This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json) Hash identifier: Wv4bKuJ2p6SRVznTVt2WSniOLW6e4FsgeyWyjv8toUA= Subject key identifier: 78:AB:9B:C3:49:5F:2E:B5:E5:1D:67:F9:DA:BD:DE:B3:A3:1C:A2:A2 Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a Certificate serial: 019B7ECBAC7426B8DD9C190E2B1FAC860E6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft Manifest number: 0619 Signing time: Fri 02 Jan 2026 13:00:35 +0000 Manifest this update: Fri 02 Jan 2026 13:00:35 +0000 Manifest next update: Sat 03 Jan 2026 13:00:35 +0000 Files and hashes: 1: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: RkT8u+mVR4vG8AdIiCRIxLrlaJHgf0mrhTXM21Ufi68=) 2: gl50fN_Ynsz9IXAMmsmP-OcX1e8.roa (hash: Y8PmA6bJxzns2yN2Fv6Avkv41L0+CAihgSIjURU1EKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:cb:ac:74:26:b8:dd:9c:19:0e:2b:1f:ac:86:0e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a Validity Not Before: Jan 2 13:00:35 2026 GMT Not After : Jan 3 13:00:35 2026 GMT Subject: CN=78ab9bc3495f2eb5e51d67f9dabddeb3a31ca2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e5:f3:10:2a:d9:70:c9:fa:16:30:b7:a1:cf: 89:a2:40:87:20:a6:68:6a:62:ae:2f:e3:df:97:e9: 42:91:d8:ea:93:f5:1e:bc:62:75:75:3e:c5:d7:0f: 8a:67:4f:ec:84:65:23:cd:ff:a9:2b:51:7a:13:a0: 41:6b:03:a4:a5:25:06:ed:60:3f:62:45:fe:20:f0: 76:89:b4:f0:82:bf:22:79:e9:a1:30:07:20:1d:a6: ad:0c:2d:2a:36:95:c2:aa:ce:64:09:e3:c7:f3:dc: fa:25:ba:93:7f:a6:4f:23:07:91:bb:60:14:ae:72: 7b:bd:96:1d:2b:83:c9:5d:d1:2a:ce:1e:7d:71:a7: 8c:d1:ff:44:62:d5:d5:bf:08:a3:c2:b2:8e:3e:ed: 76:96:2a:69:a0:f3:83:88:db:16:81:4a:db:76:83: 1b:5a:6a:ce:de:f1:e7:5a:3b:2a:69:01:e1:0f:c2: 1f:a1:e5:05:b6:b9:f7:82:ee:0a:1d:42:b9:15:d6: d7:f4:51:2b:ed:da:c2:ee:c5:3f:d8:1a:f3:43:1e: c8:8d:68:77:c4:ad:e6:c1:34:19:8c:62:72:8b:cb: fe:cf:69:82:11:18:a7:38:c4:db:7c:07:13:f0:20: d8:7e:5b:49:17:bf:fb:49:f4:9b:16:24:18:78:73: f5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AB:9B:C3:49:5F:2E:B5:E5:1D:67:F9:DA:BD:DE:B3:A3:1C:A2:A2 X509v3 Authority Key Identifier: keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:26:d6:e9:24:82:ff:62:0f:01:87:f4:95:65:43:b3:2d:2f: 14:df:b9:a2:00:a6:e0:c5:3e:84:40:f4:2c:9e:ba:61:35:b3: 59:49:ce:17:f4:06:8d:7e:ec:ef:bf:f4:51:ec:e9:e9:36:94: a2:81:d4:6f:e0:e3:b1:1f:9e:fe:e0:e7:ce:cc:9b:03:83:35: fa:b9:ca:de:9a:1a:4d:86:94:c3:15:bd:34:fe:f9:72:36:3e: 57:91:73:8d:b9:1a:6f:ca:3d:2c:3b:3d:c1:c8:40:6d:f1:4c: 24:74:7f:52:29:d1:57:49:63:ce:bb:f8:93:0d:4a:e3:40:3e: 40:00:be:c2:f3:3d:9c:70:e3:4c:79:0c:13:42:ee:88:80:64: 4b:c4:68:c9:bf:b9:db:59:4b:b7:07:91:ca:f1:a2:04:59:20: 58:3d:e0:c8:65:e6:a5:fd:48:c2:cf:e3:52:c4:fa:c9:96:9b: 29:69:6c:14:17:3e:bf:2f:76:c8:bc:77:64:3c:87:21:90:7c: 38:b3:ec:6e:19:d6:c8:4e:53:a2:d4:92:3a:79:31:c7:f0:40: 4f:00:27:d5:68:85:df:23:8c:8c:be:49:aa:ae:cd:e4:e4:e5: bd:60:a4:a3:d1:8c:b9:fa:02:37:f1:0e:f4:24:02:04:e0:c5: d7:be:a9:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+y6x0JrjdnBkOKx+shg5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYjQzNzllMTE5ZTcxMDAxY2NkZmVlYmY0ZjJhZjJjZjVm MDdhMGEwHhcNMjYwMTAyMTMwMDM1WhcNMjYwMTAzMTMwMDM1WjAzMTEwLwYDVQQD Eyg3OGFiOWJjMzQ5NWYyZWI1ZTUxZDY3ZjlkYWJkZGViM2EzMWNhMmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+XzECrZcMn6FjC3oc+JokCHIKZo amKuL+Pfl+lCkdjqk/UevGJ1dT7F1w+KZ0/shGUjzf+pK1F6E6BBawOkpSUG7WA/ YkX+IPB2ibTwgr8ieemhMAcgHaatDC0qNpXCqs5kCePH89z6JbqTf6ZPIweRu2AU rnJ7vZYdK4PJXdEqzh59caeM0f9EYtXVvwijwrKOPu12lippoPODiNsWgUrbdoMb WmrO3vHnWjsqaQHhD8IfoeUFtrn3gu4KHUK5FdbX9FEr7drC7sU/2BrzQx7IjWh3 xK3mwTQZjGJyi8v+z2mCERinOMTbfAcT8CDYfltJF7/7SfSbFiQYeHP10QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHirm8NJXy615R1n+dq93rOjHKKiMB8GA1UdIwQY MBaAFGq0N54RnnEAHM3+6/Tyryz18HoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84OWE0YmYtMzI1YS00Njc1LWJiMDAt MGE0MzM4Y2RmOTdiLzEvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84OWE0YmYtMzI1YS00Njc1LWJiMDAtMGE0MzM4Y2RmOTdi LzEvYXJRM25oR2VjUUFjemY3cjlQS3ZMUFh3ZWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATybW6SSC /2IPAYf0lWVDsy0vFN+5ogCm4MU+hED0LJ66YTWzWUnOF/QGjX7s77/0Uezp6TaU ooHUb+DjsR+e/uDnzsybA4M1+rnK3poaTYaUwxW9NP75cjY+V5Fzjbkab8o9LDs9 wchAbfFMJHR/UinRV0ljzrv4kw1K40A+QAC+wvM9nHDjTHkME0LuiIBkS8Royb+5 21lLtweRyvGiBFkgWD3gyGXmpf1Iws/jUsT6yZabKWlsFBc+vy92yLx3ZDyHIZB8 OLPsbhnWyE5TotSSOnkxx/BATwAn1WiF3yOMjL5Jqq7N5OTlvWCko9GMufoCN/EO 9CQCBODF176poA== -----END CERTIFICATE-----Generated at Fri Jan 2 18:24:05 2026 by rpki-client