This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft File: ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json) Hash identifier: 0/Yj0MZiiZB7ce4susuekFzBAoCSeEqeeb5tCiDqNCQ= Subject key identifier: CC:5E:82:98:EB:59:64:D0:9E:B3:29:E0:32:31:FB:61:67:08:A8:F6 Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12 Certificate issuer: /CN=02b70140c03d90c912df11f0fd837249b7cb2e12 Certificate serial: 019AF1D21BA1B1350574C01BCEE2A7E59C05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 04:01:09 +0000 Manifest this update: Sat 06 Dec 2025 04:01:09 +0000 Manifest next update: Sun 07 Dec 2025 04:01:09 +0000 Files and hashes: 1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: ZfAXZ2z6Radfy+b9fIRup6KOK+VUVr/op11Mb9Ofd2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1b:a1:b1:35:05:74:c0:1b:ce:e2:a7:e5:9c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12 Validity Not Before: Dec 6 04:01:09 2025 GMT Not After : Dec 7 04:01:09 2025 GMT Subject: CN=cc5e8298eb5964d09eb329e03231fb616708a8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:51:03:b4:58:23:e5:a2:f6:4c:c1:dd:a1: 66:cf:c7:80:97:18:03:06:d0:3b:63:9d:b8:9e:f5: 0b:a9:af:64:64:aa:95:fd:06:a8:c4:90:ee:c3:2a: 68:56:7c:46:ef:38:4d:2a:cf:3d:fd:c5:66:a7:61: 07:24:91:fc:cc:9c:c2:b9:bf:8b:f6:dc:47:4a:fe: 4a:34:54:a8:82:e5:45:61:ad:61:21:ca:bf:c5:6b: ba:01:53:f2:45:44:fb:19:20:83:18:ae:28:d9:96: ee:ce:61:eb:bc:d4:ad:46:60:8b:e2:26:cd:66:de: 2d:a2:2b:c4:0b:b1:66:00:c5:1e:df:7e:c7:52:ff: 7c:43:8f:87:6a:a7:c7:7e:20:7a:65:2d:06:e8:33: 90:4b:0b:b7:36:ee:c0:37:82:f5:5e:8c:60:1a:c1: d7:c2:98:57:65:e3:6c:57:67:d2:52:32:f5:4e:aa: f1:76:53:05:03:a5:ac:69:03:e8:05:f3:d2:a9:d1: 47:ff:d4:f9:61:61:a3:1a:5d:9b:56:f9:45:ea:e0: c1:3a:99:0e:24:57:97:9a:7c:74:b6:0c:c4:26:36: db:fc:77:c4:1c:4e:e1:9b:33:fd:1b:54:c4:33:8d: d1:aa:01:50:87:97:9a:aa:56:5b:70:0f:47:98:27: 50:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5E:82:98:EB:59:64:D0:9E:B3:29:E0:32:31:FB:61:67:08:A8:F6 X509v3 Authority Key Identifier: keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:90:c2:2d:61:0e:3d:87:b8:b1:6d:62:d6:dd:5b:3f:aa:76: a4:73:c2:2c:9c:5e:09:ea:f6:3b:8a:30:1f:79:ac:b6:12:92: ac:94:34:5e:c1:f2:ba:6a:bb:d2:0d:70:50:9a:cf:9a:e1:69: 94:79:31:3f:9e:5c:75:e9:fe:8b:01:a1:d1:65:97:1a:ac:ed: 76:1b:bd:bd:89:05:de:c8:46:48:b8:7f:58:99:0d:87:ad:07: c6:ee:89:20:7d:64:f7:92:4f:03:3f:4a:21:b0:cb:d7:25:c6: 11:7a:29:a0:3d:69:1f:c1:2e:a0:b3:e6:ee:9d:ae:57:8c:37: 59:1a:63:0d:07:a2:d0:c5:59:58:db:2f:64:3c:9e:3c:45:cf: f9:81:d6:fa:a7:63:8d:46:e8:34:21:b4:b1:25:4d:25:71:1b: 69:ba:54:21:22:8e:b6:c1:e7:e4:d9:98:54:7a:05:0c:ee:c6: 9c:95:8f:f1:be:30:bc:18:ab:09:9d:bd:e6:58:84:63:80:f6: 3b:d9:1f:86:e0:20:8e:81:9f:20:df:ec:c6:d7:d9:c0:17:50: 4e:a2:09:4b:3c:74:2c:a8:37:b2:4f:57:ac:66:e8:ea:23:61: d3:14:5a:37:9c:2a:ae:e2:ca:5d:05:72:82:4c:a8:6c:72:05: 5f:e3:25:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0huhsTUFdMAbzuKn5ZwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjcwMTQwYzAzZDkwYzkxMmRmMTFmMGZkODM3MjQ5Yjdj YjJlMTIwHhcNMjUxMjA2MDQwMTA5WhcNMjUxMjA3MDQwMTA5WjAzMTEwLwYDVQQD EyhjYzVlODI5OGViNTk2NGQwOWViMzI5ZTAzMjMxZmI2MTY3MDhhOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIJRA7RYI+Wi9kzB3aFmz8eAlxgD BtA7Y524nvULqa9kZKqV/QaoxJDuwypoVnxG7zhNKs89/cVmp2EHJJH8zJzCub+L 9txHSv5KNFSoguVFYa1hIcq/xWu6AVPyRUT7GSCDGK4o2ZbuzmHrvNStRmCL4ibN Zt4toivEC7FmAMUe337HUv98Q4+HaqfHfiB6ZS0G6DOQSwu3Nu7AN4L1XoxgGsHX wphXZeNsV2fSUjL1TqrxdlMFA6WsaQPoBfPSqdFH/9T5YWGjGl2bVvlF6uDBOpkO JFeXmnx0tgzEJjbb/HfEHE7hmzP9G1TEM43RqgFQh5eaqlZbcA9HmCdQbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxegpjrWWTQnrMp4DIx+2FnCKj2MB8GA1UdIwQY MBaAFAK3AUDAPZDJEt8R8P2Dckm3yy4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJjQlFNQTlrTWtTM3hId19ZTnlTYmZMTGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZDk5NGItOGNmNC00NTI5LWJkYmMt YjM4ZGNmMmYwMTBjLzEvQXJjQlFNQTlrTWtTM3hId19ZTnlTYmZMTGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ZDk5NGItOGNmNC00NTI5LWJkYmMtYjM4ZGNmMmYwMTBj LzEvQXJjQlFNQTlrTWtTM3hId19ZTnlTYmZMTGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJDCLWEO PYe4sW1i1t1bP6p2pHPCLJxeCer2O4owH3msthKSrJQ0XsHyumq70g1wUJrPmuFp lHkxP55cden+iwGh0WWXGqztdhu9vYkF3shGSLh/WJkNh60Hxu6JIH1k95JPAz9K IbDL1yXGEXopoD1pH8EuoLPm7p2uV4w3WRpjDQei0MVZWNsvZDyePEXP+YHW+qdj jUboNCG0sSVNJXEbabpUISKOtsHn5NmYVHoFDO7GnJWP8b4wvBirCZ295liEY4D2 O9kfhuAgjoGfIN/sxtfZwBdQTqIJSzx0LKg3sk9XrGbo6iNh0xRaN5wqruLKXQVy gkyobHIFX+MlfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:01 2025 by rpki-client