This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json) Hash identifier: /jUd8FxNiIGBtSszUaXLMPuNdSw/R2+TTvlbv8YCito= Subject key identifier: CB:3C:65:08:73:8B:4C:B2:86:40:A5:27:8C:D2:84:DE:22:98:AE:14 Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c Certificate serial: 019AF31D21FAE7812E23AED63155A3BC174A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:02:43 +0000 Manifest this update: Sat 06 Dec 2025 10:02:43 +0000 Manifest next update: Sun 07 Dec 2025 10:02:43 +0000 Files and hashes: 1: Pj_t5CT2l74I7u9IIPT57QIpwtI.roa (hash: injYF0uAAm68pNeJanI0YLVJHbntDpb8a8fhql09/Qo=) 2: Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa (hash: EMlouII+tVGp47ymDY78sfeCzz5ozn1bYR3C76/DHNQ=) 3: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: Mb0U8cPtSwO1l06xrpz76ZLeir8BYBinPEOU6kn7+l8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:21:fa:e7:81:2e:23:ae:d6:31:55:a3:bc:17:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c Validity Not Before: Dec 6 10:02:43 2025 GMT Not After : Dec 7 10:02:43 2025 GMT Subject: CN=cb3c6508738b4cb28640a5278cd284de2298ae14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:94:9c:61:27:a1:a1:06:30:21:66:c1:90:7c: ef:40:32:52:ba:b8:42:26:63:01:b7:38:30:d1:b8: 1b:ba:29:5f:15:96:c8:41:1d:cd:d7:e5:a4:56:75: e8:49:6b:20:63:ab:ef:84:29:3f:ec:81:67:35:45: ec:9f:2c:fa:34:55:36:a0:b1:0f:76:3d:ee:0a:2e: 9c:5c:49:ce:c7:99:7d:0e:51:8c:ee:64:1f:53:17: 9f:07:fe:85:c2:f9:8f:8a:04:38:63:28:2d:df:d0: 98:f1:1f:49:83:ab:25:92:f7:a9:7d:43:1f:91:89: 72:55:25:cf:49:ac:e2:81:ff:21:0b:e7:22:e1:40: 56:28:df:11:c9:4c:7c:d6:db:54:9d:94:35:b3:6b: 63:82:0d:e4:dd:c6:33:1a:0b:38:d5:c5:c9:a3:83: c3:ab:0d:b3:71:5c:dd:9a:64:44:c1:ff:b9:ca:4b: aa:42:d9:4f:ab:b3:0d:d2:19:99:c3:d8:23:a7:01: 8c:e2:43:0b:c0:87:c4:b0:4f:f9:c2:ea:9b:50:d3: 99:1f:20:e0:70:f3:0c:a1:5a:7e:76:c2:36:91:21: 74:ad:12:76:6e:59:e7:30:8f:93:e1:f1:96:55:5a: 75:5c:99:05:43:2b:c0:d4:59:e9:5c:10:ec:bd:db: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3C:65:08:73:8B:4C:B2:86:40:A5:27:8C:D2:84:DE:22:98:AE:14 X509v3 Authority Key Identifier: keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:1c:d2:01:85:e9:46:85:81:14:7c:33:52:1c:43:f9:2b:5f: 32:ea:61:29:57:08:4d:2b:68:ec:8b:db:17:df:ae:ad:6b:d9: 6d:12:eb:a8:3d:7a:1a:9a:38:a8:4b:ae:69:b3:dc:d2:69:17: f5:07:e7:c8:04:cd:f3:be:22:e4:92:6b:30:94:9a:68:1d:64: b7:fb:06:2d:bd:9c:e5:f6:1a:05:85:0f:ac:91:0f:bd:fe:d0: 03:02:9f:f0:bc:4d:3b:aa:68:96:b1:ce:e1:f5:c8:08:4f:0f: 85:cf:22:4f:f1:bc:2e:c4:b0:5b:b8:47:56:c4:04:a2:0e:8d: 42:b0:88:58:54:93:aa:bb:6d:7d:68:80:57:0a:d2:0a:74:77: 0a:1d:5a:24:df:a9:6a:86:ac:d5:8c:a5:a1:8a:cb:2c:24:1b: 2d:aa:0b:53:65:9d:95:f5:90:47:6a:b2:70:d2:d2:42:97:31: dd:55:ff:a1:3a:fe:c1:70:1c:0c:81:ec:5e:cf:8b:34:69:2c: ca:45:44:bf:9e:76:bf:f6:02:d4:75:1d:f6:6f:99:35:0a:1c: 30:4a:37:1c:3e:ff:60:b9:70:9b:f5:c1:a8:dc:4c:db:46:fa: 6c:fb:69:c2:1b:40:c7:41:06:08:eb:cd:f3:ca:1a:d3:2b:d5: 5f:5b:f2:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHSH654EuI67WMVWjvBdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYjQ0OWMxOThjYjk2NjM3YmFjMWE1YjZkNTFjYjMxZjI1 OGJiMmMwHhcNMjUxMjA2MTAwMjQzWhcNMjUxMjA3MTAwMjQzWjAzMTEwLwYDVQQD EyhjYjNjNjUwODczOGI0Y2IyODY0MGE1Mjc4Y2QyODRkZTIyOThhZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JScYSehoQYwIWbBkHzvQDJSurhC JmMBtzgw0bgbuilfFZbIQR3N1+WkVnXoSWsgY6vvhCk/7IFnNUXsnyz6NFU2oLEP dj3uCi6cXEnOx5l9DlGM7mQfUxefB/6FwvmPigQ4Yygt39CY8R9Jg6slkvepfUMf kYlyVSXPSazigf8hC+ci4UBWKN8RyUx81ttUnZQ1s2tjgg3k3cYzGgs41cXJo4PD qw2zcVzdmmREwf+5ykuqQtlPq7MN0hmZw9gjpwGM4kMLwIfEsE/5wuqbUNOZHyDg cPMMoVp+dsI2kSF0rRJ2blnnMI+T4fGWVVp1XJkFQyvA1FnpXBDsvdvIdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMs8ZQhzi0yyhkClJ4zShN4imK4UMB8GA1UdIwQY MBaAFGq0ScGYy5Zje6waW21RyzHyWLssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXJSSndaakxsbU43ckJwYmJWSExNZkpZdXl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yYjE4N2QtZWRkOC00MGVlLWExN2Mt ZDY3ZGEzYzY5NjliLzEvYXJSSndaakxsbU43ckJwYmJWSExNZkpZdXl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yYjE4N2QtZWRkOC00MGVlLWExN2MtZDY3ZGEzYzY5Njli LzEvYXJSSndaakxsbU43ckJwYmJWSExNZkpZdXl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBzSAYXp RoWBFHwzUhxD+StfMuphKVcITSto7IvbF9+urWvZbRLrqD16Gpo4qEuuabPc0mkX 9QfnyATN874i5JJrMJSaaB1kt/sGLb2c5fYaBYUPrJEPvf7QAwKf8LxNO6polrHO 4fXICE8Phc8iT/G8LsSwW7hHVsQEog6NQrCIWFSTqrttfWiAVwrSCnR3Ch1aJN+p aoas1YyloYrLLCQbLaoLU2WdlfWQR2qycNLSQpcx3VX/oTr+wXAcDIHsXs+LNGks ykVEv552v/YC1HUd9m+ZNQocMEo3HD7/YLlwm/XBqNxM20b6bPtpwhtAx0EGCOvN 88oa0yvVX1vyow== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:40 2025 by rpki-client