This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json) Hash identifier: yXV7iFTy8yVWXDTYIS0o1WnaBlZEPuFiQZre4UaHy/I= Subject key identifier: 44:4B:71:61:C7:6B:B7:82:58:0C:C2:FE:12:26:B6:58:B1:4B:5F:91 Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a Certificate serial: 019B0E934AF7FC0954EAB455707FF2FA86E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft Manifest number: 05DE Signing time: Thu 11 Dec 2025 18:01:32 +0000 Manifest this update: Thu 11 Dec 2025 18:01:32 +0000 Manifest next update: Fri 12 Dec 2025 18:01:32 +0000 Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=) 2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: fiIviywNVtACBSu7wr4GxsTn8UN4Jfhamj8C6GRrQkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:4a:f7:fc:09:54:ea:b4:55:70:7f:f2:fa:86:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a Validity Not Before: Dec 11 18:01:32 2025 GMT Not After : Dec 12 18:01:32 2025 GMT Subject: CN=444b7161c76bb782580cc2fe1226b658b14b5f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:55:59:8a:50:d5:e6:e2:15:03:65:53:6b: a4:b6:25:e5:80:8a:bd:5f:03:85:50:c9:e0:3c:02: fe:25:e3:3a:42:a1:84:34:c4:cf:3e:e2:6c:5e:0c: ac:82:53:6e:30:70:5b:5e:5a:fd:15:03:ad:9d:79: e4:74:5f:d5:c2:ac:82:0a:ef:82:ac:ec:77:d6:26: b1:40:e5:f5:4d:06:c2:52:a8:13:5a:db:92:15:16: a0:02:66:28:d1:57:fc:c9:7b:e8:30:d1:91:41:42: 71:2f:3a:f5:98:b6:bc:24:90:ed:76:00:3f:c7:16: a3:16:69:97:92:52:ec:a5:85:34:d3:e2:52:ad:4b: 5d:b1:68:b4:36:ba:5a:7f:c2:28:87:f9:a1:68:c1: cf:80:0e:e0:37:4b:c7:f5:b6:ac:4c:ea:d6:41:b4: 48:98:78:97:c1:27:11:2f:5d:c7:80:51:8b:26:f7: 99:62:5f:e2:e3:61:7b:4c:9f:8e:73:95:ed:09:6d: a8:da:05:d8:da:ca:2e:d8:56:90:59:de:02:8a:66: c0:5a:0f:7e:64:40:ed:54:03:a9:21:5b:2b:5c:7f: 70:b4:f8:f6:3c:a9:c7:0b:26:69:f8:05:60:fe:d0: 91:5e:d7:dd:92:87:bc:12:96:5e:95:b5:5b:ad:39: 47:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4B:71:61:C7:6B:B7:82:58:0C:C2:FE:12:26:B6:58:B1:4B:5F:91 X509v3 Authority Key Identifier: keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:27:9b:14:c2:d2:da:ca:b0:66:c3:cf:ca:70:22:79:ce:50: 46:45:2b:6a:cd:ff:f9:b4:39:58:74:32:a6:0e:0f:62:91:2c: 57:96:35:67:41:95:15:d0:8d:47:c9:dc:02:0c:43:c8:07:7b: 25:82:5a:78:30:07:59:12:d0:1c:61:79:ef:4a:19:25:5c:88: c5:a0:55:8d:ab:5c:0a:0c:fe:29:b9:e8:22:d6:f6:dd:6e:57: 66:a0:c8:43:8e:45:d1:fd:b2:e1:87:42:19:e0:48:2e:45:6b: b8:6e:0a:b4:d2:6a:00:88:eb:4c:ff:77:f6:ac:05:f0:fa:2d: 47:9c:8f:ec:93:01:f2:76:a5:72:03:b9:f7:dc:9a:f2:e5:72: 38:36:61:40:5c:d5:cb:39:23:e8:53:48:75:3d:f7:24:27:25: a9:88:d4:25:a5:97:cd:00:23:1d:0c:ee:0d:1f:f9:30:b9:f2: 5e:a5:87:4b:1b:76:e5:13:2d:a6:99:24:55:92:f3:0b:96:4e: 49:bf:c1:22:8d:fe:8b:ad:af:92:c0:ca:62:51:9f:34:a6:9e: c5:bb:d9:f8:2a:d5:a1:09:87:6d:44:19:b7:0b:15:79:8a:19: a7:fb:a4:f3:5d:29:a4:30:d1:19:f0:8f:d2:98:40:79:7f:93: f9:d3:e9:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk0r3/AlU6rRVcH/y+oboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYjQzNzllMTE5ZTcxMDAxY2NkZmVlYmY0ZjJhZjJjZjVm MDdhMGEwHhcNMjUxMjExMTgwMTMyWhcNMjUxMjEyMTgwMTMyWjAzMTEwLwYDVQQD Eyg0NDRiNzE2MWM3NmJiNzgyNTgwY2MyZmUxMjI2YjY1OGIxNGI1ZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR5VWYpQ1ebiFQNlU2uktiXlgIq9 XwOFUMngPAL+JeM6QqGENMTPPuJsXgysglNuMHBbXlr9FQOtnXnkdF/VwqyCCu+C rOx31iaxQOX1TQbCUqgTWtuSFRagAmYo0Vf8yXvoMNGRQUJxLzr1mLa8JJDtdgA/ xxajFmmXklLspYU00+JSrUtdsWi0Nrpaf8Ioh/mhaMHPgA7gN0vH9basTOrWQbRI mHiXwScRL13HgFGLJveZYl/i42F7TJ+Oc5XtCW2o2gXY2sou2FaQWd4CimbAWg9+ ZEDtVAOpIVsrXH9wtPj2PKnHCyZp+AVg/tCRXtfdkoe8EpZelbVbrTlHaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERLcWHHa7eCWAzC/hImtlixS1+RMB8GA1UdIwQY MBaAFGq0N54RnnEAHM3+6/Tyryz18HoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84OWE0YmYtMzI1YS00Njc1LWJiMDAt MGE0MzM4Y2RmOTdiLzEvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84OWE0YmYtMzI1YS00Njc1LWJiMDAtMGE0MzM4Y2RmOTdi LzEvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSebFMLS 2sqwZsPPynAiec5QRkUras3/+bQ5WHQypg4PYpEsV5Y1Z0GVFdCNR8ncAgxDyAd7 JYJaeDAHWRLQHGF570oZJVyIxaBVjatcCgz+KbnoItb23W5XZqDIQ45F0f2y4YdC GeBILkVruG4KtNJqAIjrTP939qwF8PotR5yP7JMB8nalcgO599ya8uVyODZhQFzV yzkj6FNIdT33JCclqYjUJaWXzQAjHQzuDR/5MLnyXqWHSxt25RMtppkkVZLzC5ZO Sb/BIo3+i62vksDKYlGfNKaexbvZ+CrVoQmHbUQZtwsVeYoZp/uk810ppDDRGfCP 0phAeX+T+dPpWw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:52 2025 by rpki-client