This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft File: ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json) Hash identifier: kBhPGB+CB4WYa+GFa0xfyc4v9SSPhuaWs1SUKbDhm7o= Subject key identifier: E2:23:04:B6:30:3B:D3:8A:C2:EF:C5:61:7D:62:ED:12:DE:08:E8:A7 Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC Certificate issuer: /CN=011994b1c5ae8f582bbecf67772b14b6d977baac Certificate serial: 019B1A5FCA1D65C379FD3EDB3B18123E3F63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft Manifest number: 068E Signing time: Sun 14 Dec 2025 01:00:43 +0000 Manifest this update: Sun 14 Dec 2025 01:00:43 +0000 Manifest next update: Mon 15 Dec 2025 01:00:43 +0000 Files and hashes: 1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: rGY2895T0CkC1/R3iKxzp07Crh+sYonwXXko7qLEmM8=) 2: NFxIuk4KnMOoaK7t1Cp4prQGCpc.roa (hash: qLz7+g7LrMIsBpRTz+960ZyB6BF4g8W2iE+TmwJoilE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:ca:1d:65:c3:79:fd:3e:db:3b:18:12:3e:3f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac Validity Not Before: Dec 14 01:00:43 2025 GMT Not After : Dec 15 01:00:43 2025 GMT Subject: CN=e22304b6303bd38ac2efc5617d62ed12de08e8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:53:67:91:c3:ed:73:7d:3d:c7:3a:b1:f2:2c: f5:4a:d2:66:c5:ae:a6:1b:49:70:36:5f:7d:a4:8c: 61:1f:f1:f9:33:d1:76:a1:03:ba:ce:3c:e0:ac:37: 94:47:d8:e4:20:d4:2e:7f:de:ce:65:c9:d4:3c:ae: 54:4b:51:f4:20:bd:d2:cb:47:36:aa:57:9b:3f:f7: 97:3a:97:63:04:68:d5:eb:c1:21:c3:28:f0:39:d3: ea:d1:c4:e4:3a:63:d1:11:4c:f5:aa:55:88:b3:60: f1:c3:32:05:b4:2f:3c:c3:c7:8c:a1:bc:18:06:eb: 82:59:9f:45:33:92:83:cb:dd:6f:26:b0:36:62:81: 36:8e:74:d6:78:82:69:d0:2d:33:f6:a9:ff:71:ee: 04:fc:63:f8:8a:48:61:8a:8e:0e:10:c4:01:b3:cc: 07:89:6b:53:b2:46:84:76:df:be:38:26:1d:3e:f3: fb:76:2b:40:dd:f2:b8:ba:40:fd:20:45:53:1f:6a: d1:9c:53:aa:3d:be:a3:86:85:a5:2d:94:57:d4:ce: 60:2b:ef:ad:88:29:4b:f0:14:db:5d:36:8a:97:d0: 56:87:39:d4:6a:42:d9:57:e7:91:aa:5a:2d:2b:b8: b1:8c:c5:62:cd:1f:f9:8f:86:4a:71:a9:3a:15:cf: 25:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:23:04:B6:30:3B:D3:8A:C2:EF:C5:61:7D:62:ED:12:DE:08:E8:A7 X509v3 Authority Key Identifier: keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:2f:a9:84:e0:0c:59:ba:8c:b4:33:a6:da:05:4a:41:27:c3: 2b:6f:dc:9d:64:d0:b7:72:6b:9c:f1:9d:a4:39:37:07:20:50: f3:97:57:11:db:4a:b1:e4:d0:34:97:f7:49:62:1f:6d:e6:90: 32:66:39:a7:6e:53:d9:d6:5b:ef:ab:98:b0:e2:bf:db:db:1c: 3f:be:d1:20:9f:ca:49:68:39:c6:b4:22:52:17:53:38:9d:80: 39:6c:63:55:1c:dd:29:f6:24:ef:ed:84:0e:60:ad:ab:c9:c9: 60:54:e2:3d:0b:ad:07:c5:04:4d:c8:de:87:30:8e:ea:31:66: 31:a2:d0:39:28:d6:76:ca:49:7c:14:43:60:51:3d:88:17:ad: 9e:f0:b9:91:93:a1:52:72:93:ff:cb:6f:1d:b8:4e:e9:2d:33: c6:2b:ba:96:83:f2:39:92:1c:19:f9:d1:50:00:f1:d5:df:96: df:d1:9f:88:3e:01:f6:12:8e:ed:ad:47:04:61:f0:6d:7a:97: ff:87:ad:a8:99:13:47:87:05:24:15:37:03:61:a5:7f:a3:60: 2f:e3:cc:3b:31:0a:d0:1e:b8:c6:59:60:27:da:ba:50:ca:7f: be:dd:0f:23:d3:ff:2c:4b:71:97:36:39:56:ca:1e:d5:aa:dc: 8c:58:ec:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX8odZcN5/T7bOxgSPj9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMTk5NGIxYzVhZThmNTgyYmJlY2Y2Nzc3MmIxNGI2ZDk3 N2JhYWMwHhcNMjUxMjE0MDEwMDQzWhcNMjUxMjE1MDEwMDQzWjAzMTEwLwYDVQQD EyhlMjIzMDRiNjMwM2JkMzhhYzJlZmM1NjE3ZDYyZWQxMmRlMDhlOGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVNnkcPtc309xzqx8iz1StJmxa6m G0lwNl99pIxhH/H5M9F2oQO6zjzgrDeUR9jkINQuf97OZcnUPK5US1H0IL3Sy0c2 qlebP/eXOpdjBGjV68EhwyjwOdPq0cTkOmPREUz1qlWIs2DxwzIFtC88w8eMobwY BuuCWZ9FM5KDy91vJrA2YoE2jnTWeIJp0C0z9qn/ce4E/GP4ikhhio4OEMQBs8wH iWtTskaEdt++OCYdPvP7ditA3fK4ukD9IEVTH2rRnFOqPb6jhoWlLZRX1M5gK++t iClL8BTbXTaKl9BWhznUakLZV+eRqlotK7ixjMVizR/5j4ZKcak6Fc8lvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIjBLYwO9OKwu/FYX1i7RLeCOinMB8GA1UdIwQY MBaAFAEZlLHFro9YK77PZ3crFLbZd7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEt M2E3M2MzMzNlN2U3LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEtM2E3M2MzMzNlN2U3 LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArC+phOAM WbqMtDOm2gVKQSfDK2/cnWTQt3JrnPGdpDk3ByBQ85dXEdtKseTQNJf3SWIfbeaQ MmY5p25T2dZb76uYsOK/29scP77RIJ/KSWg5xrQiUhdTOJ2AOWxjVRzdKfYk7+2E DmCtq8nJYFTiPQutB8UETcjehzCO6jFmMaLQOSjWdspJfBRDYFE9iBetnvC5kZOh UnKT/8tvHbhO6S0zxiu6loPyOZIcGfnRUADx1d+W39GfiD4B9hKO7a1HBGHwbXqX /4etqJkTR4cFJBU3A2Glf6NgL+PMOzEK0B64xllgJ9q6UMp/vt0PI9P/LEtxlzY5 Vsoe1arcjFjsHA== -----END CERTIFICATE-----Generated at Sun Dec 14 09:32:43 2025 by rpki-client