This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft File: ArVih4aW5ig8TfgUo4tzXFAMr4s.mft (raw, json) Hash identifier: Q1A9M0Nf3Vw/mYCdc+eTEWDzNsl2r8f3INODMISwsFA= Subject key identifier: ED:66:40:BF:04:30:02:AD:8B:7F:58:E0:DA:54:8B:67:64:9D:F7:80 Authority key identifier: 02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B Certificate issuer: /CN=02b562878696e6283c4df814a38b735c500caf8b Certificate serial: 019B3EDA7EB0625C27430FC53A07BC75030E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft Manifest number: 0165 Signing time: Sun 21 Dec 2025 03:01:05 +0000 Manifest this update: Sun 21 Dec 2025 03:01:05 +0000 Manifest next update: Mon 22 Dec 2025 03:01:05 +0000 Files and hashes: 1: ArVih4aW5ig8TfgUo4tzXFAMr4s.crl (hash: I3O+fAZxY+TeWYUrb9S2zeqEXkLW7r0VoXlyyrZudnI=) 2: oZDlVRHFRnrptCcfA00p7uB3_TI.roa (hash: 4RY5Dt4Df4i349+ElvF5sCLuJsK1T7pn6qyR+T8cJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:7e:b0:62:5c:27:43:0f:c5:3a:07:bc:75:03:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b562878696e6283c4df814a38b735c500caf8b Validity Not Before: Dec 21 03:01:05 2025 GMT Not After : Dec 22 03:01:05 2025 GMT Subject: CN=ed6640bf043002ad8b7f58e0da548b67649df780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:16:ff:1f:12:56:00:60:79:14:4c:ba:4d: 1b:c1:7d:85:54:1a:4c:ee:a9:62:72:76:72:73:0b: f4:e5:7a:f4:d9:24:5c:9f:ff:b1:79:53:a8:2c:85: c3:69:bf:a3:1b:49:6a:9f:d3:3d:27:06:73:8e:92: 45:aa:e7:7c:61:ef:21:56:a4:6f:f5:18:ec:8b:e9: 59:b2:60:e0:09:66:3e:9f:34:11:6f:23:ad:14:46: 29:5e:d9:e5:b6:30:c7:8e:3f:4e:df:e1:93:4a:94: b5:12:9a:c5:36:01:be:17:38:99:b3:a7:55:f8:34: 5f:5b:4b:67:d9:50:c0:82:a3:1b:ce:64:64:7d:81: 38:45:81:c0:74:ff:66:3d:9a:f1:29:92:89:22:9a: 01:8e:ad:dd:7f:a6:3c:d6:0f:35:da:ea:e6:75:f3: 59:26:fa:ee:61:c5:ee:57:bb:7d:1a:3f:8d:d1:59: 6a:b4:a5:98:07:e9:1a:9e:5f:a5:c1:21:c9:de:a5: d9:44:94:39:34:6a:67:f9:c7:aa:b3:34:2e:2f:a3: fc:23:0f:6f:20:20:05:80:a7:4d:0f:93:78:69:40: 3d:5e:1f:fe:ff:7a:cc:40:6b:a0:72:e0:b1:b2:4e: f6:26:7d:5b:ad:29:a5:ba:e2:45:ed:dd:66:bf:ed: 56:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:66:40:BF:04:30:02:AD:8B:7F:58:E0:DA:54:8B:67:64:9D:F7:80 X509v3 Authority Key Identifier: keyid:02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:10:6d:76:f0:f4:48:8c:45:89:cf:e6:aa:0a:fb:db:6a:f0: c1:c7:70:5a:a3:46:e2:39:d1:90:fd:80:30:b7:0f:cd:ef:d2: 18:99:c1:64:f7:41:aa:02:03:14:0a:08:d0:6d:47:cd:5a:78: 4e:88:6a:c4:ba:b1:20:55:4b:ec:bd:27:80:f2:77:64:1c:ad: 2a:17:c5:9b:6f:fd:53:cf:d6:a1:cd:27:cb:8a:ee:ec:65:11: 49:05:36:79:17:33:5f:82:f9:67:46:a4:5b:ab:51:62:b0:a2: c3:ab:8f:11:f4:7d:c7:04:df:17:9e:b8:ae:6f:77:49:37:b1: 77:04:07:59:6f:d9:12:0a:6e:1b:a2:e5:8b:bc:54:56:c1:66: ce:09:d6:bc:79:d2:34:0c:29:2a:1d:b9:63:9a:57:ff:75:2f: 66:85:32:82:85:6f:48:b5:d0:5f:3d:8c:a6:d9:8d:a8:36:12: af:58:58:f0:07:d4:b4:f3:f1:d5:c3:38:96:01:9d:f5:8f:f5: 00:8d:72:06:5a:fa:ce:ab:bb:f1:fb:48:c7:05:5f:4e:58:95: 82:55:1e:21:78:99:94:de:d6:fb:87:b4:db:18:d7:b2:e5:00: 74:6a:41:47:31:9c:d0:29:2d:67:90:e0:70:0d:02:67:39:e0: 36:56:6b:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2n6wYlwnQw/FOge8dQMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjU2Mjg3ODY5NmU2MjgzYzRkZjgxNGEzOGI3MzVjNTAw Y2FmOGIwHhcNMjUxMjIxMDMwMTA1WhcNMjUxMjIyMDMwMTA1WjAzMTEwLwYDVQQD EyhlZDY2NDBiZjA0MzAwMmFkOGI3ZjU4ZTBkYTU0OGI2NzY0OWRmNzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfoW/x8SVgBgeRRMuk0bwX2FVBpM 7qlicnZycwv05Xr02SRcn/+xeVOoLIXDab+jG0lqn9M9JwZzjpJFqud8Ye8hVqRv 9Rjsi+lZsmDgCWY+nzQRbyOtFEYpXtnltjDHjj9O3+GTSpS1EprFNgG+FziZs6dV +DRfW0tn2VDAgqMbzmRkfYE4RYHAdP9mPZrxKZKJIpoBjq3df6Y81g812urmdfNZ JvruYcXuV7t9Gj+N0VlqtKWYB+kanl+lwSHJ3qXZRJQ5NGpn+ceqszQuL6P8Iw9v ICAFgKdND5N4aUA9Xh/+/3rMQGugcuCxsk72Jn1brSmluuJF7d1mv+1WJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1mQL8EMAKti39Y4NpUi2dknfeAMB8GA1UdIwQY MBaAFAK1YoeGluYoPE34FKOLc1xQDK+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOWM4NDAtOTYxNS00YjUwLTg5NTIt OTJkM2FhZDMyZjQ5LzEvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9mOWM4NDAtOTYxNS00YjUwLTg5NTItOTJkM2FhZDMyZjQ5 LzEvQXJWaWg0YVc1aWc4VGZnVW80dHpYRkFNcjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyhBtdvD0 SIxFic/mqgr722rwwcdwWqNG4jnRkP2AMLcPze/SGJnBZPdBqgIDFAoI0G1HzVp4 TohqxLqxIFVL7L0ngPJ3ZBytKhfFm2/9U8/Woc0ny4ru7GURSQU2eRczX4L5Z0ak W6tRYrCiw6uPEfR9xwTfF564rm93STexdwQHWW/ZEgpuG6Lli7xUVsFmzgnWvHnS NAwpKh25Y5pX/3UvZoUygoVvSLXQXz2MptmNqDYSr1hY8AfUtPPx1cM4lgGd9Y/1 AI1yBlr6zqu78ftIxwVfTliVglUeIXiZlN7W+4e02xjXsuUAdGpBRzGc0CktZ5Dg cA0CZzngNlZraw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:09 2025 by rpki-client