This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft File: ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json) Hash identifier: pqosjpKpR/CVL3qQnmM/geg+sCyDqlXO+K8C20n9afg= Subject key identifier: 18:0D:DC:E5:3D:D4:37:82:A9:71:F0:A9:C5:C6:13:1F:7B:8E:6F:41 Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2 Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2 Certificate serial: 019B3CB55D8E7A56A42FDE918388B6965D91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft Manifest number: 12C2 Signing time: Sat 20 Dec 2025 17:01:17 +0000 Manifest this update: Sat 20 Dec 2025 17:01:17 +0000 Manifest next update: Sun 21 Dec 2025 17:01:17 +0000 Files and hashes: 1: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: LUX69QeItaK4tLru4Cu2bbzApEdhxIbeXtcnhXRhiz0=) 2: RN98TJ7kqQI5BuSnvdMcE3q1sxc.roa (hash: YxQcvIdmH83Dh0Q3zwPjsii4N4gNYgzKFTXwaXCIS7Y=) 3: eIZENcgK1XZflT_O-9vOWF5_c5k.roa (hash: 72shYqXGHw00bwK02sJ1cpdaJwagVhfPsDZJsD/Kbnk=) 4: pw-uXfj6mcJrqBi6AQ_DbhRWlvc.roa (hash: F9GSSa/n4nzQc1So+eTia4zHzLGf70ctYWS6RuL9cmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:5d:8e:7a:56:a4:2f:de:91:83:88:b6:96:5d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2 Validity Not Before: Dec 20 17:01:17 2025 GMT Not After : Dec 21 17:01:17 2025 GMT Subject: CN=180ddce53dd43782a971f0a9c5c6131f7b8e6f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:d8:57:cb:62:37:e2:0d:d7:72:f7:7b:54: 60:a4:1e:c9:43:31:06:2b:10:fc:d0:f8:25:5d:f1: bb:4e:d3:16:ed:61:df:b9:a5:10:72:21:17:3f:cc: 5b:88:2c:ed:ae:8e:dd:99:ac:c0:7a:9a:12:0c:3b: 6f:c3:d8:fc:83:06:8c:2e:39:ea:80:ba:26:51:90: aa:26:68:60:32:9b:96:81:d0:dc:82:78:ca:f0:02: dd:bd:3b:ba:54:32:86:47:4b:c7:50:14:ce:78:9f: 5d:0b:28:ff:cd:5f:64:a1:b8:06:6e:6a:cf:f2:58: df:5a:68:61:15:5e:2f:39:27:05:06:bb:a3:70:2e: 82:3a:98:46:42:92:6c:56:4c:2b:bd:92:8f:a7:f0: c3:8c:4c:1c:d7:50:82:98:47:99:9e:cb:8d:9e:4e: 78:08:16:27:6d:87:0d:32:ce:d8:68:37:61:36:69: 92:4d:f8:15:df:b7:6d:b6:95:24:91:e8:10:54:f8: 3c:31:ab:f5:90:42:97:2e:f7:18:ee:7e:a8:e2:21: 10:0a:c5:b0:68:c3:a9:12:dc:3a:22:e8:0e:6a:61: ba:da:05:bd:68:70:c9:91:ff:be:dd:0d:b1:e6:37: 05:33:8b:51:47:4a:54:59:00:28:13:24:92:1d:ee: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0D:DC:E5:3D:D4:37:82:A9:71:F0:A9:C5:C6:13:1F:7B:8E:6F:41 X509v3 Authority Key Identifier: keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:2a:d4:65:be:64:73:93:7f:e2:48:81:b6:06:cd:47:6e:f3: 80:f7:c3:37:74:25:85:b5:3d:49:cf:48:77:8e:08:3f:f1:75: 9c:0a:20:0b:b8:3c:87:45:97:77:b7:57:20:9d:37:7f:67:39: 64:3a:a5:5b:16:f5:f4:d5:fa:b4:82:cc:58:f9:49:dc:e4:a4: 6d:2c:fa:2a:58:3d:f4:d6:15:c3:c5:a6:35:de:e8:4e:ec:03: fc:c9:6b:4b:aa:bb:a2:e8:19:71:23:48:fa:67:2a:de:b9:5b: 83:8a:81:03:1e:7c:3a:63:41:a7:be:4b:ab:13:33:b9:97:b5: 9d:86:42:dc:2e:59:84:6a:35:93:cf:19:4a:1b:57:2d:11:81: 2d:e3:5a:c6:00:a5:0e:c0:d2:0a:bb:26:11:a6:da:29:51:53: 2b:2b:ae:99:3c:d9:f8:d3:61:75:ef:12:62:83:f9:c7:8c:b0: 7c:e9:6f:0c:01:b2:ec:12:52:0f:93:db:56:c1:fd:71:f5:e4: 7f:4f:fd:94:0b:0e:bc:22:4c:67:15:c1:18:00:dc:ca:48:6a: 44:b2:f4:ac:1e:d6:c3:7f:94:1c:cd:66:49:a9:d6:2f:a9:07: a0:da:1e:25:79:50:56:29:70:88:32:f7:d5:0f:b6:7d:a0:8e: 0c:35:90:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tV2OelakL96Rg4i2ll2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjk4MGMxMGQ3MTEwZjkxZmZmOWUwZWNlYjYzOWQ5ZTc1 YjM1ZTIwHhcNMjUxMjIwMTcwMTE3WhcNMjUxMjIxMTcwMTE3WjAzMTEwLwYDVQQD EygxODBkZGNlNTNkZDQzNzgyYTk3MWYwYTljNWM2MTMxZjdiOGU2ZjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucTYV8tiN+IN13L3e1RgpB7JQzEG KxD80PglXfG7TtMW7WHfuaUQciEXP8xbiCztro7dmazAepoSDDtvw9j8gwaMLjnq gLomUZCqJmhgMpuWgdDcgnjK8ALdvTu6VDKGR0vHUBTOeJ9dCyj/zV9kobgGbmrP 8ljfWmhhFV4vOScFBrujcC6COphGQpJsVkwrvZKPp/DDjEwc11CCmEeZnsuNnk54 CBYnbYcNMs7YaDdhNmmSTfgV37dttpUkkegQVPg8Mav1kEKXLvcY7n6o4iEQCsWw aMOpEtw6IugOamG62gW9aHDJkf++3Q2x5jcFM4tRR0pUWQAoEySSHe51BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgN3OU91DeCqXHwqcXGEx97jm9BMB8GA1UdIwQY MBaAFAK5gMENcRD5H/+eDs62OdnnWzXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUt NzBjMGE1MDZkNzk3LzEvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUtNzBjMGE1MDZkNzk3 LzEvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGirUZb5k c5N/4kiBtgbNR27zgPfDN3QlhbU9Sc9Id44IP/F1nAogC7g8h0WXd7dXIJ03f2c5 ZDqlWxb19NX6tILMWPlJ3OSkbSz6Klg99NYVw8WmNd7oTuwD/MlrS6q7ougZcSNI +mcq3rlbg4qBAx58OmNBp75LqxMzuZe1nYZC3C5ZhGo1k88ZShtXLRGBLeNaxgCl DsDSCrsmEabaKVFTKyuumTzZ+NNhde8SYoP5x4ywfOlvDAGy7BJSD5PbVsH9cfXk f0/9lAsOvCJMZxXBGADcykhqRLL0rB7Ww3+UHM1mSanWL6kHoNoeJXlQVilwiDL3 1Q+2faCODDWQ4w== -----END CERTIFICATE-----Generated at Sat Dec 20 22:53:50 2025 by rpki-client