This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft File: _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json) Hash identifier: AtJXBBjsjJBcHOtYz3bZoAMA5hzaE5cVtoqrVgfPT2c= Subject key identifier: 80:23:69:A5:A4:B7:4E:BB:37:4D:09:0E:8D:03:25:F0:16:D6:A1:D6 Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d Certificate serial: 019B7034100316188523BBBBB6C1CCA78CCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft Manifest number: 085D Signing time: Tue 30 Dec 2025 17:00:18 +0000 Manifest this update: Tue 30 Dec 2025 17:00:18 +0000 Manifest next update: Wed 31 Dec 2025 17:00:18 +0000 Files and hashes: 1: K6Fu_XiBHvDsYhtG_--3fuPZg48.roa (hash: RNhrx5f19YH8DzgdDWPTLam4LAtgoJZsbS8JdFM0WN8=) 2: Ye2lhVqLlVViESIa1X_75ZD_K3Y.roa (hash: GkZd+LIfPke0Hk41OCtwwY1KwALgbjtXK8ppjf/on0I=) 3: ZTj2ZwJbmSTqqGkaHNeSOzaRucE.roa (hash: 5l3ZvQv6nxBKcaHiVSLVWyVMDLkrqNymK7dZBTsMLbU=) 4: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: Wqo0ZXeS1X++ThRwBO2NUKkAKAMUtfLlfS3aVelvzEo=) 5: _Kr9E5MKxyuntA5czBSmI-XiWLk.roa (hash: yKCPcajH9aVqjBH/Z/+caEOZWjeFz70pUynCf4xQzl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:34:10:03:16:18:85:23:bb:bb:b6:c1:cc:a7:8c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d Validity Not Before: Dec 30 17:00:18 2025 GMT Not After : Dec 31 17:00:18 2025 GMT Subject: CN=802369a5a4b74ebb374d090e8d0325f016d6a1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c2:91:dd:65:d3:52:e9:2e:c9:9d:d6:1b:ed: 56:5f:71:22:50:64:31:07:2a:31:e2:31:d5:63:35: b8:64:ef:91:46:90:da:d4:94:fa:f8:83:3a:60:63: f9:47:47:34:79:6d:d8:0e:19:1f:85:73:6e:05:dc: 6f:20:d9:9a:a6:bd:bf:a4:49:b3:0b:90:33:da:99: 30:6d:99:8b:4b:eb:d3:c8:ba:25:42:21:e6:a7:f2: 61:33:5e:3a:30:70:e4:2b:fc:79:e0:85:95:b1:13: 8e:3a:0b:ef:6d:ab:42:78:0c:1c:7b:24:45:02:d5: ba:c7:1d:98:54:54:80:b4:7f:21:32:a0:e9:9d:7d: 9f:ba:58:e4:26:ab:7a:c8:49:31:5d:3d:12:36:ca: f6:4d:2b:ba:92:11:dc:cf:e8:f6:4e:86:d2:c6:04: df:55:05:2d:a9:4a:c4:48:9c:0a:a6:15:c6:e3:03: 7c:93:ef:5f:8c:b7:24:3d:ff:1a:c3:01:c1:67:7c: 18:3c:ec:e5:59:da:2f:7e:6e:b4:ac:d5:9e:eb:ce: 6e:eb:ed:64:d3:17:b3:0c:24:74:f2:a0:d5:09:5e: 78:31:88:30:27:7d:4a:5c:71:5b:af:ba:7d:f6:87: 9f:9b:fa:12:8c:cb:e0:70:bf:de:72:f9:4d:db:95: 15:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:23:69:A5:A4:B7:4E:BB:37:4D:09:0E:8D:03:25:F0:16:D6:A1:D6 X509v3 Authority Key Identifier: keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:86:7d:73:0f:0f:2e:42:35:4b:40:79:f6:9a:6b:3a:de:85: 45:03:7d:ca:bd:4f:f0:9e:5b:fe:82:4e:79:4b:dd:ff:42:8e: 30:a6:eb:16:fc:81:e2:60:d8:59:d8:55:43:87:e0:c7:fe:50: ea:c7:6e:39:92:b0:e8:0a:7a:01:4d:4a:58:ac:38:a9:38:0e: 34:66:1e:d0:c8:00:5d:44:a9:4e:96:25:d9:7c:1b:ea:c9:80: 1a:a5:66:51:c4:f5:77:db:3b:cf:3c:fe:83:83:ae:3d:c7:04: d5:9e:41:56:0d:03:1a:7c:98:0a:77:54:4a:4d:30:5f:0d:15: c8:13:18:b0:1e:79:dd:69:34:58:d2:a6:92:48:1c:ac:5e:a2: 4d:e4:e0:33:90:03:63:38:a9:f3:92:15:70:d9:a1:89:22:aa: 43:23:1d:cb:15:92:06:e7:10:fc:5b:56:2d:40:54:39:ba:cd: 0f:6a:47:5c:a2:c2:17:2b:54:fd:b3:7b:73:b7:04:6f:3e:59: d7:a7:97:73:61:7f:b9:cd:3c:ad:98:06:38:24:0b:22:29:0b: 51:6a:37:99:2e:f3:c8:2c:18:4d:86:df:8b:41:cd:86:06:92: 8f:ed:7d:a0:d6:a9:6c:62:42:1c:ea:4c:13:a5:c5:6f:19:91: f2:30:94:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwNBADFhiFI7u7tsHMp4zMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOGRkNWZlNDE3OWU4YmRhMjg1MzI1NjE5MTlmNmQwNzg3 N2M2M2QwHhcNMjUxMjMwMTcwMDE4WhcNMjUxMjMxMTcwMDE4WjAzMTEwLwYDVQQD Eyg4MDIzNjlhNWE0Yjc0ZWJiMzc0ZDA5MGU4ZDAzMjVmMDE2ZDZhMWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksKR3WXTUukuyZ3WG+1WX3EiUGQx Byox4jHVYzW4ZO+RRpDa1JT6+IM6YGP5R0c0eW3YDhkfhXNuBdxvINmapr2/pEmz C5Az2pkwbZmLS+vTyLolQiHmp/JhM146MHDkK/x54IWVsROOOgvvbatCeAwceyRF AtW6xx2YVFSAtH8hMqDpnX2fuljkJqt6yEkxXT0SNsr2TSu6khHcz+j2TobSxgTf VQUtqUrESJwKphXG4wN8k+9fjLckPf8awwHBZ3wYPOzlWdovfm60rNWe685u6+1k 0xezDCR08qDVCV54MYgwJ31KXHFbr7p99oefm/oSjMvgcL/ecvlN25UVvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAjaaWkt067N00JDo0DJfAW1qHWMB8GA1UdIwQY MBaAFP+N1f5Beei9ooUyVhkZ9tB4d8Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQt MDZhNDA0NDM1ZTUwLzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQtMDZhNDA0NDM1ZTUw LzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYZ9cw8P LkI1S0B59pprOt6FRQN9yr1P8J5b/oJOeUvd/0KOMKbrFvyB4mDYWdhVQ4fgx/5Q 6sduOZKw6Ap6AU1KWKw4qTgONGYe0MgAXUSpTpYl2Xwb6smAGqVmUcT1d9s7zzz+ g4OuPccE1Z5BVg0DGnyYCndUSk0wXw0VyBMYsB553Wk0WNKmkkgcrF6iTeTgM5AD Yzip85IVcNmhiSKqQyMdyxWSBucQ/FtWLUBUObrND2pHXKLCFytU/bN7c7cEbz5Z 16eXc2F/uc08rZgGOCQLIikLUWo3mS7zyCwYTYbfi0HNhgaSj+19oNapbGJCHOpM E6XFbxmR8jCUJQ== -----END CERTIFICATE-----Generated at Wed Dec 31 00:11:55 2025 by rpki-client