This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft File: ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json) Hash identifier: cLvX7soS8VZBHM62S4ebLsegoJz0Six8kBnwCRvf0qI= Subject key identifier: 16:36:98:42:3C:DF:7D:38:02:92:5B:59:29:E3:07:94:E4:A5:00:F5 Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2 Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2 Certificate serial: 019AF352640C245B2EAB31ED76467A42914F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft Manifest number: 129C Signing time: Sat 06 Dec 2025 11:00:54 +0000 Manifest this update: Sat 06 Dec 2025 11:00:54 +0000 Manifest next update: Sun 07 Dec 2025 11:00:54 +0000 Files and hashes: 1: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: C6o7mxv/LszY3TvS3IbD4uZLg4Hzqf1kGsFFLPm+c7E=) 2: RN98TJ7kqQI5BuSnvdMcE3q1sxc.roa (hash: YxQcvIdmH83Dh0Q3zwPjsii4N4gNYgzKFTXwaXCIS7Y=) 3: eIZENcgK1XZflT_O-9vOWF5_c5k.roa (hash: 72shYqXGHw00bwK02sJ1cpdaJwagVhfPsDZJsD/Kbnk=) 4: pw-uXfj6mcJrqBi6AQ_DbhRWlvc.roa (hash: F9GSSa/n4nzQc1So+eTia4zHzLGf70ctYWS6RuL9cmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:64:0c:24:5b:2e:ab:31:ed:76:46:7a:42:91:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2 Validity Not Before: Dec 6 11:00:54 2025 GMT Not After : Dec 7 11:00:54 2025 GMT Subject: CN=163698423cdf7d3802925b5929e30794e4a500f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ff:3c:d4:ca:ce:41:06:6c:90:ff:1e:fd:53: 82:7f:7a:22:c9:28:00:0b:67:b1:50:38:18:09:29: 12:96:df:c2:98:7e:d9:78:67:de:fe:ff:16:97:a3: a7:f6:a7:a8:ff:19:0e:c5:12:fd:ea:4f:a0:98:6c: 41:7d:ee:87:5a:c4:d8:de:af:55:0b:87:87:26:4c: 89:0c:fb:4d:78:27:40:53:e5:55:3b:cd:60:7f:b9: 18:ba:88:5f:99:e6:43:3e:45:11:84:88:dd:ad:5d: 82:01:32:ca:49:80:8d:79:b5:14:6d:b8:6f:27:42: ad:84:fe:ba:44:7a:bb:0a:1f:b8:d1:9a:85:ba:50: 23:cd:a6:32:69:86:0c:41:e0:bc:96:8f:38:09:18: 91:70:12:8f:83:af:1a:26:dd:a2:e9:83:94:31:3c: 2b:e1:9f:c3:a5:4c:37:9a:cc:fe:df:c6:15:6e:2a: bc:70:ae:8b:c5:83:51:5f:f5:50:11:d7:b6:e4:35: 17:0c:16:1c:68:2c:f0:31:69:31:7c:d5:19:5b:4b: ba:7e:ff:f2:91:de:eb:98:c7:6b:e8:57:f3:0e:11: af:d0:91:8f:0f:64:0c:80:11:41:90:96:8c:a5:84: c0:d8:1b:ca:17:20:c3:f8:3f:ca:bd:3f:fe:84:28: df:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:36:98:42:3C:DF:7D:38:02:92:5B:59:29:E3:07:94:E4:A5:00:F5 X509v3 Authority Key Identifier: keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8c:15:b6:8d:51:80:a9:68:12:85:6d:b9:c9:f5:c2:42:54: 53:43:a5:c3:53:d4:ec:07:4c:9a:60:f6:80:0e:cd:fb:f8:31: 27:6b:c0:c7:29:c0:a1:89:5e:cb:0a:66:eb:d7:be:8a:5d:3b: 0b:c7:8a:a2:b0:7d:c5:89:ff:a3:d5:23:a7:25:50:62:9b:61: 7c:8a:46:23:e7:f3:f8:a2:aa:1c:d3:e8:d1:a6:20:27:30:b2: 21:e9:79:4e:91:b0:0f:9d:fc:7c:61:6b:07:c0:13:64:d9:9d: 72:16:b1:eb:4c:14:34:ef:9d:23:bb:87:63:01:76:de:b9:de: 57:fb:af:4b:5a:62:84:6a:a1:f0:d8:02:4b:57:5d:83:17:7d: fd:e9:6b:19:62:08:c0:18:fb:cf:97:2b:a2:59:d5:99:4e:d6: 20:3c:9b:ca:0a:fb:63:19:b6:34:e0:66:54:f5:4a:4e:a8:02: 9c:52:af:40:b7:61:79:7c:54:27:ca:de:04:94:57:26:b7:b1: d2:59:11:f4:29:2a:77:d3:62:f5:d8:7b:44:f9:d2:16:18:52: c1:18:57:b6:d6:2a:50:46:e5:dc:f4:d1:af:dd:15:f4:7c:43: aa:24:f6:e9:f8:36:44:77:f6:56:a2:11:62:cd:c9:53:76:dd: 37:87:51:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUmQMJFsuqzHtdkZ6QpFPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjk4MGMxMGQ3MTEwZjkxZmZmOWUwZWNlYjYzOWQ5ZTc1 YjM1ZTIwHhcNMjUxMjA2MTEwMDU0WhcNMjUxMjA3MTEwMDU0WjAzMTEwLwYDVQQD EygxNjM2OTg0MjNjZGY3ZDM4MDI5MjViNTkyOWUzMDc5NGU0YTUwMGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P881MrOQQZskP8e/VOCf3oiySgA C2exUDgYCSkSlt/CmH7ZeGfe/v8Wl6On9qeo/xkOxRL96k+gmGxBfe6HWsTY3q9V C4eHJkyJDPtNeCdAU+VVO81gf7kYuohfmeZDPkURhIjdrV2CATLKSYCNebUUbbhv J0KthP66RHq7Ch+40ZqFulAjzaYyaYYMQeC8lo84CRiRcBKPg68aJt2i6YOUMTwr 4Z/DpUw3msz+38YVbiq8cK6LxYNRX/VQEde25DUXDBYcaCzwMWkxfNUZW0u6fv/y kd7rmMdr6FfzDhGv0JGPD2QMgBFBkJaMpYTA2BvKFyDD+D/KvT/+hCjfGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBY2mEI83304ApJbWSnjB5TkpQD1MB8GA1UdIwQY MBaAFAK5gMENcRD5H/+eDs62OdnnWzXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUt NzBjMGE1MDZkNzk3LzEvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUtNzBjMGE1MDZkNzk3 LzEvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIwVto1R gKloEoVtucn1wkJUU0Olw1PU7AdMmmD2gA7N+/gxJ2vAxynAoYleywpm69e+il07 C8eKorB9xYn/o9UjpyVQYpthfIpGI+fz+KKqHNPo0aYgJzCyIel5TpGwD538fGFr B8ATZNmdchax60wUNO+dI7uHYwF23rneV/uvS1pihGqh8NgCS1ddgxd9/elrGWII wBj7z5crolnVmU7WIDybygr7Yxm2NOBmVPVKTqgCnFKvQLdheXxUJ8reBJRXJrex 0lkR9Ckqd9Ni9dh7RPnSFhhSwRhXttYqUEbl3PTRr90V9HxDqiT26fg2RHf2VqIR Ys3JU3bdN4dRJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:44 2025 by rpki-client