This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json) Hash identifier: +WMfg8kgNEsV46h/EV3CgfrZ9LLYaQrTN7kYdjzSIfk= Subject key identifier: DE:93:AD:B9:43:AE:3F:2D:A7:5B:8D:D3:06:A2:E4:95:90:69:D8:AE Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f Certificate serial: 019B33E8931FC685D85B402DEB131CDD065E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft Manifest number: 1713 Signing time: Fri 19 Dec 2025 00:00:38 +0000 Manifest this update: Fri 19 Dec 2025 00:00:38 +0000 Manifest next update: Sat 20 Dec 2025 00:00:38 +0000 Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: rVC8qY4yEUcRrq9kMhVmdxyvophla8pP0coJsEjHCj0=) 2: vvNRTPRqU8Pnch_p0B0gqgkil_Q.roa (hash: nLSnGecWyvHzo3G0jRopUHVVK/4X1Sw9XUMyVphgWSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:93:1f:c6:85:d8:5b:40:2d:eb:13:1c:dd:06:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f Validity Not Before: Dec 19 00:00:38 2025 GMT Not After : Dec 20 00:00:38 2025 GMT Subject: CN=de93adb943ae3f2da75b8dd306a2e4959069d8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:cb:99:34:2a:40:86:3b:2d:ad:68:b3:ba: 11:b0:97:b2:ba:88:00:1c:2d:08:1f:21:93:6a:fc: 40:0c:38:bd:b6:bd:8c:17:72:2e:5b:b2:6d:0a:74: 43:45:5a:0f:fd:ae:61:2a:45:ef:3b:38:5e:ed:0e: 80:5d:17:a3:99:11:24:8e:78:90:eb:8b:9d:05:cd: 35:50:4d:7c:63:c1:49:83:f5:a4:94:01:f7:68:b8: b1:72:e1:ef:f9:7d:ae:ce:54:36:f4:54:bd:31:f9: ac:81:6e:4c:09:bb:bf:04:e4:81:42:d8:a7:94:29: aa:b4:c5:ad:66:f7:b1:ed:b8:14:00:31:9c:90:c2: 99:2d:5d:4b:cb:3d:53:61:c2:b6:4f:03:a5:7f:2f: 8d:93:aa:e3:fb:15:2a:52:8f:ba:9b:1e:be:c7:26: ac:5a:4d:18:95:64:91:ca:06:4f:b5:e7:c4:07:d0: 7d:09:c5:db:31:d1:25:6b:40:19:9c:dc:f1:e7:af: 7a:32:ff:a0:de:e2:4d:b3:25:27:54:cf:5f:9c:e7: 76:52:5f:df:74:6c:f4:44:4a:6d:3f:e9:93:e8:6b: 7c:b0:88:f4:6c:e0:7d:e8:cc:4a:be:78:46:f9:62: a2:4c:f3:20:e5:23:77:14:f2:60:78:24:2c:20:b4: 01:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:93:AD:B9:43:AE:3F:2D:A7:5B:8D:D3:06:A2:E4:95:90:69:D8:AE X509v3 Authority Key Identifier: keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:31:54:29:05:14:99:e2:10:b4:88:b4:0a:ec:31:4c:e7:b6: 27:d5:19:a0:a8:76:5c:49:90:48:31:44:6c:33:c2:90:0a:ba: 0d:bf:f8:7a:99:16:a4:09:85:35:c2:50:18:5c:6c:26:1b:9c: 63:ee:79:3c:0f:fa:80:bc:0a:15:b7:08:e4:16:d9:c6:3c:de: c3:2f:23:c5:f5:6e:90:d1:15:4a:de:78:ad:f1:46:44:b6:fc: 7e:6a:be:dd:cc:0f:87:70:8e:1c:c6:58:50:cc:f7:ef:30:59: ab:57:14:c8:bd:e4:56:b5:b6:1e:b2:cd:91:ba:d9:0f:cd:8e: 80:f8:e5:7d:1b:59:1d:78:7f:39:a7:43:99:86:1e:5f:4a:97: 32:c7:f6:10:ef:42:95:65:be:09:15:c2:70:3f:79:3b:fd:1d: e0:57:36:ff:27:91:f7:53:21:cd:5d:90:01:ac:1a:fc:e2:38: f8:4b:4e:be:73:84:b2:cb:a6:f1:90:27:ba:b3:a8:0f:2d:c1: 7f:42:99:01:39:d9:51:c6:70:28:b5:bd:f0:9c:0f:78:d4:e1: ed:f5:4a:3d:92:94:1f:77:47:f1:6a:3a:8f:aa:bf:42:94:47: 1a:be:60:00:4d:46:98:34:cd:e6:9a:06:bb:9f:ec:95:6e:47: c7:b4:e3:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6JMfxoXYW0At6xMc3QZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNzhhOTRiOTk2NGVhNWU5ZjhiMDU5Mzg3MDJiYTU4MzE2 YjUwMGYwHhcNMjUxMjE5MDAwMDM4WhcNMjUxMjIwMDAwMDM4WjAzMTEwLwYDVQQD EyhkZTkzYWRiOTQzYWUzZjJkYTc1YjhkZDMwNmEyZTQ5NTkwNjlkOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonrLmTQqQIY7La1os7oRsJeyuogA HC0IHyGTavxADDi9tr2MF3IuW7JtCnRDRVoP/a5hKkXvOzhe7Q6AXRejmREkjniQ 64udBc01UE18Y8FJg/WklAH3aLixcuHv+X2uzlQ29FS9MfmsgW5MCbu/BOSBQtin lCmqtMWtZvex7bgUADGckMKZLV1Lyz1TYcK2TwOlfy+Nk6rj+xUqUo+6mx6+xyas Wk0YlWSRygZPtefEB9B9CcXbMdEla0AZnNzx5696Mv+g3uJNsyUnVM9fnOd2Ul/f dGz0REptP+mT6Gt8sIj0bOB96MxKvnhG+WKiTPMg5SN3FPJgeCQsILQB5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6TrblDrj8tp1uN0wai5JWQadiuMB8GA1UdIwQY MBaAFON4qUuZZOpen4sFk4cCulgxa1APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUt ZjQyMTc2Y2QwNDQ1LzEvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUtZjQyMTc2Y2QwNDQ1 LzEvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzFUKQUU meIQtIi0CuwxTOe2J9UZoKh2XEmQSDFEbDPCkAq6Db/4epkWpAmFNcJQGFxsJhuc Y+55PA/6gLwKFbcI5BbZxjzewy8jxfVukNEVSt54rfFGRLb8fmq+3cwPh3COHMZY UMz37zBZq1cUyL3kVrW2HrLNkbrZD82OgPjlfRtZHXh/OadDmYYeX0qXMsf2EO9C lWW+CRXCcD95O/0d4Fc2/yeR91MhzV2QAawa/OI4+EtOvnOEssum8ZAnurOoDy3B f0KZATnZUcZwKLW98JwPeNTh7fVKPZKUH3dH8Wo6j6q/QpRHGr5gAE1GmDTN5poG u5/slW5Hx7TjFQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:26:34 2025 by rpki-client