This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft File: ArkWs7LpV9GFAyzbSZl2oA66SXU.mft (raw, json) Hash identifier: rZW5jqJ47/FYppiU3IY1ERRDLMKL78RLtUQdIjfwaoc= Subject key identifier: DE:1C:AE:7F:42:30:07:CB:BD:48:F8:8E:A2:B7:35:60:49:7A:75:C2 Authority key identifier: 02:B9:16:B3:B2:E9:57:D1:85:03:2C:DB:49:99:76:A0:0E:BA:49:75 Certificate issuer: /CN=02b916b3b2e957d185032cdb499976a00eba4975 Certificate serial: 019AF31BAA51D26F6AC7CB2233AB245FBC1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft Manifest number: A7 Signing time: Sat 06 Dec 2025 10:01:07 +0000 Manifest this update: Sat 06 Dec 2025 10:01:07 +0000 Manifest next update: Sun 07 Dec 2025 10:01:07 +0000 Files and hashes: 1: ArkWs7LpV9GFAyzbSZl2oA66SXU.crl (hash: vaOTHvwsQ7YgERq2lFoE6D2rS7wTkthkolorqSuRPYY=) 2: FfIKnmyhcS0MyS6jImyiKhfTG4M.roa (hash: Bq7KFCDra/eepPggazfSqcjfSDY8IxclStu1McG0psw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:aa:51:d2:6f:6a:c7:cb:22:33:ab:24:5f:bc:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b916b3b2e957d185032cdb499976a00eba4975 Validity Not Before: Dec 6 10:01:07 2025 GMT Not After : Dec 7 10:01:07 2025 GMT Subject: CN=de1cae7f423007cbbd48f88ea2b73560497a75c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:c9:59:c2:74:26:e1:1c:7c:55:89:0d:fb: 9e:ad:00:2d:dd:ca:91:a2:64:b1:15:85:cb:e2:93: 97:81:25:d8:f2:69:68:68:b1:16:9e:21:79:ba:c8: 4c:a5:4b:da:5c:e4:e2:d5:02:23:fb:eb:0e:6d:d8: b5:11:5f:4a:03:36:32:15:c7:79:d3:08:4f:98:dc: 59:52:4a:e4:d1:4b:32:b8:e9:21:9f:84:db:f5:a3: 29:c8:49:da:e6:49:2f:5d:50:2c:86:19:5a:e5:16: 08:48:9c:bd:97:88:71:ff:b8:e1:48:51:44:4c:56: 29:ba:5f:1b:be:dc:73:77:1d:78:e2:98:be:29:cb: 60:f5:d2:7b:e9:ca:83:f4:86:19:5c:ee:1c:5f:36: f0:f7:a3:6b:01:f3:57:86:23:6c:a1:9c:c7:f3:36: 6c:0a:67:34:b0:0f:c0:17:40:7a:0c:9e:07:a9:0b: 00:cd:85:51:7d:10:2e:44:96:31:73:cf:9d:1b:ca: 50:e2:a5:15:83:cb:a3:94:28:06:de:9b:30:78:35: dd:06:75:f3:98:92:b9:04:31:a9:4d:bf:6f:95:43: 2d:94:36:43:44:a5:8c:96:97:85:66:2a:f2:c8:d9: af:a1:f9:0b:33:fc:8b:cd:81:e1:e7:3a:20:77:25: 4e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1C:AE:7F:42:30:07:CB:BD:48:F8:8E:A2:B7:35:60:49:7A:75:C2 X509v3 Authority Key Identifier: keyid:02:B9:16:B3:B2:E9:57:D1:85:03:2C:DB:49:99:76:A0:0E:BA:49:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArkWs7LpV9GFAyzbSZl2oA66SXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/722a81-f737-47c3-8634-01993ae0f634/1/ArkWs7LpV9GFAyzbSZl2oA66SXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c0:b0:86:4c:06:01:a1:b2:b0:e4:96:59:e6:ff:af:4b:d5: 0c:07:01:c2:c4:89:9d:d2:91:99:63:23:d9:4f:5d:34:b4:f4: f7:13:7c:00:04:a4:d4:a6:4e:a7:3a:ea:5e:eb:32:a2:3c:02: 26:8c:61:a0:b8:27:1c:45:77:7c:9d:0a:48:6e:57:ee:aa:8e: a7:f5:85:26:f0:b4:73:5d:0f:31:30:43:c3:97:78:96:2e:d9: 27:4a:24:f1:53:05:9d:82:d9:4a:70:d0:b4:fc:8f:c6:53:53: 17:8a:c8:e4:fe:d0:7d:40:e8:3d:8c:a5:98:f0:ff:a9:6f:f4: 58:2d:44:e7:1b:98:46:06:57:b6:88:1e:66:13:94:f2:87:8d: f5:5c:85:48:92:d5:85:10:8f:49:6a:a9:92:da:4a:09:a2:6a: dc:7a:da:da:1d:1c:13:51:97:83:75:e8:5b:9d:ba:88:e0:9d: 0b:54:51:5e:d9:e3:76:d3:a9:56:99:1e:de:d3:fe:60:93:e1: bd:9e:e9:1d:67:d4:47:06:83:c2:c3:50:4d:32:30:e6:a7:97: 5d:41:f1:3f:8e:58:58:5e:18:8a:54:bc:ea:f2:2d:bc:7c:05: c2:e0:47:54:60:09:32:f0:df:d5:96:09:6d:9c:98:ed:cb:af: 0b:7c:84:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6pR0m9qx8siM6skX7wfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjkxNmIzYjJlOTU3ZDE4NTAzMmNkYjQ5OTk3NmEwMGVi YTQ5NzUwHhcNMjUxMjA2MTAwMTA3WhcNMjUxMjA3MTAwMTA3WjAzMTEwLwYDVQQD EyhkZTFjYWU3ZjQyMzAwN2NiYmQ0OGY4OGVhMmI3MzU2MDQ5N2E3NWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGzJWcJ0JuEcfFWJDfuerQAt3cqR omSxFYXL4pOXgSXY8mloaLEWniF5ushMpUvaXOTi1QIj++sObdi1EV9KAzYyFcd5 0whPmNxZUkrk0UsyuOkhn4Tb9aMpyEna5kkvXVAshhla5RYISJy9l4hx/7jhSFFE TFYpul8bvtxzdx144pi+Kctg9dJ76cqD9IYZXO4cXzbw96NrAfNXhiNsoZzH8zZs Cmc0sA/AF0B6DJ4HqQsAzYVRfRAuRJYxc8+dG8pQ4qUVg8ujlCgG3psweDXdBnXz mJK5BDGpTb9vlUMtlDZDRKWMlpeFZiryyNmvofkLM/yLzYHh5zogdyVOGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4crn9CMAfLvUj4jqK3NWBJenXCMB8GA1UdIwQY MBaAFAK5FrOy6VfRhQMs20mZdqAOukl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJrV3M3THBWOUdGQXl6YlNabDJvQTY2U1hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MjJhODEtZjczNy00N2MzLTg2MzQt MDE5OTNhZTBmNjM0LzEvQXJrV3M3THBWOUdGQXl6YlNabDJvQTY2U1hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy83MjJhODEtZjczNy00N2MzLTg2MzQtMDE5OTNhZTBmNjM0 LzEvQXJrV3M3THBWOUdGQXl6YlNabDJvQTY2U1hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8CwhkwG AaGysOSWWeb/r0vVDAcBwsSJndKRmWMj2U9dNLT09xN8AASk1KZOpzrqXusyojwC JoxhoLgnHEV3fJ0KSG5X7qqOp/WFJvC0c10PMTBDw5d4li7ZJ0ok8VMFnYLZSnDQ tPyPxlNTF4rI5P7QfUDoPYylmPD/qW/0WC1E5xuYRgZXtogeZhOU8oeN9VyFSJLV hRCPSWqpktpKCaJq3Hra2h0cE1GXg3XoW526iOCdC1RRXtnjdtOpVpke3tP+YJPh vZ7pHWfURwaDwsNQTTIw5qeXXUHxP45YWF4YilS86vItvHwFwuBHVGAJMvDf1ZYJ bZyY7cuvC3yEog== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:56 2025 by rpki-client