This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json) Hash identifier: MkukmgIN7KBSmE9QGmIDxl8DcZNDvUOrXOd2YZrcSzg= Subject key identifier: BF:EE:64:07:13:65:5A:BC:62:F9:82:0C:A0:C5:9A:41:58:B9:6F:FB Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a Certificate serial: 019AF19AE9CD4D65B42948E54399A3E7D998 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft Manifest number: 05CF Signing time: Sat 06 Dec 2025 03:00:52 +0000 Manifest this update: Sat 06 Dec 2025 03:00:52 +0000 Manifest next update: Sun 07 Dec 2025 03:00:52 +0000 Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=) 2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: 6NvCuz7N0VONxuTKXRFIS9Y3TszVylFx52htPXUqI9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e9:cd:4d:65:b4:29:48:e5:43:99:a3:e7:d9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a Validity Not Before: Dec 6 03:00:52 2025 GMT Not After : Dec 7 03:00:52 2025 GMT Subject: CN=bfee640713655abc62f9820ca0c59a4158b96ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:98:61:53:6c:51:1a:14:45:a7:2d:ce:51:29: 9c:3a:7d:1a:0c:9a:a9:2f:12:99:56:85:68:de:d3: fc:5d:aa:ff:1e:b1:9e:d8:06:cb:3b:15:67:d0:80: b8:b8:b6:aa:17:30:4d:9a:d5:8f:2d:71:ef:b5:19: 11:35:90:66:1a:f6:8f:76:4c:70:1c:da:e8:90:f2: dc:43:42:bc:d5:b3:61:47:0f:6c:bc:7f:95:ad:f0: 83:38:5b:b9:66:88:ea:4d:53:a5:23:f8:7b:46:39: b8:94:db:66:ab:e3:e6:3f:22:63:21:c5:09:76:6c: c2:b2:38:ca:02:d3:38:9f:2a:44:7a:4c:87:35:44: 4b:a1:19:18:4a:c2:8c:b0:6a:77:a7:74:01:93:9f: 4b:4f:9c:a2:b2:2c:ee:a7:0e:61:e1:63:2f:d1:92: 66:b3:4f:91:cf:81:66:b5:e7:ca:3f:e3:ca:42:a8: a4:3b:c1:47:a3:d2:e1:60:37:66:59:bd:f7:28:d0: b1:cf:b1:cb:45:f7:ec:ca:b1:5c:0a:92:30:95:57: a6:c9:ee:3d:e4:ac:66:17:11:37:2e:27:7e:68:e6: 72:1d:df:d7:7d:a4:fd:b2:8e:b0:f4:b3:5c:9a:78: 37:71:75:cd:95:c2:99:25:5f:f6:bc:28:91:c7:3e: 11:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EE:64:07:13:65:5A:BC:62:F9:82:0C:A0:C5:9A:41:58:B9:6F:FB X509v3 Authority Key Identifier: keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:81:36:f5:81:8f:ee:d3:88:ba:19:b1:3c:ff:d8:f3:6d:13: 5c:5f:10:cb:c0:87:9f:9b:db:7c:52:98:74:53:89:86:e7:d1: 95:a3:33:e6:0d:01:4d:83:aa:e0:12:54:87:eb:d7:69:4e:a4: 30:4e:f4:2f:39:8a:6c:da:5c:ba:fd:20:c1:16:86:81:7e:22: 45:3d:40:e9:53:82:23:9d:24:35:08:17:9f:0d:f9:10:c2:bd: 71:98:06:76:3d:3c:41:3c:00:d3:e9:95:3d:1d:2b:2d:13:62: cc:37:1a:ff:84:40:88:61:a8:78:cc:b7:d4:f6:0c:19:8d:49: 58:9a:32:2e:52:77:6b:5b:79:46:69:45:3f:74:ee:0d:f3:bd: f6:b2:22:a4:55:7b:45:ed:4b:5b:73:e1:28:5a:3c:2c:96:18: b0:ed:70:f7:73:33:ca:83:5a:ac:6d:2f:7a:ae:9e:9f:68:41: 74:94:2d:7e:68:5c:9e:ae:c0:7c:ef:f6:f5:a6:81:d5:d6:5f: 60:49:ef:4a:1c:cc:17:27:30:3d:f5:20:84:c6:86:a4:a7:3f: f9:96:57:31:6a:12:93:28:a9:2e:e6:21:a7:55:29:67:d3:dd: ab:d6:17:13:6c:8a:48:06:c1:4a:97:6f:fd:46:c5:1e:66:9e: 1c:e8:47:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmunNTWW0KUjlQ5mj59mYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYjQzNzllMTE5ZTcxMDAxY2NkZmVlYmY0ZjJhZjJjZjVm MDdhMGEwHhcNMjUxMjA2MDMwMDUyWhcNMjUxMjA3MDMwMDUyWjAzMTEwLwYDVQQD EyhiZmVlNjQwNzEzNjU1YWJjNjJmOTgyMGNhMGM1OWE0MTU4Yjk2ZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlphhU2xRGhRFpy3OUSmcOn0aDJqp LxKZVoVo3tP8Xar/HrGe2AbLOxVn0IC4uLaqFzBNmtWPLXHvtRkRNZBmGvaPdkxw HNrokPLcQ0K81bNhRw9svH+VrfCDOFu5ZojqTVOlI/h7Rjm4lNtmq+PmPyJjIcUJ dmzCsjjKAtM4nypEekyHNURLoRkYSsKMsGp3p3QBk59LT5yisizupw5h4WMv0ZJm s0+Rz4FmtefKP+PKQqikO8FHo9LhYDdmWb33KNCxz7HLRffsyrFcCpIwlVemye49 5KxmFxE3Lid+aOZyHd/XfaT9so6w9LNcmng3cXXNlcKZJV/2vCiRxz4R4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/uZAcTZVq8YvmCDKDFmkFYuW/7MB8GA1UdIwQY MBaAFGq0N54RnnEAHM3+6/Tyryz18HoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84OWE0YmYtMzI1YS00Njc1LWJiMDAt MGE0MzM4Y2RmOTdiLzEvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84OWE0YmYtMzI1YS00Njc1LWJiMDAtMGE0MzM4Y2RmOTdi LzEvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4E29YGP 7tOIuhmxPP/Y820TXF8Qy8CHn5vbfFKYdFOJhufRlaMz5g0BTYOq4BJUh+vXaU6k ME70LzmKbNpcuv0gwRaGgX4iRT1A6VOCI50kNQgXnw35EMK9cZgGdj08QTwA0+mV PR0rLRNizDca/4RAiGGoeMy31PYMGY1JWJoyLlJ3a1t5RmlFP3TuDfO99rIipFV7 Re1LW3PhKFo8LJYYsO1w93MzyoNarG0veq6en2hBdJQtfmhcnq7AfO/29aaB1dZf YEnvShzMFycwPfUghMaGpKc/+ZZXMWoSkyipLuYhp1UpZ9Pdq9YXE2yKSAbBSpdv /UbFHmaeHOhHOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:35 2025 by rpki-client