This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft File: rARWSrE5dm8d7mSLNaChi702IQk.mft (raw, json) Hash identifier: vEZhrZHCY1m9Pf4LyFbzYBMB0Vrknovlr2+J5iWPnaA= Subject key identifier: 12:C5:5D:16:0D:D4:62:6A:A5:6C:6E:E6:95:F5:A9:4F:35:72:21:48 Authority key identifier: AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09 Certificate issuer: /CN=ac04564ab139766f1dee648b35a0a18bbd362109 Certificate serial: 019B239A61BB5F12C750DF31C2E82907EB2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 20:01:18 +0000 Manifest this update: Mon 15 Dec 2025 20:01:18 +0000 Manifest next update: Tue 16 Dec 2025 20:01:18 +0000 Files and hashes: 1: rARWSrE5dm8d7mSLNaChi702IQk.crl (hash: cu9gt7gjXV6LHb3eUtKreAbwsfbtH4WDe6guqFh4p3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:9a:61:bb:5f:12:c7:50:df:31:c2:e8:29:07:eb:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac04564ab139766f1dee648b35a0a18bbd362109 Validity Not Before: Dec 15 20:01:18 2025 GMT Not After : Dec 16 20:01:18 2025 GMT Subject: CN=12c55d160dd4626aa56c6ee695f5a94f35722148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:8a:ff:b8:10:63:82:76:7b:5f:d9:2d:1c: f4:d5:e4:2d:05:2b:5e:13:26:70:31:31:5a:39:c9: 9e:a3:36:97:e1:a0:c7:4b:82:82:f2:d6:60:17:2a: c6:91:ca:9d:db:3d:bc:18:69:21:c0:66:71:d9:98: 1f:d4:0e:a6:c6:a8:7b:bd:ea:29:09:b2:67:b7:64: 09:3e:25:36:73:eb:25:f5:f6:56:75:cc:54:6b:e5: c2:29:23:fa:27:27:e7:b1:d1:1a:c5:61:cb:c9:76: 5a:08:59:ea:53:76:33:df:38:80:24:fd:d6:06:11: 93:8a:e5:3c:56:ab:80:b8:a4:3d:65:2d:69:53:c1: 52:0f:52:c4:b1:5e:1a:dd:fc:c9:84:62:f3:0a:36: e7:e8:5b:a7:94:05:eb:2d:42:87:09:37:79:53:8d: 2d:41:63:20:65:0a:39:2a:ff:ad:77:f9:0b:e0:35: 9e:44:73:3e:84:ef:af:38:6c:a8:68:98:2a:91:b4: ca:6b:9e:26:4e:c1:cf:53:d6:fb:ff:7d:d0:6f:29: c6:04:cc:2c:2f:42:ba:b1:c9:2c:0c:73:3a:fa:41: 8f:c6:7e:0e:4c:9e:fc:05:7b:68:10:b5:33:ab:1c: 12:df:0b:59:1c:66:5a:38:2e:8b:48:18:25:2d:8b: 34:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C5:5D:16:0D:D4:62:6A:A5:6C:6E:E6:95:F5:A9:4F:35:72:21:48 X509v3 Authority Key Identifier: keyid:AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:cf:8b:84:37:fd:56:fd:63:44:58:86:96:ac:ef:ee:0a:31: 86:97:d7:bd:6d:14:19:b4:75:1d:3b:98:a8:33:a7:c1:50:ea: e6:bf:11:80:1f:b5:37:a7:6b:04:c8:d9:bd:31:7f:68:6c:7f: 8c:a6:e2:d2:97:f6:aa:d0:7e:b4:ce:e5:4a:b0:3c:1c:6e:a1: b8:77:b6:00:18:0d:6b:29:47:6f:5f:75:b5:65:ca:48:61:4e: 29:6f:ee:fb:76:8f:2e:96:fa:6d:1d:0c:49:54:9a:42:89:d0: 3e:01:43:b4:08:a3:3a:62:8d:26:d3:99:6d:fe:ae:a3:bc:e5: b9:de:e2:ce:2a:20:7b:56:b4:83:83:c0:f2:84:4f:f4:10:3e: d2:a0:65:6a:e3:0e:99:5e:64:98:cc:da:95:92:be:f2:58:bd: cb:6e:a4:ed:f0:9f:44:5a:2b:c5:0e:21:b9:a4:94:38:1c:7c: 6c:3a:d7:03:c7:9e:dd:44:6a:db:7c:97:27:18:29:67:67:76: 38:53:6b:87:11:6a:43:60:74:c5:4c:00:48:b7:7d:6b:ad:cd: a9:b6:a1:e6:0b:d4:3e:36:69:b2:a4:c2:b5:2b:46:65:91:f6: 1a:01:8f:17:2a:47:49:dc:3d:48:a4:b5:c0:b7:4f:1d:91:b1: 36:ec:b6:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmmG7XxLHUN8xwugpB+ssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMDQ1NjRhYjEzOTc2NmYxZGVlNjQ4YjM1YTBhMThiYmQz NjIxMDkwHhcNMjUxMjE1MjAwMTE4WhcNMjUxMjE2MjAwMTE4WjAzMTEwLwYDVQQD EygxMmM1NWQxNjBkZDQ2MjZhYTU2YzZlZTY5NWY1YTk0ZjM1NzIyMTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspyK/7gQY4J2e1/ZLRz01eQtBSte EyZwMTFaOcmeozaX4aDHS4KC8tZgFyrGkcqd2z28GGkhwGZx2Zgf1A6mxqh7veop CbJnt2QJPiU2c+sl9fZWdcxUa+XCKSP6JyfnsdEaxWHLyXZaCFnqU3Yz3ziAJP3W BhGTiuU8VquAuKQ9ZS1pU8FSD1LEsV4a3fzJhGLzCjbn6FunlAXrLUKHCTd5U40t QWMgZQo5Kv+td/kL4DWeRHM+hO+vOGyoaJgqkbTKa54mTsHPU9b7/33QbynGBMws L0K6scksDHM6+kGPxn4OTJ78BXtoELUzqxwS3wtZHGZaOC6LSBglLYs0twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLFXRYN1GJqpWxu5pX1qU81ciFIMB8GA1UdIwQY MBaAFKwEVkqxOXZvHe5kizWgoYu9NiEJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckFSV1NyRTVkbThkN21TTE5hQ2hpNzAySVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80NjY4ZDEtMjJhNC00MzJlLTgxZmMt Mjg0ZTliY2Y4MmM1LzEvckFSV1NyRTVkbThkN21TTE5hQ2hpNzAySVFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80NjY4ZDEtMjJhNC00MzJlLTgxZmMtMjg0ZTliY2Y4MmM1 LzEvckFSV1NyRTVkbThkN21TTE5hQ2hpNzAySVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJs+LhDf9 Vv1jRFiGlqzv7goxhpfXvW0UGbR1HTuYqDOnwVDq5r8RgB+1N6drBMjZvTF/aGx/ jKbi0pf2qtB+tM7lSrA8HG6huHe2ABgNaylHb191tWXKSGFOKW/u+3aPLpb6bR0M SVSaQonQPgFDtAijOmKNJtOZbf6uo7zlud7izioge1a0g4PA8oRP9BA+0qBlauMO mV5kmMzalZK+8li9y26k7fCfRForxQ4huaSUOBx8bDrXA8ee3URq23yXJxgpZ2d2 OFNrhxFqQ2B0xUwASLd9a63Nqbah5gvUPjZpsqTCtStGZZH2GgGPFypHSdw9SKS1 wLdPHZGxNuy2ig== -----END CERTIFICATE-----Generated at Tue Dec 16 06:23:39 2025 by rpki-client