This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft File: ArVih4aW5ig8TfgUo4tzXFAMr4s.mft (raw, json) Hash identifier: wdtkW8ujRSXeekZd4EHEQfWznrnOGtQytHlgc/6tTUc= Subject key identifier: 24:81:22:39:58:F9:A9:27:3E:F3:8A:99:AC:91:68:EB:99:A9:46:DE Authority key identifier: 02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B Certificate issuer: /CN=02b562878696e6283c4df814a38b735c500caf8b Certificate serial: 019AFB4301D0D8831325D304FD0CE1D9E83E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft Manifest number: 0142 Signing time: Mon 08 Dec 2025 00:01:03 +0000 Manifest this update: Mon 08 Dec 2025 00:01:03 +0000 Manifest next update: Tue 09 Dec 2025 00:01:03 +0000 Files and hashes: 1: ArVih4aW5ig8TfgUo4tzXFAMr4s.crl (hash: LSEjOKdDxOm5bl1hrXblyIBRTowvXEHKRJwYsckTzx4=) 2: oZDlVRHFRnrptCcfA00p7uB3_TI.roa (hash: 4RY5Dt4Df4i349+ElvF5sCLuJsK1T7pn6qyR+T8cJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:43:01:d0:d8:83:13:25:d3:04:fd:0c:e1:d9:e8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b562878696e6283c4df814a38b735c500caf8b Validity Not Before: Dec 8 00:01:03 2025 GMT Not After : Dec 9 00:01:03 2025 GMT Subject: CN=2481223958f9a9273ef38a99ac9168eb99a946de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cd:b2:48:f5:80:58:28:3c:37:d4:a6:30:f6: e1:9f:9b:9f:fc:00:9a:29:9e:59:f9:1e:d5:52:94: 77:3b:6b:8c:a0:e4:17:1c:cc:c6:9d:71:1c:78:70: 2f:2a:d2:96:9b:4e:bc:e7:63:0b:92:b3:34:36:f7: 06:55:d9:9d:20:96:9a:95:97:db:34:24:16:42:ec: 09:46:91:68:4a:98:0a:01:21:75:08:ac:22:4f:3e: 35:6a:57:3a:67:46:4a:0b:c4:dc:8b:79:df:04:f2: 59:2e:95:12:0a:71:c9:8a:38:69:ba:68:30:91:c8: c5:88:7f:ee:82:01:12:ab:ac:96:83:96:0a:27:01: c8:1c:5d:29:66:84:fc:22:4a:3d:52:60:86:02:c5: f8:8e:89:ac:44:e2:95:6c:f4:ea:20:00:c5:00:5c: 83:f4:d7:4d:19:61:7d:10:2b:0a:51:42:19:20:5c: 0e:2d:43:7f:bc:c5:1c:d2:57:38:86:c1:74:49:9d: c2:bb:94:3b:cc:f9:15:be:ed:be:68:86:11:9b:44: 90:e4:d1:8f:34:cd:f4:0e:e0:b3:a2:9a:9a:f8:82: 62:ff:23:ea:bb:f3:59:a3:51:68:a5:eb:0d:64:9f: df:d6:73:6a:95:4b:9f:86:91:ca:f1:6c:44:a8:07: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:81:22:39:58:F9:A9:27:3E:F3:8A:99:AC:91:68:EB:99:A9:46:DE X509v3 Authority Key Identifier: keyid:02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7d:e6:e0:cc:63:da:0c:92:35:6d:d7:65:ac:f2:b7:e3:26: e0:f8:2d:14:bc:9f:06:fc:aa:1e:9a:35:ec:94:49:36:43:70: eb:bd:80:21:ed:a2:3a:f4:67:c4:72:f6:84:8e:bb:65:a0:ff: 74:7e:e2:78:63:07:89:5e:df:7b:51:c3:01:18:4a:b6:f0:5b: 1d:8e:eb:3e:de:ff:78:46:2c:28:7a:70:12:93:e8:41:4f:e8: 8b:77:52:c3:5e:45:28:74:92:58:0a:2e:37:a1:da:06:75:d0: 96:e6:f4:0e:f4:5f:c1:1b:74:bb:d9:4f:0c:a1:da:e6:93:92: c2:51:77:4d:16:48:3b:67:41:a1:97:e0:13:6e:67:ef:d8:48: 55:7f:4d:66:4c:e7:cd:15:1a:4e:51:dd:75:0f:df:a8:f6:1d: 83:80:02:09:d9:d3:16:d8:b0:27:a1:62:56:44:c5:fa:15:5e: d2:0e:e0:01:b0:68:05:78:27:b5:fa:5f:cd:7e:36:e7:25:6f: ee:44:b3:b4:e0:4f:d9:0d:13:69:72:e0:9d:54:23:7a:09:d0: d7:96:c1:67:06:ab:85:4c:40:3a:84:1c:86:55:3d:22:51:36: ff:71:4e:f2:61:10:c8:ec:62:6b:71:87:d2:7b:2b:6a:97:eb: 56:e7:76:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7QwHQ2IMTJdME/Qzh2eg+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjU2Mjg3ODY5NmU2MjgzYzRkZjgxNGEzOGI3MzVjNTAw Y2FmOGIwHhcNMjUxMjA4MDAwMTAzWhcNMjUxMjA5MDAwMTAzWjAzMTEwLwYDVQQD EygyNDgxMjIzOTU4ZjlhOTI3M2VmMzhhOTlhYzkxNjhlYjk5YTk0NmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx82ySPWAWCg8N9SmMPbhn5uf/ACa KZ5Z+R7VUpR3O2uMoOQXHMzGnXEceHAvKtKWm06852MLkrM0NvcGVdmdIJaalZfb NCQWQuwJRpFoSpgKASF1CKwiTz41alc6Z0ZKC8Tci3nfBPJZLpUSCnHJijhpumgw kcjFiH/uggESq6yWg5YKJwHIHF0pZoT8Iko9UmCGAsX4jomsROKVbPTqIADFAFyD 9NdNGWF9ECsKUUIZIFwOLUN/vMUc0lc4hsF0SZ3Cu5Q7zPkVvu2+aIYRm0SQ5NGP NM30DuCzopqa+IJi/yPqu/NZo1FopesNZJ/f1nNqlUufhpHK8WxEqAeVnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSBIjlY+aknPvOKmayRaOuZqUbeMB8GA1UdIwQY MBaAFAK1YoeGluYoPE34FKOLc1xQDK+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOWM4NDAtOTYxNS00YjUwLTg5NTIt OTJkM2FhZDMyZjQ5LzEvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9mOWM4NDAtOTYxNS00YjUwLTg5NTItOTJkM2FhZDMyZjQ5 LzEvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHX3m4Mxj 2gySNW3XZazyt+Mm4PgtFLyfBvyqHpo17JRJNkNw672AIe2iOvRnxHL2hI67ZaD/ dH7ieGMHiV7fe1HDARhKtvBbHY7rPt7/eEYsKHpwEpPoQU/oi3dSw15FKHSSWAou N6HaBnXQlub0DvRfwRt0u9lPDKHa5pOSwlF3TRZIO2dBoZfgE25n79hIVX9NZkzn zRUaTlHddQ/fqPYdg4ACCdnTFtiwJ6FiVkTF+hVe0g7gAbBoBXgntfpfzX425yVv 7kSztOBP2Q0TaXLgnVQjegnQ15bBZwarhUxAOoQchlU9IlE2/3FO8mEQyOxia3GH 0nsrapfrVud2XQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:20:09 2025 by rpki-client