This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft File: ArVih4aW5ig8TfgUo4tzXFAMr4s.mft (raw, json) Hash identifier: N8RXQK2xeox8O+1Lt2cxmLP9Wohd93ByhG+If+45uiE= Subject key identifier: D5:BC:0F:3A:AD:CE:E3:8F:E4:43:BD:95:78:D6:2D:81:81:33:3A:52 Authority key identifier: 02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B Certificate issuer: /CN=02b562878696e6283c4df814a38b735c500caf8b Certificate serial: 019B3532DCAFE086FE79B455E3ED809B2481 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft Manifest number: 0160 Signing time: Fri 19 Dec 2025 06:01:24 +0000 Manifest this update: Fri 19 Dec 2025 06:01:24 +0000 Manifest next update: Sat 20 Dec 2025 06:01:24 +0000 Files and hashes: 1: ArVih4aW5ig8TfgUo4tzXFAMr4s.crl (hash: Anysr7SQXjlRmUvvBwWL+FpyfahJqKZFMCR+2xXGsqU=) 2: oZDlVRHFRnrptCcfA00p7uB3_TI.roa (hash: 4RY5Dt4Df4i349+ElvF5sCLuJsK1T7pn6qyR+T8cJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:dc:af:e0:86:fe:79:b4:55:e3:ed:80:9b:24:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b562878696e6283c4df814a38b735c500caf8b Validity Not Before: Dec 19 06:01:24 2025 GMT Not After : Dec 20 06:01:24 2025 GMT Subject: CN=d5bc0f3aadcee38fe443bd9578d62d8181333a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:4e:7b:cc:ba:7a:f5:e4:d3:75:b6:b2:da: c5:86:db:91:4f:3a:f1:48:05:68:db:53:45:72:fa: 51:d1:66:ee:fc:93:ce:43:2b:5c:bb:6a:1c:9e:c2: 0c:23:7c:b4:67:c6:50:e3:b7:74:28:93:34:b1:18: 8c:07:ab:e2:89:34:d9:41:3e:3d:55:58:db:51:38: 37:21:97:d1:0f:c0:a7:eb:ba:0d:48:57:c6:b7:34: 82:ce:8a:26:39:f2:02:5a:e7:ce:a5:78:bc:c3:40: 19:d3:85:f1:b8:c8:be:e8:56:2a:94:e3:3b:8b:48: 83:e5:ff:28:32:17:85:55:b1:b1:3a:f8:18:c8:77: e9:c6:a7:52:13:5f:c3:2a:e4:02:60:5a:f5:88:7e: 4b:58:a7:24:1d:55:22:ca:4c:e4:8c:b1:13:42:e1: 8d:66:0b:b3:a9:00:ba:36:e6:35:ae:b8:76:e8:24: 90:d2:b9:d8:b2:2f:65:8e:08:bb:18:90:c8:09:3f: 0c:d7:bb:4b:ee:03:6b:13:5b:69:4d:fa:d5:dd:e3: 9d:31:39:fd:3b:00:0e:1b:5d:30:17:21:fd:18:82: d2:9a:cc:9e:be:6b:7a:c8:6d:f2:fa:7a:d9:46:c7: 27:dd:3b:9f:cb:54:23:f1:12:7d:57:ee:88:c2:5c: c1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BC:0F:3A:AD:CE:E3:8F:E4:43:BD:95:78:D6:2D:81:81:33:3A:52 X509v3 Authority Key Identifier: keyid:02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:01:3b:ec:b3:d1:23:91:7f:ef:e4:0c:fc:19:2b:2f:09:44: d1:36:a1:6f:c9:d3:bc:75:5b:b6:ed:cd:cc:2c:71:f0:df:4c: 51:7b:a3:95:1b:d2:fc:fc:52:9b:12:4b:ec:9d:05:72:62:33: 4e:50:58:b8:a9:90:e0:0c:2b:cf:47:fc:69:ee:4d:4d:d9:0a: d6:5b:8c:27:92:ba:72:5e:bc:03:81:23:b0:08:6a:b9:bc:3b: 5e:a6:b7:32:df:26:f2:81:56:e5:b2:d5:e1:0c:fd:7c:78:83: b0:66:84:d6:52:fa:29:c2:cc:d2:09:31:42:51:b6:75:cc:7b: 40:04:96:2f:9c:0a:d3:7d:1d:bb:46:5a:f4:91:a2:68:67:24: 15:4b:85:4b:c1:9f:21:fa:7a:f3:3b:23:e0:94:1d:2e:74:bf: 45:e5:1d:4b:d9:33:02:0d:b8:fc:16:cd:b1:e8:ff:8d:58:52: f3:00:45:e4:52:57:82:70:53:59:4a:e3:8a:75:01:95:38:cd: fc:a2:28:bf:49:1a:d5:27:99:f5:3d:d8:13:db:4d:de:c8:fc: cd:a2:2c:b1:43:9a:b9:26:3b:01:fd:3a:10:fb:42:d7:63:c4: d8:fd:30:69:9e:be:f7:a8:2e:0b:32:f1:69:74:e2:bb:2f:36: 61:b8:d6:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mtyv4Ib+ebRV4+2AmySBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjU2Mjg3ODY5NmU2MjgzYzRkZjgxNGEzOGI3MzVjNTAw Y2FmOGIwHhcNMjUxMjE5MDYwMTI0WhcNMjUxMjIwMDYwMTI0WjAzMTEwLwYDVQQD EyhkNWJjMGYzYWFkY2VlMzhmZTQ0M2JkOTU3OGQ2MmQ4MTgxMzMzYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthROe8y6evXk03W2strFhtuRTzrx SAVo21NFcvpR0Wbu/JPOQytcu2ocnsIMI3y0Z8ZQ47d0KJM0sRiMB6viiTTZQT49 VVjbUTg3IZfRD8Cn67oNSFfGtzSCzoomOfICWufOpXi8w0AZ04XxuMi+6FYqlOM7 i0iD5f8oMheFVbGxOvgYyHfpxqdSE1/DKuQCYFr1iH5LWKckHVUiykzkjLETQuGN ZguzqQC6NuY1rrh26CSQ0rnYsi9ljgi7GJDICT8M17tL7gNrE1tpTfrV3eOdMTn9 OwAOG10wFyH9GILSmsyevmt6yG3y+nrZRscn3Tufy1Qj8RJ9V+6IwlzBJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW8DzqtzuOP5EO9lXjWLYGBMzpSMB8GA1UdIwQY MBaAFAK1YoeGluYoPE34FKOLc1xQDK+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOWM4NDAtOTYxNS00YjUwLTg5NTIt OTJkM2FhZDMyZjQ5LzEvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9mOWM4NDAtOTYxNS00YjUwLTg5NTItOTJkM2FhZDMyZjQ5 LzEvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAE77LPR I5F/7+QM/BkrLwlE0Tahb8nTvHVbtu3NzCxx8N9MUXujlRvS/PxSmxJL7J0FcmIz TlBYuKmQ4Awrz0f8ae5NTdkK1luMJ5K6cl68A4EjsAhqubw7Xqa3Mt8m8oFW5bLV 4Qz9fHiDsGaE1lL6KcLM0gkxQlG2dcx7QASWL5wK030du0Za9JGiaGckFUuFS8Gf Ifp68zsj4JQdLnS/ReUdS9kzAg24/BbNsej/jVhS8wBF5FJXgnBTWUrjinUBlTjN /KIov0ka1SeZ9T3YE9tN3sj8zaIssUOauSY7Af06EPtC12PE2P0waZ6+96guCzLx aXTiuy82YbjWBg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:17:33 2025 by rpki-client