This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json) Hash identifier: IoTQ8uQl3c0j+3UoyTSl+ga8y7a8Dt+OavptNB9npWg= Subject key identifier: B2:1F:FE:59:E4:C9:F7:95:7D:E4:BB:14:39:F8:21:01:BE:F7:67:70 Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2 Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2 Certificate serial: 019B7C3915695AC8D8D4BBB437B4E8AC4C80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft Manifest number: 17A4 Signing time: Fri 02 Jan 2026 01:01:14 +0000 Manifest this update: Fri 02 Jan 2026 01:01:14 +0000 Manifest next update: Sat 03 Jan 2026 01:01:14 +0000 Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: dCcxkYIsEOF8LTToC2NQdVjokbbAqrPXg4F7iUszpIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:39:15:69:5a:c8:d8:d4:bb:b4:37:b4:e8:ac:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2 Validity Not Before: Jan 2 01:01:14 2026 GMT Not After : Jan 3 01:01:14 2026 GMT Subject: CN=b21ffe59e4c9f7957de4bb1439f82101bef76770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:4e:15:d0:ea:54:8b:e9:bc:22:f6:68:b9: 80:20:db:42:13:ad:23:4e:bf:68:33:be:7a:66:8d: 95:0b:99:f5:d1:a2:c6:8c:01:28:26:00:55:5d:b2: 65:c4:98:09:a0:ad:0c:31:d2:ed:57:f9:7e:12:b6: 9c:fb:e7:23:7a:93:86:54:a0:29:05:5e:53:24:cb: 0e:d1:81:02:42:59:44:b5:09:3a:01:58:73:f7:9e: 52:e3:04:50:5d:2e:de:f1:4d:78:b1:08:d2:28:6e: 00:83:e2:58:cf:c1:dd:f5:8d:0f:b2:75:f7:b3:97: e3:37:d2:f7:ad:1f:70:0c:72:3c:4b:2a:59:45:46: 99:27:ae:30:e8:50:fd:61:05:9f:d3:67:7d:46:11: 86:14:05:85:d5:3a:76:f6:71:a0:42:ab:5c:aa:f0: b3:eb:d7:0f:66:37:06:3f:be:84:b2:d9:52:9c:72: 7a:63:8b:b3:9e:9c:15:8e:04:12:f6:e1:b7:ee:6c: 18:6a:93:99:43:c8:68:80:aa:b1:1e:bb:05:e8:93: 5d:6d:d7:60:e9:89:01:57:a6:96:59:b5:ce:52:eb: ba:02:aa:57:b8:ee:95:8f:c6:65:90:70:05:86:5c: 0c:51:4b:75:78:31:6b:f5:1f:7a:5a:2d:21:90:2f: 88:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1F:FE:59:E4:C9:F7:95:7D:E4:BB:14:39:F8:21:01:BE:F7:67:70 X509v3 Authority Key Identifier: keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:86:de:ed:10:44:cd:68:1d:f6:a5:a1:77:d4:7e:37:90:fa: 28:b8:9c:56:9b:21:f2:cf:8f:0e:e7:b5:ab:12:f7:63:95:39: d7:80:a5:f5:83:5e:15:a9:c7:2a:ae:bc:80:e6:e9:54:dc:97: 9a:fc:fe:12:4d:a6:6c:99:7b:fa:cc:09:cd:83:52:51:71:39: 78:ef:2e:f0:36:90:f9:02:d3:83:3d:44:01:1c:e1:08:68:04: c5:9b:9a:36:f1:81:b7:72:a4:dd:82:a3:0e:0e:c1:4f:02:4d: 85:d5:83:be:ff:71:ee:9e:f5:87:30:37:4a:a5:91:b6:0f:56: 06:aa:23:2c:00:af:26:23:cf:7d:48:4b:fa:ee:9e:55:35:7e: 38:44:61:2f:c7:34:3d:c1:0c:f7:84:dd:f4:f8:67:dc:a6:fb: e2:f7:ba:4c:10:6b:64:ed:5e:99:c3:99:75:25:55:6c:5d:c0: c0:4b:a4:15:a5:93:73:6d:c4:36:70:51:eb:b5:44:ec:ef:2f: f3:98:bd:b6:26:cf:03:46:30:d2:f3:06:94:bf:29:59:a2:7a: ec:a4:47:6a:b0:a3:a5:b8:e8:6b:c5:22:11:f6:29:0a:4d:28: 91:f8:5e:29:c5:f9:48:9b:f3:0e:36:94:f8:36:c7:0b:8e:fd: c2:d0:18:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8ORVpWsjY1Lu0N7TorEyAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMTcxMGQ5NWM4M2JlM2U3ODYwYjk3YjFkN2IzNmU0NjA3 MTczYTIwHhcNMjYwMTAyMDEwMTE0WhcNMjYwMTAzMDEwMTE0WjAzMTEwLwYDVQQD EyhiMjFmZmU1OWU0YzlmNzk1N2RlNGJiMTQzOWY4MjEwMWJlZjc2NzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk9OFdDqVIvpvCL2aLmAINtCE60j Tr9oM756Zo2VC5n10aLGjAEoJgBVXbJlxJgJoK0MMdLtV/l+Erac++cjepOGVKAp BV5TJMsO0YECQllEtQk6AVhz955S4wRQXS7e8U14sQjSKG4Ag+JYz8Hd9Y0PsnX3 s5fjN9L3rR9wDHI8SypZRUaZJ64w6FD9YQWf02d9RhGGFAWF1Tp29nGgQqtcqvCz 69cPZjcGP76EstlSnHJ6Y4uznpwVjgQS9uG37mwYapOZQ8hogKqxHrsF6JNdbddg 6YkBV6aWWbXOUuu6AqpXuO6Vj8ZlkHAFhlwMUUt1eDFr9R96Wi0hkC+I8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIf/lnkyfeVfeS7FDn4IQG+92dwMB8GA1UdIwQY MBaAFAEXENlcg74+eGC5ex17NuRgcXOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2Qt M2FkNDAzMjUwM2MwLzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2QtM2FkNDAzMjUwM2Mw LzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYbe7RBE zWgd9qWhd9R+N5D6KLicVpsh8s+PDue1qxL3Y5U514Cl9YNeFanHKq68gObpVNyX mvz+Ek2mbJl7+swJzYNSUXE5eO8u8DaQ+QLTgz1EARzhCGgExZuaNvGBt3Kk3YKj Dg7BTwJNhdWDvv9x7p71hzA3SqWRtg9WBqojLACvJiPPfUhL+u6eVTV+OERhL8c0 PcEM94Td9Phn3Kb74ve6TBBrZO1emcOZdSVVbF3AwEukFaWTc23ENnBR67VE7O8v 85i9tibPA0Yw0vMGlL8pWaJ67KRHarCjpbjoa8UiEfYpCk0okfheKcX5SJvzDjaU +DbHC479wtAYkQ== -----END CERTIFICATE-----Generated at Fri Jan 2 11:31:02 2026 by rpki-client