This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft File: C1DC25C780E7A24817139D980A28A9781FA6A493.mft (raw, json) Hash identifier: unRmwBLUYtWOXxEvslNV9NPMUeOEk2WSiIBdtZX/YMo= Subject key identifier: 42:CF:E7:9B:3F:D5:79:B0:04:F5:F5:D3:22:7D:F4:60:39:09:50:CF Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93 Certificate issuer: /CN=c1dc25c780e7a24817139d980a28a9781fa6a493 Certificate serial: 1AC1761B70888CAC9AFE5FB365253789B2354F68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft Manifest number: 0128 Signing time: Sun 21 Dec 2025 00:54:53 +0000 Manifest this update: Sun 21 Dec 2025 00:49:53 +0000 Manifest next update: Mon 22 Dec 2025 02:53:53 +0000 Files and hashes: 1: C1DC25C780E7A24817139D980A28A9781FA6A493.crl (hash: G8XG6N7UqFVOfHNbAh1XsOyk8T3S/29HWEY4ebtfLwI=) 2: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (hash: nBfJgos2zfzyALiaXlFvRvGKVpCZLf9hpeeX+QFHO6Q=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c1:76:1b:70:88:8c:ac:9a:fe:5f:b3:65:25:37:89:b2:35:4f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493 Validity Not Before: Dec 21 00:49:53 2025 GMT Not After : Dec 22 02:53:53 2025 GMT Subject: CN=42CFE79B3FD579B004F5F5D3227DF460390950CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:e4:4d:35:b5:6a:07:1d:a4:8c:83:b6:3c: 8d:26:96:2c:96:d3:e9:43:d2:97:17:2d:ff:8d:d6: 9a:5e:a2:6b:be:a6:db:4f:ad:b7:95:11:05:83:2f: b1:ce:25:62:c5:42:f2:18:f2:18:7c:9d:af:7f:7b: 99:e1:d8:ff:3c:2a:6a:39:58:85:9b:b3:b6:e6:5f: 4f:02:87:2f:55:b4:59:af:c6:e6:06:b7:25:88:e4: 1f:f9:88:81:16:0a:aa:b0:3c:e2:7e:92:26:bf:66: 2b:67:f9:23:f1:e9:00:11:25:53:17:69:41:89:ad: e2:f1:30:2f:f1:c2:f1:9f:17:17:0c:8d:4f:23:b3: 0e:ae:cb:2a:a8:85:29:85:3b:61:93:c7:5d:79:e7: 39:e1:f7:d8:bf:6b:64:c2:54:30:33:e8:68:67:bc: 64:20:ef:6d:a0:61:5c:91:a3:95:c2:99:b0:12:7a: 1d:0f:5a:22:60:80:56:e6:03:dc:f9:cc:20:a0:24: 17:e2:17:b7:a5:a6:c8:f6:fc:75:fd:6d:41:22:38: 48:91:3b:3c:a6:7b:d3:df:75:d7:3c:ad:87:03:f2: 35:44:66:96:f4:21:9f:34:6e:6d:69:47:1a:4c:d6: b3:50:96:35:a1:52:23:62:b4:8e:00:aa:d2:75:1f: 2f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CF:E7:9B:3F:D5:79:B0:04:F5:F5:D3:22:7D:F4:60:39:09:50:CF X509v3 Authority Key Identifier: keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c2:c6:06:d3:7a:ab:c8:9a:83:6d:e8:19:8d:20:2f:61:98: e0:d4:78:99:9f:95:c0:c3:b3:28:7d:75:04:a3:61:f9:04:7f: b0:19:ec:1b:78:e7:06:01:71:3d:53:62:a0:29:b1:4b:7e:77: a9:ad:1c:1d:99:64:4e:bc:2a:a8:9a:72:cf:9e:f9:bc:fb:c5: e2:7a:b8:4d:4d:9b:b0:67:7d:a0:fd:a6:ad:9d:ec:23:36:f7: ee:ea:89:15:b6:bb:ed:c5:e9:38:91:53:d8:7b:33:dd:95:b8: e7:42:33:eb:cd:bf:9e:16:56:38:14:18:84:e6:e9:5d:be:51: dc:a5:38:dc:1d:b2:68:39:1c:94:95:65:06:51:1d:a0:45:1b: 7c:a3:52:ec:b5:95:04:08:93:14:19:ac:12:4a:22:db:f8:27: 58:68:d9:d3:e7:28:b1:49:90:3b:0c:d2:eb:e2:03:b1:df:2f: d3:47:17:1a:87:f2:20:13:1d:53:9e:2f:e0:87:82:01:6e:8f: 5c:aa:22:e0:79:f4:53:0f:a8:f1:21:59:ae:88:08:98:46:ad: d3:1f:33:be:b7:be:f7:8f:ae:c8:20:f2:fa:a5:ba:0d:0e:91: 6a:a4:c0:ed:67:c2:55:65:75:ad:1d:88:fa:97:05:55:a6:cb: a6:5e:00:5c -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUGsF2G3CIjKya/l+zZSU3ibI1T2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzFkYzI1Yzc4MGU3YTI0ODE3MTM5ZDk4MGEyOGE5Nzgx ZmE2YTQ5MzAeFw0yNTEyMjEwMDQ5NTNaFw0yNTEyMjIwMjUzNTNaMDMxMTAvBgNV BAMTKDQyQ0ZFNzlCM0ZENTc5QjAwNEY1RjVEMzIyN0RGNDYwMzkwOTUwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySuRNNbVqBx2kjIO2PI0mliyW 0+lD0pcXLf+N1ppeomu+pttPrbeVEQWDL7HOJWLFQvIY8hh8na9/e5nh2P88Kmo5 WIWbs7bmX08Chy9VtFmvxuYGtyWI5B/5iIEWCqqwPOJ+kia/Zitn+SPx6QARJVMX aUGJreLxMC/xwvGfFxcMjU8jsw6uyyqohSmFO2GTx1155znh99i/a2TCVDAz6Ghn vGQg722gYVyRo5XCmbASeh0PWiJggFbmA9z5zCCgJBfiF7elpsj2/HX9bUEiOEiR Ozyme9Pfddc8rYcD8jVEZpb0IZ80bm1pRxpM1rNQljWhUiNitI4AqtJ1Hy/JAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUQs/nmz/VebAE9fXTIn30YDkJUM8wHwYDVR0j BBgwFoAUwdwlx4DnokgXE52YCiipeB+mpJMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYvMi9DMURDMjVDNzgw RTdBMjQ4MTcxMzlEOTgwQTI4QTk3ODFGQTZBNDkzLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvd2R3bHg0RG5va2dYRTUyWUNpaXBlQi1tcEpNLmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYv Mi9DMURDMjVDNzgwRTdBMjQ4MTcxMzlEOTgwQTI4QTk3ODFGQTZBNDkzLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAY8LGBtN6q8iag23oGY0gL2GY4NR4mZ+VwMOzKH11BKNh+QR/sBnsG3jn BgFxPVNioCmxS353qa0cHZlkTrwqqJpyz575vPvF4nq4TU2bsGd9oP2mrZ3sIzb3 7uqJFba77cXpOJFT2Hsz3ZW450Iz682/nhZWOBQYhObpXb5R3KU43B2yaDkclJVl BlEdoEUbfKNS7LWVBAiTFBmsEkoi2/gnWGjZ0+cosUmQOwzS6+IDsd8v00cXGofy IBMdU54v4IeCAW6PXKoi4Hn0Uw+o8SFZrogImEat0x8zvre+94+uyCDy+qW6DQ6R aqTA7WfCVWV1rR2I+pcFVabLpl4AXA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:45:45 2025 by rpki-client