This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json) Hash identifier: geFGj4b9ouOavgsmyBVm16hl+gmSTOmuk1sIKbOWKXk= Subject key identifier: 72:C7:1C:94:74:8A:F6:FE:EA:8C:6C:F8:87:1E:1C:5F:EF:A8:F7:60 Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89 Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389 Certificate serial: 019AF12D98477D7CFFECDA576818CE03D50C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: NcrhnMaCv7Xx3IXhPG9gYywfE1G4fRaaJt0qR3RZL6U=) 2: gdCbju7iq0jqbnL3F15jB2y6w9k.roa (hash: 5imVu9OgEC0LpB68Uf/xLlkHKg4D35cIEP4G8Ci0Msk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:98:47:7d:7c:ff:ec:da:57:68:18:ce:03:d5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389 Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=72c71c94748af6feea8c6cf8871e1c5fefa8f760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:39:a8:1d:25:54:5b:3b:43:d5:cf:3d:2d: ac:3b:87:2e:1a:89:9d:ed:82:4b:ba:b6:af:75:40: 26:ce:b6:ac:08:8c:a6:79:72:c0:88:35:e0:a1:ea: 88:11:ce:4a:86:09:17:df:eb:2a:48:bc:85:91:a0: 68:4d:c8:40:5f:12:6e:32:b5:e3:43:be:bb:13:67: 78:81:89:e9:dc:21:25:c1:c2:e9:f5:bd:d1:c4:65: 3d:b6:30:fa:86:ac:9c:af:1d:9a:fc:cd:ed:4a:c3: d5:6f:d9:09:44:d9:b3:fa:20:da:4f:2f:90:35:9c: 80:6f:f3:0e:98:d5:cf:2b:5e:c8:78:f5:91:60:9b: 65:77:52:a5:01:ce:9a:73:3c:b6:2e:b7:fc:27:ee: 30:ed:0a:e4:18:47:7f:db:35:30:9d:3b:35:5e:bc: bd:c7:3b:69:3b:c1:2a:84:4b:c1:be:5a:2d:9b:b0: 2a:49:f9:61:cc:9c:37:5e:92:8c:ad:8e:b1:cb:78: ef:67:ac:08:d9:c3:a5:ca:5d:ec:fd:6f:c1:59:31: fd:7d:c1:e5:ea:a3:9f:54:15:b0:59:f9:9c:ad:46: b7:7a:ef:ee:ef:02:14:90:80:ff:8d:35:90:62:e3: ed:32:7f:e7:9d:df:f8:4d:52:a6:2a:df:7f:46:bd: a3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C7:1C:94:74:8A:F6:FE:EA:8C:6C:F8:87:1E:1C:5F:EF:A8:F7:60 X509v3 Authority Key Identifier: keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:90:ea:38:a0:97:9b:01:f7:95:8c:3d:a8:cd:1c:2b:bc:0f: 3b:14:af:e1:bf:5c:96:e1:6b:b9:1a:61:7a:c7:c2:ff:28:ca: f5:92:86:d4:fb:07:34:b8:95:82:0c:b3:52:ac:12:ee:83:15: 89:e0:6f:9f:6b:26:58:7d:cf:a9:5b:77:6d:04:7d:76:ee:a7: ca:ec:2d:fe:ba:b2:ba:34:ee:d4:1c:51:5c:ae:5e:dc:2c:b3: 0f:3e:a6:6f:1b:05:3d:6a:ee:4d:55:ce:35:ee:31:ed:5b:c8: 53:f7:1d:cb:8c:a6:71:96:1e:c3:db:02:07:85:2d:c9:c3:ae: ef:7e:21:26:98:fc:b1:2c:5b:90:52:b2:f3:10:50:88:3f:59: f9:89:91:78:29:00:c2:5e:6b:ae:81:8b:9e:66:8d:e9:74:fd: 9a:5c:f6:d9:47:4b:3e:25:9b:f7:a8:49:6d:50:1e:89:4a:ba: 10:b2:6c:84:b5:73:49:7a:8c:52:64:b4:22:ed:a4:ab:c6:2b: 24:69:88:ed:a4:c5:c4:1c:26:cf:b3:4d:68:5e:b1:1c:ae:ca: 33:98:72:da:f7:18:8a:e2:8f:da:12:3a:b4:04:7d:db:41:74: f7:a1:24:39:64:2c:43:99:51:bf:5c:9d:3d:67:8e:89:8b:c5: 48:09:e2:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZhHfXz/7NpXaBjOA9UMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNzEwNjA3YmE3YTgxNWU5MTFjNDg5MmY5NjhiMThhZTY2 MDQzODkwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD Eyg3MmM3MWM5NDc0OGFmNmZlZWE4YzZjZjg4NzFlMWM1ZmVmYThmNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9k5qB0lVFs7Q9XPPS2sO4cuGomd 7YJLuravdUAmzrasCIymeXLAiDXgoeqIEc5KhgkX3+sqSLyFkaBoTchAXxJuMrXj Q767E2d4gYnp3CElwcLp9b3RxGU9tjD6hqycrx2a/M3tSsPVb9kJRNmz+iDaTy+Q NZyAb/MOmNXPK17IePWRYJtld1KlAc6aczy2Lrf8J+4w7QrkGEd/2zUwnTs1Xry9 xztpO8EqhEvBvlotm7AqSflhzJw3XpKMrY6xy3jvZ6wI2cOlyl3s/W/BWTH9fcHl 6qOfVBWwWfmcrUa3eu/u7wIUkID/jTWQYuPtMn/nnd/4TVKmKt9/Rr2jzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLHHJR0ivb+6oxs+IceHF/vqPdgMB8GA1UdIwQY MBaAFONxBge6eoFekRxIkvlosYrmYEOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUt MTI2ZDVlNjBmZGQxLzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUtMTI2ZDVlNjBmZGQx LzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZDqOKCX mwH3lYw9qM0cK7wPOxSv4b9cluFruRphesfC/yjK9ZKG1PsHNLiVggyzUqwS7oMV ieBvn2smWH3PqVt3bQR9du6nyuwt/rqyujTu1BxRXK5e3CyzDz6mbxsFPWruTVXO Ne4x7VvIU/cdy4ymcZYew9sCB4UtycOu734hJpj8sSxbkFKy8xBQiD9Z+YmReCkA wl5rroGLnmaN6XT9mlz22UdLPiWb96hJbVAeiUq6ELJshLVzSXqMUmS0Iu2kq8Yr JGmI7aTFxBwmz7NNaF6xHK7KM5hy2vcYiuKP2hI6tAR920F096EkOWQsQ5lRv1yd PWeOiYvFSAni/w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:15 2025 by rpki-client