This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json) Hash identifier: cHTuB8hdIH1JsDBokEDPMLU06ojCL5sVMptZL3sL83A= Subject key identifier: C3:12:7B:0C:7C:76:E3:97:FF:0C:4D:03:AC:FE:05:46:E3:72:A1:96 Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41 Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341 Certificate serial: 019AF209586243E5FCB0D6EA0E792E92455C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 05:01:29 +0000 Manifest this update: Sat 06 Dec 2025 05:01:29 +0000 Manifest next update: Sun 07 Dec 2025 05:01:29 +0000 Files and hashes: 1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=) 2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: NFoK0NlpdoJ3cL7N0rmb9IkEjN4tBEq/gsbAIHmTtVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:58:62:43:e5:fc:b0:d6:ea:0e:79:2e:92:45:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341 Validity Not Before: Dec 6 05:01:29 2025 GMT Not After : Dec 7 05:01:29 2025 GMT Subject: CN=c3127b0c7c76e397ff0c4d03acfe0546e372a196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:36:73:71:9d:4f:9e:f2:8f:3e:b6:90:7c:65: 49:7c:85:ed:80:b0:a4:49:d3:ec:d3:ce:90:20:b9: 2a:9f:f0:02:d9:8a:c2:8b:bb:91:51:75:d9:10:52: 89:27:8e:7f:b8:3a:a7:71:21:f0:b7:97:2b:1e:49: 06:09:ed:47:d5:83:b9:9b:27:eb:43:67:f1:0c:28: 95:ec:d3:16:1f:35:58:6d:6c:ab:b1:3a:8e:0a:1d: 61:36:dc:d0:54:2b:a6:4d:c6:da:3d:f4:c1:5c:90: 5b:6a:ae:47:32:e8:80:4a:49:e2:8d:0a:c8:73:e8: 39:23:39:e4:bc:64:68:c4:b0:de:b9:0a:13:b1:4f: 5f:a7:09:37:15:0c:7e:2e:25:b6:1a:e4:4d:b6:c8: 05:4e:cf:c2:b5:d8:ed:cd:97:3b:1e:52:aa:68:3f: f2:29:f4:3d:6e:7f:07:7b:5a:12:9e:ba:f7:9e:dd: 7d:e0:f7:54:43:42:84:71:52:70:83:f1:d1:31:65: a8:b7:17:e1:8f:11:4d:72:48:dc:df:24:da:23:be: 91:ca:c9:fb:c1:11:a2:18:86:42:54:cf:14:d6:b5: a3:95:dd:4d:7d:81:34:10:b1:db:b8:c7:18:90:fa: 9d:5d:cb:3d:07:88:fa:70:0b:33:9b:ac:fc:9a:93: 4c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:12:7B:0C:7C:76:E3:97:FF:0C:4D:03:AC:FE:05:46:E3:72:A1:96 X509v3 Authority Key Identifier: keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:dc:33:4c:7d:47:93:c6:27:45:3f:bb:9b:2c:d6:d7:ba:d1: 29:b3:dd:45:db:f8:39:84:56:a5:6b:f3:65:f3:a0:07:d2:f9: cb:bd:d6:22:08:9c:81:76:93:f7:f0:dc:a8:bf:f7:64:1a:b6: ae:f9:b8:60:91:98:dd:e3:b3:fc:44:e4:45:bd:46:2e:a6:8a: 32:60:70:55:1d:b2:d7:71:c3:0e:01:58:12:39:ae:49:03:fe: 33:45:97:08:71:c6:49:84:46:50:d1:49:89:8b:b2:a1:44:bf: 93:81:10:22:67:8b:7c:a7:d5:89:f3:ac:5b:27:52:38:cf:c5: 5a:07:94:d9:f1:61:a2:42:de:3b:e1:17:15:72:11:91:9c:e5: fb:e1:2d:6d:e7:1b:d0:16:8b:87:57:bc:e1:a6:d8:d1:e4:98: 7b:f4:f9:42:f3:0d:bd:aa:8c:4d:12:e3:93:08:f0:ed:ee:66: 0f:9b:01:6f:e6:2e:c1:82:24:fa:9c:47:6a:ed:2b:c6:c2:e6: 2a:f4:22:dc:04:04:5d:b3:3d:e7:bb:55:47:91:c4:1c:1e:d4: 50:92:9f:e3:ed:b8:2e:55:9e:54:f6:b3:8a:6c:07:8d:26:91: 91:8d:b8:11:a7:6c:b2:d9:16:99:ec:96:1b:29:e4:c4:2f:dc: 72:19:f0:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVhiQ+X8sNbqDnkukkVcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjI4MGFlNTE5NTUwYzdhN2Y0OTUzYWIyN2Q3YWU3ZGRl YjEzNDEwHhcNMjUxMjA2MDUwMTI5WhcNMjUxMjA3MDUwMTI5WjAzMTEwLwYDVQQD EyhjMzEyN2IwYzdjNzZlMzk3ZmYwYzRkMDNhY2ZlMDU0NmUzNzJhMTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jZzcZ1PnvKPPraQfGVJfIXtgLCk SdPs086QILkqn/AC2YrCi7uRUXXZEFKJJ45/uDqncSHwt5crHkkGCe1H1YO5myfr Q2fxDCiV7NMWHzVYbWyrsTqOCh1hNtzQVCumTcbaPfTBXJBbaq5HMuiASknijQrI c+g5IznkvGRoxLDeuQoTsU9fpwk3FQx+LiW2GuRNtsgFTs/CtdjtzZc7HlKqaD/y KfQ9bn8He1oSnrr3nt194PdUQ0KEcVJwg/HRMWWotxfhjxFNckjc3yTaI76Rysn7 wRGiGIZCVM8U1rWjld1NfYE0ELHbuMcYkPqdXcs9B4j6cAszm6z8mpNMPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMSewx8duOX/wxNA6z+BUbjcqGWMB8GA1UdIwQY MBaAFInygK5RlVDHp/SVOrJ9eufd6xNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMt NWI1MGVhODhlZWFiLzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMtNWI1MGVhODhlZWFi LzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9wzTH1H k8YnRT+7myzW17rRKbPdRdv4OYRWpWvzZfOgB9L5y73WIgicgXaT9/DcqL/3ZBq2 rvm4YJGY3eOz/ETkRb1GLqaKMmBwVR2y13HDDgFYEjmuSQP+M0WXCHHGSYRGUNFJ iYuyoUS/k4EQImeLfKfVifOsWydSOM/FWgeU2fFhokLeO+EXFXIRkZzl++Etbecb 0BaLh1e84abY0eSYe/T5QvMNvaqMTRLjkwjw7e5mD5sBb+YuwYIk+pxHau0rxsLm KvQi3AQEXbM957tVR5HEHB7UUJKf4+24LlWeVPazimwHjSaRkY24EadsstkWmeyW GynkxC/cchnwkA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:58 2025 by rpki-client