This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json) Hash identifier: 5pPOruArP0sXibaHlq4suBUiSyGnadRB9qZ0icIAzA8= Subject key identifier: F7:5D:EC:C5:A6:9D:2B:FE:DA:BF:6B:FC:8D:51:92:0A:3E:07:37:68 Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2 Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2 Certificate serial: 019AF12E200C11315DF59371060BDA8CDDD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 01:02:03 +0000 Manifest this update: Sat 06 Dec 2025 01:02:03 +0000 Manifest next update: Sun 07 Dec 2025 01:02:03 +0000 Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: UcQSyXSoNskE7xhhm6kKs2uaoy3vpEi+bB7Jri7avLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:20:0c:11:31:5d:f5:93:71:06:0b:da:8c:dd:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2 Validity Not Before: Dec 6 01:02:03 2025 GMT Not After : Dec 7 01:02:03 2025 GMT Subject: CN=f75decc5a69d2bfedabf6bfc8d51920a3e073768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9f:e6:e2:1e:4d:cd:cf:e4:e1:ed:10:b1:ef: 5e:2a:de:15:5c:0d:1a:45:9a:27:b7:95:a4:4e:02: f6:c9:02:2e:28:89:27:58:07:23:60:fc:0e:7f:0a: bc:00:e9:e0:b4:84:1c:84:cd:19:45:2f:57:67:39: e2:3a:95:69:97:08:c9:cc:ad:92:f3:e6:13:9b:7c: 28:e7:ea:a7:4d:8c:87:66:38:c1:86:b3:20:ce:ee: b3:e2:81:85:cb:b1:74:d6:15:bd:72:3f:69:e7:4d: bf:40:48:82:35:46:59:55:10:3d:12:ff:0d:ab:c5: c8:ec:b7:93:ac:b5:9b:6f:00:34:06:f6:7a:ba:4d: 66:97:a9:93:2d:28:f1:6e:b3:11:7c:a3:ba:4f:ba: 3a:b1:e3:19:aa:87:c0:ad:62:5d:41:e1:8b:3f:00: c5:7d:cf:e1:1d:5a:bf:06:35:16:34:2a:c0:1c:23: 19:d7:0b:d0:24:5f:33:dc:60:c2:d1:0d:2b:ee:4a: a0:bf:39:09:ff:d9:4e:a5:04:6c:93:46:6a:2c:a3: cc:ef:c8:08:50:a9:b0:35:91:73:72:f4:4e:59:86: 12:b7:f4:4b:ee:65:01:3c:d6:fe:46:f3:02:51:a6: 6c:51:f5:bc:b3:c9:3a:33:ea:0e:59:cf:68:89:a3: a1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5D:EC:C5:A6:9D:2B:FE:DA:BF:6B:FC:8D:51:92:0A:3E:07:37:68 X509v3 Authority Key Identifier: keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:f4:ba:75:99:3a:ca:cb:ee:bf:05:b5:73:f1:61:25:0a:18: e8:01:d7:e9:07:b3:b7:c1:8b:58:f2:da:3a:5f:3e:16:cb:d1: 46:3f:34:44:8f:94:b4:96:91:1e:22:23:16:f2:b1:5c:2d:21: 05:4b:85:6b:ac:fd:af:bf:ae:ba:a7:e5:ba:e0:22:00:ff:19: 3b:bd:c4:f5:f2:fc:3f:21:83:1d:a6:08:11:d7:54:56:e8:40: 2d:b1:47:6c:a6:2c:ac:cb:b1:b2:24:30:85:02:13:28:86:1e: 48:71:17:8b:41:36:5d:d5:ed:11:42:cc:a6:46:b7:ca:78:4b: db:ef:30:40:34:2b:c7:ef:1f:a0:7f:ff:c7:49:4d:53:82:fd: 67:ed:7a:c4:31:2a:20:dd:cd:41:bf:94:27:3e:a6:22:bf:91: cc:b5:82:6d:44:ba:75:1e:6d:45:0c:2c:94:34:2c:4d:3a:7b: d1:b7:2e:cf:88:59:a8:1c:26:6c:32:7b:3a:3d:5f:94:6c:de: 9c:29:05:28:d9:6f:9b:9e:69:e0:1f:a2:c5:f8:21:6a:e0:8c: 26:4d:75:93:78:9a:59:a5:68:fe:bd:5c:2a:3f:99:2d:3d:3b: 4f:02:7f:76:1a:b4:41:dc:5f:68:a4:26:01:32:91:81:6e:94: 96:f8:f7:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiAMETFd9ZNxBgvajN3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMTcxMGQ5NWM4M2JlM2U3ODYwYjk3YjFkN2IzNmU0NjA3 MTczYTIwHhcNMjUxMjA2MDEwMjAzWhcNMjUxMjA3MDEwMjAzWjAzMTEwLwYDVQQD EyhmNzVkZWNjNWE2OWQyYmZlZGFiZjZiZmM4ZDUxOTIwYTNlMDczNzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5/m4h5Nzc/k4e0Qse9eKt4VXA0a RZont5WkTgL2yQIuKIknWAcjYPwOfwq8AOngtIQchM0ZRS9XZzniOpVplwjJzK2S 8+YTm3wo5+qnTYyHZjjBhrMgzu6z4oGFy7F01hW9cj9p502/QEiCNUZZVRA9Ev8N q8XI7LeTrLWbbwA0BvZ6uk1ml6mTLSjxbrMRfKO6T7o6seMZqofArWJdQeGLPwDF fc/hHVq/BjUWNCrAHCMZ1wvQJF8z3GDC0Q0r7kqgvzkJ/9lOpQRsk0ZqLKPM78gI UKmwNZFzcvROWYYSt/RL7mUBPNb+RvMCUaZsUfW8s8k6M+oOWc9oiaOhhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdd7MWmnSv+2r9r/I1Rkgo+BzdoMB8GA1UdIwQY MBaAFAEXENlcg74+eGC5ex17NuRgcXOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2Qt M2FkNDAzMjUwM2MwLzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2QtM2FkNDAzMjUwM2Mw LzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufS6dZk6 ysvuvwW1c/FhJQoY6AHX6Qezt8GLWPLaOl8+FsvRRj80RI+UtJaRHiIjFvKxXC0h BUuFa6z9r7+uuqfluuAiAP8ZO73E9fL8PyGDHaYIEddUVuhALbFHbKYsrMuxsiQw hQITKIYeSHEXi0E2XdXtEULMpka3ynhL2+8wQDQrx+8foH//x0lNU4L9Z+16xDEq IN3NQb+UJz6mIr+RzLWCbUS6dR5tRQwslDQsTTp70bcuz4hZqBwmbDJ7Oj1flGze nCkFKNlvm55p4B+ixfghauCMJk11k3iaWaVo/r1cKj+ZLT07TwJ/dhq0QdxfaKQm ATKRgW6Ulvj30A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:39 2025 by rpki-client