This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft File: ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json) Hash identifier: b79b0T3HyWiWVVHoO1bj02zuCUM3KXVDiomK3YsVDs0= Subject key identifier: 81:2F:33:5B:3F:28:E3:69:91:98:43:16:83:31:3F:0D:39:D4:E3:FC Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2 Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2 Certificate serial: 019AABDDD742CE1E9FCECA28EA27A869ACB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft Manifest number: 1277 Signing time: Sat 22 Nov 2025 14:00:33 +0000 Manifest this update: Sat 22 Nov 2025 14:00:33 +0000 Manifest next update: Sun 23 Nov 2025 14:00:33 +0000 Files and hashes: 1: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: loKYSqersrufGstJwu4iR+aRLDEFDdAUJLTXl6xc3EQ=) 2: RN98TJ7kqQI5BuSnvdMcE3q1sxc.roa (hash: YxQcvIdmH83Dh0Q3zwPjsii4N4gNYgzKFTXwaXCIS7Y=) 3: eIZENcgK1XZflT_O-9vOWF5_c5k.roa (hash: 72shYqXGHw00bwK02sJ1cpdaJwagVhfPsDZJsD/Kbnk=) 4: pw-uXfj6mcJrqBi6AQ_DbhRWlvc.roa (hash: F9GSSa/n4nzQc1So+eTia4zHzLGf70ctYWS6RuL9cmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:dd:d7:42:ce:1e:9f:ce:ca:28:ea:27:a8:69:ac:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2 Validity Not Before: Nov 22 14:00:33 2025 GMT Not After : Nov 23 14:00:33 2025 GMT Subject: CN=812f335b3f28e3699198431683313f0d39d4e3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8e:5a:eb:c1:55:bd:93:62:26:63:7a:18:89: 97:3f:71:c8:2d:6e:a4:08:8f:5b:c3:93:f8:64:28: 06:f1:94:e6:64:70:c5:f0:05:47:f9:04:78:63:e8: 3e:d6:33:e5:eb:1d:fe:1a:12:0c:d6:52:ac:bf:73: 95:06:ca:91:d2:7c:5c:e3:8d:bc:78:d8:87:b8:d7: d0:77:3c:af:1e:42:57:8c:42:9a:c4:f4:65:11:dc: dc:a8:e8:8f:0e:be:26:58:de:97:be:02:dd:5e:51: 03:ea:b4:6a:37:07:9c:a0:12:12:3d:99:b1:c1:85: 55:7c:6e:3b:4e:31:f3:85:e3:ae:fb:7a:b7:9c:50: bd:86:fe:75:b3:a1:b8:aa:a8:e9:7f:06:3b:01:7c: 1a:88:72:b1:aa:b1:c6:0a:9d:f6:85:39:25:ca:f8: 79:d3:6c:4b:86:9a:70:6c:08:30:99:ac:b3:12:9f: 38:81:be:26:59:71:be:d2:cb:ac:4f:ad:7b:df:9e: 30:3c:a5:08:eb:c8:f6:6a:12:99:9c:fc:dd:5e:a1: a4:be:d8:dc:ba:8b:dd:98:d6:3f:de:6e:ff:d7:6d: d1:44:16:f3:4b:90:b4:78:4d:77:62:4a:5e:53:f4: 06:54:f0:e6:11:ce:cf:37:ad:ff:d3:68:4a:6c:11: 98:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2F:33:5B:3F:28:E3:69:91:98:43:16:83:31:3F:0D:39:D4:E3:FC X509v3 Authority Key Identifier: keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:14:79:25:ee:fb:b7:ed:8d:0b:d9:02:6c:48:f6:fb:5b:54: 3b:75:54:60:bd:c8:e6:91:c5:35:5a:37:93:75:9e:0c:33:6f: 3a:fa:ff:25:0b:f8:1c:b5:30:b5:00:c0:97:46:91:ee:63:00: 31:b6:ac:39:b3:aa:f5:f2:7b:08:17:65:06:36:9a:a4:f5:c9: c1:65:82:0e:94:ce:8c:b7:4c:da:15:97:2e:ce:4b:6b:1b:fd: dc:ad:cd:a4:88:12:62:98:0d:96:19:dd:14:cf:30:14:ca:43: 86:8a:29:c8:cf:b7:cd:53:70:f5:33:ca:04:b9:a8:7d:df:19: 4e:86:02:31:60:3d:3d:59:cf:01:e2:71:ef:e3:7f:84:12:d6: d9:df:ca:1a:e1:ff:88:1e:6a:07:d1:a9:76:8d:2d:ef:ec:77: aa:f3:6c:fb:ec:34:1e:a9:ef:30:18:7c:55:27:17:23:ef:4a: dc:55:b4:b1:e1:df:19:e2:a9:67:9e:ca:3b:0f:9e:bb:f7:1d: 40:cc:0f:f4:35:9c:8b:33:ca:37:f2:9f:cb:f7:80:d4:9c:40: 2d:a4:46:1d:1d:f6:c3:a5:20:82:10:87:e6:70:dd:dc:19:ef: 64:fe:ad:93:ec:25:8b:4a:11:8b:5d:35:7d:9d:fb:bd:22:88: 9a:c3:d3:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqr3ddCzh6fzsoo6ieoaay3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjk4MGMxMGQ3MTEwZjkxZmZmOWUwZWNlYjYzOWQ5ZTc1 YjM1ZTIwHhcNMjUxMTIyMTQwMDMzWhcNMjUxMTIzMTQwMDMzWjAzMTEwLwYDVQQD Eyg4MTJmMzM1YjNmMjhlMzY5OTE5ODQzMTY4MzMxM2YwZDM5ZDRlM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio5a68FVvZNiJmN6GImXP3HILW6k CI9bw5P4ZCgG8ZTmZHDF8AVH+QR4Y+g+1jPl6x3+GhIM1lKsv3OVBsqR0nxc4428 eNiHuNfQdzyvHkJXjEKaxPRlEdzcqOiPDr4mWN6XvgLdXlED6rRqNwecoBISPZmx wYVVfG47TjHzheOu+3q3nFC9hv51s6G4qqjpfwY7AXwaiHKxqrHGCp32hTklyvh5 02xLhppwbAgwmayzEp84gb4mWXG+0susT617354wPKUI68j2ahKZnPzdXqGkvtjc uovdmNY/3m7/123RRBbzS5C0eE13YkpeU/QGVPDmEc7PN63/02hKbBGYFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEvM1s/KONpkZhDFoMxPw051OP8MB8GA1UdIwQY MBaAFAK5gMENcRD5H/+eDs62OdnnWzXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUt NzBjMGE1MDZkNzk3LzEvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUtNzBjMGE1MDZkNzk3 LzEvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhR5Je77 t+2NC9kCbEj2+1tUO3VUYL3I5pHFNVo3k3WeDDNvOvr/JQv4HLUwtQDAl0aR7mMA MbasObOq9fJ7CBdlBjaapPXJwWWCDpTOjLdM2hWXLs5Laxv93K3NpIgSYpgNlhnd FM8wFMpDhoopyM+3zVNw9TPKBLmofd8ZToYCMWA9PVnPAeJx7+N/hBLW2d/KGuH/ iB5qB9Gpdo0t7+x3qvNs++w0HqnvMBh8VScXI+9K3FW0seHfGeKpZ57KOw+eu/cd QMwP9DWcizPKN/Kfy/eA1JxALaRGHR32w6UgghCH5nDd3BnvZP6tk+wli0oRi101 fZ37vSKImsPT9g== -----END CERTIFICATE-----Generated at Sat Nov 22 21:42:35 2025 by rpki-client