This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json) Hash identifier: LfmwUBvxUbvbsJXilyoCnJ71hg0jvX0YP0VEgG4hfUk= Subject key identifier: 96:2C:4D:53:F3:45:CF:C3:E4:19:7D:CA:EF:EF:AB:22:29:6F:82:D1 Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4 Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4 Certificate serial: 019B5418D4C1A37331C99D2B4C1A61C236FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft Manifest number: 0DC0 Signing time: Thu 25 Dec 2025 06:01:11 +0000 Manifest this update: Thu 25 Dec 2025 06:01:11 +0000 Manifest next update: Fri 26 Dec 2025 06:01:11 +0000 Files and hashes: 1: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: Ds0zdZ8LD6Gclc7iwWLt3ZEtMWROWL5bseXo/kZbAlU=) 2: jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa (hash: BbNkNKRJ/r5Ixy3RnUBfFtFAmvmPYuPFYMJIKOu9VwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:d4:c1:a3:73:31:c9:9d:2b:4c:1a:61:c2:36:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4 Validity Not Before: Dec 25 06:01:11 2025 GMT Not After : Dec 26 06:01:11 2025 GMT Subject: CN=962c4d53f345cfc3e4197dcaefefab22296f82d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:24:75:02:14:ae:e1:9d:e4:a7:86:8a:53:9e: 48:3a:43:36:fb:0f:27:3b:78:e6:b4:e9:ae:bf:d0: a7:fb:ca:5e:76:15:84:a2:f2:b8:70:b1:14:f9:8c: e7:03:c8:1b:11:23:fb:eb:85:af:c1:88:60:72:ec: 34:20:ed:6b:50:89:bc:bd:21:91:e4:c6:36:01:2c: 92:a3:c6:75:16:b0:2b:65:07:c2:1a:a2:65:a4:bd: d4:0e:34:0f:30:79:fd:9c:87:e3:24:79:43:81:16: 6c:dd:84:e5:9f:36:dc:9d:37:3f:c6:f4:e5:c3:4a: a3:52:4e:fd:58:4c:69:82:2a:db:dd:ca:11:ed:a2: 2e:49:c5:0c:29:de:19:a1:10:3e:cf:67:74:71:a0: 3d:96:5b:f6:b7:1a:41:b3:86:aa:59:70:bb:4c:39: 91:71:46:85:c1:ce:f4:c5:2b:8b:61:5b:d8:42:60: 46:f0:10:88:93:71:30:87:01:c0:a1:6f:8e:b8:db: 06:13:97:66:ef:1d:c5:7a:8d:85:42:67:ca:c5:83: 38:31:b1:ac:24:39:d9:fe:03:65:c6:74:a1:1f:a8: 9a:d6:5a:70:3d:2f:db:6c:68:f3:e0:fb:90:e5:55: 84:54:5a:6b:9e:2e:ce:ea:45:cb:5a:ce:b2:44:87: 5b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2C:4D:53:F3:45:CF:C3:E4:19:7D:CA:EF:EF:AB:22:29:6F:82:D1 X509v3 Authority Key Identifier: keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ae:cd:04:33:eb:91:b0:d4:dc:b8:7c:fe:12:59:96:fb:c3: d8:c0:14:50:35:a4:7c:55:39:7d:f8:c6:37:56:56:33:c9:4f: 36:c0:92:68:36:67:ff:ef:41:2b:0a:dd:7c:87:67:4b:8c:1d: b7:21:60:b8:00:3a:a9:83:53:f8:80:60:43:1b:79:80:eb:5f: 35:7c:52:6a:d9:c9:81:db:54:b3:a8:7c:3b:bd:2e:3e:0b:d6: d0:00:f1:5c:46:16:17:13:c1:ba:aa:cf:df:53:a7:66:99:20: fe:e4:a6:9b:3b:cf:09:b5:f0:99:68:a6:ef:15:27:56:a0:03: a5:5a:59:48:4c:3e:5b:0f:0c:31:0e:e9:b0:24:7f:77:3f:9c: 7a:4b:0f:d2:87:7a:62:fc:f2:5b:c5:4e:63:ce:e2:61:95:ea: d7:fb:49:8d:ba:7f:7b:35:41:3d:38:8b:16:47:e7:72:a9:1a: 58:91:55:23:2c:22:8e:1d:8b:10:a3:86:0c:1b:18:05:d0:a4: b0:1a:49:88:93:0e:59:d0:f4:73:40:6b:2f:31:57:f5:d0:de: 4e:0a:eb:7f:3a:9a:5c:f4:cf:58:38:02:f8:24:a9:47:a0:2d: 11:0f:4a:f3:4c:4d:4e:b4:88:ae:93:44:b4:de:95:54:c3:4c: 33:a1:6e:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGNTBo3MxyZ0rTBphwjb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYmQyNzEwYzJmY2Y1NTFiMzFmZDdjY2M2MGRmMWY2YmI0 YTkyYzQwHhcNMjUxMjI1MDYwMTExWhcNMjUxMjI2MDYwMTExWjAzMTEwLwYDVQQD Eyg5NjJjNGQ1M2YzNDVjZmMzZTQxOTdkY2FlZmVmYWIyMjI5NmY4MmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CR1AhSu4Z3kp4aKU55IOkM2+w8n O3jmtOmuv9Cn+8pedhWEovK4cLEU+YznA8gbESP764WvwYhgcuw0IO1rUIm8vSGR 5MY2ASySo8Z1FrArZQfCGqJlpL3UDjQPMHn9nIfjJHlDgRZs3YTlnzbcnTc/xvTl w0qjUk79WExpgirb3coR7aIuScUMKd4ZoRA+z2d0caA9llv2txpBs4aqWXC7TDmR cUaFwc70xSuLYVvYQmBG8BCIk3EwhwHAoW+OuNsGE5dm7x3Feo2FQmfKxYM4MbGs JDnZ/gNlxnShH6ia1lpwPS/bbGjz4PuQ5VWEVFprni7O6kXLWs6yRIdbHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYsTVPzRc/D5Bl9yu/vqyIpb4LRMB8GA1UdIwQY MBaAFGq9JxDC/PVRsx/XzMYN8fa7SpLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQt NzRlMzMxZGJkMDdmLzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQtNzRlMzMxZGJkMDdm LzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ67NBDPr kbDU3Lh8/hJZlvvD2MAUUDWkfFU5ffjGN1ZWM8lPNsCSaDZn/+9BKwrdfIdnS4wd tyFguAA6qYNT+IBgQxt5gOtfNXxSatnJgdtUs6h8O70uPgvW0ADxXEYWFxPBuqrP 31OnZpkg/uSmmzvPCbXwmWim7xUnVqADpVpZSEw+Ww8MMQ7psCR/dz+ceksP0od6 YvzyW8VOY87iYZXq1/tJjbp/ezVBPTiLFkfncqkaWJFVIywijh2LEKOGDBsYBdCk sBpJiJMOWdD0c0BrLzFX9dDeTgrrfzqaXPTPWDgC+CSpR6AtEQ9K80xNTrSIrpNE tN6VVMNMM6Fulw== -----END CERTIFICATE-----Generated at Thu Dec 25 11:21:21 2025 by rpki-client