This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft File: ArVih4aW5ig8TfgUo4tzXFAMr4s.mft (raw, json) Hash identifier: SLOv59+ffkG4cpgtimujxP7cMs3sRGuGyp1zmI1dIKk= Subject key identifier: FB:98:F1:BC:10:42:42:F1:A6:87:E7:11:9A:8A:71:B5:3B:A9:BC:E4 Authority key identifier: 02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B Certificate issuer: /CN=02b562878696e6283c4df814a38b735c500caf8b Certificate serial: 019BF79A5E855DBD8BFA399120F80F3A74CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft Manifest number: 01C5 Signing time: Mon 26 Jan 2026 00:00:47 +0000 Manifest this update: Mon 26 Jan 2026 00:00:47 +0000 Manifest next update: Tue 27 Jan 2026 00:00:47 +0000 Files and hashes: 1: ArVih4aW5ig8TfgUo4tzXFAMr4s.crl (hash: nrl6CMeNquuD9FxBB8xJHc0y7qkj89316QVr6UoUsdQ=) 2: WAGJyKxiEmCmxx4SMg6ub09WxpM.roa (hash: 4w16Pq/UVLRE1myYy33U5810cxauLZkuMlxwpETWa9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:5e:85:5d:bd:8b:fa:39:91:20:f8:0f:3a:74:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b562878696e6283c4df814a38b735c500caf8b Validity Not Before: Jan 26 00:00:47 2026 GMT Not After : Jan 27 00:00:47 2026 GMT Subject: CN=fb98f1bc104242f1a687e7119a8a71b53ba9bce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:88:50:1d:f8:df:c7:a4:ce:af:41:b3:30: f4:ba:a6:ae:3e:6d:03:53:e9:ac:56:6a:d3:48:42: 67:c5:7b:f8:cf:60:0c:02:60:f3:c5:af:14:e4:64: 42:a4:f6:54:bc:69:b7:02:a2:b5:37:d6:85:63:89: a8:86:ee:5e:63:4b:76:c5:92:87:4b:3f:1a:27:66: ff:6a:b2:06:21:85:ca:5a:ff:f3:84:c0:3d:10:70: 06:3c:eb:f0:27:3c:f2:4d:09:29:bb:89:9c:1b:9c: ec:dc:8c:4d:93:62:c1:1e:7f:25:f5:b6:88:f0:4a: ee:2f:af:91:4a:b0:fe:1d:c4:ac:a9:8c:1a:28:40: b9:9e:a5:c9:9c:1c:89:b3:09:7b:29:a3:12:a1:e5: a1:c9:53:54:be:2b:ab:de:12:4b:dd:22:01:f2:9b: 36:99:50:6a:a3:5c:57:d6:41:92:64:db:f1:a9:58: 84:22:11:8f:64:59:75:79:9c:b3:07:5e:a1:8d:86: 47:d1:42:ba:18:cc:b1:9b:33:a6:36:b7:8e:db:23: 21:ef:82:7e:32:e0:9b:24:59:5e:54:27:65:60:47: e4:bf:66:ad:01:1b:3a:f9:bb:89:dd:b0:c2:ee:a5: 87:5d:ea:82:ed:69:9c:fb:1f:9e:cf:11:ec:c4:1f: 50:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:98:F1:BC:10:42:42:F1:A6:87:E7:11:9A:8A:71:B5:3B:A9:BC:E4 X509v3 Authority Key Identifier: keyid:02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:92:05:72:01:7c:3f:1c:15:cc:58:a2:06:30:da:72:78:ca: 69:0a:b2:d9:ad:c9:37:ac:31:36:91:fc:45:d2:10:06:c0:0b: c6:f2:ed:7d:0b:a8:20:6a:ba:04:08:4f:81:fa:5a:bc:55:34: af:db:33:31:c1:92:d9:50:c1:06:97:8f:66:9d:a2:bb:55:14: d1:2a:fd:0b:2c:18:16:17:35:22:fa:73:0c:2c:52:79:20:5b: 25:c9:3f:7a:69:0e:16:79:1b:3b:19:40:2a:8e:09:ff:d8:4c: 1f:69:98:96:86:cb:e0:5f:e5:88:7a:ed:82:b1:0d:4f:46:ff: 18:b9:81:a4:94:fc:1d:92:96:3b:dd:af:da:4f:ce:9c:14:9b: 58:dd:9f:c1:7e:c5:1c:ff:ad:20:bb:2c:d6:1d:36:81:4f:d2: 14:51:f8:15:a2:4e:23:58:3f:e3:02:ae:d7:d8:49:a6:30:ea: 08:1e:b9:44:ef:a6:97:61:2d:63:28:42:49:05:c7:19:75:e4: 26:4b:6f:1c:74:5d:31:52:90:80:c5:1c:0f:9e:95:84:6f:d1: de:c3:02:39:f7:f1:ab:d9:2d:40:78:cb:aa:6d:b0:93:99:20: 08:2c:56:5d:2d:35:bf:a3:88:51:fb:29:df:83:4e:20:16:02: e3:43:42:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3ml6FXb2L+jmRIPgPOnTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjU2Mjg3ODY5NmU2MjgzYzRkZjgxNGEzOGI3MzVjNTAw Y2FmOGIwHhcNMjYwMTI2MDAwMDQ3WhcNMjYwMTI3MDAwMDQ3WjAzMTEwLwYDVQQD EyhmYjk4ZjFiYzEwNDI0MmYxYTY4N2U3MTE5YThhNzFiNTNiYTliY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmqIUB3438ekzq9BszD0uqauPm0D U+msVmrTSEJnxXv4z2AMAmDzxa8U5GRCpPZUvGm3AqK1N9aFY4mohu5eY0t2xZKH Sz8aJ2b/arIGIYXKWv/zhMA9EHAGPOvwJzzyTQkpu4mcG5zs3IxNk2LBHn8l9baI 8EruL6+RSrD+HcSsqYwaKEC5nqXJnByJswl7KaMSoeWhyVNUviur3hJL3SIB8ps2 mVBqo1xX1kGSZNvxqViEIhGPZFl1eZyzB16hjYZH0UK6GMyxmzOmNreO2yMh74J+ MuCbJFleVCdlYEfkv2atARs6+buJ3bDC7qWHXeqC7Wmc+x+ezxHsxB9QiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuY8bwQQkLxpofnEZqKcbU7qbzkMB8GA1UdIwQY MBaAFAK1YoeGluYoPE34FKOLc1xQDK+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOWM4NDAtOTYxNS00YjUwLTg5NTIt OTJkM2FhZDMyZjQ5LzEvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9mOWM4NDAtOTYxNS00YjUwLTg5NTItOTJkM2FhZDMyZjQ5 LzEvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZIFcgF8 PxwVzFiiBjDacnjKaQqy2a3JN6wxNpH8RdIQBsALxvLtfQuoIGq6BAhPgfpavFU0 r9szMcGS2VDBBpePZp2iu1UU0Sr9CywYFhc1IvpzDCxSeSBbJck/emkOFnkbOxlA Ko4J/9hMH2mYlobL4F/liHrtgrENT0b/GLmBpJT8HZKWO92v2k/OnBSbWN2fwX7F HP+tILss1h02gU/SFFH4FaJOI1g/4wKu19hJpjDqCB65RO+ml2EtYyhCSQXHGXXk JktvHHRdMVKQgMUcD56VhG/R3sMCOffxq9ktQHjLqm2wk5kgCCxWXS01v6OIUfsp 34NOIBYC40NCiw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:59 2026 by rpki-client