This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft File: _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json) Hash identifier: PgJ5XqYd7yTBSN+JG6Mn+6kBQYWG8KkW2T8BTkeN0kw= Subject key identifier: 1A:C7:0B:AF:E8:24:8B:F0:4C:47:47:44:36:D2:FA:BC:4F:2A:3D:0F Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d Certificate serial: 019B3A21781195FAD5C95795630B8DEC983C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft Manifest number: 0841 Signing time: Sat 20 Dec 2025 05:00:30 +0000 Manifest this update: Sat 20 Dec 2025 05:00:30 +0000 Manifest next update: Sun 21 Dec 2025 05:00:30 +0000 Files and hashes: 1: K6Fu_XiBHvDsYhtG_--3fuPZg48.roa (hash: RNhrx5f19YH8DzgdDWPTLam4LAtgoJZsbS8JdFM0WN8=) 2: Ye2lhVqLlVViESIa1X_75ZD_K3Y.roa (hash: GkZd+LIfPke0Hk41OCtwwY1KwALgbjtXK8ppjf/on0I=) 3: ZTj2ZwJbmSTqqGkaHNeSOzaRucE.roa (hash: 5l3ZvQv6nxBKcaHiVSLVWyVMDLkrqNymK7dZBTsMLbU=) 4: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: SeEz0M5tHejcE2qO1UiHXvUvkQ069uMME4QiE9qgZ4U=) 5: _Kr9E5MKxyuntA5czBSmI-XiWLk.roa (hash: yKCPcajH9aVqjBH/Z/+caEOZWjeFz70pUynCf4xQzl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:78:11:95:fa:d5:c9:57:95:63:0b:8d:ec:98:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d Validity Not Before: Dec 20 05:00:30 2025 GMT Not After : Dec 21 05:00:30 2025 GMT Subject: CN=1ac70bafe8248bf04c47474436d2fabc4f2a3d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:88:6b:29:63:bc:0c:61:91:b7:45:8b:ba:3a: a6:fe:08:47:8b:79:d5:e7:55:69:51:cf:bc:f3:ec: 4a:2f:14:d2:b8:8e:5d:c3:2f:fe:a3:a1:1d:c8:58: 71:fa:e4:4d:04:12:09:7c:00:3d:36:ad:2a:d1:cd: 59:0b:c3:a7:94:cb:d1:db:cc:9b:fc:36:b7:32:10: 04:e2:dd:d0:3a:8e:64:75:61:c6:9d:6b:01:85:11: 07:9b:b2:be:0a:91:d6:e6:f5:a5:ed:59:d7:9b:c8: ad:e0:fa:6f:9e:73:38:8b:09:9f:4f:d7:8a:c2:31: 83:75:c0:1a:d8:19:2f:67:f6:80:b0:90:aa:99:d8: 18:27:97:c4:9d:e8:ba:fb:27:f1:c0:70:f2:05:c9: 39:2b:a9:e4:6d:f3:e9:52:c4:e6:7c:b4:c2:18:c2: c4:e7:2e:be:f0:81:09:1a:81:6a:ec:09:82:e9:08: ee:3d:d0:33:e8:cc:71:15:e2:61:e5:7f:2f:39:0f: 54:de:05:ae:45:7d:bd:4c:50:7a:33:b2:0a:74:72: 09:6c:f2:6a:f6:f7:c9:b9:73:9a:a0:1e:16:13:ac: c3:fa:a9:79:c1:0a:4d:e7:f4:cf:84:b9:45:f3:14: 17:5d:96:9f:f2:7c:42:83:f0:64:56:39:a9:73:fc: c4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C7:0B:AF:E8:24:8B:F0:4C:47:47:44:36:D2:FA:BC:4F:2A:3D:0F X509v3 Authority Key Identifier: keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:9d:50:5a:43:f4:09:bf:96:c0:5b:b2:8e:22:10:14:1e:ba: 8e:2d:1b:6e:d4:ba:9c:85:87:7d:47:36:24:9a:e9:95:6d:a3: a6:10:51:5f:33:72:98:94:1d:51:6b:8e:4c:4b:53:5a:cd:a3: 80:c1:58:6a:4a:c3:2d:a5:ab:fe:f0:16:d8:b6:cc:b5:51:26: 0a:27:00:86:34:a7:bc:99:4c:62:be:b6:79:d8:49:03:14:32: c4:65:fd:c5:68:7c:1e:e8:0b:0b:d1:22:9b:49:e2:4a:a4:f0: a9:70:18:2f:3b:4e:e7:1b:a7:3d:8d:44:54:1e:c2:88:cc:4c: dd:45:36:42:e8:6a:b2:7b:91:44:5a:d4:bb:e6:dc:d2:63:02: e9:27:c8:2e:46:e6:84:11:5f:ce:e5:96:f3:72:b7:7a:6f:a0: b4:ed:71:58:ef:ee:b1:8e:3d:30:91:c8:66:20:82:34:77:2b: 31:58:3d:df:f5:93:9b:02:cc:0e:5e:b9:72:a0:77:ad:be:c5: a6:12:58:fe:f5:e1:94:52:c3:3b:d3:83:ab:71:cf:c5:14:59: 5a:b7:0b:fc:e1:67:61:c3:0c:d5:73:f4:cb:de:ec:26:63:df: 43:c6:3f:59:4d:ac:a8:27:37:63:f2:0a:c3:14:30:2c:e9:87: d6:23:7c:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IXgRlfrVyVeVYwuN7Jg8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOGRkNWZlNDE3OWU4YmRhMjg1MzI1NjE5MTlmNmQwNzg3 N2M2M2QwHhcNMjUxMjIwMDUwMDMwWhcNMjUxMjIxMDUwMDMwWjAzMTEwLwYDVQQD EygxYWM3MGJhZmU4MjQ4YmYwNGM0NzQ3NDQzNmQyZmFiYzRmMmEzZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YhrKWO8DGGRt0WLujqm/ghHi3nV 51VpUc+88+xKLxTSuI5dwy/+o6EdyFhx+uRNBBIJfAA9Nq0q0c1ZC8OnlMvR28yb /Da3MhAE4t3QOo5kdWHGnWsBhREHm7K+CpHW5vWl7VnXm8it4PpvnnM4iwmfT9eK wjGDdcAa2BkvZ/aAsJCqmdgYJ5fEnei6+yfxwHDyBck5K6nkbfPpUsTmfLTCGMLE 5y6+8IEJGoFq7AmC6QjuPdAz6MxxFeJh5X8vOQ9U3gWuRX29TFB6M7IKdHIJbPJq 9vfJuXOaoB4WE6zD+ql5wQpN5/TPhLlF8xQXXZaf8nxCg/BkVjmpc/zE6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrHC6/oJIvwTEdHRDbS+rxPKj0PMB8GA1UdIwQY MBaAFP+N1f5Beei9ooUyVhkZ9tB4d8Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQt MDZhNDA0NDM1ZTUwLzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQtMDZhNDA0NDM1ZTUw LzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJ1QWkP0 Cb+WwFuyjiIQFB66ji0bbtS6nIWHfUc2JJrplW2jphBRXzNymJQdUWuOTEtTWs2j gMFYakrDLaWr/vAW2LbMtVEmCicAhjSnvJlMYr62edhJAxQyxGX9xWh8HugLC9Ei m0niSqTwqXAYLztO5xunPY1EVB7CiMxM3UU2QuhqsnuRRFrUu+bc0mMC6SfILkbm hBFfzuWW83K3em+gtO1xWO/usY49MJHIZiCCNHcrMVg93/WTmwLMDl65cqB3rb7F phJY/vXhlFLDO9ODq3HPxRRZWrcL/OFnYcMM1XP0y97sJmPfQ8Y/WU2sqCc3Y/IK wxQwLOmH1iN8vA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:40:44 2025 by rpki-client