This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json) Hash identifier: VWCw4HPoM2enzMCCHmV3rv5JLR4O2MdT56f0i/NDQNI= Subject key identifier: C7:96:39:9F:0B:A6:E9:AE:01:9A:3F:F4:F5:21:3C:D0:9F:E3:EC:CE Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2 Certificate issuer: /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2 Certificate serial: 019B51BD3DAC8E546379C03E146BE375313F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft Manifest number: 13CA Signing time: Wed 24 Dec 2025 19:01:54 +0000 Manifest this update: Wed 24 Dec 2025 19:01:54 +0000 Manifest next update: Thu 25 Dec 2025 19:01:54 +0000 Files and hashes: 1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: SUioY+z4PWqF8YsMXCnqn3Tr1FQ1gT/HBTQO1OFxFVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:3d:ac:8e:54:63:79:c0:3e:14:6b:e3:75:31:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2 Validity Not Before: Dec 24 19:01:54 2025 GMT Not After : Dec 25 19:01:54 2025 GMT Subject: CN=c796399f0ba6e9ae019a3ff4f5213cd09fe3ecce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ad:88:09:d8:24:ab:f2:b9:04:bc:8b:6f:67: 03:dc:50:2b:59:59:fb:a3:81:1c:30:60:36:0d:a6: 07:48:d9:32:c3:95:32:77:3e:75:82:70:4f:7c:43: 8b:06:e2:4f:5a:1e:ac:46:b0:0b:11:05:11:4d:a9: b0:74:29:b8:34:80:a1:86:39:8b:33:e9:6a:f7:5f: c6:f5:72:9d:7a:cb:cd:7e:dc:d3:3f:ac:30:a0:7a: 48:3f:36:a3:27:78:c7:05:8a:40:25:81:01:c6:c1: 1d:37:9b:9a:96:4c:ab:82:e9:1b:0a:42:55:cf:5b: f8:12:d9:4d:a2:15:dd:3a:ff:ea:43:d4:b5:9f:da: 04:72:41:03:17:10:4a:ef:5b:f5:80:59:56:ad:18: 9d:24:4e:0a:d0:d6:72:a5:a6:bb:f3:41:9b:99:97: 04:03:d2:25:c3:ea:f6:83:85:8a:fb:7c:4c:ac:17: 43:21:0c:29:a0:a3:77:17:12:b0:db:f1:09:08:fc: 37:d7:75:10:01:46:06:a5:23:5a:69:19:48:0b:56: 90:93:c5:0b:be:0b:47:2d:b2:5f:ea:ce:e2:aa:c7: 37:8f:14:ef:1d:58:5e:01:02:d1:72:a3:4f:5a:f8: a0:14:66:c8:80:2c:e8:80:32:7e:83:65:18:04:47: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:96:39:9F:0B:A6:E9:AE:01:9A:3F:F4:F5:21:3C:D0:9F:E3:EC:CE X509v3 Authority Key Identifier: keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5f:ed:87:84:ba:65:9d:e3:21:3c:8a:8a:f9:5d:0c:44:bd: a0:3c:c9:69:84:f3:31:38:f5:d9:98:03:21:27:f4:59:0e:e3: a5:fd:c1:43:b7:cd:59:d8:06:a2:63:24:a7:fb:e3:be:e8:e8: e1:78:38:ec:64:69:59:a1:e9:14:d8:f4:02:9e:81:8e:fc:eb: 41:88:5f:1c:8d:94:e0:10:2b:c6:8d:d2:94:9f:73:9b:d2:a3: f5:91:2d:eb:a1:21:57:57:83:28:32:65:f6:08:d7:2b:2a:8d: 03:05:4b:31:d8:52:f7:bb:de:4a:e1:93:bb:86:99:a9:2f:a9: 93:9e:98:7b:5d:e4:49:36:48:e4:16:0a:2a:e2:63:65:01:c6: 14:1d:cf:ac:74:c2:67:86:1e:e2:27:0a:00:81:de:ec:68:3b: bd:bf:e5:02:b3:c5:1c:a8:a0:d4:83:71:8f:19:2e:84:d5:b6: 0d:da:67:c4:67:7b:78:3d:20:8e:73:e6:de:f5:41:74:de:1e: 6d:4f:09:d5:fa:99:08:a8:58:01:69:4e:2d:b3:54:55:21:6e: a1:08:08:5a:80:94:37:19:96:4d:98:9c:ea:e4:10:44:ca:6c: fb:2e:c8:7e:05:9c:7d:5f:5e:a4:02:fe:6b:a7:16:a3:bd:68: bb:ed:bf:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvT2sjlRjecA+FGvjdTE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMTQ2M2ZmOTljMjRjMDkzN2E0MDY1ZDFmY2NmZWI5MDhm YzNhZDIwHhcNMjUxMjI0MTkwMTU0WhcNMjUxMjI1MTkwMTU0WjAzMTEwLwYDVQQD EyhjNzk2Mzk5ZjBiYTZlOWFlMDE5YTNmZjRmNTIxM2NkMDlmZTNlY2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka2ICdgkq/K5BLyLb2cD3FArWVn7 o4EcMGA2DaYHSNkyw5Uydz51gnBPfEOLBuJPWh6sRrALEQURTamwdCm4NIChhjmL M+lq91/G9XKdesvNftzTP6wwoHpIPzajJ3jHBYpAJYEBxsEdN5ualkyrgukbCkJV z1v4EtlNohXdOv/qQ9S1n9oEckEDFxBK71v1gFlWrRidJE4K0NZypaa780GbmZcE A9Ilw+r2g4WK+3xMrBdDIQwpoKN3FxKw2/EJCPw313UQAUYGpSNaaRlIC1aQk8UL vgtHLbJf6s7iqsc3jxTvHVheAQLRcqNPWvigFGbIgCzogDJ+g2UYBEcx3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeWOZ8LpumuAZo/9PUhPNCf4+zOMB8GA1UdIwQY MBaAFAEUY/+ZwkwJN6QGXR/M/rkI/DrSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yNDAwMjQtZjQzMy00MjQxLWI0MGQt ZDFlODRjZmE0NzhmLzEvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8yNDAwMjQtZjQzMy00MjQxLWI0MGQtZDFlODRjZmE0Nzhm LzEvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfV/th4S6 ZZ3jITyKivldDES9oDzJaYTzMTj12ZgDISf0WQ7jpf3BQ7fNWdgGomMkp/vjvujo 4Xg47GRpWaHpFNj0Ap6BjvzrQYhfHI2U4BArxo3SlJ9zm9Kj9ZEt66EhV1eDKDJl 9gjXKyqNAwVLMdhS97veSuGTu4aZqS+pk56Ye13kSTZI5BYKKuJjZQHGFB3PrHTC Z4Ye4icKAIHe7Gg7vb/lArPFHKig1INxjxkuhNW2DdpnxGd7eD0gjnPm3vVBdN4e bU8J1fqZCKhYAWlOLbNUVSFuoQgIWoCUNxmWTZic6uQQRMps+y7IfgWcfV9epAL+ a6cWo71ou+2/Bw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:35:57 2025 by rpki-client