This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json) Hash identifier: vC8Y1jhdPdtZ1c1zsTu0aWvbr4StXhYfUev4A7kMxaE= Subject key identifier: 53:5B:86:6D:83:1D:71:41:62:BE:F9:50:16:5B:43:E7:CB:F3:50:CE Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c Certificate serial: 019B1D982BF7772B5C2DD549BFFF95F11AEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 16:01:10 +0000 Manifest this update: Sun 14 Dec 2025 16:01:10 +0000 Manifest next update: Mon 15 Dec 2025 16:01:10 +0000 Files and hashes: 1: Pj_t5CT2l74I7u9IIPT57QIpwtI.roa (hash: injYF0uAAm68pNeJanI0YLVJHbntDpb8a8fhql09/Qo=) 2: Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa (hash: EMlouII+tVGp47ymDY78sfeCzz5ozn1bYR3C76/DHNQ=) 3: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: FV4qnK4U802IelJB1sJiMj37pEOVKPgLqGrEo5yAELE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:2b:f7:77:2b:5c:2d:d5:49:bf:ff:95:f1:1a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c Validity Not Before: Dec 14 16:01:10 2025 GMT Not After : Dec 15 16:01:10 2025 GMT Subject: CN=535b866d831d714162bef950165b43e7cbf350ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d5:08:60:55:c5:39:b2:a0:1c:d0:42:00:21: 40:82:c8:3a:aa:5d:38:70:db:77:4c:1c:26:e4:cb: e5:f4:f6:4f:b0:fc:e7:a1:20:09:35:26:c0:3f:15: b7:4e:fd:01:5d:ec:6d:19:b9:c1:3d:76:62:a8:e7: a8:e1:ff:28:61:cd:ba:2d:4a:65:64:13:dd:64:2d: c0:95:04:0c:09:d5:23:04:2e:a6:2c:a8:73:2f:a4: f4:12:01:48:94:ae:4e:93:29:e0:ea:b4:18:c7:2e: 24:fb:e0:ae:48:df:56:da:07:25:ed:a3:3f:67:ae: 73:2a:62:69:f8:2a:50:ec:90:9c:d0:24:f7:74:46: 1f:29:6e:26:28:c2:6d:ac:6d:ed:21:6d:22:53:df: 5c:0d:60:cf:93:89:12:d1:d1:f7:81:96:75:72:fe: 72:69:75:20:9b:20:f6:76:c5:52:6e:43:bd:d5:5c: bc:01:07:cf:cc:83:f1:f9:bf:38:15:69:5b:ac:90: c7:d1:32:37:29:24:4a:62:95:9a:45:97:0a:98:8c: b1:81:03:88:67:07:0f:c7:41:df:1d:26:45:3a:26: 2f:15:54:00:0c:17:59:2b:74:a0:c8:b4:23:51:0b: 36:9f:3f:55:fb:58:cb:fd:d7:b7:ec:3a:e2:b0:c9: 10:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5B:86:6D:83:1D:71:41:62:BE:F9:50:16:5B:43:E7:CB:F3:50:CE X509v3 Authority Key Identifier: keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1b:f5:4c:42:a9:84:ec:8d:8f:f0:12:bf:c8:42:b2:ac:94: 61:c9:f0:59:b8:96:0f:f1:d5:e8:ed:ac:80:71:f6:20:c9:3a: 9a:57:d8:ff:70:d2:02:ce:f7:d9:cc:c1:6e:60:6c:5b:1f:c0: c9:c6:54:07:aa:a1:b3:b7:17:b0:a7:e4:8f:07:84:d6:97:7a: 15:10:d4:d6:d4:71:6f:52:4f:37:7d:9b:ef:0a:3a:9d:fa:b9: bc:4a:84:2a:a9:cd:ee:11:c9:b4:fd:5f:01:f5:f0:34:57:7b: 05:f3:64:1a:4a:d8:b3:fc:44:1e:e3:58:ba:81:bf:1c:ed:53: 1c:7a:3c:2e:cf:a2:81:10:5c:da:40:c4:c8:a6:db:9a:80:cd: ec:0a:57:3e:c2:99:b0:29:85:13:ee:c7:73:e9:c9:35:01:cd: 80:59:a2:fb:9c:c0:aa:dc:a7:77:a7:5c:09:e0:37:0a:87:37: b1:62:b0:2a:47:e3:a4:79:6e:3b:77:af:59:f6:c9:14:6e:70: b0:a1:fc:14:be:c4:ff:e1:c8:84:61:49:1b:52:1b:28:ed:ab: 52:05:ef:39:8d:1f:41:0f:93:9a:4d:2c:fe:fd:94:39:79:29: 9a:e2:9e:33:ea:de:3b:69:d4:f4:ce:d9:91:f3:63:48:7b:aa: 60:dc:17:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmCv3dytcLdVJv/+V8RrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYjQ0OWMxOThjYjk2NjM3YmFjMWE1YjZkNTFjYjMxZjI1 OGJiMmMwHhcNMjUxMjE0MTYwMTEwWhcNMjUxMjE1MTYwMTEwWjAzMTEwLwYDVQQD Eyg1MzViODY2ZDgzMWQ3MTQxNjJiZWY5NTAxNjViNDNlN2NiZjM1MGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltUIYFXFObKgHNBCACFAgsg6ql04 cNt3TBwm5Mvl9PZPsPznoSAJNSbAPxW3Tv0BXextGbnBPXZiqOeo4f8oYc26LUpl ZBPdZC3AlQQMCdUjBC6mLKhzL6T0EgFIlK5Okyng6rQYxy4k++CuSN9W2gcl7aM/ Z65zKmJp+CpQ7JCc0CT3dEYfKW4mKMJtrG3tIW0iU99cDWDPk4kS0dH3gZZ1cv5y aXUgmyD2dsVSbkO91Vy8AQfPzIPx+b84FWlbrJDH0TI3KSRKYpWaRZcKmIyxgQOI ZwcPx0HfHSZFOiYvFVQADBdZK3SgyLQjUQs2nz9V+1jL/de37DrisMkQkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNbhm2DHXFBYr75UBZbQ+fL81DOMB8GA1UdIwQY MBaAFGq0ScGYy5Zje6waW21RyzHyWLssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXJSSndaakxsbU43ckJwYmJWSExNZkpZdXl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yYjE4N2QtZWRkOC00MGVlLWExN2Mt ZDY3ZGEzYzY5NjliLzEvYXJSSndaakxsbU43ckJwYmJWSExNZkpZdXl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yYjE4N2QtZWRkOC00MGVlLWExN2MtZDY3ZGEzYzY5Njli LzEvYXJSSndaakxsbU43ckJwYmJWSExNZkpZdXl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRv1TEKp hOyNj/ASv8hCsqyUYcnwWbiWD/HV6O2sgHH2IMk6mlfY/3DSAs732czBbmBsWx/A ycZUB6qhs7cXsKfkjweE1pd6FRDU1tRxb1JPN32b7wo6nfq5vEqEKqnN7hHJtP1f AfXwNFd7BfNkGkrYs/xEHuNYuoG/HO1THHo8Ls+igRBc2kDEyKbbmoDN7ApXPsKZ sCmFE+7Hc+nJNQHNgFmi+5zAqtynd6dcCeA3Coc3sWKwKkfjpHluO3evWfbJFG5w sKH8FL7E/+HIhGFJG1IbKO2rUgXvOY0fQQ+Tmk0s/v2UOXkpmuKeM+reO2nU9M7Z kfNjSHuqYNwXwg== -----END CERTIFICATE-----Generated at Sun Dec 14 18:00:47 2025 by rpki-client