This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft File: rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft (raw, json) Hash identifier: Mi3dIQ4NPnqKKeqY0JvRCOfxTvmGDIKHvK0LNIIdUss= Subject key identifier: D0:50:5C:97:4A:A8:C5:6E:F8:B2:9F:5E:97:D1:98:F6:E5:C2:E1:29 Authority key identifier: AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86 Certificate issuer: /CN=aef20efc0ae4013e6f4867c15f2377b235095b86 Certificate serial: 019B4F5FD225E694104BC14033609832B01B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft Manifest number: 1494 Signing time: Wed 24 Dec 2025 08:00:38 +0000 Manifest this update: Wed 24 Dec 2025 08:00:38 +0000 Manifest next update: Thu 25 Dec 2025 08:00:38 +0000 Files and hashes: 1: o7v2ihQZngiNboLPlznFQHbVVog.roa (hash: twBuq4hJwFozjQzNXD6DkR3/XLNImqCcOIvvxAULQBw=) 2: rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl (hash: CitwyRsc1ZfW6/WiRPIeJrA8j2mTDJR979HpSHCWI+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:5f:d2:25:e6:94:10:4b:c1:40:33:60:98:32:b0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aef20efc0ae4013e6f4867c15f2377b235095b86 Validity Not Before: Dec 24 08:00:38 2025 GMT Not After : Dec 25 08:00:38 2025 GMT Subject: CN=d0505c974aa8c56ef8b29f5e97d198f6e5c2e129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a3:fd:1e:cf:3b:70:c2:40:ae:f3:90:50:0c: c6:6f:0a:a0:3c:43:fa:6a:d1:89:41:ab:04:96:df: 98:b1:b9:fa:c2:2f:2d:56:11:1b:1b:c1:1e:67:92: 62:c2:b5:ef:66:a0:cf:ac:11:4d:4c:20:ab:91:05: db:cf:bf:c3:c0:71:0f:3d:b9:85:a6:80:3e:02:7b: ff:81:7c:0a:48:2a:da:cd:88:3f:fd:bf:2b:00:83: 56:27:75:0e:69:3d:f9:02:52:5e:f8:4c:81:01:c1: 4e:47:49:a6:f6:d4:fc:d2:35:b6:6e:46:eb:e1:a5: f8:42:76:1a:83:eb:44:3e:0e:ff:b2:84:04:18:95: 43:43:31:8e:8b:d7:c7:e9:99:87:77:5d:2f:65:21: 44:7b:b1:08:bd:34:1e:b4:9a:24:66:13:a7:66:f6: 82:33:05:b0:f4:85:00:6e:14:07:80:5e:30:d8:e6: 1b:6e:a1:9b:b3:50:1d:86:1b:79:bb:80:fd:48:ff: 0c:17:42:46:1f:87:cd:a8:08:ab:71:51:d4:7f:f6: db:7e:fb:e0:02:a6:b3:32:ea:15:45:9f:ee:27:5e: 93:ca:43:76:b5:c3:98:f0:d6:21:a9:dc:76:07:9e: 32:89:38:98:ba:4b:0e:8a:a1:d6:28:b0:85:ce:43: 83:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:50:5C:97:4A:A8:C5:6E:F8:B2:9F:5E:97:D1:98:F6:E5:C2:E1:29 X509v3 Authority Key Identifier: keyid:AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b4:ab:42:05:2c:34:a3:af:2d:a4:a0:30:d2:ea:62:cb:09: cf:68:37:7a:9b:cd:ee:aa:17:cc:4e:60:a3:2e:c5:dc:4a:4b: cd:96:6e:66:2b:de:53:41:e5:d8:a9:77:fd:c2:ee:22:de:18: d2:26:35:4b:f9:92:8a:78:18:cb:ee:05:9b:25:96:b6:f8:b9: 54:68:8d:7a:49:6a:6b:f9:c6:4d:36:66:d4:dc:de:7e:cc:27: cb:6a:08:4f:11:9c:47:d3:22:47:64:1b:6f:18:12:85:fa:39: 45:a0:41:27:e6:3b:1a:da:d5:1f:99:3d:b2:d2:fe:d6:84:9a: 20:5c:49:ef:86:66:7d:97:76:01:14:b1:3c:14:d9:40:31:82: ff:21:a1:c2:34:c1:a0:c9:28:dd:9b:85:1d:be:e7:0f:6b:f4: 82:22:b5:23:6c:52:12:39:37:51:45:77:53:19:81:14:73:29: 63:62:1c:8b:1e:61:76:29:c8:29:4c:a6:30:7e:2d:1e:e5:c4: ed:2a:5f:41:ff:3e:ed:6c:b2:05:8c:7f:5d:43:de:e4:73:e4: c4:2b:92:6e:bd:79:a9:33:55:a5:8e:5f:9c:35:0c:6a:c1:5c: 32:c0:ad:70:18:a2:24:15:f3:7a:c0:e0:8c:ca:f5:95:27:a3: 96:64:fb:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPX9Il5pQQS8FAM2CYMrAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZjIwZWZjMGFlNDAxM2U2ZjQ4NjdjMTVmMjM3N2IyMzUw OTViODYwHhcNMjUxMjI0MDgwMDM4WhcNMjUxMjI1MDgwMDM4WjAzMTEwLwYDVQQD EyhkMDUwNWM5NzRhYThjNTZlZjhiMjlmNWU5N2QxOThmNmU1YzJlMTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaP9Hs87cMJArvOQUAzGbwqgPEP6 atGJQasElt+Ysbn6wi8tVhEbG8EeZ5JiwrXvZqDPrBFNTCCrkQXbz7/DwHEPPbmF poA+Anv/gXwKSCrazYg//b8rAINWJ3UOaT35AlJe+EyBAcFOR0mm9tT80jW2bkbr 4aX4QnYag+tEPg7/soQEGJVDQzGOi9fH6ZmHd10vZSFEe7EIvTQetJokZhOnZvaC MwWw9IUAbhQHgF4w2OYbbqGbs1Adhht5u4D9SP8MF0JGH4fNqAircVHUf/bbfvvg AqazMuoVRZ/uJ16TykN2tcOY8NYhqdx2B54yiTiYuksOiqHWKLCFzkOD0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBQXJdKqMVu+LKfXpfRmPblwuEpMB8GA1UdIwQY MBaAFK7yDvwK5AE+b0hnwV8jd7I1CVuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnZJT19BcmtBVDV2U0dmQlh5TjNzalVKVzRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xMzZmYWYtY2YyMC00MjY1LTk4YTMt ZDliODJkOWVjYzQ1LzEvcnZJT19BcmtBVDV2U0dmQlh5TjNzalVKVzRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xMzZmYWYtY2YyMC00MjY1LTk4YTMtZDliODJkOWVjYzQ1 LzEvcnZJT19BcmtBVDV2U0dmQlh5TjNzalVKVzRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrSrQgUs NKOvLaSgMNLqYssJz2g3epvN7qoXzE5goy7F3EpLzZZuZiveU0Hl2Kl3/cLuIt4Y 0iY1S/mSingYy+4FmyWWtvi5VGiNeklqa/nGTTZm1Nzefswny2oITxGcR9MiR2Qb bxgShfo5RaBBJ+Y7GtrVH5k9stL+1oSaIFxJ74ZmfZd2ARSxPBTZQDGC/yGhwjTB oMko3ZuFHb7nD2v0giK1I2xSEjk3UUV3UxmBFHMpY2Icix5hdinIKUymMH4tHuXE 7SpfQf8+7WyyBYx/XUPe5HPkxCuSbr15qTNVpY5fnDUMasFcMsCtcBiiJBXzesDg jMr1lSejlmT7+g== -----END CERTIFICATE-----Generated at Wed Dec 24 12:02:13 2025 by rpki-client