This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json) Hash identifier: HDpBcbuzH61H6g2+r6nmHpEeFujYhkYV31SaxAhK9Ks= Subject key identifier: C8:A1:14:B4:D6:3C:3B:52:6E:09:04:A7:0B:26:C5:98:FB:49:D7:BF Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41 Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341 Certificate serial: 019B3D5A16D7E28487458AC0780CE3AFA02F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 20:01:12 +0000 Manifest this update: Sat 20 Dec 2025 20:01:12 +0000 Manifest next update: Sun 21 Dec 2025 20:01:12 +0000 Files and hashes: 1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=) 2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: fPqNyM3RayOL98b5YBKfohKKG9NPQyzAZA6N6epZ540=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:16:d7:e2:84:87:45:8a:c0:78:0c:e3:af:a0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341 Validity Not Before: Dec 20 20:01:12 2025 GMT Not After : Dec 21 20:01:12 2025 GMT Subject: CN=c8a114b4d63c3b526e0904a70b26c598fb49d7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:44:34:b7:12:e0:e6:76:5d:1e:de:e5:13:02: 15:e8:b8:b3:58:6b:d2:bb:9d:1e:6d:6c:b5:74:2c: 6b:c2:b5:c7:4e:87:95:db:5c:cf:b6:c5:83:4e:dd: 3d:bd:c7:9e:db:18:0f:c5:3a:c4:84:5f:ab:5f:c9: 25:01:57:01:64:d2:24:fa:cf:3e:9f:bb:b4:72:03: 93:cf:a4:31:b9:05:9f:56:9f:27:02:ab:0b:1e:88: c1:11:64:86:04:fd:2d:5d:a6:32:35:63:cd:37:5d: f5:c0:f3:e8:a1:f0:f7:72:1e:6e:08:8f:ea:6a:76: 13:47:99:83:c2:23:9f:f1:d8:b2:39:dc:4c:db:4a: c2:b6:13:38:f2:94:0b:f0:98:81:a8:98:19:34:0d: 02:b8:6f:49:f2:ed:08:8d:3a:32:61:5f:ec:0e:33: df:c9:d8:25:08:4e:90:bf:fb:0b:c7:b7:9d:23:e4: 1f:18:e6:76:3e:9d:98:5a:a9:a9:5f:9f:14:fb:eb: bf:83:c8:36:d6:bd:c3:f8:8f:81:3b:aa:91:c7:35: 22:14:28:c5:7c:30:1e:58:ac:91:f6:93:d8:7a:95: b4:4c:b3:29:3c:0f:6d:5f:05:f8:f9:a9:42:f6:4a: e6:d9:d9:4f:1d:63:f8:1a:f6:9d:d0:59:a5:69:ab: 24:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A1:14:B4:D6:3C:3B:52:6E:09:04:A7:0B:26:C5:98:FB:49:D7:BF X509v3 Authority Key Identifier: keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ce:e8:40:ce:6f:53:bc:c2:cd:7d:6e:8e:e9:9a:4d:0e:4f: dc:e8:f9:d0:21:ed:e6:3c:de:42:53:bf:b5:9a:c7:ed:d4:ed: e2:1e:50:cd:72:e4:1c:47:c1:72:d7:5a:52:64:70:c1:99:41: f8:76:1c:f3:41:17:a8:bf:ca:a5:c9:81:38:c5:36:d9:4e:8d: 32:51:3f:d6:16:5e:11:f4:f7:6a:45:a9:4a:31:33:f7:46:19: 6f:66:c7:65:ce:c5:99:ab:2c:c6:3f:80:8c:74:90:79:3d:e4: cf:b4:ec:fb:27:a7:9a:23:c4:c6:dd:83:44:06:30:5a:72:43: d9:e3:dc:1b:e3:04:1f:09:30:9b:11:a8:6d:97:75:e4:78:92: 4d:b6:6f:80:fe:f1:6a:23:f0:36:53:10:d2:fd:cb:07:25:6d: 48:84:f8:87:13:6b:12:8f:de:22:bc:b6:c2:a3:0f:ca:ce:25: 14:fb:34:88:aa:ef:bf:03:99:ab:33:a0:d2:30:cb:62:cc:0f: bd:c4:24:a4:b2:0e:4d:2a:59:3f:9a:5e:e3:e5:a8:25:e3:c5: 07:bf:94:68:c3:bc:88:41:7e:30:aa:31:3b:2a:7e:92:03:c1: 73:f4:e8:86:53:18:9c:e1:46:e6:6c:58:21:92:2a:fe:94:6c: 84:ff:16:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WhbX4oSHRYrAeAzjr6AvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjI4MGFlNTE5NTUwYzdhN2Y0OTUzYWIyN2Q3YWU3ZGRl YjEzNDEwHhcNMjUxMjIwMjAwMTEyWhcNMjUxMjIxMjAwMTEyWjAzMTEwLwYDVQQD EyhjOGExMTRiNGQ2M2MzYjUyNmUwOTA0YTcwYjI2YzU5OGZiNDlkN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEQ0txLg5nZdHt7lEwIV6LizWGvS u50ebWy1dCxrwrXHToeV21zPtsWDTt09vcee2xgPxTrEhF+rX8klAVcBZNIk+s8+ n7u0cgOTz6QxuQWfVp8nAqsLHojBEWSGBP0tXaYyNWPNN131wPPoofD3ch5uCI/q anYTR5mDwiOf8diyOdxM20rCthM48pQL8JiBqJgZNA0CuG9J8u0IjToyYV/sDjPf ydglCE6Qv/sLx7edI+QfGOZ2Pp2YWqmpX58U++u/g8g21r3D+I+BO6qRxzUiFCjF fDAeWKyR9pPYepW0TLMpPA9tXwX4+alC9krm2dlPHWP4Gvad0FmlaaskNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMihFLTWPDtSbgkEpwsmxZj7Sde/MB8GA1UdIwQY MBaAFInygK5RlVDHp/SVOrJ9eufd6xNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMt NWI1MGVhODhlZWFiLzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMtNWI1MGVhODhlZWFi LzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw87oQM5v U7zCzX1ujumaTQ5P3Oj50CHt5jzeQlO/tZrH7dTt4h5QzXLkHEfBctdaUmRwwZlB +HYc80EXqL/KpcmBOMU22U6NMlE/1hZeEfT3akWpSjEz90YZb2bHZc7Fmassxj+A jHSQeT3kz7Ts+yenmiPExt2DRAYwWnJD2ePcG+MEHwkwmxGobZd15HiSTbZvgP7x aiPwNlMQ0v3LByVtSIT4hxNrEo/eIry2wqMPys4lFPs0iKrvvwOZqzOg0jDLYswP vcQkpLIOTSpZP5pe4+WoJePFB7+UaMO8iEF+MKoxOyp+kgPBc/TohlMYnOFG5mxY IZIq/pRshP8WGA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:23:37 2025 by rpki-client