This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json) Hash identifier: RHm+DX+RnpDpepzmwLARRkTC1/V8/emb1f5VFbF1XVc= Subject key identifier: 83:6C:82:C9:DE:05:DD:F9:52:DB:21:3D:9A:E9:AD:3D:90:BE:00:F1 Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41 Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341 Certificate serial: 019B206271B8D7FA5475C29FAF2DFE5F00C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft Manifest number: 170B Signing time: Mon 15 Dec 2025 05:01:20 +0000 Manifest this update: Mon 15 Dec 2025 05:01:20 +0000 Manifest next update: Tue 16 Dec 2025 05:01:20 +0000 Files and hashes: 1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=) 2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: 4PcUlMzGpGOxtys+O+2I6nCqh1vC73JzetMTN212bJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:71:b8:d7:fa:54:75:c2:9f:af:2d:fe:5f:00:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341 Validity Not Before: Dec 15 05:01:20 2025 GMT Not After : Dec 16 05:01:20 2025 GMT Subject: CN=836c82c9de05ddf952db213d9ae9ad3d90be00f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:e0:cf:55:9c:c8:1d:95:76:0c:a5:1e:7d: e7:9c:98:dc:20:f2:64:08:14:0f:8a:27:68:9c:69: 46:74:23:94:34:2f:57:ff:3b:60:99:96:13:02:87: f9:54:a4:bb:36:87:89:7b:36:01:e8:58:83:3c:a3: fb:89:28:84:29:bb:32:e8:f4:d1:9f:05:44:a0:63: 13:6f:c2:d2:02:98:77:e4:d1:f0:50:19:0b:5c:ba: 95:f8:c3:d2:36:5f:7c:1b:f7:63:c7:1e:31:35:df: b3:5e:a5:42:3e:cc:89:32:9d:e4:c2:2d:c3:8e:48: 12:a7:7b:44:84:ee:58:ed:63:8f:a3:ce:3e:58:d9: d3:9c:0f:f0:4e:93:08:26:75:5e:c1:99:90:14:0e: 61:93:ac:88:36:43:fe:aa:50:c0:f0:fb:8a:0d:23: ff:f7:90:17:e1:ed:23:80:a1:62:8e:85:b6:12:9b: e1:f8:af:a1:80:f3:52:dc:8d:85:ab:ad:1c:64:e9: 04:b4:b7:13:15:43:ba:fc:75:d0:db:93:e9:f4:46: 9c:6c:6e:56:29:bc:aa:b4:ad:16:45:c0:d0:cd:9b: 89:ba:eb:e0:cf:ec:6e:c0:59:c7:6b:2e:b8:cb:fb: f9:d4:14:c9:e8:10:60:10:6a:bd:df:c2:eb:6b:52: 6f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6C:82:C9:DE:05:DD:F9:52:DB:21:3D:9A:E9:AD:3D:90:BE:00:F1 X509v3 Authority Key Identifier: keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:4c:ab:57:8d:38:d4:96:e3:48:fe:65:04:28:30:b6:7f:b1: 1b:7d:db:c9:91:12:c9:c6:0a:5b:2a:9b:cc:12:60:ed:a0:0c: 3c:10:a8:04:2e:f9:87:dc:3b:1a:5d:7a:96:c3:4b:aa:0e:82: 3c:55:07:d6:31:8a:4a:a7:0f:3a:15:05:67:99:21:cd:4d:40: a7:79:a0:35:d3:98:55:ad:e9:3e:21:f8:70:62:c3:c2:36:7d: 8c:fe:39:f8:de:e2:f2:fa:bf:92:8d:ac:1d:0c:e9:d9:68:4d: 93:12:0f:63:87:7e:f6:d5:ec:3f:76:81:6b:61:60:a0:88:4a: 4b:06:d5:29:53:c7:b7:76:f6:15:8f:b5:0c:27:57:2c:cd:93: 6c:bd:af:b5:5a:51:e3:2f:44:af:48:6e:64:ae:c2:88:9d:24: 1f:b1:23:1f:4b:d7:8e:55:2d:96:ad:d6:cf:ac:5c:e0:dc:01: c6:0e:2b:8c:1f:82:f2:e2:66:00:21:b8:01:0b:c9:bc:35:52: dc:52:e4:af:ec:0f:b8:f0:16:17:bb:07:23:6c:d8:ab:53:f1: 4a:57:37:d4:36:84:ae:dd:a8:95:08:88:a3:e6:21:68:27:eb: 12:ef:1b:5b:da:a2:09:55:a6:a8:50:c2:24:3f:87:43:3b:57: b8:ed:9b:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYnG41/pUdcKfry3+XwDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjI4MGFlNTE5NTUwYzdhN2Y0OTUzYWIyN2Q3YWU3ZGRl YjEzNDEwHhcNMjUxMjE1MDUwMTIwWhcNMjUxMjE2MDUwMTIwWjAzMTEwLwYDVQQD Eyg4MzZjODJjOWRlMDVkZGY5NTJkYjIxM2Q5YWU5YWQzZDkwYmUwMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoADgz1WcyB2VdgylHn3nnJjcIPJk CBQPiidonGlGdCOUNC9X/ztgmZYTAof5VKS7NoeJezYB6FiDPKP7iSiEKbsy6PTR nwVEoGMTb8LSAph35NHwUBkLXLqV+MPSNl98G/djxx4xNd+zXqVCPsyJMp3kwi3D jkgSp3tEhO5Y7WOPo84+WNnTnA/wTpMIJnVewZmQFA5hk6yINkP+qlDA8PuKDSP/ 95AX4e0jgKFijoW2Epvh+K+hgPNS3I2Fq60cZOkEtLcTFUO6/HXQ25Pp9EacbG5W KbyqtK0WRcDQzZuJuuvgz+xuwFnHay64y/v51BTJ6BBgEGq938Lra1Jv3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINsgsneBd35UtshPZrprT2QvgDxMB8GA1UdIwQY MBaAFInygK5RlVDHp/SVOrJ9eufd6xNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMt NWI1MGVhODhlZWFiLzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMtNWI1MGVhODhlZWFi LzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkyrV404 1JbjSP5lBCgwtn+xG33byZESycYKWyqbzBJg7aAMPBCoBC75h9w7Gl16lsNLqg6C PFUH1jGKSqcPOhUFZ5khzU1Ap3mgNdOYVa3pPiH4cGLDwjZ9jP45+N7i8vq/ko2s HQzp2WhNkxIPY4d+9tXsP3aBa2FgoIhKSwbVKVPHt3b2FY+1DCdXLM2TbL2vtVpR 4y9Er0huZK7CiJ0kH7EjH0vXjlUtlq3Wz6xc4NwBxg4rjB+C8uJmACG4AQvJvDVS 3FLkr+wPuPAWF7sHI2zYq1PxSlc31DaErt2olQiIo+YhaCfrEu8bW9qiCVWmqFDC JD+HQztXuO2bsg== -----END CERTIFICATE-----Generated at Mon Dec 15 06:34:48 2025 by rpki-client