This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft File: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft (raw, json) Hash identifier: SxtxOIpMV6F9I69fv4SW5ayRcZOG/cWULH0ovkmB2bI= Subject key identifier: D9:32:63:1C:C3:39:99:93:0C:7D:74:6F:E8:19:AD:9C:F2:B8:35:D2 Authority key identifier: F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21 Certificate issuer: /CN=f80aef4640437f2307f79871bfb632bb8bddad21 Certificate serial: 019AF42E2DCB6C24C1FEC257ABC12EFCEA12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft Manifest number: 0252 Signing time: Sat 06 Dec 2025 15:00:58 +0000 Manifest this update: Sat 06 Dec 2025 15:00:58 +0000 Manifest next update: Sun 07 Dec 2025 15:00:58 +0000 Files and hashes: 1: 1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl (hash: HhTvjyk6uq4XBMNKHCL4qLkz/8rKk8zHcFoFQTt55Do=) 2: cSU3uumNlLN8Of6e212G9P0zAJw.roa (hash: kzDk6Ttjden5ir/EuoOlXFG1vxnRI9Xpd+xXHRFPFcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:2d:cb:6c:24:c1:fe:c2:57:ab:c1:2e:fc:ea:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f80aef4640437f2307f79871bfb632bb8bddad21 Validity Not Before: Dec 6 15:00:58 2025 GMT Not After : Dec 7 15:00:58 2025 GMT Subject: CN=d932631cc33999930c7d746fe819ad9cf2b835d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:46:5c:23:15:12:ae:82:65:97:86:51:df:29: 30:02:11:29:13:0a:d2:84:cb:42:c5:7b:02:ec:ed: d4:fb:59:a1:cf:5b:64:31:56:19:78:7a:e5:0d:62: 07:aa:bd:87:17:01:f2:57:0b:9e:f0:c4:2e:15:c1: aa:07:cd:fb:15:d7:5e:40:9d:61:53:8d:77:e9:92: b1:18:01:40:b7:e4:28:ad:52:f3:a7:5f:8e:ef:23: fd:75:41:c2:30:54:f3:57:54:34:a5:1a:d5:c0:89: fb:b3:e8:c7:be:2b:af:96:bf:84:18:d1:a5:3d:ef: c7:67:96:ca:bd:95:d9:ec:4c:e6:84:df:10:e1:5b: c2:8d:ca:b1:e9:20:fa:ac:28:5f:e6:68:e3:e2:7b: b3:78:2f:37:da:7c:a1:66:1e:a4:df:d7:aa:6e:39: f0:f3:67:11:d2:0d:00:f2:87:f7:6f:ab:2a:33:9c: fa:d5:e2:d5:40:8a:87:d0:e9:41:58:a6:27:2b:b9: 21:de:cd:a2:5e:9e:4a:71:c5:b3:60:da:db:2f:a5: 5f:80:ec:f6:96:02:c9:bc:1e:ad:e7:b3:68:29:13: ec:77:c5:aa:76:61:bb:f2:e0:53:a5:4e:a4:cc:85: ab:60:0c:be:69:2b:d9:09:2c:08:94:55:bb:94:ad: 2b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:32:63:1C:C3:39:99:93:0C:7D:74:6F:E8:19:AD:9C:F2:B8:35:D2 X509v3 Authority Key Identifier: keyid:F8:0A:EF:46:40:43:7F:23:07:F7:98:71:BF:B6:32:BB:8B:DD:AD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e03b3c-6026-41e7-a553-ab14822f85b5/1/1-ArvRkBDfyMH95hxv7Yyu4vdrSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:77:c8:43:67:e7:fa:19:a5:2f:d5:25:52:0e:ba:10:ca:72: 16:cc:e9:b2:9e:16:55:2a:26:bf:5c:fc:e2:40:7b:80:3b:9b: f9:1a:bb:6f:c7:3f:75:61:49:38:9e:b6:ec:c3:91:5f:c4:52: 2b:4c:53:0f:ff:d0:b7:42:62:f1:b6:4c:41:f5:37:e7:64:b2: 4e:8a:be:5b:b2:03:85:59:a9:57:f9:57:c7:4d:e2:0a:52:35: e8:e7:1e:93:18:98:cf:10:f1:a8:3e:5b:ee:73:83:0e:64:e0: 2b:19:e3:f0:32:e7:35:1f:b5:70:33:02:a2:09:03:4e:87:0f: 86:d8:cd:41:94:50:3e:41:35:b7:a5:7e:be:20:04:4d:c5:00: f5:20:ee:5c:f1:99:ae:67:73:da:51:e0:36:52:e6:39:72:e1: 6b:17:c7:26:a3:61:c3:76:65:e0:19:fc:ca:ac:50:af:33:c5: 25:80:c1:1b:b9:28:f9:70:de:e9:b3:e8:9a:17:3a:54:61:8c: d8:af:d4:6c:5b:19:ff:2f:cb:52:90:91:ad:b4:41:58:91:6f: d8:7d:bb:65:7e:a6:1e:4c:66:ae:1b:60:fc:6f:c6:7a:aa:9a: 9b:21:f1:30:3e:ce:fa:07:e2:48:d8:a0:f3:5a:50:b9:7e:ea: 0f:c9:2a:1e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0Li3LbCTB/sJXq8Eu/OoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MGFlZjQ2NDA0MzdmMjMwN2Y3OTg3MWJmYjYzMmJiOGJk ZGFkMjEwHhcNMjUxMjA2MTUwMDU4WhcNMjUxMjA3MTUwMDU4WjAzMTEwLwYDVQQD EyhkOTMyNjMxY2MzMzk5OTkzMGM3ZDc0NmZlODE5YWQ5Y2YyYjgzNWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkZcIxUSroJll4ZR3ykwAhEpEwrS hMtCxXsC7O3U+1mhz1tkMVYZeHrlDWIHqr2HFwHyVwue8MQuFcGqB837FddeQJ1h U4136ZKxGAFAt+QorVLzp1+O7yP9dUHCMFTzV1Q0pRrVwIn7s+jHviuvlr+EGNGl Pe/HZ5bKvZXZ7EzmhN8Q4VvCjcqx6SD6rChf5mjj4nuzeC832nyhZh6k39eqbjnw 82cR0g0A8of3b6sqM5z61eLVQIqH0OlBWKYnK7kh3s2iXp5KccWzYNrbL6VfgOz2 lgLJvB6t57NoKRPsd8WqdmG78uBTpU6kzIWrYAy+aSvZCSwIlFW7lK0rLQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNkyYxzDOZmTDH10b+gZrZzyuDXSMB8GA1UdIwQY MBaAFPgK70ZAQ38jB/eYcb+2MruL3a0hMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1BcnZSa0JEZnlNSDk1aHh2N1l5dTR2ZHJTRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvZTAzYjNjLTYwMjYtNDFlNy1hNTUz LWFiMTQ4MjJmODViNS8xLzEtQXJ2UmtCRGZ5TUg5NWh4djdZeXU0dmRyU0UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzMzL2UwM2IzYy02MDI2LTQxZTctYTU1My1hYjE0ODIyZjg1 YjUvMS8xLUFydlJrQkRmeU1IOTVoeHY3WXl1NHZkclNFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3fI Q2fn+hmlL9UlUg66EMpyFszpsp4WVSomv1z84kB7gDub+Rq7b8c/dWFJOJ627MOR X8RSK0xTD//Qt0Ji8bZMQfU352SyToq+W7IDhVmpV/lXx03iClI16OcekxiYzxDx qD5b7nODDmTgKxnj8DLnNR+1cDMCogkDTocPhtjNQZRQPkE1t6V+viAETcUA9SDu XPGZrmdz2lHgNlLmOXLhaxfHJqNhw3Zl4Bn8yqxQrzPFJYDBG7ko+XDe6bPomhc6 VGGM2K/UbFsZ/y/LUpCRrbRBWJFv2H27ZX6mHkxmrhtg/G/GeqqamyHxMD7O+gfi SNig81pQuX7qD8kqHg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:27 2025 by rpki-client