This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json) Hash identifier: 8UG5NSxUmFt9ahM1QyKYyw7gG25kjAm4pR179SFZajE= Subject key identifier: E6:E1:06:0C:D1:29:16:0D:9C:AC:9C:A2:7E:9C:69:2C:10:90:05:FF Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89 Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389 Certificate serial: 019B4249EAD15F38846394D28CF2DCC94791 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft Manifest number: 171D Signing time: Sun 21 Dec 2025 19:01:39 +0000 Manifest this update: Sun 21 Dec 2025 19:01:39 +0000 Manifest next update: Mon 22 Dec 2025 19:01:39 +0000 Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: tgbFafBS1jFW/qV8g9DHNTBX94oiw7R4P6u0pjsBhNA=) 2: gdCbju7iq0jqbnL3F15jB2y6w9k.roa (hash: 5imVu9OgEC0LpB68Uf/xLlkHKg4D35cIEP4G8Ci0Msk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:ea:d1:5f:38:84:63:94:d2:8c:f2:dc:c9:47:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389 Validity Not Before: Dec 21 19:01:39 2025 GMT Not After : Dec 22 19:01:39 2025 GMT Subject: CN=e6e1060cd129160d9cac9ca27e9c692c109005ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5d:d3:5e:d9:25:52:70:b0:fc:03:ef:89:57: 5e:d1:72:43:91:f2:98:a8:cf:51:aa:fc:1b:42:38: 0b:4d:38:11:e9:0f:06:9f:9a:18:31:57:ec:e4:b8: e3:6e:7f:7f:3b:55:d1:a9:dd:60:b3:a9:ea:18:e0: cf:10:7c:ee:ef:89:6d:5f:63:8b:dc:bf:a5:57:cb: 46:39:7c:e8:cd:9f:77:48:f0:cb:32:2c:3d:00:ff: 55:ca:dd:7d:84:76:c0:86:b7:2b:0e:cf:ba:88:e5: c7:50:11:5d:36:d3:9c:eb:94:55:dd:49:27:e4:9c: ee:dd:a1:c3:cb:b9:28:60:3a:23:bd:ad:47:48:d3: bc:62:bf:dc:be:2c:91:a3:fe:33:85:50:78:09:df: f3:6f:9e:2b:16:b9:d8:43:1a:b3:ae:4f:61:3a:7f: bc:63:68:f0:31:59:d5:28:a4:11:39:6a:ad:b2:af: 71:07:d0:e0:c8:90:f6:36:e4:f7:2d:99:8f:e2:cf: fa:b6:7e:aa:89:15:fc:35:b5:41:f9:2a:33:fa:42: 32:55:c3:32:96:47:49:eb:95:b3:ab:70:bd:a3:82: 9b:89:48:fc:ba:9c:57:c1:e9:8d:7a:51:b2:50:b4: f0:1a:a0:3c:50:27:fc:7a:30:32:d8:3e:c9:43:53: 2c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E1:06:0C:D1:29:16:0D:9C:AC:9C:A2:7E:9C:69:2C:10:90:05:FF X509v3 Authority Key Identifier: keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:dd:c6:40:f9:ad:6c:43:b1:82:d3:87:54:05:5e:90:64:c8: c9:84:08:5b:6b:89:97:7b:6f:46:5f:48:32:1d:1c:25:49:f8: 8a:8e:7b:fa:06:1e:bb:7f:85:87:ae:71:58:71:d1:7b:33:e9: 38:45:dd:9e:ea:0a:6f:3b:b4:16:a6:3c:0e:75:fa:d3:bb:b2: 36:0f:03:8b:b6:5c:06:19:10:4c:23:7b:85:73:55:87:5f:fc: 5b:af:d7:eb:85:a8:94:d6:49:be:22:b9:39:10:af:b1:61:21: 09:f4:e1:d9:60:32:f2:70:51:73:d8:04:a7:ba:5e:d6:10:79: ac:1d:90:3b:98:6d:16:66:c5:d3:37:0c:76:69:0c:26:b1:14: 37:d1:5c:60:6c:a2:72:c5:50:48:a1:00:60:22:fd:e3:1c:c8: bc:ec:79:78:d4:70:45:e2:c3:05:94:8c:05:39:ef:c2:77:e1: 94:a3:2b:a8:97:ec:fd:c9:f4:75:d1:65:48:5b:b4:85:5f:73: 14:3b:83:df:d5:82:02:f1:2d:c6:69:79:42:53:8d:d7:78:8a: 6f:b5:4a:38:83:1a:77:13:2e:f9:0a:4d:47:e0:4f:06:1b:e2: 32:c9:c5:c0:1d:85:88:96:b7:2b:87:47:f7:84:e8:e9:b8:5a: 2f:c2:e8:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSerRXziEY5TSjPLcyUeRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNzEwNjA3YmE3YTgxNWU5MTFjNDg5MmY5NjhiMThhZTY2 MDQzODkwHhcNMjUxMjIxMTkwMTM5WhcNMjUxMjIyMTkwMTM5WjAzMTEwLwYDVQQD EyhlNmUxMDYwY2QxMjkxNjBkOWNhYzljYTI3ZTljNjkyYzEwOTAwNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl13TXtklUnCw/APviVde0XJDkfKY qM9RqvwbQjgLTTgR6Q8Gn5oYMVfs5Ljjbn9/O1XRqd1gs6nqGODPEHzu74ltX2OL 3L+lV8tGOXzozZ93SPDLMiw9AP9Vyt19hHbAhrcrDs+6iOXHUBFdNtOc65RV3Ukn 5Jzu3aHDy7koYDojva1HSNO8Yr/cviyRo/4zhVB4Cd/zb54rFrnYQxqzrk9hOn+8 Y2jwMVnVKKQROWqtsq9xB9DgyJD2NuT3LZmP4s/6tn6qiRX8NbVB+Soz+kIyVcMy lkdJ65Wzq3C9o4KbiUj8upxXwemNelGyULTwGqA8UCf8ejAy2D7JQ1Ms6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObhBgzRKRYNnKycon6caSwQkAX/MB8GA1UdIwQY MBaAFONxBge6eoFekRxIkvlosYrmYEOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUt MTI2ZDVlNjBmZGQxLzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUtMTI2ZDVlNjBmZGQx LzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnt3GQPmt bEOxgtOHVAVekGTIyYQIW2uJl3tvRl9IMh0cJUn4io57+gYeu3+Fh65xWHHRezPp OEXdnuoKbzu0FqY8DnX607uyNg8Di7ZcBhkQTCN7hXNVh1/8W6/X64WolNZJviK5 ORCvsWEhCfTh2WAy8nBRc9gEp7pe1hB5rB2QO5htFmbF0zcMdmkMJrEUN9FcYGyi csVQSKEAYCL94xzIvOx5eNRwReLDBZSMBTnvwnfhlKMrqJfs/cn0ddFlSFu0hV9z FDuD39WCAvEtxml5QlON13iKb7VKOIMadxMu+QpNR+BPBhviMsnFwB2FiJa3K4dH 94To6bhaL8Lo/g== -----END CERTIFICATE-----Generated at Mon Dec 22 04:22:26 2025 by rpki-client