This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json) Hash identifier: WyqAImLojtfWcGlYXRvEnrlHYHvWs53kQiavczyYCoM= Subject key identifier: BC:13:33:BD:FF:AF:20:48:39:15:59:1A:44:FF:F3:FA:95:50:8A:C7 Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f Certificate serial: 019AF23FE24D72129963FEA30786309DA4E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: WRiSWe7/1kxrRWFb8o94rZFp6zm0DlUOCD/+MEQgXAA=) 2: vvNRTPRqU8Pnch_p0B0gqgkil_Q.roa (hash: nLSnGecWyvHzo3G0jRopUHVVK/4X1Sw9XUMyVphgWSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e2:4d:72:12:99:63:fe:a3:07:86:30:9d:a4:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=bc1333bdffaf20483915591a44fff3fa95508ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:44:89:10:f7:6f:95:25:0d:c9:b9:61:8e: 39:3e:b7:c4:28:bb:29:54:35:7b:9a:6f:58:4f:01: 7f:74:4c:cf:c9:92:56:2e:c0:bf:27:6a:bc:95:72: f9:da:7b:16:85:eb:64:3a:70:32:29:89:a8:be:17: 75:09:8a:d8:ad:90:19:da:7a:5d:56:83:6f:eb:55: 7d:f0:a2:8b:5b:dd:7b:dd:94:bb:31:b9:af:63:70: 45:ab:5d:c7:e9:db:17:40:00:a4:4d:39:be:5a:05: 6c:da:9d:89:ac:da:43:76:45:e3:7d:60:81:98:ee: e5:80:04:1e:77:f1:44:42:74:04:6f:07:4a:84:d2: 77:ca:9c:6f:3a:61:b3:e4:86:7b:9e:23:e6:a2:7d: 7d:4b:a4:cd:f6:ac:35:2d:0f:d9:17:4a:93:7a:34: f4:8d:81:22:f8:e5:2b:84:ba:77:7b:b0:95:d3:23: 6c:64:b1:8a:0e:95:bf:b4:00:d4:97:72:64:58:0c: af:08:c9:10:48:77:ce:37:86:c6:71:24:eb:e3:4d: 05:b6:31:18:9c:72:2d:a8:5f:12:21:31:11:83:e2: 32:c9:0b:fb:e0:e3:ff:2a:b9:d3:05:af:dd:7f:bf: b8:d3:55:26:52:d5:58:e5:5e:c9:02:7d:20:7d:ef: e4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:13:33:BD:FF:AF:20:48:39:15:59:1A:44:FF:F3:FA:95:50:8A:C7 X509v3 Authority Key Identifier: keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7a:3e:dd:22:6a:12:41:4d:bb:2f:f2:32:38:a4:f1:3c:6e: ac:c1:b2:08:7c:ad:9e:ea:f3:eb:01:62:15:5e:54:48:00:fe: ae:e4:f3:75:a1:25:3e:8c:6c:52:f2:a1:9c:bb:fb:3a:11:4d: 4f:05:62:71:be:28:0f:c1:2a:f4:a5:38:3b:28:9a:4a:0d:6c: 36:e4:e3:28:87:38:11:6c:76:21:be:02:0c:97:9d:41:b7:71: 99:27:92:fe:b1:7c:5c:59:b2:22:6d:c2:7c:a4:9d:f1:ba:9f: 1e:23:c6:c6:bc:cb:22:8e:1a:51:df:42:0b:8a:81:e5:a5:46: f3:9e:5b:2b:16:70:00:b6:23:13:2b:79:67:53:09:26:6e:32: 26:b5:58:ac:71:71:1e:99:52:98:e9:0f:90:22:71:03:c1:da: 85:7e:85:cc:57:c3:32:23:a2:70:8b:47:7a:fa:88:8b:75:d2: 8f:59:04:27:0d:f3:0d:e6:79:31:be:f1:d5:be:1c:2a:19:57: 5e:13:45:4c:a4:b3:2a:a1:43:26:2b:20:c0:e5:18:cf:5f:e7: 90:0c:20:da:62:4e:80:cf:69:e2:bd:6b:30:f3:50:e3:17:af: c0:13:35:e8:d6:a4:c3:04:1a:2f:65:9f:c2:3f:35:08:c3:87: 70:ff:13:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+JNchKZY/6jB4YwnaTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNzhhOTRiOTk2NGVhNWU5ZjhiMDU5Mzg3MDJiYTU4MzE2 YjUwMGYwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD EyhiYzEzMzNiZGZmYWYyMDQ4MzkxNTU5MWE0NGZmZjNmYTk1NTA4YWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaJEiRD3b5UlDcm5YY45PrfEKLsp VDV7mm9YTwF/dEzPyZJWLsC/J2q8lXL52nsWhetkOnAyKYmovhd1CYrYrZAZ2npd VoNv61V98KKLW9173ZS7MbmvY3BFq13H6dsXQACkTTm+WgVs2p2JrNpDdkXjfWCB mO7lgAQed/FEQnQEbwdKhNJ3ypxvOmGz5IZ7niPmon19S6TN9qw1LQ/ZF0qTejT0 jYEi+OUrhLp3e7CV0yNsZLGKDpW/tADUl3JkWAyvCMkQSHfON4bGcSTr400FtjEY nHItqF8SITERg+IyyQv74OP/KrnTBa/df7+401UmUtVY5V7JAn0gfe/kEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwTM73/ryBIORVZGkT/8/qVUIrHMB8GA1UdIwQY MBaAFON4qUuZZOpen4sFk4cCulgxa1APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUt ZjQyMTc2Y2QwNDQ1LzEvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUtZjQyMTc2Y2QwNDQ1 LzEvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHo+3SJq EkFNuy/yMjik8TxurMGyCHytnurz6wFiFV5USAD+ruTzdaElPoxsUvKhnLv7OhFN TwVicb4oD8Eq9KU4OyiaSg1sNuTjKIc4EWx2Ib4CDJedQbdxmSeS/rF8XFmyIm3C fKSd8bqfHiPGxrzLIo4aUd9CC4qB5aVG855bKxZwALYjEyt5Z1MJJm4yJrVYrHFx HplSmOkPkCJxA8HahX6FzFfDMiOicItHevqIi3XSj1kEJw3zDeZ5Mb7x1b4cKhlX XhNFTKSzKqFDJisgwOUYz1/nkAwg2mJOgM9p4r1rMPNQ4xevwBM16NakwwQaL2Wf wj81CMOHcP8TBA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:35 2025 by rpki-client