMjIyMDUwMDMxWhcNMjUxMjIzMDUwMDMxWjAzMTEwLwYDVQQD EygyMWE5MGM3ZWI2ODZmM2E5YmRiMTI0NmRjOTFmY2ZlZjVkZWQ0ZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJog52G1zez098VgLUF74U2TlIi9 +vXIpg0nCFNhaEonw/0BtekGMHAkb5EFtzyG9x3EH+TjzkKd39YVnXJXr4iM1XjE 2bI8LGCw+z4I1xTrJUYWl52SNRJ7OcbllHI2DT/pbbbcXQvabf3u5N36T1HVF0VU ePXmGxvo03ED/VHg1I3J1RizgVThybyrK1YQLaPBXBFUHuCn8R4xymqaXwCyxuB9 FdfBfR6LNbaW4k5Zhuz+QU4acZmx6JheESVMWtFQDn0xQM6/PIt5c3tbBy+1aS5Q LfMvxuqyHRyn1MnK7l/+Jh+/TuvV5pLZNIx9m8ktD6yGUQvdSFrsRsEmbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGpDH62hvOpvbEkbckfz+9d7U7PMB8GA1UdIwQY MBaAFAE0yX+7BIa1xm0TyrGosphGBSHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGIt NThmMjg3NWNhMGJmLzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGItNThmMjg3NWNhMGJm LzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHdw7IGY v1qNyHmFfccFxlVVoTryBhgf58g/GH+NxfAkkgtpfBJdogCuIA5xfPt3XH/6c0Ir WqftDVOH9VVaS6fsmTfFEVJCWUYkbhk/Avc+3Gxvrxt1N7w4x0myFX6n0yAUVZU7 b/mGBlykt8bg6AK04FsRBQUxXGPjaSq2hRnHhPFSJRBaXDB7ogc/uQQ56+WLoinR bBCzmsnzjsUz99w+iLqJm6+LkKB3GfedF9mifgI1Jwkmf+S0UWCI4lZDSDNG2TFx driTPE6D8FSt8sOcfJrTDrBkMLKPSBb13iHa6VuhNM+L9lupcgJf68ymEKlP/avC g8JsiX9De4W0iw== -----END CERTIFICATE-----Generated at Mon Dec 22 08:06:46 2025 by rpki-client