This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft File: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft (raw, json) Hash identifier: SCvnlLAz8FQTolUtolp4GqmfBexBu488dEUsIgBkGOA= Subject key identifier: 0B:C3:20:B3:0C:63:1E:AD:70:CA:B2:96:14:CC:0B:D2:42:00:63:71 Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17 Certificate issuer: /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17 Certificate serial: 019AF12E796F5BADC8BD9F43D423595DF610 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl (hash: zCdPuwiXhRXWYNCZWP9SN+A6x8VcNpN1Pxt9agNbV0Y=) 2: vixyzoRGMiAPIQs9FKTrZIreWAU.roa (hash: Ou0w2YovPY60UVVQ46iOV1rhX+zd7oOQHHPd6ZGynZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:79:6f:5b:ad:c8:bd:9f:43:d4:23:59:5d:f6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17 Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=0bc320b30c631ead70cab29614cc0bd242006371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:de:0a:07:9e:d2:85:8f:32:d1:60:e5:0e:a0: 5c:ec:a7:4b:54:4d:eb:50:3a:02:c3:f4:37:b8:76: a9:08:d9:0b:70:8b:1a:bb:c3:d9:57:09:63:8b:ab: 3f:c9:27:da:58:5b:6e:55:33:7d:41:fd:27:15:d8: b5:95:20:4c:10:9d:d8:b0:25:95:61:dc:51:ca:91: f0:91:0d:40:8c:a4:63:95:e4:0e:7b:df:4a:a7:43: b1:ec:14:ef:a0:d8:f6:b4:2f:76:2c:7c:0b:bc:35: da:09:83:ac:f5:08:9f:d8:16:7b:5a:eb:fa:d8:74: f9:e3:79:58:aa:ea:34:bd:2f:74:ae:a7:e4:8b:24: ea:e5:d7:7f:98:64:47:b5:da:7a:bc:b8:ff:2d:79: 77:b6:0b:59:5a:fb:50:d7:0a:91:31:97:f5:9c:3e: 3a:96:9a:a1:36:ae:59:89:f0:bf:f0:6f:31:f7:c2: f9:1c:ce:c9:49:fa:94:ed:f5:49:62:a0:11:e0:6b: c2:01:e3:22:11:1e:d1:d2:c6:88:17:c9:4e:f4:d1: 19:e3:f9:8c:67:3a:b6:a1:ac:63:68:2b:b3:c1:bf: 6a:2f:06:3d:34:b8:bb:2e:f4:5c:bf:f8:43:8c:93: d7:bb:25:cd:74:46:dc:59:dd:5a:a0:7d:8e:32:ad: b4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C3:20:B3:0C:63:1E:AD:70:CA:B2:96:14:CC:0B:D2:42:00:63:71 X509v3 Authority Key Identifier: keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ac:ce:56:ad:82:7b:77:41:56:81:48:5d:d3:b1:23:96:10: 25:a4:27:a2:de:b0:74:39:ac:f4:34:10:18:b0:2c:b8:fd:8c: 07:b6:e2:c4:0e:e0:db:00:58:2f:b1:49:9e:e3:6a:b0:48:75: 25:ca:90:31:c2:a8:f0:1d:b4:4d:04:3f:1b:95:d5:09:51:3f: c3:32:24:c3:38:a0:e5:62:28:76:1d:c2:6c:0c:7b:90:5d:b9: 68:93:c4:77:bd:a8:9b:30:68:de:85:e6:06:5f:15:57:ed:53: 30:e4:01:d8:a8:1e:01:68:af:40:3d:12:5c:29:1e:0c:76:ff: 05:be:eb:cb:bc:62:db:51:be:f8:09:85:09:fb:6f:ca:03:6a: aa:dd:24:ff:ff:bf:0e:f9:55:90:e2:8a:98:4b:38:82:42:49: 01:f1:00:6b:d1:7e:76:24:ac:54:ac:da:ed:6b:9d:33:1b:71: 74:c8:21:89:0b:de:88:eb:15:9d:3b:4e:f9:ae:b9:d7:f8:0c: af:74:39:91:fe:08:a3:20:3b:5a:c0:25:86:76:7a:c2:7c:ec: b8:62:ca:0e:d2:64:13:d4:87:f5:7c:67:a3:26:d3:fd:e7:b8: 33:a7:72:10:db:44:c0:85:68:80:f2:2f:a4:d7:f8:04:13:13: 31:dc:aa:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnlvW63IvZ9D1CNZXfYQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMTI3NTY2YTVhYzQxZTY2YjRjNzUzN2E2MGZkY2JiZmFi MzlhMTcwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD EygwYmMzMjBiMzBjNjMxZWFkNzBjYWIyOTYxNGNjMGJkMjQyMDA2MzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt4KB57ShY8y0WDlDqBc7KdLVE3r UDoCw/Q3uHapCNkLcIsau8PZVwlji6s/ySfaWFtuVTN9Qf0nFdi1lSBMEJ3YsCWV YdxRypHwkQ1AjKRjleQOe99Kp0Ox7BTvoNj2tC92LHwLvDXaCYOs9Qif2BZ7Wuv6 2HT543lYquo0vS90rqfkiyTq5dd/mGRHtdp6vLj/LXl3tgtZWvtQ1wqRMZf1nD46 lpqhNq5ZifC/8G8x98L5HM7JSfqU7fVJYqAR4GvCAeMiER7R0saIF8lO9NEZ4/mM Zzq2oaxjaCuzwb9qLwY9NLi7LvRcv/hDjJPXuyXNdEbcWd1aoH2OMq20UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvDILMMYx6tcMqylhTMC9JCAGNxMB8GA1UdIwQY MBaAFAESdWalrEHma0x1N6YP3Lv6s5oXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81MWY3ZjgtMDU5NS00NjU0LTk0M2It MWJlYWM3NDQwMjYyLzEvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81MWY3ZjgtMDU5NS00NjU0LTk0M2ItMWJlYWM3NDQwMjYy LzEvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKzOVq2C e3dBVoFIXdOxI5YQJaQnot6wdDms9DQQGLAsuP2MB7bixA7g2wBYL7FJnuNqsEh1 JcqQMcKo8B20TQQ/G5XVCVE/wzIkwzig5WIodh3CbAx7kF25aJPEd72omzBo3oXm Bl8VV+1TMOQB2KgeAWivQD0SXCkeDHb/Bb7ry7xi21G++AmFCftvygNqqt0k//+/ DvlVkOKKmEs4gkJJAfEAa9F+diSsVKza7WudMxtxdMghiQveiOsVnTtO+a651/gM r3Q5kf4IoyA7WsAlhnZ6wnzsuGLKDtJkE9SH9XxnoybT/ee4M6dyENtEwIVogPIv pNf4BBMTMdyqVg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:26 2025 by rpki-client