This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft File: ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json) Hash identifier: au4YscrtL8BrCoQdp3BYvK0qlm2EXs7LFo2dXrPN6FQ= Subject key identifier: 0B:18:77:AB:02:F8:B2:22:18:A5:81:15:E5:66:64:EA:ED:51:D9:4B Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC Certificate issuer: /CN=011994b1c5ae8f582bbecf67772b14b6d977baac Certificate serial: 019AF1D241F42754B8460E8B20C5CF6BC68D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft Manifest number: 0679 Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: bKLbqAKXa33lLb0yboF1H0R6T5ipWqgKjfLw9U0sAS0=) 2: NFxIuk4KnMOoaK7t1Cp4prQGCpc.roa (hash: qLz7+g7LrMIsBpRTz+960ZyB6BF4g8W2iE+TmwJoilE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:41:f4:27:54:b8:46:0e:8b:20:c5:cf:6b:c6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=0b1877ab02f8b22218a58115e56664eaed51d94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:c1:85:57:0c:19:80:74:54:5a:a4:6d:75: f4:8d:4d:33:ce:fd:67:c9:a8:94:ce:f4:c6:d1:f7: 33:75:83:4c:a7:2e:1a:af:13:a9:d8:d4:53:ba:a5: 44:8e:45:e9:8e:84:32:38:f2:f1:85:70:26:55:e6: c2:01:3f:02:b4:01:95:d8:cc:d8:5d:95:4f:e0:a2: 44:97:93:34:8a:8c:39:ca:3b:47:6e:5d:e2:fe:1d: 5c:90:6b:8c:1e:e8:34:30:5c:d6:c7:d6:aa:80:de: 10:70:e9:af:16:de:d9:de:96:d5:f2:3b:6d:d8:7c: 17:7d:17:de:13:2a:1a:43:75:b7:d5:75:33:65:74: b8:7e:cd:de:4b:3d:8a:bb:83:0a:61:5c:e6:64:83: 52:c3:22:8e:70:c7:f7:88:0b:58:55:87:e2:87:a0: 19:10:e1:6b:74:bb:48:dd:de:b8:31:ac:94:ea:00: 83:23:13:e1:58:82:7c:a4:99:82:9f:a7:1c:c0:fe: d8:c7:6f:78:72:24:c0:b2:9a:67:3e:59:69:51:33: 00:fe:f3:1e:a4:2c:8d:6b:59:4e:30:80:92:fe:c6: f4:5a:f4:d2:1d:e3:39:4b:3b:68:76:eb:60:bf:44: 51:a5:8f:26:ad:15:b2:f6:58:95:92:fe:0c:55:61: 4e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:18:77:AB:02:F8:B2:22:18:A5:81:15:E5:66:64:EA:ED:51:D9:4B X509v3 Authority Key Identifier: keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1b:93:24:ec:0b:f6:94:be:ba:bf:8e:ec:f2:8c:bb:74:aa: 83:06:8a:30:81:61:1a:cb:9d:94:d0:d4:a4:10:94:2c:4c:41: a7:74:0d:e3:4c:95:b0:c2:5c:34:3e:72:85:af:60:ad:99:8e: 62:59:38:20:94:bf:39:32:e0:03:68:70:2e:e2:31:8a:63:c7: cf:6b:5b:04:45:cd:09:e7:f3:70:05:7e:09:63:ac:01:01:7a: aa:dd:fa:9d:bf:ad:db:21:39:49:2c:98:1a:e9:f1:54:3d:83: 83:aa:62:f1:11:f4:6d:ea:35:4d:a9:3f:61:8c:f7:d6:d3:72: da:07:97:7f:78:9b:11:24:83:b8:5c:30:9b:50:45:6c:29:6d: d1:34:0f:f2:b9:56:8a:67:a3:f0:fd:f2:b1:4b:b9:c1:f0:e3: ad:25:cf:38:9f:28:2a:5d:bb:e4:9d:2f:ad:77:4e:05:e7:aa: 73:88:84:46:0d:f2:a6:ee:c7:7c:1a:60:3e:71:29:39:e0:9d: 5e:87:2d:31:e5:14:22:21:6a:4d:59:a7:11:e9:9b:ed:46:48: fc:af:1f:a3:24:b7:60:bd:c8:f5:a3:4b:ff:1c:2d:22:30:b4: 68:c1:17:c0:32:0e:cc:a7:1f:cc:66:00:0c:5e:5b:ff:d7:ad: 94:48:96:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kH0J1S4Rg6LIMXPa8aNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMTk5NGIxYzVhZThmNTgyYmJlY2Y2Nzc3MmIxNGI2ZDk3 N2JhYWMwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD EygwYjE4NzdhYjAyZjhiMjIyMThhNTgxMTVlNTY2NjRlYWVkNTFkOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMrBhVcMGYB0VFqkbXX0jU0zzv1n yaiUzvTG0fczdYNMpy4arxOp2NRTuqVEjkXpjoQyOPLxhXAmVebCAT8CtAGV2MzY XZVP4KJEl5M0iow5yjtHbl3i/h1ckGuMHug0MFzWx9aqgN4QcOmvFt7Z3pbV8jtt 2HwXfRfeEyoaQ3W31XUzZXS4fs3eSz2Ku4MKYVzmZINSwyKOcMf3iAtYVYfih6AZ EOFrdLtI3d64MayU6gCDIxPhWIJ8pJmCn6ccwP7Yx294ciTAsppnPllpUTMA/vMe pCyNa1lOMICS/sb0WvTSHeM5Sztodutgv0RRpY8mrRWy9liVkv4MVWFOLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsYd6sC+LIiGKWBFeVmZOrtUdlLMB8GA1UdIwQY MBaAFAEZlLHFro9YK77PZ3crFLbZd7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEt M2E3M2MzMzNlN2U3LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEtM2E3M2MzMzNlN2U3 LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBuTJOwL 9pS+ur+O7PKMu3SqgwaKMIFhGsudlNDUpBCULExBp3QN40yVsMJcND5yha9grZmO Ylk4IJS/OTLgA2hwLuIximPHz2tbBEXNCefzcAV+CWOsAQF6qt36nb+t2yE5SSyY GunxVD2Dg6pi8RH0beo1Tak/YYz31tNy2geXf3ibESSDuFwwm1BFbClt0TQP8rlW imej8P3ysUu5wfDjrSXPOJ8oKl275J0vrXdOBeeqc4iERg3ypu7HfBpgPnEpOeCd XoctMeUUIiFqTVmnEemb7UZI/K8foyS3YL3I9aNL/xwtIjC0aMEXwDIOzKcfzGYA DF5b/9etlEiWKw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:15 2025 by rpki-client