This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft File: _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json) Hash identifier: R5U5jZaKSYKpT5Vxgy6K+06WSJOk8zZ67z6bTjyw1Yk= Subject key identifier: D4:04:4B:C7:C5:1A:8E:F7:A8:F6:B7:2B:71:2F:6B:15:4E:BD:D4:CE Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d Certificate serial: 019B1193E892E8F357DD0ABCCF43AD3528A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft Manifest number: 082C Signing time: Fri 12 Dec 2025 08:01:04 +0000 Manifest this update: Fri 12 Dec 2025 08:01:04 +0000 Manifest next update: Sat 13 Dec 2025 08:01:04 +0000 Files and hashes: 1: K6Fu_XiBHvDsYhtG_--3fuPZg48.roa (hash: RNhrx5f19YH8DzgdDWPTLam4LAtgoJZsbS8JdFM0WN8=) 2: Ye2lhVqLlVViESIa1X_75ZD_K3Y.roa (hash: GkZd+LIfPke0Hk41OCtwwY1KwALgbjtXK8ppjf/on0I=) 3: ZTj2ZwJbmSTqqGkaHNeSOzaRucE.roa (hash: 5l3ZvQv6nxBKcaHiVSLVWyVMDLkrqNymK7dZBTsMLbU=) 4: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: D0NnPJ2VyswAaKVsW1IZWncMIfLWjL5P0MObRYu+W6E=) 5: _Kr9E5MKxyuntA5czBSmI-XiWLk.roa (hash: yKCPcajH9aVqjBH/Z/+caEOZWjeFz70pUynCf4xQzl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:e8:92:e8:f3:57:dd:0a:bc:cf:43:ad:35:28:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d Validity Not Before: Dec 12 08:01:04 2025 GMT Not After : Dec 13 08:01:04 2025 GMT Subject: CN=d4044bc7c51a8ef7a8f6b72b712f6b154ebdd4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ac:f6:6b:bc:79:cb:74:6c:d7:d1:e0:8b:dd: 70:fd:ac:75:e2:30:1b:dd:e2:b7:d4:ba:ab:7c:c3: 10:61:f0:a6:21:73:6e:b3:71:66:9e:c5:fc:ab:3c: b2:31:67:b9:a8:35:98:81:f9:53:93:57:68:25:f4: 63:ed:bc:b5:4c:88:ce:5a:34:31:e3:3a:ab:a9:2f: 18:68:d0:8f:ed:d2:da:51:a2:e7:5e:6e:37:6b:d4: 49:e0:55:2b:ea:fc:b2:f5:9b:e3:ce:1e:76:55:91: 4c:65:df:40:c1:32:47:ed:b9:a3:c2:1f:70:48:b1: 09:cc:17:f9:4d:87:56:91:96:5a:77:79:4d:77:98: cc:f7:7d:5f:46:05:3f:87:91:27:ed:15:e2:0c:91: 48:64:87:19:8a:c3:cf:45:9c:36:a7:3f:ef:01:77: d5:83:36:12:56:3a:15:ed:96:5f:1a:de:d0:47:85: 11:30:60:c0:09:ed:c6:3e:13:ff:0c:10:44:e4:33: 4f:5c:bc:01:57:4c:99:cc:69:da:bc:0a:04:b9:01: 82:0f:2b:68:28:82:90:f3:ef:ce:b5:64:27:f4:3d: 42:c2:92:cc:d8:a2:d8:30:89:28:d6:5c:24:48:36: 86:ef:59:e4:f6:3b:0d:59:c3:7e:32:2b:19:c5:ad: fa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:04:4B:C7:C5:1A:8E:F7:A8:F6:B7:2B:71:2F:6B:15:4E:BD:D4:CE X509v3 Authority Key Identifier: keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:02:89:53:65:c3:a3:b1:fc:3b:23:e8:dc:f0:ba:f5:c8:8e: 00:a2:a5:87:18:4a:16:b4:54:31:e0:76:6e:cc:f8:f1:00:09: 17:81:e9:36:4f:af:77:55:12:95:51:6c:5e:de:6f:51:24:dc: 87:7b:b1:f6:c0:48:1c:0a:7f:41:9d:67:6b:59:c9:ee:a2:d3: 19:18:32:e8:bf:c7:01:c6:5e:0a:b1:bb:24:db:94:f5:a3:a8: 76:5d:d4:8f:78:87:62:62:fc:0a:df:b2:df:0e:16:ea:79:79: cd:75:54:07:40:67:78:30:47:ab:40:54:bc:be:6e:32:bc:89: 80:83:57:45:54:24:be:eb:26:99:d6:52:f9:51:dd:dc:53:39: 2e:bd:e1:8a:61:1f:c9:5f:ba:df:cd:da:dd:4b:86:05:04:45: 57:92:3f:2b:f3:3b:d1:8e:58:ec:a4:66:95:93:4a:12:6e:24: 79:70:74:27:dd:3a:46:f2:e3:ea:a2:e7:d5:3b:1c:b6:2e:5f: 18:bf:eb:63:fd:37:a2:91:b1:e9:61:60:44:19:20:31:8e:7e: c9:36:cb:66:aa:cd:3b:a8:40:51:ae:ca:05:dd:ec:28:99:35: 10:97:20:92:91:c5:85:65:5d:39:83:a4:97:f2:2b:34:c2:1b: a0:f2:b6:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk+iS6PNX3Qq8z0OtNSiiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOGRkNWZlNDE3OWU4YmRhMjg1MzI1NjE5MTlmNmQwNzg3 N2M2M2QwHhcNMjUxMjEyMDgwMTA0WhcNMjUxMjEzMDgwMTA0WjAzMTEwLwYDVQQD EyhkNDA0NGJjN2M1MWE4ZWY3YThmNmI3MmI3MTJmNmIxNTRlYmRkNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Kz2a7x5y3Rs19Hgi91w/ax14jAb 3eK31LqrfMMQYfCmIXNus3FmnsX8qzyyMWe5qDWYgflTk1doJfRj7by1TIjOWjQx 4zqrqS8YaNCP7dLaUaLnXm43a9RJ4FUr6vyy9Zvjzh52VZFMZd9AwTJH7bmjwh9w SLEJzBf5TYdWkZZad3lNd5jM931fRgU/h5En7RXiDJFIZIcZisPPRZw2pz/vAXfV gzYSVjoV7ZZfGt7QR4URMGDACe3GPhP/DBBE5DNPXLwBV0yZzGnavAoEuQGCDyto KIKQ8+/OtWQn9D1CwpLM2KLYMIko1lwkSDaG71nk9jsNWcN+MisZxa36MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQES8fFGo73qPa3K3EvaxVOvdTOMB8GA1UdIwQY MBaAFP+N1f5Beei9ooUyVhkZ9tB4d8Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQt MDZhNDA0NDM1ZTUwLzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQtMDZhNDA0NDM1ZTUw LzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAKJU2XD o7H8OyPo3PC69ciOAKKlhxhKFrRUMeB2bsz48QAJF4HpNk+vd1USlVFsXt5vUSTc h3ux9sBIHAp/QZ1na1nJ7qLTGRgy6L/HAcZeCrG7JNuU9aOodl3Uj3iHYmL8Ct+y 3w4W6nl5zXVUB0BneDBHq0BUvL5uMryJgINXRVQkvusmmdZS+VHd3FM5Lr3himEf yV+6383a3UuGBQRFV5I/K/M70Y5Y7KRmlZNKEm4keXB0J906RvLj6qLn1Tscti5f GL/rY/03opGx6WFgRBkgMY5+yTbLZqrNO6hAUa7KBd3sKJk1EJcgkpHFhWVdOYOk l/IrNMIboPK20g== -----END CERTIFICATE-----Generated at Fri Dec 12 13:01:18 2025 by rpki-client