This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft File: ARmUscWuj1grvs9ndysUttl3uqw.mft (raw, json) Hash identifier: p752ByEvHvGSVKw0z0CK8nqrQmNlU+9yqP34+aAYD6A= Subject key identifier: 51:BD:F4:19:33:F7:07:9D:2B:3F:48:F8:24:68:A4:9A:47:A5:0D:26 Authority key identifier: 01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC Certificate issuer: /CN=011994b1c5ae8f582bbecf67772b14b6d977baac Certificate serial: 019B2F9E98BD7D86459EA3641914F1167D53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft Manifest number: 0699 Signing time: Thu 18 Dec 2025 04:01:21 +0000 Manifest this update: Thu 18 Dec 2025 04:01:21 +0000 Manifest next update: Fri 19 Dec 2025 04:01:21 +0000 Files and hashes: 1: ARmUscWuj1grvs9ndysUttl3uqw.crl (hash: ZUB53ayParEKvF8vcdOWQecdqni5ko8Rz/08zYZDtL4=) 2: NFxIuk4KnMOoaK7t1Cp4prQGCpc.roa (hash: qLz7+g7LrMIsBpRTz+960ZyB6BF4g8W2iE+TmwJoilE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:98:bd:7d:86:45:9e:a3:64:19:14:f1:16:7d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011994b1c5ae8f582bbecf67772b14b6d977baac Validity Not Before: Dec 18 04:01:21 2025 GMT Not After : Dec 19 04:01:21 2025 GMT Subject: CN=51bdf41933f7079d2b3f48f82468a49a47a50d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e8:33:5f:ac:d3:e7:68:07:9e:e9:16:8e:7f: 1a:68:e5:f6:63:d2:74:8f:15:e7:08:a3:a4:17:51: e4:32:38:46:e1:eb:65:4a:0b:7f:bc:93:29:c5:eb: 95:48:48:a4:4b:99:c8:10:91:0e:ad:24:1f:37:b1: 2c:72:5a:a6:37:19:38:eb:24:3b:a4:40:2e:00:b1: a6:54:53:2a:64:b1:de:8c:fd:1f:6f:c5:40:42:69: 28:76:28:b2:ea:a4:7b:f0:3b:87:d2:8c:0f:a6:74: c5:df:a7:6e:8b:7b:df:51:03:1f:15:1c:d5:e6:4c: 55:de:d4:fe:5e:3d:0c:e1:e2:09:72:24:fd:ea:74: 4b:94:72:01:6f:58:99:3e:8b:fe:03:60:4d:87:f8: 78:64:ea:eb:2c:3b:08:3b:8a:e5:49:11:15:d8:6a: 18:41:f5:99:07:4f:ab:53:22:00:0b:60:c1:4a:9f: ce:df:ed:51:51:db:76:dd:04:9c:cf:21:b1:fe:03: c1:06:c9:0f:b3:04:65:2e:87:ab:ab:7a:6f:1c:27: bc:74:80:57:4e:ee:bd:c0:0c:78:35:62:e6:c7:97: b2:d1:62:e5:76:9a:9d:98:10:6d:93:b4:00:b6:b6: a9:7b:20:65:48:d2:57:f4:af:e0:00:7c:ec:53:92: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BD:F4:19:33:F7:07:9D:2B:3F:48:F8:24:68:A4:9A:47:A5:0D:26 X509v3 Authority Key Identifier: keyid:01:19:94:B1:C5:AE:8F:58:2B:BE:CF:67:77:2B:14:B6:D9:77:BA:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARmUscWuj1grvs9ndysUttl3uqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/da3e5a-3002-41b0-af9a-3a73c333e7e7/1/ARmUscWuj1grvs9ndysUttl3uqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:c3:4f:7a:92:a6:d3:24:74:e2:f8:45:02:2d:d4:56:1a:94: d3:4f:39:14:32:bc:70:43:9a:89:4d:a3:96:b4:db:42:87:b1: 15:0d:c8:fd:51:be:53:88:57:eb:1a:c6:6a:fc:51:96:20:cc: b3:4f:3f:8f:1e:00:6a:55:e6:2a:d4:f1:0b:f0:fe:c7:01:ee: 2a:07:1a:40:9c:02:50:64:85:6b:ea:b6:c1:8a:d0:d8:0b:26: 51:b7:ac:c9:cc:29:98:22:04:5c:f7:1e:92:a9:1f:8b:4f:b2: 00:10:d2:b9:a5:c4:d6:85:e3:45:15:32:06:e6:0d:53:19:3c: c5:80:da:92:07:35:90:a8:37:02:ba:f3:ba:d6:00:f8:5a:d3: 44:84:48:83:80:84:a6:c8:dd:0f:7b:32:9f:91:e0:e6:73:74: e1:8e:66:b6:d8:97:03:89:71:24:26:f6:c3:25:36:d0:37:f6: a9:10:c3:61:bc:d5:c8:08:67:1b:31:13:43:59:0b:2b:dc:f8: 53:02:10:7a:40:47:8b:2c:57:30:7d:ca:a4:e8:0e:cf:34:e2: c6:a9:a3:b9:75:a2:7d:65:0b:86:0e:13:a7:90:69:b0:0e:75: e6:1c:ff:f9:1d:5a:80:a5:8c:ea:a5:08:c5:38:d6:57:7e:d2: 4d:d8:52:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnpi9fYZFnqNkGRTxFn1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMTk5NGIxYzVhZThmNTgyYmJlY2Y2Nzc3MmIxNGI2ZDk3 N2JhYWMwHhcNMjUxMjE4MDQwMTIxWhcNMjUxMjE5MDQwMTIxWjAzMTEwLwYDVQQD Eyg1MWJkZjQxOTMzZjcwNzlkMmIzZjQ4ZjgyNDY4YTQ5YTQ3YTUwZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+gzX6zT52gHnukWjn8aaOX2Y9J0 jxXnCKOkF1HkMjhG4etlSgt/vJMpxeuVSEikS5nIEJEOrSQfN7EsclqmNxk46yQ7 pEAuALGmVFMqZLHejP0fb8VAQmkodiiy6qR78DuH0owPpnTF36dui3vfUQMfFRzV 5kxV3tT+Xj0M4eIJciT96nRLlHIBb1iZPov+A2BNh/h4ZOrrLDsIO4rlSREV2GoY QfWZB0+rUyIAC2DBSp/O3+1RUdt23QSczyGx/gPBBskPswRlLoerq3pvHCe8dIBX Tu69wAx4NWLmx5ey0WLldpqdmBBtk7QAtrapeyBlSNJX9K/gAHzsU5LXGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFG99Bkz9wedKz9I+CRopJpHpQ0mMB8GA1UdIwQY MBaAFAEZlLHFro9YK77PZ3crFLbZd7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEt M2E3M2MzMzNlN2U3LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kYTNlNWEtMzAwMi00MWIwLWFmOWEtM2E3M2MzMzNlN2U3 LzEvQVJtVXNjV3VqMWdydnM5bmR5c1V0dGwzdXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMNPepKm 0yR04vhFAi3UVhqU0085FDK8cEOaiU2jlrTbQoexFQ3I/VG+U4hX6xrGavxRliDM s08/jx4AalXmKtTxC/D+xwHuKgcaQJwCUGSFa+q2wYrQ2AsmUbesycwpmCIEXPce kqkfi0+yABDSuaXE1oXjRRUyBuYNUxk8xYDakgc1kKg3ArrzutYA+FrTRIRIg4CE psjdD3syn5Hg5nN04Y5mttiXA4lxJCb2wyU20Df2qRDDYbzVyAhnGzETQ1kLK9z4 UwIQekBHiyxXMH3KpOgOzzTixqmjuXWifWULhg4Tp5BpsA515hz/+R1agKWM6qUI xTjWV37STdhSzg== -----END CERTIFICATE-----Generated at Thu Dec 18 06:57:07 2025 by rpki-client