This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json) Hash identifier: Cf73i165EEk5JbYfCw0utDZdKYN1BaAaAtcaiZjf2EU= Subject key identifier: E7:68:7A:7A:AD:7D:1B:96:AC:0C:1F:49:6E:A8:A5:19:AC:35:A8:FC Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89 Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389 Certificate serial: 019B0A482D6771E6C412C5792C49103EB480 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft Manifest number: 1700 Signing time: Wed 10 Dec 2025 22:01:00 +0000 Manifest this update: Wed 10 Dec 2025 22:01:00 +0000 Manifest next update: Thu 11 Dec 2025 22:01:00 +0000 Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: zjDbp8uAuGdZTfbIcVJlQ8H06eb75Nxnav8UA18YCAI=) 2: gdCbju7iq0jqbnL3F15jB2y6w9k.roa (hash: 5imVu9OgEC0LpB68Uf/xLlkHKg4D35cIEP4G8Ci0Msk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 22:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:48:2d:67:71:e6:c4:12:c5:79:2c:49:10:3e:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389 Validity Not Before: Dec 10 22:01:00 2025 GMT Not After : Dec 11 22:01:00 2025 GMT Subject: CN=e7687a7aad7d1b96ac0c1f496ea8a519ac35a8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e0:45:bc:fc:3a:7b:31:bd:b7:d0:8a:6d:a7: 43:3b:66:19:c3:19:99:91:a9:ee:29:4b:d9:60:4c: 70:aa:84:11:4d:21:31:49:f5:b1:7d:fc:55:e3:fd: 5b:66:9c:b7:29:94:e6:e9:0b:9a:08:ab:81:e9:75: ff:6a:6c:16:fb:aa:b3:ed:f1:c3:b1:96:a9:0b:69: ef:e0:37:e2:07:8e:40:3e:15:74:0f:de:97:d6:6d: b5:49:1f:f1:40:33:b1:5e:1d:03:2b:45:80:72:8c: 41:87:ac:52:ef:7e:4a:d7:e0:44:98:e8:bc:48:01: af:67:cc:1b:bd:ea:28:2b:1c:bd:23:d3:1a:48:a9: d0:bd:52:98:32:73:52:fc:89:38:b8:2e:38:35:81: b8:8c:19:7a:38:77:c7:91:d2:54:19:c4:f9:0a:fa: 69:d3:99:82:f9:a2:47:7c:1a:a0:53:ca:48:17:93: 44:55:40:81:8d:9e:0e:20:7f:3a:73:89:e8:0b:14: 7c:b0:88:14:83:12:12:2a:fe:36:18:c1:10:81:0b: eb:08:40:ed:92:b9:52:e9:17:6f:8f:78:64:c1:a3: 0a:ac:54:c5:04:61:d8:38:25:d8:35:73:c6:f4:77: 12:11:0c:8a:d5:3a:e9:88:e9:7e:30:8d:22:2c:12: 41:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:68:7A:7A:AD:7D:1B:96:AC:0C:1F:49:6E:A8:A5:19:AC:35:A8:FC X509v3 Authority Key Identifier: keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:4c:13:53:17:df:22:9a:c6:ba:e1:23:32:44:ae:62:a6:cf: 0b:fe:e1:31:eb:2d:26:5c:af:61:2a:d9:f2:24:11:42:b2:f8: 05:72:d2:3f:b2:11:f2:85:90:31:0f:73:a0:98:49:c4:38:1e: 45:27:80:af:a5:0c:75:93:66:bb:d0:86:c1:6a:0e:1d:d1:d7: 1c:80:5e:4c:1b:c5:da:e8:a3:f7:12:16:d5:c1:14:51:78:ef: f0:8d:e1:88:a2:29:57:1a:ef:db:23:e4:da:25:1d:56:90:94: e5:59:c4:af:ef:69:da:e2:bc:3f:89:27:8f:54:cc:ba:14:53: ed:42:1d:81:cb:46:4a:23:38:7a:5f:d3:d2:c7:f6:c6:b8:05: 8d:53:4b:aa:fe:40:bc:10:fc:3f:23:02:51:fb:81:25:fa:b3: 72:5f:0a:f5:06:fe:f7:e7:89:20:46:9a:66:a6:03:ea:5b:05: ad:6d:45:73:05:2b:62:de:8f:61:53:4c:46:e3:c2:72:d9:44: c0:cc:17:ed:5e:b4:c7:43:b9:90:74:94:92:11:fc:34:bf:77: c4:6d:19:fe:4d:7f:bb:c9:fc:0c:79:d9:ba:b4:dd:0e:f3:e4: ce:ac:56:20:a4:7c:73:aa:db:7a:ec:40:00:4f:7a:d8:6b:8b: 14:e3:7d:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKSC1ncebEEsV5LEkQPrSAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNzEwNjA3YmE3YTgxNWU5MTFjNDg5MmY5NjhiMThhZTY2 MDQzODkwHhcNMjUxMjEwMjIwMTAwWhcNMjUxMjExMjIwMTAwWjAzMTEwLwYDVQQD EyhlNzY4N2E3YWFkN2QxYjk2YWMwYzFmNDk2ZWE4YTUxOWFjMzVhOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+BFvPw6ezG9t9CKbadDO2YZwxmZ kanuKUvZYExwqoQRTSExSfWxffxV4/1bZpy3KZTm6QuaCKuB6XX/amwW+6qz7fHD sZapC2nv4DfiB45APhV0D96X1m21SR/xQDOxXh0DK0WAcoxBh6xS735K1+BEmOi8 SAGvZ8wbveooKxy9I9MaSKnQvVKYMnNS/Ik4uC44NYG4jBl6OHfHkdJUGcT5Cvpp 05mC+aJHfBqgU8pIF5NEVUCBjZ4OIH86c4noCxR8sIgUgxISKv42GMEQgQvrCEDt krlS6Rdvj3hkwaMKrFTFBGHYOCXYNXPG9HcSEQyK1TrpiOl+MI0iLBJB3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdoenqtfRuWrAwfSW6opRmsNaj8MB8GA1UdIwQY MBaAFONxBge6eoFekRxIkvlosYrmYEOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUt MTI2ZDVlNjBmZGQxLzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUtMTI2ZDVlNjBmZGQx LzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkwTUxff IprGuuEjMkSuYqbPC/7hMestJlyvYSrZ8iQRQrL4BXLSP7IR8oWQMQ9zoJhJxDge RSeAr6UMdZNmu9CGwWoOHdHXHIBeTBvF2uij9xIW1cEUUXjv8I3hiKIpVxrv2yPk 2iUdVpCU5VnEr+9p2uK8P4knj1TMuhRT7UIdgctGSiM4el/T0sf2xrgFjVNLqv5A vBD8PyMCUfuBJfqzcl8K9Qb+9+eJIEaaZqYD6lsFrW1FcwUrYt6PYVNMRuPCctlE wMwX7V60x0O5kHSUkhH8NL93xG0Z/k1/u8n8DHnZurTdDvPkzqxWIKR8c6rbeuxA AE962GuLFON9bw== -----END CERTIFICATE-----Generated at Thu Dec 11 07:05:31 2025 by rpki-client