This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft File: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft (raw, json) Hash identifier: K7UcavUrmqKGXqBtq39+1Q0yhTuCmQouWweysag8zrk= Subject key identifier: F8:71:F7:2D:B4:48:A3:30:73:61:5F:F0:6C:68:2E:4B:1F:41:DE:0C Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17 Certificate issuer: /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17 Certificate serial: 019B32D62C3C8295CB30B58D98DADAC09207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 19:00:55 +0000 Manifest this update: Thu 18 Dec 2025 19:00:55 +0000 Manifest next update: Fri 19 Dec 2025 19:00:55 +0000 Files and hashes: 1: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl (hash: ZhISklVClIrZdC/I9StHEztuD/zOInH/8QmXpBt5gxs=) 2: vixyzoRGMiAPIQs9FKTrZIreWAU.roa (hash: Ou0w2YovPY60UVVQ46iOV1rhX+zd7oOQHHPd6ZGynZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:2c:3c:82:95:cb:30:b5:8d:98:da:da:c0:92:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17 Validity Not Before: Dec 18 19:00:55 2025 GMT Not After : Dec 19 19:00:55 2025 GMT Subject: CN=f871f72db448a33073615ff06c682e4b1f41de0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:21:6f:d6:d1:48:d3:2e:02:c6:e4:5a:59:cf: 35:5a:29:68:ee:d0:67:5e:20:37:e5:84:9c:93:83: d4:c1:6e:6d:cb:9c:b5:c0:15:8f:f9:a0:a9:0b:2a: 2e:b8:05:1b:db:e5:b5:3b:b0:c1:78:ea:59:55:4d: 30:40:2c:67:21:e7:e0:e8:2a:9f:31:ac:3b:ec:ec: 80:4c:8f:74:37:2c:c0:2c:f3:68:7e:fb:63:9c:ae: 74:6c:16:94:c2:62:18:0a:c8:3b:42:d5:6b:33:1c: 6c:03:c1:b9:26:51:d6:89:9d:02:fc:43:93:51:f7: 1c:48:85:32:bf:1e:ce:38:c3:b4:ed:fe:98:81:13: 6e:20:58:37:fc:4a:c6:60:10:7a:ec:6b:5d:a1:5a: 3e:b9:1d:11:c6:c6:e7:b7:e3:e9:a7:2e:a4:88:5d: 21:be:f6:c0:0e:b4:31:70:80:a0:74:4b:33:90:fe: ed:8d:d5:6c:6f:1f:72:e3:64:2d:13:cd:23:3a:25: ad:42:e5:ab:49:b7:10:29:97:3c:ac:62:5e:0a:72: f3:4d:06:4c:a6:5b:5d:da:a7:de:ef:ef:37:4d:c7: 85:26:0f:5c:cf:46:57:61:c3:4f:0b:64:35:09:37: e4:ad:1f:78:bc:0a:92:be:68:c8:7f:93:7c:41:eb: 9e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:71:F7:2D:B4:48:A3:30:73:61:5F:F0:6C:68:2E:4B:1F:41:DE:0C X509v3 Authority Key Identifier: keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e7:54:d3:84:49:f5:a1:ab:07:75:51:71:59:7e:2d:0e:e4: b0:c5:d1:d4:c9:97:42:ae:da:76:21:b0:64:48:1a:cd:4e:5c: b3:83:74:00:f2:77:68:e7:ed:26:49:4b:25:55:dc:82:4c:de: fc:a8:20:16:79:e7:c1:f9:8b:b4:a7:6a:81:9e:ff:06:d9:12: 69:2e:05:fc:76:9b:28:2d:b0:73:05:32:f0:35:81:a7:c9:cc: 4e:e8:ee:4d:71:a1:e4:6a:f4:10:39:be:32:11:67:d3:f5:9e: fd:9b:84:65:8d:fe:50:2f:61:4b:f4:1a:7d:ef:57:d9:bc:57: 52:2a:8a:28:41:e9:08:03:e2:a2:13:46:16:aa:33:a2:01:a0: 7d:6c:6d:11:76:be:3d:4f:cf:0b:a9:50:1a:dc:f2:c3:a6:e6: 6d:75:9e:22:a2:71:6b:6d:42:2c:13:07:25:5d:4f:00:48:4f: 76:fa:5a:5e:e0:b7:8b:b0:37:83:d5:a5:56:29:14:ba:14:2a: b6:fb:44:ab:ac:fb:d6:9a:ba:a3:0a:5a:f3:ab:04:e9:98:30: 32:7b:fa:2d:d3:09:c4:6c:6f:88:7d:96:e6:82:74:ef:d5:67: d1:5d:23:0c:69:a1:a0:fb:5a:97:37:73:7b:21:97:9b:96:ba: d0:e8:5c:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1iw8gpXLMLWNmNrawJIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMTI3NTY2YTVhYzQxZTY2YjRjNzUzN2E2MGZkY2JiZmFi MzlhMTcwHhcNMjUxMjE4MTkwMDU1WhcNMjUxMjE5MTkwMDU1WjAzMTEwLwYDVQQD EyhmODcxZjcyZGI0NDhhMzMwNzM2MTVmZjA2YzY4MmU0YjFmNDFkZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCFv1tFI0y4CxuRaWc81Wilo7tBn XiA35YSck4PUwW5ty5y1wBWP+aCpCyouuAUb2+W1O7DBeOpZVU0wQCxnIefg6Cqf Maw77OyATI90NyzALPNofvtjnK50bBaUwmIYCsg7QtVrMxxsA8G5JlHWiZ0C/EOT UfccSIUyvx7OOMO07f6YgRNuIFg3/ErGYBB67GtdoVo+uR0Rxsbnt+Pppy6kiF0h vvbADrQxcICgdEszkP7tjdVsbx9y42QtE80jOiWtQuWrSbcQKZc8rGJeCnLzTQZM pltd2qfe7+83TceFJg9cz0ZXYcNPC2Q1CTfkrR94vAqSvmjIf5N8QeueLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhx9y20SKMwc2Ff8GxoLksfQd4MMB8GA1UdIwQY MBaAFAESdWalrEHma0x1N6YP3Lv6s5oXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81MWY3ZjgtMDU5NS00NjU0LTk0M2It MWJlYWM3NDQwMjYyLzEvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81MWY3ZjgtMDU5NS00NjU0LTk0M2ItMWJlYWM3NDQwMjYy LzEvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVedU04RJ 9aGrB3VRcVl+LQ7ksMXR1MmXQq7adiGwZEgazU5cs4N0APJ3aOftJklLJVXcgkze /KggFnnnwfmLtKdqgZ7/BtkSaS4F/HabKC2wcwUy8DWBp8nMTujuTXGh5Gr0EDm+ MhFn0/We/ZuEZY3+UC9hS/Qafe9X2bxXUiqKKEHpCAPiohNGFqozogGgfWxtEXa+ PU/PC6lQGtzyw6bmbXWeIqJxa21CLBMHJV1PAEhPdvpaXuC3i7A3g9WlVikUuhQq tvtEq6z71pq6owpa86sE6ZgwMnv6LdMJxGxviH2W5oJ079Vn0V0jDGmhoPtalzdz eyGXm5a60Ohcpg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:33:14 2025 by rpki-client