This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json) Hash identifier: mB3fQD8mM5DP3ADHSpgsfMsV3BmC0CWPInBvlCTkTFk= Subject key identifier: F2:68:8B:28:B1:DC:03:04:51:C0:F0:9C:B9:46:48:25:16:52:79:CE Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4 Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4 Certificate serial: 019AF19B6941068E08C59E626EF83C5021DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft Manifest number: 0D8D Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: Yffgetz355mo1piWp6ceK0SyxuAybFC5Zya+sic18lw=) 2: jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa (hash: BbNkNKRJ/r5Ixy3RnUBfFtFAmvmPYuPFYMJIKOu9VwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:69:41:06:8e:08:c5:9e:62:6e:f8:3c:50:21:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=f2688b28b1dc030451c0f09cb9464825165279ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3c:fe:33:ab:5b:29:86:e5:7c:c2:58:f0:6f: 9e:7b:b3:29:dc:24:08:5b:e6:cf:fc:ee:43:71:a6: 88:6c:06:aa:2d:26:dd:e4:52:74:46:87:f5:87:39: 21:11:26:ad:c9:4b:be:db:d9:c5:7c:e9:a3:62:ac: e6:8a:11:a6:f5:91:26:31:05:f9:43:3d:7f:e6:7f: 38:a4:d9:04:ce:0d:45:d6:c1:f4:a1:3a:71:54:64: 80:11:ff:6b:41:fb:4b:32:64:b9:c7:f0:e5:46:88: ed:da:77:fa:67:e1:f1:9d:f7:4f:09:d1:90:da:d1: 74:1c:a3:2a:7c:0b:01:07:f3:e0:6a:57:fa:7d:0e: 9c:3b:a6:54:d9:7f:b5:27:4d:c8:e0:f4:b6:26:8e: 1a:3d:91:63:6d:a4:d8:81:27:a3:fa:ad:3d:d0:75: 9b:a8:01:69:2d:e1:c6:c0:22:aa:8d:f2:cc:7d:f5: a0:9f:ca:a2:07:25:9b:33:07:27:12:f7:4c:15:63: d8:fe:e8:bb:2d:df:d5:47:15:b7:8f:61:b3:5f:57: 21:b7:1a:13:70:fd:82:41:3b:29:fb:74:67:c0:d0: f8:1a:f1:f6:f2:f1:25:02:a7:38:17:b4:94:57:d2: cb:08:b6:3a:07:03:cc:1d:10:46:67:0a:bf:b7:16: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:68:8B:28:B1:DC:03:04:51:C0:F0:9C:B9:46:48:25:16:52:79:CE X509v3 Authority Key Identifier: keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:40:c3:00:02:c2:3e:bb:76:f9:6d:90:7b:ac:0c:3a:25:6b: fc:24:dc:89:bf:b4:13:33:25:04:fa:84:77:d2:41:bb:38:d0: f5:4d:ef:8d:62:e8:06:42:4c:65:66:14:76:0d:13:3b:14:8c: 2e:a0:1e:da:db:f6:a0:1f:6e:5c:76:f7:e1:cd:1e:09:0f:9c: d3:a5:91:e8:17:72:87:03:69:93:45:c0:b0:82:45:ae:79:85: 0e:53:65:4c:64:a7:ce:5e:cc:c6:d0:0b:5d:d8:a9:47:a2:e3: 6c:99:58:59:da:69:d5:26:81:ea:e0:c0:ae:58:87:d6:ed:b8: 12:0e:1c:36:64:34:c5:42:5b:e8:2e:b8:41:9e:ea:f2:05:43: 5a:ba:77:42:74:b8:92:2d:10:29:c5:0a:98:17:2a:75:ac:55: a2:c6:a5:a8:bb:1d:b0:3d:19:11:ce:40:ea:ae:16:c0:21:02: 8b:40:35:55:89:eb:32:1c:61:9d:2b:e6:48:0b:92:50:ff:1a: 22:17:02:65:b5:ac:de:30:c5:5f:82:c3:05:d9:76:d1:47:75: 58:98:57:e2:7f:e5:3d:65:1b:10:cb:8c:03:8a:d3:df:36:4a: 12:9c:df:49:fc:f3:7c:75:c0:f3:b2:78:d9:b9:f7:03:c8:8c: c5:c3:55:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2lBBo4IxZ5ibvg8UCHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYmQyNzEwYzJmY2Y1NTFiMzFmZDdjY2M2MGRmMWY2YmI0 YTkyYzQwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD EyhmMjY4OGIyOGIxZGMwMzA0NTFjMGYwOWNiOTQ2NDgyNTE2NTI3OWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Dz+M6tbKYblfMJY8G+ee7Mp3CQI W+bP/O5DcaaIbAaqLSbd5FJ0Rof1hzkhESatyUu+29nFfOmjYqzmihGm9ZEmMQX5 Qz1/5n84pNkEzg1F1sH0oTpxVGSAEf9rQftLMmS5x/DlRojt2nf6Z+HxnfdPCdGQ 2tF0HKMqfAsBB/Pgalf6fQ6cO6ZU2X+1J03I4PS2Jo4aPZFjbaTYgSej+q090HWb qAFpLeHGwCKqjfLMffWgn8qiByWbMwcnEvdMFWPY/ui7Ld/VRxW3j2GzX1chtxoT cP2CQTsp+3RnwND4GvH28vElAqc4F7SUV9LLCLY6BwPMHRBGZwq/txbSRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJoiyix3AMEUcDwnLlGSCUWUnnOMB8GA1UdIwQY MBaAFGq9JxDC/PVRsx/XzMYN8fa7SpLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQt NzRlMzMxZGJkMDdmLzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQtNzRlMzMxZGJkMDdm LzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwEDDAALC Prt2+W2Qe6wMOiVr/CTcib+0EzMlBPqEd9JBuzjQ9U3vjWLoBkJMZWYUdg0TOxSM LqAe2tv2oB9uXHb34c0eCQ+c06WR6BdyhwNpk0XAsIJFrnmFDlNlTGSnzl7MxtAL XdipR6LjbJlYWdpp1SaB6uDArliH1u24Eg4cNmQ0xUJb6C64QZ7q8gVDWrp3QnS4 ki0QKcUKmBcqdaxVosalqLsdsD0ZEc5A6q4WwCECi0A1VYnrMhxhnSvmSAuSUP8a IhcCZbWs3jDFX4LDBdl20Ud1WJhX4n/lPWUbEMuMA4rT3zZKEpzfSfzzfHXA87J4 2bn3A8iMxcNVog== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:37 2025 by rpki-client