This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json) Hash identifier: LDL56CYMI8OXW0gVrHZ+PYtZCir8D6g3lO2cDwlc44U= Subject key identifier: EF:0E:53:E7:AA:5A:DA:4E:89:47:E7:0A:AD:48:DF:0D:12:D4:58:3D Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85 Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585 Certificate serial: 019B3D59BECA7EDB0925C73D6A9875BEB8F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft Manifest number: 0BD0 Signing time: Sat 20 Dec 2025 20:00:50 +0000 Manifest this update: Sat 20 Dec 2025 20:00:50 +0000 Manifest next update: Sun 21 Dec 2025 20:00:50 +0000 Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: JIyjwd8L9tkAvsRmQQEfYBA03SNaKhkaNe+jd+Uik5k=) 2: Pg2SMjH2JbUsvVVMZE_VQhr2wAM.roa (hash: Ty3UWb4K9/+Q0Fy9Hogc3ux1omBtFmBjEcK12mnGt2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:be:ca:7e:db:09:25:c7:3d:6a:98:75:be:b8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585 Validity Not Before: Dec 20 20:00:50 2025 GMT Not After : Dec 21 20:00:50 2025 GMT Subject: CN=ef0e53e7aa5ada4e8947e70aad48df0d12d4583d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:3e:41:34:01:b1:d8:09:03:e8:f1:95:5d: bd:79:10:28:f3:ba:ff:52:a8:08:0d:1d:fd:cd:dd: 12:c0:b4:14:98:b7:6e:78:1c:74:ee:4e:03:d8:9f: 95:d4:a4:db:a8:80:3a:7b:8b:c9:08:4d:de:1e:73: c5:21:7b:c1:6e:40:c4:db:7b:ad:aa:c5:9f:5c:35: 86:9a:a4:04:6f:b1:4b:cb:e6:fd:c5:d1:c5:a8:ea: 84:a8:aa:26:1d:60:d1:b7:07:b9:4e:de:f1:8f:06: 1d:1f:37:4f:e0:30:c0:a4:25:93:1e:ef:69:47:9c: cd:6a:b2:46:3e:c9:6c:93:bb:ef:af:4a:07:2f:13: 4f:a2:ff:73:d9:66:9d:18:d0:8c:2f:ae:d3:49:7d: 19:1d:1d:cb:5a:e4:6b:59:ae:71:9e:10:e7:2d:f5: af:07:d9:ff:b0:12:ec:02:77:04:65:37:81:18:1a: 6b:81:05:51:91:36:86:e3:a7:6e:9e:5a:70:f1:0e: 83:06:fd:22:92:d2:7e:47:21:d8:b1:df:c0:bb:e4: 9b:ce:cd:3b:58:3c:5b:4e:59:b2:e3:de:9f:68:e5: 92:54:29:26:b1:d5:0f:9b:69:43:df:c1:20:81:d7: 08:76:b9:b6:43:fd:a7:74:0d:69:c0:ea:c2:cb:fe: 95:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0E:53:E7:AA:5A:DA:4E:89:47:E7:0A:AD:48:DF:0D:12:D4:58:3D X509v3 Authority Key Identifier: keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:22:2a:ce:4a:44:f4:5f:8c:b1:cd:42:9e:7f:29:f4:75:e8: bf:c5:bf:ed:cb:58:11:bc:e2:5d:0a:c2:4e:ef:45:e8:68:21: da:9e:70:80:cc:fe:86:11:3a:e0:3c:a6:be:a8:e2:94:93:d7: a2:65:c7:4f:de:f2:82:71:69:86:c0:4e:67:14:83:26:37:e2: 5b:63:cc:28:fd:ca:9d:12:ab:d7:75:92:75:54:82:b8:a7:08: 2b:d2:1f:a3:89:5f:6a:1c:ce:d1:bc:ce:26:dd:05:65:a6:25: 52:d9:8c:b5:86:28:9a:5e:e5:b5:83:32:3c:f7:e4:92:03:7a: a9:3c:1d:17:88:3e:22:10:24:3c:61:f2:bb:08:c3:77:6c:1b: 0b:d9:fa:3d:21:6d:cd:cf:e6:3f:de:72:00:02:76:5d:94:c1: 05:54:32:5c:66:04:23:50:82:8f:2c:9d:17:ec:e9:02:f2:87: f7:cb:30:2f:f0:32:63:f6:58:54:cc:8f:fb:b1:73:76:fa:e3: 9b:9f:51:07:13:06:df:74:5e:c8:d3:7e:61:8f:1a:0c:ea:ce: c3:89:81:55:8e:fe:47:9c:d9:ac:4e:47:3a:65:bf:8f:ad:21: 03:4e:fc:b8:34:c0:3a:76:9a:1f:2d:d1:85:3d:35:bf:82:69: 2f:78:1e:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wb7KftsJJcc9aph1vrjyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMWQ4ODI0NmFiNTdlMjA0ZGVhNTFlOTI0M2M2NzI1MmRj YmE1ODUwHhcNMjUxMjIwMjAwMDUwWhcNMjUxMjIxMjAwMDUwWjAzMTEwLwYDVQQD EyhlZjBlNTNlN2FhNWFkYTRlODk0N2U3MGFhZDQ4ZGYwZDEyZDQ1ODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB4+QTQBsdgJA+jxlV29eRAo87r/ UqgIDR39zd0SwLQUmLdueBx07k4D2J+V1KTbqIA6e4vJCE3eHnPFIXvBbkDE23ut qsWfXDWGmqQEb7FLy+b9xdHFqOqEqKomHWDRtwe5Tt7xjwYdHzdP4DDApCWTHu9p R5zNarJGPslsk7vvr0oHLxNPov9z2WadGNCML67TSX0ZHR3LWuRrWa5xnhDnLfWv B9n/sBLsAncEZTeBGBprgQVRkTaG46dunlpw8Q6DBv0iktJ+RyHYsd/Au+Sbzs07 WDxbTlmy496faOWSVCkmsdUPm2lD38EggdcIdrm2Q/2ndA1pwOrCy/6VLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8OU+eqWtpOiUfnCq1I3w0S1Fg9MB8GA1UdIwQY MBaAFAEdiCRqtX4gTepR6SQ8ZyUty6WFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTct MDA4YTgwZjZmZjExLzEvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTctMDA4YTgwZjZmZjEx LzEvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCIqzkpE 9F+Msc1Cnn8p9HXov8W/7ctYEbziXQrCTu9F6Ggh2p5wgMz+hhE64DymvqjilJPX omXHT97ygnFphsBOZxSDJjfiW2PMKP3KnRKr13WSdVSCuKcIK9Ifo4lfahzO0bzO Jt0FZaYlUtmMtYYoml7ltYMyPPfkkgN6qTwdF4g+IhAkPGHyuwjDd2wbC9n6PSFt zc/mP95yAAJ2XZTBBVQyXGYEI1CCjyydF+zpAvKH98swL/AyY/ZYVMyP+7Fzdvrj m59RBxMG33ReyNN+YY8aDOrOw4mBVY7+R5zZrE5HOmW/j60hA078uDTAOnaaHy3R hT01v4JpL3geLA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:19:31 2025 by rpki-client