This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.mft File: arsX3XvH8gmcVO73hn2fOaeSk4Q.mft (raw, json) Hash identifier: aQV54sGLB2T7kGFJwdqHl81x2rMd8DgbPbEGIpOy5Wc= Subject key identifier: A8:3E:9E:14:C4:93:0B:E1:76:64:F5:6E:13:C4:69:98:2C:B0:55:8B Authority key identifier: 6A:BB:17:DD:7B:C7:F2:09:9C:54:EE:F7:86:7D:9F:39:A7:92:93:84 Certificate issuer: /CN=6abb17dd7bc7f2099c54eef7867d9f39a7929384 Certificate serial: 019B597702F3D88E3375C036590EDB7FDB64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arsX3XvH8gmcVO73hn2fOaeSk4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.mft Manifest number: 1C Signing time: Fri 26 Dec 2025 07:02:10 +0000 Manifest this update: Fri 26 Dec 2025 07:02:10 +0000 Manifest next update: Sat 27 Dec 2025 07:02:10 +0000 Files and hashes: 1: HybjzcCSL5dLw3XTLc0lFtVyMmM.roa (hash: glGuuLpDpEAixLguafxD0xqPcroYBacOuBJaXiYDFqY=) 2: arsX3XvH8gmcVO73hn2fOaeSk4Q.crl (hash: KS6wCSWivfTZvNJAEQ+WpdsqMe7P2sVazr15f+71DNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/arsX3XvH8gmcVO73hn2fOaeSk4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:02:f3:d8:8e:33:75:c0:36:59:0e:db:7f:db:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6abb17dd7bc7f2099c54eef7867d9f39a7929384 Validity Not Before: Dec 26 07:02:10 2025 GMT Not After : Dec 27 07:02:10 2025 GMT Subject: CN=a83e9e14c4930be17664f56e13c469982cb0558b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0a:b7:2a:d2:8c:73:7c:d2:fd:85:da:9a:ef: 8c:c6:52:75:7f:39:63:97:db:72:98:9a:30:dc:db: b7:00:4e:9b:98:27:8a:de:1a:4a:4d:05:3a:7a:c2: 0d:4b:49:96:18:f4:c5:34:85:aa:57:86:0a:d1:1e: d5:d1:ab:0c:ff:52:ef:c8:b0:2a:8c:83:f7:f2:58: c0:ce:d9:c9:b1:d8:82:1a:16:65:e6:3f:e4:54:42: fe:24:2d:5e:08:d4:fd:e7:6d:6d:ce:69:1d:48:9a: ec:b9:85:6d:97:a9:d1:16:a9:f7:3e:45:f5:c6:9d: 7a:25:a0:cd:ed:af:8c:65:ee:eb:43:e0:4e:59:93: 09:e8:5c:90:a7:ca:a1:ff:93:f6:75:23:07:6a:a7: 9d:16:68:d9:64:60:9b:7b:e7:67:84:df:ba:5c:41: b1:ba:df:db:24:fe:37:74:cc:ca:0d:f9:27:8b:47: 39:09:29:cc:99:36:96:f3:d5:04:e3:cf:0d:af:2c: 02:da:2b:9a:a4:9a:f4:31:f2:e5:de:f6:1b:23:75: 8f:45:a1:94:68:2c:57:2f:ba:5f:ea:59:d1:ed:77: b6:c9:12:de:59:60:e2:6a:c8:46:39:1f:53:0e:20: 23:15:86:b4:89:09:06:89:5c:f7:3d:ec:46:1c:d5: fc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3E:9E:14:C4:93:0B:E1:76:64:F5:6E:13:C4:69:98:2C:B0:55:8B X509v3 Authority Key Identifier: keyid:6A:BB:17:DD:7B:C7:F2:09:9C:54:EE:F7:86:7D:9F:39:A7:92:93:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arsX3XvH8gmcVO73hn2fOaeSk4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ac:e7:41:91:6b:06:5c:9f:06:f7:d5:be:1e:f3:63:1a:13: 11:f5:4b:67:18:fe:22:3c:ab:bd:01:26:ae:db:02:c7:c0:4e: 4a:79:72:39:22:e5:ca:bb:ed:8c:84:2b:df:d8:71:0d:6d:5b: e0:7e:7e:bc:53:b6:90:86:b9:63:34:29:cf:06:bf:18:32:82: 5a:ad:7f:d1:76:c6:1e:d3:24:9b:03:4e:87:99:25:38:61:5d: b4:3e:e7:5d:85:99:f6:45:ea:ae:86:32:13:52:b6:3b:49:67: f2:f5:98:14:f4:8e:11:68:32:fe:c7:a1:58:9c:92:c3:41:78: 5c:82:a4:69:ac:41:6b:05:2d:37:83:1a:3d:64:73:7d:ae:5d: 0d:c1:57:ef:68:b6:8f:f5:15:45:ab:f6:d3:dd:51:a0:9e:67: bd:a4:4f:f6:66:4e:18:19:9f:3a:77:a2:71:d9:6d:29:bc:91: 8f:f1:e4:1d:68:32:d1:97:36:75:cd:67:6c:e1:8f:12:f8:0e: 69:90:07:80:1c:29:c8:f1:f2:f0:f0:a8:05:43:a1:78:1d:50: 9f:5f:28:cb:89:68:72:bf:56:94:f1:6d:12:2e:39:4d:8f:28: d2:44:b4:ef:b7:f4:8d:f6:4b:5b:cc:ef:df:3a:77:25:f7:3d: d7:4a:8e:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdwLz2I4zdcA2WQ7bf9tkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYmIxN2RkN2JjN2YyMDk5YzU0ZWVmNzg2N2Q5ZjM5YTc5 MjkzODQwHhcNMjUxMjI2MDcwMjEwWhcNMjUxMjI3MDcwMjEwWjAzMTEwLwYDVQQD EyhhODNlOWUxNGM0OTMwYmUxNzY2NGY1NmUxM2M0Njk5ODJjYjA1NThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowq3KtKMc3zS/YXamu+MxlJ1fzlj l9tymJow3Nu3AE6bmCeK3hpKTQU6esINS0mWGPTFNIWqV4YK0R7V0asM/1LvyLAq jIP38ljAztnJsdiCGhZl5j/kVEL+JC1eCNT9521tzmkdSJrsuYVtl6nRFqn3PkX1 xp16JaDN7a+MZe7rQ+BOWZMJ6FyQp8qh/5P2dSMHaqedFmjZZGCbe+dnhN+6XEGx ut/bJP43dMzKDfkni0c5CSnMmTaW89UE488NrywC2iuapJr0MfLl3vYbI3WPRaGU aCxXL7pf6lnR7Xe2yRLeWWDiashGOR9TDiAjFYa0iQkGiVz3PexGHNX8xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKg+nhTEkwvhdmT1bhPEaZgssFWLMB8GA1UdIwQY MBaAFGq7F917x/IJnFTu94Z9nzmnkpOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXJzWDNYdkg4Z21jVk83M2huMmZPYWVTazRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82MjYxZGQtYTVkYS00NTBkLTlhNzIt N2YxODYxN2VhNjM4LzEvYXJzWDNYdkg4Z21jVk83M2huMmZPYWVTazRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny82MjYxZGQtYTVkYS00NTBkLTlhNzItN2YxODYxN2VhNjM4 LzEvYXJzWDNYdkg4Z21jVk83M2huMmZPYWVTazRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqznQZFr BlyfBvfVvh7zYxoTEfVLZxj+IjyrvQEmrtsCx8BOSnlyOSLlyrvtjIQr39hxDW1b 4H5+vFO2kIa5YzQpzwa/GDKCWq1/0XbGHtMkmwNOh5klOGFdtD7nXYWZ9kXqroYy E1K2O0ln8vWYFPSOEWgy/sehWJySw0F4XIKkaaxBawUtN4MaPWRzfa5dDcFX72i2 j/UVRav2091RoJ5nvaRP9mZOGBmfOneicdltKbyRj/HkHWgy0Zc2dc1nbOGPEvgO aZAHgBwpyPHy8PCoBUOheB1Qn18oy4locr9WlPFtEi45TY8o0kS077f0jfZLW8zv 3zp3Jfc910qOqw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:38 2025 by rpki-client