This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft File: ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json) Hash identifier: LmtzwYUtkQrQ1aOwxxTomtrxIcXEE58gHf09wr/Q5Pk= Subject key identifier: 6F:7F:E2:E0:42:73:D5:49:A5:57:1E:F7:1F:C5:B7:D6:3B:75:38:B9 Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71 Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71 Certificate serial: 019AAD2743B0A4B518AA7F07ADC8D8DF1123 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft Manifest number: 1748 Signing time: Sat 22 Nov 2025 20:00:22 +0000 Manifest this update: Sat 22 Nov 2025 20:00:22 +0000 Manifest next update: Sun 23 Nov 2025 20:00:22 +0000 Files and hashes: 1: 3jSOaatFzz9swrZhXqD6jHzeDww.roa (hash: tVwdSKcBd6/2MH/mbR0mS1QlYqRRE3gqHsHq5WvFQFw=) 2: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: UuwKl0uAVNgep3EQNTbqFs4TQ9Ni1Z8p/7L+bv1QCNI=) 3: JJY-Zjys_OhUTUhP-cRuIlaUIJU.roa (hash: 5zOgMk+c4Mrl83ntlb1BWuWLQ9qzH0Aci4OcYi1Ml7w=) 4: OvxdZUL7-yIQWzcFYUnAa1c12II.roa (hash: mxKl5svIy2E+onAWkycoeHXKh2w+Zk+8kzX+IQMshAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ad:27:43:b0:a4:b5:18:aa:7f:07:ad:c8:d8:df:11:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71 Validity Not Before: Nov 22 20:00:22 2025 GMT Not After : Nov 23 20:00:22 2025 GMT Subject: CN=6f7fe2e04273d549a5571ef71fc5b7d63b7538b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:06:05:c6:4c:e3:60:3f:16:c7:ee:80:ef:8e: 1c:d7:8c:c4:22:3d:fe:b7:5c:09:c2:68:9c:02:83: 67:78:0e:25:50:6e:94:22:93:5a:80:51:d1:3a:e3: 6d:37:7d:0a:67:49:6c:cd:30:0d:46:9d:50:c3:1d: e3:ed:f5:e3:7c:5e:c5:19:58:ed:6b:f1:f4:4e:ae: 24:4f:21:a4:db:9e:26:13:94:16:17:49:47:c9:26: 08:80:f9:13:57:59:46:31:44:d6:ff:68:a5:9a:88: 84:60:23:d5:21:38:b5:72:da:b7:3e:71:01:9e:0d: 01:24:8a:4d:35:27:39:d1:d2:39:18:34:cb:d8:4d: ea:ca:73:d7:6a:96:19:8b:0e:9e:30:11:05:40:31: a8:ba:7f:51:1a:77:2b:9a:46:8b:84:af:41:09:a7: 23:59:91:37:a4:a5:56:86:2e:03:89:08:79:ef:9d: b3:7f:1e:d6:99:4f:c2:64:db:a9:54:98:31:92:83: 72:52:4f:6d:0a:69:11:f4:88:b7:11:89:15:97:14: 5b:ca:da:8a:b7:64:cc:c7:26:d7:6a:0a:72:8c:2b: e6:b9:c5:e6:be:9c:84:cd:cf:f2:17:06:dd:13:95: 31:4c:f7:60:7a:5a:e0:59:e4:a9:69:88:72:83:6d: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7F:E2:E0:42:73:D5:49:A5:57:1E:F7:1F:C5:B7:D6:3B:75:38:B9 X509v3 Authority Key Identifier: keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e7:81:a5:13:4f:f7:c1:e0:c0:92:cf:40:44:58:6a:d7:bc: 2f:64:ee:1e:77:a5:43:bc:57:8a:9a:ce:3c:38:cc:cd:90:6a: 38:51:0f:57:14:ea:60:d3:36:62:95:cf:bf:32:6f:38:ff:ee: c7:fd:a5:dc:37:e0:60:59:72:d1:31:25:74:3f:84:d2:c8:83: 23:d7:78:d1:18:ef:7f:f8:6f:c9:a0:c0:04:f6:b9:80:b2:94: 24:6a:69:91:37:05:ea:bf:0c:45:ed:ea:cb:bd:67:2e:fe:a7: e8:ae:88:f6:0e:9b:cb:a1:30:24:42:3a:3a:01:cc:ef:6b:9e: 31:eb:ad:60:aa:44:eb:83:ae:10:9e:16:64:9c:c5:ee:4f:5b: f0:60:18:a4:32:04:d0:59:de:67:27:12:2d:9f:bc:fd:97:81: 12:96:ca:1d:c5:d8:2d:97:18:f0:d0:d9:52:0a:41:e9:92:8f: 43:bb:b4:90:fd:58:6e:7d:27:b2:c5:e8:a7:68:a6:73:f3:06: 2f:85:1f:d0:ea:56:43:d4:05:00:8d:6b:89:a4:2a:00:15:9e: 62:c2:21:71:2d:7b:b0:38:0b:02:a2:b1:2f:75:ab:17:35:e5: 71:a7:24:9f:da:8c:87:82:7f:66:99:45:6f:3e:6b:aa:77:a5: c1:23:b8:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqtJ0OwpLUYqn8HrcjY3xEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjYxMGNkNDNiYWZjZWQ5MTQ4MGZhYmZkY2FhZTgyMDQ5 ZmJmNzEwHhcNMjUxMTIyMjAwMDIyWhcNMjUxMTIzMjAwMDIyWjAzMTEwLwYDVQQD Eyg2ZjdmZTJlMDQyNzNkNTQ5YTU1NzFlZjcxZmM1YjdkNjNiNzUzOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQYFxkzjYD8Wx+6A744c14zEIj3+ t1wJwmicAoNneA4lUG6UIpNagFHROuNtN30KZ0lszTANRp1Qwx3j7fXjfF7FGVjt a/H0Tq4kTyGk254mE5QWF0lHySYIgPkTV1lGMUTW/2ilmoiEYCPVITi1ctq3PnEB ng0BJIpNNSc50dI5GDTL2E3qynPXapYZiw6eMBEFQDGoun9RGncrmkaLhK9BCacj WZE3pKVWhi4DiQh5752zfx7WmU/CZNupVJgxkoNyUk9tCmkR9Ii3EYkVlxRbytqK t2TMxybXagpyjCvmucXmvpyEzc/yFwbdE5UxTPdgelrgWeSpaYhyg22EcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9/4uBCc9VJpVce9x/Ft9Y7dTi5MB8GA1UdIwQY MBaAFAK2EM1DuvztkUgPq/3KroIEn79xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEt OTAxM2NhOTk2YjE2LzEvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEtOTAxM2NhOTk2YjE2 LzEvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQueBpRNP 98HgwJLPQERYate8L2TuHnelQ7xXiprOPDjMzZBqOFEPVxTqYNM2YpXPvzJvOP/u x/2l3DfgYFly0TEldD+E0siDI9d40Rjvf/hvyaDABPa5gLKUJGppkTcF6r8MRe3q y71nLv6n6K6I9g6by6EwJEI6OgHM72ueMeutYKpE64OuEJ4WZJzF7k9b8GAYpDIE 0FneZycSLZ+8/ZeBEpbKHcXYLZcY8NDZUgpB6ZKPQ7u0kP1Ybn0nssXop2imc/MG L4Uf0OpWQ9QFAI1riaQqABWeYsIhcS17sDgLAqKxL3WrFzXlcackn9qMh4J/ZplF bz5rqnelwSO4qA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:39:15 2025 by rpki-client