This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft File: 5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json) Hash identifier: M1L/XMxMLO8L4ue/ZP1gyfjUd22v54n3fQUr6ralpoQ= Subject key identifier: 3B:69:CC:A3:66:0B:73:37:07:E9:85:82:F7:9F:03:7B:F9:DA:8D:51 Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb Certificate serial: 019AF0BF5F8E1E66348096D9B99ED153C137 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft Manifest number: 0CB3 Signing time: Fri 05 Dec 2025 23:01:04 +0000 Manifest this update: Fri 05 Dec 2025 23:01:04 +0000 Manifest next update: Sat 06 Dec 2025 23:01:04 +0000 Files and hashes: 1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: fZB/u7qaVMnCfShN/8qKLvtUVFDnPZFztcehbDloH80=) 2: ZEltVn27Wr_tDWWUDsnoIPSexys.roa (hash: nTpT1tYnBssg4bHieTQOF2MWxJ4AkBKr1Y7xxrvK7kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:5f:8e:1e:66:34:80:96:d9:b9:9e:d1:53:c1:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb Validity Not Before: Dec 5 23:01:04 2025 GMT Not After : Dec 6 23:01:04 2025 GMT Subject: CN=3b69cca3660b733707e98582f79f037bf9da8d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:b3:9e:6f:ae:03:6d:0a:94:c3:0c:5a:13: 5a:9c:fd:12:d9:c2:1f:ae:7d:60:04:2c:f5:94:4f: f5:11:7a:80:60:9a:44:c7:bf:e9:19:db:96:4c:cb: ab:ff:a0:71:f8:a3:53:92:75:b1:6a:0f:81:1d:d3: e8:85:a5:e0:cf:5c:d9:d3:24:19:21:0c:0e:b5:9a: 91:ae:0b:0b:a1:1f:4e:f8:ee:c3:68:47:59:3e:80: 40:3f:4e:30:42:33:d5:36:cd:08:8a:21:d5:89:2c: 97:ba:bf:98:b8:93:d3:9c:44:46:09:4f:65:76:66: fc:d0:25:48:69:61:5b:76:c8:00:7f:13:3e:ca:1d: 0c:11:7f:d1:11:ef:0c:46:8f:00:61:0d:fa:52:a7: 44:0f:73:90:05:4c:b4:b2:b6:14:62:0d:28:53:db: cb:58:04:f7:0c:c3:f6:62:38:81:7b:07:66:2b:0f: f5:71:0c:a1:c2:28:99:5c:a0:89:5d:70:77:2b:97: 3b:e9:9d:53:9a:71:75:b3:35:a7:c3:46:23:f0:8e: bc:75:8c:9b:06:23:43:53:23:61:d3:d0:82:cb:c6: 12:04:cd:35:c9:32:83:18:43:e4:45:a8:7b:8d:75: 90:31:47:44:76:f7:31:96:3e:55:fc:fe:1b:9e:46: fb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:69:CC:A3:66:0B:73:37:07:E9:85:82:F7:9F:03:7B:F9:DA:8D:51 X509v3 Authority Key Identifier: keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:44:ac:04:63:8a:79:18:fa:64:da:50:f4:ef:21:dd:94:67: 4e:4d:b1:16:15:df:85:59:59:65:a3:ab:f7:56:7f:9d:82:72: 91:ba:63:2d:e1:13:44:fc:fc:d4:df:69:f0:04:24:a2:b4:07: a2:65:8a:80:53:90:4a:15:db:e8:04:b1:f7:ab:e9:39:06:fa: 4a:3e:cd:db:66:77:d2:b3:f5:bf:c0:1a:1a:53:0b:89:ec:59: 47:d3:9b:1c:52:96:59:39:b2:6c:79:a1:65:7d:9d:79:22:b2: bc:df:e6:00:75:f5:d7:45:64:a0:d4:15:5c:8a:e8:4d:72:6f: f1:05:d5:a5:dc:5c:c3:7c:91:78:95:0f:ac:af:db:a8:18:62: 5f:65:ca:24:83:86:7a:2a:73:d1:aa:56:9d:a0:14:be:8f:23: 30:2a:cf:b9:be:63:04:ea:54:54:2e:b3:66:2b:a2:4c:0f:62: 9e:a6:7a:2a:b7:67:d7:40:4c:af:7b:7a:aa:66:4d:52:cd:cf: 7e:32:40:11:c0:fc:6d:cd:88:09:7e:0b:3b:86:ce:af:13:86: 28:e4:a2:04:77:80:29:6c:89:55:a8:1a:eb:bf:7e:84:87:5d: ac:ef:27:fb:70:93:37:60:c4:0a:a1:4e:c2:f2:49:65:d2:99: 31:33:48:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1+OHmY0gJbZuZ7RU8E3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MDQ0YTlkMTBhMTllNmIxYWNlZGFjOWZmNzc4ZDRmNDA5 MDY4Y2IwHhcNMjUxMjA1MjMwMTA0WhcNMjUxMjA2MjMwMTA0WjAzMTEwLwYDVQQD EygzYjY5Y2NhMzY2MGI3MzM3MDdlOTg1ODJmNzlmMDM3YmY5ZGE4ZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDmznm+uA20KlMMMWhNanP0S2cIf rn1gBCz1lE/1EXqAYJpEx7/pGduWTMur/6Bx+KNTknWxag+BHdPohaXgz1zZ0yQZ IQwOtZqRrgsLoR9O+O7DaEdZPoBAP04wQjPVNs0IiiHViSyXur+YuJPTnERGCU9l dmb80CVIaWFbdsgAfxM+yh0MEX/REe8MRo8AYQ36UqdED3OQBUy0srYUYg0oU9vL WAT3DMP2YjiBewdmKw/1cQyhwiiZXKCJXXB3K5c76Z1TmnF1szWnw0Yj8I68dYyb BiNDUyNh09CCy8YSBM01yTKDGEPkRah7jXWQMUdEdvcxlj5V/P4bnkb7pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtpzKNmC3M3B+mFgvefA3v52o1RMB8GA1UdIwQY MBaAFOQESp0QoZ5rGs7ayf93jU9AkGjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZThiNWQtZWU5OC00N2ZiLWEzODkt MDNmYTdhOWMzNzFlLzEvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wZThiNWQtZWU5OC00N2ZiLWEzODktMDNmYTdhOWMzNzFl LzEvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkSsBGOK eRj6ZNpQ9O8h3ZRnTk2xFhXfhVlZZaOr91Z/nYJykbpjLeETRPz81N9p8AQkorQH omWKgFOQShXb6ASx96vpOQb6Sj7N22Z30rP1v8AaGlMLiexZR9ObHFKWWTmybHmh ZX2deSKyvN/mAHX110VkoNQVXIroTXJv8QXVpdxcw3yReJUPrK/bqBhiX2XKJIOG eipz0apWnaAUvo8jMCrPub5jBOpUVC6zZiuiTA9inqZ6Krdn10BMr3t6qmZNUs3P fjJAEcD8bc2ICX4LO4bOrxOGKOSiBHeAKWyJVaga679+hIddrO8n+3CTN2DECqFO wvJJZdKZMTNINg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:17 2025 by rpki-client