This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json) Hash identifier: Y1pyq9nRHwwsZgfO6eO9HLETPoyqAh1iJlzXeW1qlcg= Subject key identifier: 9E:D0:76:9C:D2:EF:86:7D:5F:C2:BC:E5:66:7C:86:86:41:FD:B3:C2 Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4 Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4 Certificate serial: 019B1C179B0647F00FD9012493FC55B930EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft Manifest number: 0DA3 Signing time: Sun 14 Dec 2025 09:01:07 +0000 Manifest this update: Sun 14 Dec 2025 09:01:07 +0000 Manifest next update: Mon 15 Dec 2025 09:01:07 +0000 Files and hashes: 1: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: qbdoB55ugJDQVdS1rfPJiBGtT6CEBHzgzQxxY525D24=) 2: jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa (hash: BbNkNKRJ/r5Ixy3RnUBfFtFAmvmPYuPFYMJIKOu9VwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:9b:06:47:f0:0f:d9:01:24:93:fc:55:b9:30:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4 Validity Not Before: Dec 14 09:01:07 2025 GMT Not After : Dec 15 09:01:07 2025 GMT Subject: CN=9ed0769cd2ef867d5fc2bce5667c868641fdb3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:2f:15:b7:87:b1:9f:9a:63:ae:ec:85:22: 91:17:ad:cf:d0:1c:bd:15:e5:78:ae:12:71:bb:9f: f9:57:30:2d:3b:c5:71:dd:c8:1e:f1:4d:8a:d9:e9: 32:05:fd:96:de:02:fe:b6:18:ed:17:89:56:a3:75: f7:90:62:2e:51:49:43:b3:3f:26:70:ec:0f:a2:b4: 98:09:3e:e0:73:05:82:f3:f9:0d:38:7d:b8:b3:05: 43:e5:29:57:b5:c7:e1:b7:16:b3:3b:11:0c:a4:15: e7:7e:c8:c3:f9:db:82:fe:40:bf:10:ef:2f:22:23: ed:90:95:65:6b:88:7a:03:33:c4:2b:3c:92:8d:52: 1f:d3:10:9e:b1:59:19:5b:8c:03:68:ff:e9:da:50: b8:94:a9:7c:6f:2b:d8:a9:f0:e5:ba:5f:21:2d:e9: b6:4c:46:08:2b:5f:3c:79:04:18:99:44:b2:be:58: 8e:dd:fd:ca:56:e8:bd:e8:e4:21:4d:55:c2:1e:8c: cc:3f:55:7f:e1:1f:e4:0f:37:53:03:26:70:13:0e: 69:c8:60:85:ee:95:d2:cc:d9:1d:0d:ad:61:b0:78: 66:2f:12:e1:0d:47:bc:4c:69:e3:07:51:e8:9b:ad: 07:e7:e9:b3:f5:b1:51:62:41:02:8e:74:8b:30:f8: 8a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D0:76:9C:D2:EF:86:7D:5F:C2:BC:E5:66:7C:86:86:41:FD:B3:C2 X509v3 Authority Key Identifier: keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e1:c2:d6:c9:b4:44:b4:de:ea:46:ed:9d:96:20:ad:85:f0: f1:9d:29:64:9b:b4:3f:ae:20:bc:42:24:c1:f7:64:4d:bc:a9: e5:ee:b9:2b:ce:05:fe:a6:f6:36:43:3d:b8:15:67:88:2f:e5: 94:05:34:ad:5f:56:3b:16:78:16:17:c0:0a:48:f1:8e:bb:55: aa:6d:63:cd:1e:a5:e7:24:39:9a:eb:ed:7f:f0:fc:d5:37:f4: e5:63:dc:90:c7:6b:e3:21:05:f5:8e:4c:71:a2:98:d8:04:db: a5:01:83:58:6c:8c:42:68:25:bc:69:f5:54:f4:3b:35:78:50: 72:6f:2c:14:05:c9:6f:4f:71:00:38:18:a5:5b:56:d0:62:2e: 79:dd:59:0d:6a:d1:02:ae:c1:ad:c5:fa:25:94:c8:21:f2:b0: 6c:21:43:81:33:89:a2:73:88:c8:93:ea:32:64:53:62:6b:8a: 65:ea:eb:e5:4e:41:6a:07:45:37:f8:eb:a7:e7:51:3e:87:24: b0:bc:6f:3c:06:ec:a2:15:bc:1c:48:f2:c2:93:7a:bd:b9:4d: 7b:7c:c2:17:c5:9a:be:c5:66:53:ff:7a:86:b9:2b:c2:3f:ab: 02:36:40:82:f0:cb:c5:a9:60:4a:9c:95:3c:58:81:32:e8:74: 4d:d6:63:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF5sGR/AP2QEkk/xVuTDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYmQyNzEwYzJmY2Y1NTFiMzFmZDdjY2M2MGRmMWY2YmI0 YTkyYzQwHhcNMjUxMjE0MDkwMTA3WhcNMjUxMjE1MDkwMTA3WjAzMTEwLwYDVQQD Eyg5ZWQwNzY5Y2QyZWY4NjdkNWZjMmJjZTU2NjdjODY4NjQxZmRiM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK4vFbeHsZ+aY67shSKRF63P0By9 FeV4rhJxu5/5VzAtO8Vx3cge8U2K2ekyBf2W3gL+thjtF4lWo3X3kGIuUUlDsz8m cOwPorSYCT7gcwWC8/kNOH24swVD5SlXtcfhtxazOxEMpBXnfsjD+duC/kC/EO8v IiPtkJVla4h6AzPEKzySjVIf0xCesVkZW4wDaP/p2lC4lKl8byvYqfDlul8hLem2 TEYIK188eQQYmUSyvliO3f3KVui96OQhTVXCHozMP1V/4R/kDzdTAyZwEw5pyGCF 7pXSzNkdDa1hsHhmLxLhDUe8TGnjB1Hom60H5+mz9bFRYkECjnSLMPiKqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7QdpzS74Z9X8K85WZ8hoZB/bPCMB8GA1UdIwQY MBaAFGq9JxDC/PVRsx/XzMYN8fa7SpLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQt NzRlMzMxZGJkMDdmLzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQtNzRlMzMxZGJkMDdm LzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuHC1sm0 RLTe6kbtnZYgrYXw8Z0pZJu0P64gvEIkwfdkTbyp5e65K84F/qb2NkM9uBVniC/l lAU0rV9WOxZ4FhfACkjxjrtVqm1jzR6l5yQ5muvtf/D81Tf05WPckMdr4yEF9Y5M caKY2ATbpQGDWGyMQmglvGn1VPQ7NXhQcm8sFAXJb09xADgYpVtW0GIued1ZDWrR Aq7BrcX6JZTIIfKwbCFDgTOJonOIyJPqMmRTYmuKZerr5U5BagdFN/jrp+dRPock sLxvPAbsohW8HEjywpN6vblNe3zCF8WavsVmU/96hrkrwj+rAjZAgvDLxalgSpyV PFiBMuh0TdZjHw== -----END CERTIFICATE-----Generated at Sun Dec 14 19:30:48 2025 by rpki-client