This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json) Hash identifier: PS+CM4UAd5p5+wbRQQxW1nTzSGdVdCs7gyEvZWGAjMo= Subject key identifier: 15:8C:61:7F:17:B6:0F:83:9F:CF:4D:60:B2:ED:54:6C:B6:9F:03:F8 Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b Certificate serial: 019B59776D172B98417184FE7FB5300FC5A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft Manifest number: 16C6 Signing time: Fri 26 Dec 2025 07:02:37 +0000 Manifest this update: Fri 26 Dec 2025 07:02:37 +0000 Manifest next update: Sat 27 Dec 2025 07:02:37 +0000 Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: n+V0b7qWtxjD8NV27/6dQvI3vJIGYodVlAh1fHeouzI=) 2: LktO0B8qjGLInxw3N5jX_ouyGv4.roa (hash: 0acgVKGcL/QrYT0G9rMKO5SvHbTzsdzBy14zEKR/PS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:6d:17:2b:98:41:71:84:fe:7f:b5:30:0f:c5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b Validity Not Before: Dec 26 07:02:37 2025 GMT Not After : Dec 27 07:02:37 2025 GMT Subject: CN=158c617f17b60f839fcf4d60b2ed546cb69f03f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3b:c6:97:c3:63:ee:2d:45:f4:cc:3c:67:d5: 8f:e2:f2:67:82:db:2c:48:e1:c5:49:2f:37:4f:0f: a6:d6:19:bd:45:51:af:6f:f9:df:e2:42:58:a0:db: 2d:1e:ec:3c:df:0c:6d:58:35:1e:b4:f1:53:e8:a3: 0e:7c:4e:fa:04:d0:91:0f:70:a2:b3:de:62:0b:e5: b1:f2:ed:0a:4c:02:a8:af:91:46:68:73:6f:16:db: c7:85:5d:d3:62:b5:e0:66:27:be:ad:13:d9:f7:b7: f9:6e:94:09:5f:6f:11:53:82:cc:20:0f:e4:1d:38: 3a:46:a5:36:39:a7:89:9b:6e:37:ff:bf:57:98:50: 75:b7:5c:f0:88:fd:c6:7f:d0:66:fd:cf:81:3f:81: 1d:47:db:82:28:f6:d8:68:53:52:24:97:ef:22:b2: 2b:3d:11:9c:2d:57:9f:4c:5c:c6:44:4a:e1:f9:fe: b6:b9:9e:67:5b:cf:8c:b8:a2:07:6c:c5:99:81:d0: 50:e0:bb:24:c4:d9:7f:35:ed:ee:06:7a:bc:47:28: 57:e1:54:c1:80:78:c9:f2:5c:7e:a8:0b:8b:77:5a: dc:1e:d7:9d:cc:fa:73:bd:41:45:17:09:cc:69:27: 4b:c2:2a:96:a1:7c:a9:79:d5:88:fe:6e:c9:cd:38: 23:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8C:61:7F:17:B6:0F:83:9F:CF:4D:60:B2:ED:54:6C:B6:9F:03:F8 X509v3 Authority Key Identifier: keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:e6:e7:b6:87:d6:e6:c0:06:5f:a7:a1:2b:47:0b:c9:fd:bb: 09:59:0d:e9:14:64:88:f6:dc:53:17:06:a8:0a:5f:33:43:24: a0:bb:cc:37:1b:19:02:b5:1e:53:8f:4f:ee:03:70:24:1d:19: 4d:41:f4:c6:72:3f:ed:ce:39:0e:0c:96:2c:9b:5a:4b:08:29: 3a:05:bc:d5:5d:61:3c:55:84:e0:65:3b:5b:6e:79:46:60:b8: 4d:ca:e3:90:cb:aa:64:47:a6:af:0a:f6:d7:e5:75:39:82:55: 26:18:ab:51:cd:3e:11:b0:2f:59:be:d6:eb:5b:38:cd:39:d2: e7:f0:f2:93:af:f4:b5:5c:f8:20:65:04:af:a4:59:d3:99:89: fd:8f:f1:c9:6e:8e:54:39:98:ab:06:96:1a:ee:22:2e:6b:71: 18:bd:33:51:22:b2:6d:5d:30:c2:69:ad:13:d5:ce:4e:d5:7b: 3f:8a:20:d9:6d:81:21:e7:0b:c0:78:9a:28:19:19:1c:ce:10: 84:ad:e7:87:59:81:59:72:fc:d0:6b:14:4a:c0:25:80:f6:d2: 7a:f3:54:4a:21:68:e2:11:c1:6a:84:5b:2c:80:e9:35:1c:59: 11:d2:84:ce:75:91:8c:25:35:db:3f:6a:48:8c:f1:55:f5:41: a8:91:8e:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd20XK5hBcYT+f7UwD8WmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNzg2NTg3YWQ0NzIwNWE4MTEyOGU1NzhjOTBjYWVlMWU0 ODgyOGIwHhcNMjUxMjI2MDcwMjM3WhcNMjUxMjI3MDcwMjM3WjAzMTEwLwYDVQQD EygxNThjNjE3ZjE3YjYwZjgzOWZjZjRkNjBiMmVkNTQ2Y2I2OWYwM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TvGl8Nj7i1F9Mw8Z9WP4vJngtss SOHFSS83Tw+m1hm9RVGvb/nf4kJYoNstHuw83wxtWDUetPFT6KMOfE76BNCRD3Ci s95iC+Wx8u0KTAKor5FGaHNvFtvHhV3TYrXgZie+rRPZ97f5bpQJX28RU4LMIA/k HTg6RqU2OaeJm243/79XmFB1t1zwiP3Gf9Bm/c+BP4EdR9uCKPbYaFNSJJfvIrIr PRGcLVefTFzGRErh+f62uZ5nW8+MuKIHbMWZgdBQ4LskxNl/Ne3uBnq8RyhX4VTB gHjJ8lx+qAuLd1rcHtedzPpzvUFFFwnMaSdLwiqWoXypedWI/m7JzTgjFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWMYX8Xtg+Dn89NYLLtVGy2nwP4MB8GA1UdIwQY MBaAFON4ZYetRyBagRKOV4yQyu4eSIKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMt MDdjYzQ2ZTYzYjUwLzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMtMDdjYzQ2ZTYzYjUw LzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVObntofW 5sAGX6ehK0cLyf27CVkN6RRkiPbcUxcGqApfM0MkoLvMNxsZArUeU49P7gNwJB0Z TUH0xnI/7c45DgyWLJtaSwgpOgW81V1hPFWE4GU7W255RmC4TcrjkMuqZEemrwr2 1+V1OYJVJhirUc0+EbAvWb7W61s4zTnS5/Dyk6/0tVz4IGUEr6RZ05mJ/Y/xyW6O VDmYqwaWGu4iLmtxGL0zUSKybV0wwmmtE9XOTtV7P4og2W2BIecLwHiaKBkZHM4Q hK3nh1mBWXL80GsUSsAlgPbSevNUSiFo4hHBaoRbLIDpNRxZEdKEznWRjCU12z9q SIzxVfVBqJGOiA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:45 2025 by rpki-client