This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft File: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft (raw, json) Hash identifier: /zcUx3sgpEHodZ+uoxgaSFN8WSF0uUc9RxuOezF3j2M= Subject key identifier: 2E:88:96:02:67:C0:09:0C:3E:8B:19:79:3E:88:61:CA:35:99:19:CD Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17 Certificate issuer: /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17 Certificate serial: 019B559AB479AE72AC17CF85B222DEF73A9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft Manifest number: 1798 Signing time: Thu 25 Dec 2025 13:02:40 +0000 Manifest this update: Thu 25 Dec 2025 13:02:40 +0000 Manifest next update: Fri 26 Dec 2025 13:02:40 +0000 Files and hashes: 1: ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl (hash: 6rJXbemQvA3JU7s11KDM7CoxXxAYLrxymJMFAW2bu3o=) 2: vixyzoRGMiAPIQs9FKTrZIreWAU.roa (hash: Ou0w2YovPY60UVVQ46iOV1rhX+zd7oOQHHPd6ZGynZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:9a:b4:79:ae:72:ac:17:cf:85:b2:22:de:f7:3a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17 Validity Not Before: Dec 25 13:02:40 2025 GMT Not After : Dec 26 13:02:40 2025 GMT Subject: CN=2e88960267c0090c3e8b19793e8861ca359919cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d1:65:f8:08:bc:89:bd:af:3a:60:73:a8:93: 84:ee:c8:9a:17:67:e7:03:d6:1f:10:c2:92:9d:bb: c9:f2:cc:62:e3:ef:2b:af:ae:b2:d4:9c:ad:fd:b3: fb:af:bd:ba:27:d4:d0:39:ab:54:2d:10:76:56:b0: a4:bd:29:33:d8:61:9a:f8:f6:f9:1a:95:db:46:40: 3a:db:f3:ee:bd:c1:88:97:bf:73:2c:69:65:ac:11: ce:99:0d:6d:3e:e0:d0:97:ec:ac:eb:de:a9:3c:62: 6b:87:74:93:03:03:a2:fe:88:86:68:ed:21:62:83: a1:d8:e3:9d:7d:4f:e8:fc:33:8c:63:62:e0:88:42: 7c:f6:23:39:85:52:18:d4:76:e8:79:31:4d:ab:8e: 6c:b4:77:ed:69:d2:4d:3d:af:e3:57:74:bc:79:bb: c6:60:43:32:97:55:12:62:0f:6c:ff:1d:f1:1f:4e: 71:20:68:4a:9d:0f:3c:5f:0b:c1:2a:fa:fb:90:58: b9:85:50:7e:3e:0b:6b:44:26:97:9c:6b:19:8a:94: 2e:9b:47:fd:54:52:cb:ca:d8:36:91:4a:89:7b:e9: fa:82:8c:c8:08:61:ed:3e:52:4f:a6:be:78:7b:cb: a3:8b:1c:fc:ff:cc:81:73:f3:39:46:7d:ac:d0:32: 5e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:88:96:02:67:C0:09:0C:3E:8B:19:79:3E:88:61:CA:35:99:19:CD X509v3 Authority Key Identifier: keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:e0:65:80:76:f1:c7:e3:ae:c5:f2:60:04:40:20:db:ca:a4: 9e:51:7b:b3:b0:73:e3:83:e7:05:13:d7:41:7b:1c:f9:4e:48: cc:73:7f:22:de:6f:74:96:65:cc:07:54:c8:6e:6e:b3:05:fd: 56:1e:e0:d4:13:e3:cb:38:3b:9d:ac:81:11:b7:40:f2:6f:7a: c9:45:a6:32:f4:f1:2a:f1:24:ca:1a:a7:5f:f5:f6:62:a3:6d: 85:f4:9c:04:c4:d5:87:fe:e7:e6:e4:90:f8:fc:e2:7a:ff:e1: 4d:4d:d7:4b:bb:b3:10:cb:66:fe:50:bd:ba:67:c5:93:73:7d: 63:70:8e:23:98:6d:01:1a:c7:78:d2:30:c4:71:83:29:26:c2: 73:4f:2a:c0:14:d7:ea:49:a8:10:cb:1f:74:13:88:05:0f:02: cf:b5:95:ef:1d:93:94:4d:81:12:8e:46:ac:ab:40:51:bb:84: 76:88:2b:b9:4d:09:b9:62:a6:d2:12:95:7e:85:0c:59:ed:53: 73:a5:9b:c3:cc:49:bf:f2:ce:25:fa:70:69:7f:74:a2:09:33: d1:96:29:88:e7:13:8d:ec:77:4f:14:28:e0:7f:cf:ff:36:30: ec:17:ae:5b:8a:6b:eb:a4:eb:c5:d0:bf:82:33:4b:b4:9e:48: 71:67:a7:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmrR5rnKsF8+FsiLe9zqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMTI3NTY2YTVhYzQxZTY2YjRjNzUzN2E2MGZkY2JiZmFi MzlhMTcwHhcNMjUxMjI1MTMwMjQwWhcNMjUxMjI2MTMwMjQwWjAzMTEwLwYDVQQD EygyZTg4OTYwMjY3YzAwOTBjM2U4YjE5NzkzZTg4NjFjYTM1OTkxOWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NFl+Ai8ib2vOmBzqJOE7siaF2fn A9YfEMKSnbvJ8sxi4+8rr66y1Jyt/bP7r726J9TQOatULRB2VrCkvSkz2GGa+Pb5 GpXbRkA62/PuvcGIl79zLGllrBHOmQ1tPuDQl+ys696pPGJrh3STAwOi/oiGaO0h YoOh2OOdfU/o/DOMY2LgiEJ89iM5hVIY1HboeTFNq45stHftadJNPa/jV3S8ebvG YEMyl1USYg9s/x3xH05xIGhKnQ88XwvBKvr7kFi5hVB+PgtrRCaXnGsZipQum0f9 VFLLytg2kUqJe+n6gozICGHtPlJPpr54e8ujixz8/8yBc/M5Rn2s0DJe4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6IlgJnwAkMPosZeT6IYco1mRnNMB8GA1UdIwQY MBaAFAESdWalrEHma0x1N6YP3Lv6s5oXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81MWY3ZjgtMDU5NS00NjU0LTk0M2It MWJlYWM3NDQwMjYyLzEvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81MWY3ZjgtMDU5NS00NjU0LTk0M2ItMWJlYWM3NDQwMjYy LzEvQVJKMVpxV3NRZVpyVEhVM3BnX2N1X3F6bWhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOBlgHbx x+OuxfJgBEAg28qknlF7s7Bz44PnBRPXQXsc+U5IzHN/It5vdJZlzAdUyG5uswX9 Vh7g1BPjyzg7nayBEbdA8m96yUWmMvTxKvEkyhqnX/X2YqNthfScBMTVh/7n5uSQ +Pziev/hTU3XS7uzEMtm/lC9umfFk3N9Y3COI5htARrHeNIwxHGDKSbCc08qwBTX 6kmoEMsfdBOIBQ8Cz7WV7x2TlE2BEo5GrKtAUbuEdogruU0JuWKm0hKVfoUMWe1T c6Wbw8xJv/LOJfpwaX90ogkz0ZYpiOcTjex3TxQo4H/P/zYw7BeuW4pr66TrxdC/ gjNLtJ5IcWensA== -----END CERTIFICATE-----Generated at Thu Dec 25 19:44:13 2025 by rpki-client