This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json) Hash identifier: 3eZ1sD0uWFuIXPJXyfTLlD/fYcC7OcG7ol7mLy18zew= Subject key identifier: 19:E6:A8:AD:03:B0:9E:0B:7C:92:F6:67:24:D5:66:AA:EB:29:91:AE Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2 Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2 Certificate serial: 019B692020B582E11F7B9787ADCF9F90AC84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft Manifest number: 0BF8 Signing time: Mon 29 Dec 2025 08:01:11 +0000 Manifest this update: Mon 29 Dec 2025 08:01:11 +0000 Manifest next update: Tue 30 Dec 2025 08:01:11 +0000 Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: dv83PjhMU8rxJRospq15HaZwj6Fl18V8wvw/4EZQIEw=) 2: oNzr7e9N0_nB7NG8uVVH1YFW8SA.roa (hash: E5UVvjB7YIozDhZ03PLtgPckm/pTCCT/ml1aJ8kENsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:20:20:b5:82:e1:1f:7b:97:87:ad:cf:9f:90:ac:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2 Validity Not Before: Dec 29 08:01:11 2025 GMT Not After : Dec 30 08:01:11 2025 GMT Subject: CN=19e6a8ad03b09e0b7c92f66724d566aaeb2991ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:dc:f4:6a:3d:36:45:fc:03:bc:49:c5:40: 6f:64:cd:c4:f5:7e:0e:0b:ce:3e:49:d3:7b:91:85: a1:29:fa:db:07:f7:a3:69:d0:f2:61:64:1d:c1:65: fd:bd:36:9e:7a:a5:07:9d:3b:af:2f:e9:8b:d9:4a: 9a:a0:e8:07:01:70:38:ff:c9:33:1a:6e:14:1f:06: 5c:e7:3e:e7:09:ba:b6:1e:a5:64:48:f9:2b:3d:3b: ad:f6:77:37:29:48:0f:90:5b:f8:d7:96:e9:99:f0: af:e5:a0:23:9f:58:85:e3:c8:fd:ce:51:de:78:b1: 47:b1:5b:30:52:f7:db:61:b1:f3:d8:a6:46:e5:44: 0b:cb:dc:6e:d6:e3:e3:56:5e:09:7f:e5:78:33:9f: 14:1b:ab:2c:0c:0e:47:08:7d:34:a2:e0:8a:e2:22: 83:35:0d:08:3e:9b:9f:21:cc:bd:75:eb:69:7f:f0: dd:e5:99:68:d9:56:be:71:e9:c5:58:83:23:8e:f4: 88:c4:da:e6:33:ec:c6:56:88:32:09:c7:d1:1c:9d: e2:af:8c:91:9f:0c:0d:ff:cf:fd:39:26:ed:ca:c5: 2c:9e:cf:1a:79:b3:ae:f4:82:6a:9b:e1:ad:cd:3c: b2:6a:72:ec:e2:0a:76:bc:78:ff:91:8d:0c:e1:7b: 61:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E6:A8:AD:03:B0:9E:0B:7C:92:F6:67:24:D5:66:AA:EB:29:91:AE X509v3 Authority Key Identifier: keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4e:27:a6:82:8f:41:7d:56:76:ab:5d:e9:4f:30:f7:a4:c9: 8b:e1:b0:c7:b4:fd:82:c3:a3:57:7d:66:51:1c:5f:08:36:39: a3:73:37:c9:12:b0:30:0f:5f:f0:7d:b1:0b:91:3d:03:e9:dd: b5:44:e6:77:de:c0:e3:28:e7:38:5e:40:dc:99:c3:b1:33:e7: 7f:df:d1:a6:54:74:88:86:68:7f:94:a9:c2:77:50:a6:36:ac: fa:d3:8b:5d:7b:79:e0:9b:11:b8:a2:15:1d:ea:3a:86:21:04: b5:5e:98:7a:c6:7a:64:3e:10:e0:c9:66:fa:07:ca:4d:86:4a: 85:66:1e:a0:88:44:40:9e:5c:7e:39:8b:36:cd:1e:17:06:ae: ba:bf:fb:76:d3:af:d6:f4:31:b4:41:0f:23:de:15:1a:2d:07: 8b:5f:8c:c1:15:3d:01:d6:e4:c3:a0:4a:8b:97:66:89:51:e5: e4:ff:d4:be:43:ba:24:86:c0:79:50:b9:2b:f3:b7:25:0c:f0: ab:91:12:ac:13:fe:43:b1:fb:30:da:e3:75:13:10:8c:7e:48: db:41:8f:ce:03:22:a2:4a:6d:10:78:dd:97:a6:de:21:65:ff: 0a:1e:52:74:db:02:df:5c:4b:39:dc:06:1c:36:ad:1f:d3:5d: ae:61:9b:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpICC1guEfe5eHrc+fkKyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNzFjZTIwODY4MDVmOTEyZjg1MTJiNzljNWU2NmE5Yzlm NGQ0ZDIwHhcNMjUxMjI5MDgwMTExWhcNMjUxMjMwMDgwMTExWjAzMTEwLwYDVQQD EygxOWU2YThhZDAzYjA5ZTBiN2M5MmY2NjcyNGQ1NjZhYWViMjk5MWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9Tc9Go9NkX8A7xJxUBvZM3E9X4O C84+SdN7kYWhKfrbB/ejadDyYWQdwWX9vTaeeqUHnTuvL+mL2UqaoOgHAXA4/8kz Gm4UHwZc5z7nCbq2HqVkSPkrPTut9nc3KUgPkFv415bpmfCv5aAjn1iF48j9zlHe eLFHsVswUvfbYbHz2KZG5UQLy9xu1uPjVl4Jf+V4M58UG6ssDA5HCH00ouCK4iKD NQ0IPpufIcy9detpf/Dd5Zlo2Va+cenFWIMjjvSIxNrmM+zGVogyCcfRHJ3ir4yR nwwN/8/9OSbtysUsns8aebOu9IJqm+GtzTyyanLs4gp2vHj/kY0M4XthlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnmqK0DsJ4LfJL2ZyTVZqrrKZGuMB8GA1UdIwQY MBaAFONxziCGgF+RL4USt5xeZqnJ9NTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ZGJkYWYtNTQ5NS00Y2M1LWI3NzAt NzM1OTBhYTI5MGYxLzEvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82ZGJkYWYtNTQ5NS00Y2M1LWI3NzAtNzM1OTBhYTI5MGYx LzEvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASk4npoKP QX1Wdqtd6U8w96TJi+Gwx7T9gsOjV31mURxfCDY5o3M3yRKwMA9f8H2xC5E9A+nd tUTmd97A4yjnOF5A3JnDsTPnf9/RplR0iIZof5SpwndQpjas+tOLXXt54JsRuKIV Heo6hiEEtV6YesZ6ZD4Q4Mlm+gfKTYZKhWYeoIhEQJ5cfjmLNs0eFwauur/7dtOv 1vQxtEEPI94VGi0Hi1+MwRU9Adbkw6BKi5dmiVHl5P/UvkO6JIbAeVC5K/O3JQzw q5ESrBP+Q7H7MNrjdRMQjH5I20GPzgMiokptEHjdl6beIWX/Ch5SdNsC31xLOdwG HDatH9NdrmGbfA== -----END CERTIFICATE-----Generated at Mon Dec 29 14:58:15 2025 by rpki-client