This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json) Hash identifier: UvIe/Y3keKsTJCb0XEjaozZjmEQUE0r9o7NOzJSjxbQ= Subject key identifier: D4:40:77:AA:B0:4E:46:17:9C:63:CB:79:69:B6:AA:94:E9:26:7A:58 Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2 Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2 Certificate serial: 019B34C584594A7E7940E0CCB4B2D1D0D890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft Manifest number: 177F Signing time: Fri 19 Dec 2025 04:01:58 +0000 Manifest this update: Fri 19 Dec 2025 04:01:58 +0000 Manifest next update: Sat 20 Dec 2025 04:01:58 +0000 Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: VQ8lM18RU7G0VAIN/E2Qbu8KBL9T3Bh7aXdhQFYwR70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:84:59:4a:7e:79:40:e0:cc:b4:b2:d1:d0:d8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2 Validity Not Before: Dec 19 04:01:58 2025 GMT Not After : Dec 20 04:01:58 2025 GMT Subject: CN=d44077aab04e46179c63cb7969b6aa94e9267a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:6b:4c:a1:f0:4e:52:c4:67:d2:3d:f2:b7: 48:db:38:97:13:91:82:b8:f9:fb:bd:5b:ea:46:51: a4:8e:f9:90:07:f2:dd:0d:63:dd:a7:bb:56:e1:54: d2:66:52:1f:ff:4a:0b:15:7d:dc:3a:05:17:db:7c: eb:83:a9:c1:b1:9e:2c:8f:01:28:00:bb:9a:5e:7a: 40:f7:1b:9c:db:3d:67:d5:8f:31:07:58:2d:f8:ef: cd:20:d7:7f:d9:aa:c0:44:07:57:76:13:59:83:4f: 78:ee:ef:00:ec:79:c2:cc:ff:cd:53:7f:e3:21:60: 39:c9:a3:23:3b:9f:b9:da:a8:7b:fb:0e:43:ce:93: d2:da:5a:11:61:76:cd:ec:f8:8e:37:b3:3c:63:77: a8:b8:60:2a:6c:10:58:cb:cd:5b:3e:17:56:4d:5b: 7d:9d:70:1e:07:dd:55:44:7e:ec:cd:5c:92:f6:e7: 8b:ba:ce:29:f4:06:aa:bf:63:c0:1c:9d:33:b9:b6: 51:5d:b2:f7:30:31:96:b6:16:63:a8:b6:fe:79:d7: 34:21:94:f8:d8:cb:3e:b6:7b:88:07:e5:39:ba:ab: 7d:8b:11:8e:ed:06:b5:98:3e:d1:fb:96:5d:16:85: 9f:d2:cf:ce:a8:5f:d2:df:84:f6:bc:5b:8c:3b:61: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:40:77:AA:B0:4E:46:17:9C:63:CB:79:69:B6:AA:94:E9:26:7A:58 X509v3 Authority Key Identifier: keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e2:4f:5f:8c:bf:de:ad:f0:9e:6d:a6:fa:0d:4b:75:4e:78: 5b:e8:8d:ef:02:3b:a8:69:ce:84:73:90:94:9a:66:fa:c6:f4: a9:91:6a:a7:13:1f:d7:5c:a5:59:84:1e:99:7a:cd:38:12:9f: 69:c5:eb:bc:fe:65:e0:f9:8d:f4:85:b7:27:e0:8c:28:1a:c2: 15:42:22:ae:de:54:d2:0d:bc:b1:8a:7e:31:9b:a8:90:90:2f: 17:82:1b:67:6d:16:27:69:26:2b:17:b7:9d:ae:9f:74:b2:1e: 26:dd:b9:e9:96:1a:25:65:65:f9:31:c1:7d:c4:5e:a4:a1:fd: da:54:6d:5d:ed:82:51:15:94:f2:bd:79:e7:e2:09:51:68:b0: 5a:c2:a2:ac:bd:79:00:19:e6:3f:e5:11:02:8a:5e:b0:36:36: 20:1c:aa:3b:49:d6:0d:fa:97:b9:f1:8b:29:e6:f6:d9:cb:6b: 89:c8:5f:d5:56:2b:e3:67:9a:9a:bc:96:f9:f3:02:26:73:8a: 9a:1b:a1:bd:44:a3:37:46:63:48:ed:c8:8e:7c:06:51:43:2e: db:a1:37:17:a5:ca:0c:e6:5f:bb:40:15:56:47:6c:7b:ee:55: 46:6f:75:18:68:c6:a7:49:5b:72:2f:25:e5:76:c8:7c:66:12: d1:e5:67:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xYRZSn55QODMtLLR0NiQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMTcxMGQ5NWM4M2JlM2U3ODYwYjk3YjFkN2IzNmU0NjA3 MTczYTIwHhcNMjUxMjE5MDQwMTU4WhcNMjUxMjIwMDQwMTU4WjAzMTEwLwYDVQQD EyhkNDQwNzdhYWIwNGU0NjE3OWM2M2NiNzk2OWI2YWE5NGU5MjY3YTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT5rTKHwTlLEZ9I98rdI2ziXE5GC uPn7vVvqRlGkjvmQB/LdDWPdp7tW4VTSZlIf/0oLFX3cOgUX23zrg6nBsZ4sjwEo ALuaXnpA9xuc2z1n1Y8xB1gt+O/NINd/2arARAdXdhNZg0947u8A7HnCzP/NU3/j IWA5yaMjO5+52qh7+w5DzpPS2loRYXbN7PiON7M8Y3eouGAqbBBYy81bPhdWTVt9 nXAeB91VRH7szVyS9ueLus4p9Aaqv2PAHJ0zubZRXbL3MDGWthZjqLb+edc0IZT4 2Ms+tnuIB+U5uqt9ixGO7Qa1mD7R+5ZdFoWf0s/OqF/S34T2vFuMO2HFawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRAd6qwTkYXnGPLeWm2qpTpJnpYMB8GA1UdIwQY MBaAFAEXENlcg74+eGC5ex17NuRgcXOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2Qt M2FkNDAzMjUwM2MwLzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2QtM2FkNDAzMjUwM2Mw LzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuJPX4y/ 3q3wnm2m+g1LdU54W+iN7wI7qGnOhHOQlJpm+sb0qZFqpxMf11ylWYQemXrNOBKf acXrvP5l4PmN9IW3J+CMKBrCFUIirt5U0g28sYp+MZuokJAvF4IbZ20WJ2kmKxe3 na6fdLIeJt256ZYaJWVl+THBfcRepKH92lRtXe2CURWU8r155+IJUWiwWsKirL15 ABnmP+URAopesDY2IByqO0nWDfqXufGLKeb22ctrichf1VYr42eamryW+fMCJnOK mhuhvUSjN0ZjSO3IjnwGUUMu26E3F6XKDOZfu0AVVkdse+5VRm91GGjGp0lbci8l 5XbIfGYS0eVnMw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:41:07 2025 by rpki-client