This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json) Hash identifier: TmMykoCPCskdZ3IfuLNZ5o/o0BpljnUfw7iSFnDR810= Subject key identifier: BD:BB:FC:70:CF:3E:A5:A9:80:56:CA:9F:C3:FF:7E:07:48:A1:61:03 Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4 Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4 Certificate serial: 019C1D95CCB0F6B6F27D6055368C509BB5C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft Manifest number: 0E29 Signing time: Mon 02 Feb 2026 09:01:22 +0000 Manifest this update: Mon 02 Feb 2026 09:01:22 +0000 Manifest next update: Tue 03 Feb 2026 09:01:22 +0000 Files and hashes: 1: aY-gHcvtsPJsNOwIpm_qT_fqvQ8.roa (hash: wNGsaDekSfzDyxVuy33QU7KevVbyLx5/MhnPP194+qU=) 2: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: WUpN+3eMJGM+bDxAfCUrzhRRgk8vRcFvpFTes2aWwiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:95:cc:b0:f6:b6:f2:7d:60:55:36:8c:50:9b:b5:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4 Validity Not Before: Feb 2 09:01:22 2026 GMT Not After : Feb 3 09:01:22 2026 GMT Subject: CN=bdbbfc70cf3ea5a98056ca9fc3ff7e0748a16103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:58:5e:1e:ff:b2:c1:ce:fd:1d:a9:41:6e:05: b6:6c:51:da:a8:78:2e:a4:7a:01:4a:c4:ff:30:b3: 78:26:ea:bc:23:31:8a:8a:81:b5:7c:ec:7d:e6:ae: e7:7f:65:a8:e3:bf:75:6d:f9:50:bf:39:be:40:77: 05:73:72:c7:de:95:3f:84:8d:49:fb:81:5b:92:59: fd:14:c0:39:15:97:35:3e:b7:21:aa:7e:09:fa:9a: b2:d6:a9:34:d1:e7:b1:4b:64:13:51:78:63:93:3d: a0:4e:41:38:38:cd:64:8d:5d:2a:51:9e:27:54:67: b4:cc:ea:4f:0c:14:69:24:0e:48:af:f9:76:ef:f0: 8b:31:7b:54:d6:ff:a7:d7:46:e4:21:f9:5f:c6:a7: 4e:05:c8:1c:47:28:42:f0:b4:a0:51:10:b2:03:d2: 09:56:a3:54:4c:41:e2:6a:55:b3:5b:cd:34:3d:c1: 06:e0:40:f3:0e:20:53:da:27:fc:62:c5:4e:88:0c: 0e:93:64:6f:97:b3:a7:44:ec:e4:e9:98:09:d0:cb: 61:a5:2f:3c:ed:0a:c1:fd:0f:87:86:03:c5:68:e4: f3:19:4e:9c:c0:4f:e2:85:b5:f5:1e:df:c6:d6:47: d3:9d:36:9f:8f:92:c9:d2:7e:c6:de:6b:50:a8:38: 8b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BB:FC:70:CF:3E:A5:A9:80:56:CA:9F:C3:FF:7E:07:48:A1:61:03 X509v3 Authority Key Identifier: keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b1:1c:43:33:5c:12:2e:6a:d9:5d:1f:15:8f:d9:79:df:f7: 64:8e:a3:7e:6f:e0:a5:1a:f9:c7:a1:d7:88:16:2d:08:90:c1: c7:77:51:01:c8:59:5b:1c:c0:42:f6:c4:57:3c:f6:3d:ea:c0: ca:bd:49:06:a6:de:c8:07:6f:c5:de:42:76:42:b4:d5:73:e9: 4c:5b:0b:b3:bd:bb:6b:ea:c3:14:cf:5f:34:47:aa:67:29:57: 05:7e:ed:ba:4f:98:14:6b:97:88:c7:bc:13:c6:18:fc:da:cb: 46:ad:fe:c6:f2:d8:48:65:09:2a:82:c1:0a:35:a8:51:98:03: 77:20:e0:5b:81:19:3a:96:ea:12:94:1c:04:66:c5:81:ac:3b: 35:13:69:64:eb:19:57:41:1e:f5:ca:21:5a:69:8c:e8:80:bd: 72:48:7a:b8:38:9e:02:c7:b8:9b:e7:0b:58:ff:4c:c3:47:6a: 51:76:03:86:28:61:4a:12:08:f3:0a:93:c8:2a:30:a8:21:ca: 71:cf:4f:ce:ee:eb:9f:65:9e:8d:e3:2d:a4:37:b3:42:8f:a3: 08:52:95:60:a4:9a:39:5c:68:2a:58:1c:30:7b:d3:3b:04:10: 06:6c:52:05:a4:6c:e5:d9:b8:3e:85:70:bd:2f:65:58:0a:b0: 08:57:42:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdlcyw9rbyfWBVNoxQm7XHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYmQyNzEwYzJmY2Y1NTFiMzFmZDdjY2M2MGRmMWY2YmI0 YTkyYzQwHhcNMjYwMjAyMDkwMTIyWhcNMjYwMjAzMDkwMTIyWjAzMTEwLwYDVQQD EyhiZGJiZmM3MGNmM2VhNWE5ODA1NmNhOWZjM2ZmN2UwNzQ4YTE2MTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllheHv+ywc79HalBbgW2bFHaqHgu pHoBSsT/MLN4Juq8IzGKioG1fOx95q7nf2Wo4791bflQvzm+QHcFc3LH3pU/hI1J +4Fbkln9FMA5FZc1Prchqn4J+pqy1qk00eexS2QTUXhjkz2gTkE4OM1kjV0qUZ4n VGe0zOpPDBRpJA5Ir/l27/CLMXtU1v+n10bkIflfxqdOBcgcRyhC8LSgURCyA9IJ VqNUTEHialWzW800PcEG4EDzDiBT2if8YsVOiAwOk2Rvl7OnROzk6ZgJ0MthpS88 7QrB/Q+HhgPFaOTzGU6cwE/ihbX1Ht/G1kfTnTafj5LJ0n7G3mtQqDiLkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL27/HDPPqWpgFbKn8P/fgdIoWEDMB8GA1UdIwQY MBaAFGq9JxDC/PVRsx/XzMYN8fa7SpLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQt NzRlMzMxZGJkMDdmLzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQtNzRlMzMxZGJkMDdm LzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7EcQzNc Ei5q2V0fFY/Zed/3ZI6jfm/gpRr5x6HXiBYtCJDBx3dRAchZWxzAQvbEVzz2PerA yr1JBqbeyAdvxd5CdkK01XPpTFsLs727a+rDFM9fNEeqZylXBX7tuk+YFGuXiMe8 E8YY/NrLRq3+xvLYSGUJKoLBCjWoUZgDdyDgW4EZOpbqEpQcBGbFgaw7NRNpZOsZ V0Ee9cohWmmM6IC9ckh6uDieAse4m+cLWP9Mw0dqUXYDhihhShII8wqTyCowqCHK cc9Pzu7rn2WejeMtpDezQo+jCFKVYKSaOVxoKlgcMHvTOwQQBmxSBaRs5dm4PoVw vS9lWAqwCFdC2w== -----END CERTIFICATE-----Generated at Mon Feb 2 12:46:03 2026 by rpki-client