This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json) Hash identifier: 6FsrLruiwbL4fOooN2zkWsOVIkt35xUtm7M7eW6EFbE= Subject key identifier: 6D:AC:58:4E:35:F6:CA:4D:43:A5:05:BF:E5:F4:88:6B:5C:CE:E6:C7 Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2 Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2 Certificate serial: 019AF16493D498C9771E0DEA594E6F6507B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft Manifest number: 0BBA Signing time: Sat 06 Dec 2025 02:01:31 +0000 Manifest this update: Sat 06 Dec 2025 02:01:31 +0000 Manifest next update: Sun 07 Dec 2025 02:01:31 +0000 Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: jAF+xxnxayoXtXzCslJ5xoD4C5hrZggCFs/fkj+WLiU=) 2: oNzr7e9N0_nB7NG8uVVH1YFW8SA.roa (hash: E5UVvjB7YIozDhZ03PLtgPckm/pTCCT/ml1aJ8kENsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:93:d4:98:c9:77:1e:0d:ea:59:4e:6f:65:07:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2 Validity Not Before: Dec 6 02:01:31 2025 GMT Not After : Dec 7 02:01:31 2025 GMT Subject: CN=6dac584e35f6ca4d43a505bfe5f4886b5ccee6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:9a:0a:43:ce:ad:c0:b8:32:80:1b:da:e3: ad:be:7a:80:ce:26:b4:90:ca:8b:77:7a:be:8d:04: db:1a:bc:18:d9:51:2f:53:84:41:f9:ec:45:d2:f6: ec:4f:e2:7a:7a:68:98:2a:b7:c2:4a:9c:d1:88:08: 2f:4b:54:0a:fe:ca:1e:c9:57:80:fe:d4:f4:ab:bc: fb:b9:6c:ee:65:71:44:d4:ff:26:fc:f8:3a:56:ab: d1:0a:85:92:a0:cc:b9:4a:6c:f6:b7:3d:50:c4:d0: f3:c6:6f:4a:90:d7:b7:35:bd:16:e1:c6:f4:9d:27: bf:77:63:e6:e2:f1:15:5f:c7:0e:19:38:40:9e:02: ca:13:19:8a:f6:fe:c7:65:ad:f9:f4:3b:df:24:e0: 6c:0b:9b:f0:34:6c:bc:a8:e3:a3:32:c5:f7:a5:ea: 2d:57:1e:93:bb:0d:dd:6f:cd:92:bc:44:33:36:6a: 3a:d7:59:2c:fd:c5:d6:72:a0:1a:6b:4f:b5:e5:04: ec:07:e3:bf:2e:1e:80:30:fb:32:5b:b5:27:5b:1b: 4b:71:63:89:0a:c2:06:1d:ec:d7:51:31:04:d2:e1: dc:a9:18:b8:89:0f:6a:18:c9:1c:2d:34:b4:13:9f: 64:4e:9b:9b:9e:49:41:f9:ec:3d:48:94:03:b4:a6: 01:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AC:58:4E:35:F6:CA:4D:43:A5:05:BF:E5:F4:88:6B:5C:CE:E6:C7 X509v3 Authority Key Identifier: keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:03:3c:a8:3d:a5:14:25:00:d9:be:7c:50:3a:46:1f:31:fb: a4:2b:b4:f3:f1:d6:7f:f4:ef:df:5c:df:de:35:cc:8d:85:64: 94:3c:8e:f9:22:8f:13:e4:81:c3:ae:1a:54:36:16:fe:d7:17: 2b:ad:fb:ad:6b:ea:e7:62:76:66:0c:e2:7b:4e:1d:d7:3e:db: 95:d2:34:68:41:70:d9:ff:a6:af:90:62:3e:28:4c:b1:56:e7: 3d:b8:df:10:d1:29:50:74:35:5b:bd:46:a4:17:ba:ee:92:63: fa:45:db:ba:d6:ad:f2:e6:8d:95:fa:dc:94:c8:58:e4:31:ef: 41:7a:76:18:87:97:51:15:f8:d9:6e:7c:e5:6c:71:72:36:fc: da:f3:0b:2d:8d:d6:b8:91:af:dd:97:f2:4b:9b:c2:c7:d1:5e: 2a:54:2d:45:ec:52:14:aa:8f:5b:2c:f8:38:bc:9e:94:23:87: 4b:89:df:45:c0:97:84:de:c9:d5:6d:88:65:6e:b8:47:76:d8: 31:ab:71:6a:29:0f:4a:f2:fb:b5:54:9a:d4:74:79:3d:c5:41: d4:9a:5b:68:b5:21:fb:71:79:9b:16:85:8f:3c:50:d0:06:04: 95:05:93:07:05:90:56:71:99:c4:ef:9e:98:fb:21:f3:a3:82: eb:be:bb:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJPUmMl3Hg3qWU5vZQe3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNzFjZTIwODY4MDVmOTEyZjg1MTJiNzljNWU2NmE5Yzlm NGQ0ZDIwHhcNMjUxMjA2MDIwMTMxWhcNMjUxMjA3MDIwMTMxWjAzMTEwLwYDVQQD Eyg2ZGFjNTg0ZTM1ZjZjYTRkNDNhNTA1YmZlNWY0ODg2YjVjY2VlNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLOaCkPOrcC4MoAb2uOtvnqAzia0 kMqLd3q+jQTbGrwY2VEvU4RB+exF0vbsT+J6emiYKrfCSpzRiAgvS1QK/soeyVeA /tT0q7z7uWzuZXFE1P8m/Pg6VqvRCoWSoMy5Smz2tz1QxNDzxm9KkNe3Nb0W4cb0 nSe/d2Pm4vEVX8cOGThAngLKExmK9v7HZa359DvfJOBsC5vwNGy8qOOjMsX3peot Vx6Tuw3db82SvEQzNmo611ks/cXWcqAaa0+15QTsB+O/Lh6AMPsyW7UnWxtLcWOJ CsIGHezXUTEE0uHcqRi4iQ9qGMkcLTS0E59kTpubnklB+ew9SJQDtKYBgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2sWE419spNQ6UFv+X0iGtczubHMB8GA1UdIwQY MBaAFONxziCGgF+RL4USt5xeZqnJ9NTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ZGJkYWYtNTQ5NS00Y2M1LWI3NzAt NzM1OTBhYTI5MGYxLzEvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82ZGJkYWYtNTQ5NS00Y2M1LWI3NzAtNzM1OTBhYTI5MGYx LzEvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArgM8qD2l FCUA2b58UDpGHzH7pCu08/HWf/Tv31zf3jXMjYVklDyO+SKPE+SBw64aVDYW/tcX K637rWvq52J2Zgzie04d1z7bldI0aEFw2f+mr5BiPihMsVbnPbjfENEpUHQ1W71G pBe67pJj+kXbutat8uaNlfrclMhY5DHvQXp2GIeXURX42W585Wxxcjb82vMLLY3W uJGv3ZfyS5vCx9FeKlQtRexSFKqPWyz4OLyelCOHS4nfRcCXhN7J1W2IZW64R3bY MatxaikPSvL7tVSa1HR5PcVB1JpbaLUh+3F5mxaFjzxQ0AYElQWTBwWQVnGZxO+e mPsh86OC6767Iw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:34 2025 by rpki-client