This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json) Hash identifier: avSZl1NvFKuSRJlGIVbQQbrsQzqc6dg03qOsmMHgSfk= Subject key identifier: B2:15:13:F7:B1:0F:F1:EA:A9:63:E8:94:B7:F2:95:31:1A:1C:5B:9D Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89 Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389 Certificate serial: 019B3C7DBA0E808AB970BB4F16B1BD98302C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 16:00:31 +0000 Manifest this update: Sat 20 Dec 2025 16:00:31 +0000 Manifest next update: Sun 21 Dec 2025 16:00:31 +0000 Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: wQgelPlZZUGk1A3xyq+HWwQem5E8ld8dwC5ZE3n0JMU=) 2: gdCbju7iq0jqbnL3F15jB2y6w9k.roa (hash: 5imVu9OgEC0LpB68Uf/xLlkHKg4D35cIEP4G8Ci0Msk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:ba:0e:80:8a:b9:70:bb:4f:16:b1:bd:98:30:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389 Validity Not Before: Dec 20 16:00:31 2025 GMT Not After : Dec 21 16:00:31 2025 GMT Subject: CN=b21513f7b10ff1eaa963e894b7f295311a1c5b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:f1:42:d7:05:b5:ae:e9:d5:e8:a8:57:b6: 4f:f1:0f:98:a6:48:9e:7a:c4:b9:cd:f1:75:7c:bb: 2b:35:13:7b:a9:07:81:e7:ee:e9:36:68:00:b2:81: 73:78:63:40:c1:ff:b9:39:4c:3f:30:b4:16:cd:16: ce:16:99:b0:a2:ee:c1:04:53:69:b5:7d:2b:fb:4c: 74:9b:4c:92:1f:99:a1:b3:2c:4f:be:1b:ab:37:c2: 05:f3:8f:88:bf:6e:c1:f7:0a:73:eb:73:f2:1a:c6: 28:57:64:8b:2f:1c:e1:b5:b6:bc:ec:54:4d:8c:76: a1:54:07:7e:f1:21:be:9a:00:7d:48:de:fb:d1:ce: 24:2f:f2:72:5f:b7:cc:10:dd:d6:1d:23:fc:b9:c2: 97:2b:45:3d:1e:25:76:16:0d:c8:c3:42:dc:66:99: 01:88:83:c8:c9:03:42:2e:1f:52:03:71:9a:b2:08: 92:ab:d2:80:c3:55:f0:e1:4b:e9:f7:1e:4b:e3:0e: ee:3a:1d:a3:28:f2:ce:6d:62:33:71:bb:b2:0b:b8: 53:31:58:a0:07:42:e8:a2:51:45:b6:62:db:0d:3b: 3c:09:3c:c2:72:e9:22:94:78:b9:b1:ee:91:c3:02: b4:f4:8f:b3:ad:8e:ee:a4:d7:76:6d:2d:e3:6c:88: e5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:15:13:F7:B1:0F:F1:EA:A9:63:E8:94:B7:F2:95:31:1A:1C:5B:9D X509v3 Authority Key Identifier: keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:62:95:ee:e0:40:56:ad:b5:35:25:a4:55:20:fb:00:19:0b: 3e:39:e2:16:70:f1:9f:8f:ec:ed:5f:95:39:2b:20:5f:ce:58: 73:54:be:54:04:28:81:b8:82:5a:8b:86:a6:59:8c:d9:2a:f3: da:19:86:a6:80:bc:65:cc:f8:9a:8e:58:41:c3:0f:04:ee:81: 08:e8:9a:dc:c6:cb:37:10:de:5f:70:bf:84:ea:98:63:8d:47: a8:fa:f3:14:fd:3d:5c:48:5f:b5:c9:a8:aa:51:e7:6a:d6:ba: 05:dd:ae:92:d1:d2:83:a7:2e:d5:66:6d:68:69:3d:f5:4b:0e: 5d:e9:58:8d:12:15:19:f5:11:86:2b:22:05:41:db:cc:1a:f7: d5:03:a4:da:05:66:68:24:56:1d:0d:21:f1:52:06:42:7a:af: 46:cb:fd:bc:c3:ac:95:e5:33:ed:d7:77:79:6e:f2:79:3d:60: 6d:4b:77:ca:78:4b:90:87:3f:54:5a:9a:8e:ec:f1:d8:99:05: 46:58:32:f8:29:a2:bd:5f:ca:2a:bc:d2:b0:c7:d0:dd:39:d4: e8:3d:58:0e:5a:37:48:dd:51:02:da:e2:17:35:9b:2d:0d:da: d7:f3:5a:59:32:14:9f:26:e2:c4:92:cd:07:1c:14:e5:f6:93: b7:04:c3:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fboOgIq5cLtPFrG9mDAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNzEwNjA3YmE3YTgxNWU5MTFjNDg5MmY5NjhiMThhZTY2 MDQzODkwHhcNMjUxMjIwMTYwMDMxWhcNMjUxMjIxMTYwMDMxWjAzMTEwLwYDVQQD EyhiMjE1MTNmN2IxMGZmMWVhYTk2M2U4OTRiN2YyOTUzMTFhMWM1YjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1vxQtcFta7p1eioV7ZP8Q+Ypkie esS5zfF1fLsrNRN7qQeB5+7pNmgAsoFzeGNAwf+5OUw/MLQWzRbOFpmwou7BBFNp tX0r+0x0m0ySH5mhsyxPvhurN8IF84+Iv27B9wpz63PyGsYoV2SLLxzhtba87FRN jHahVAd+8SG+mgB9SN770c4kL/JyX7fMEN3WHSP8ucKXK0U9HiV2Fg3Iw0LcZpkB iIPIyQNCLh9SA3GasgiSq9KAw1Xw4Uvp9x5L4w7uOh2jKPLObWIzcbuyC7hTMVig B0LoolFFtmLbDTs8CTzCcukilHi5se6RwwK09I+zrY7upNd2bS3jbIjl9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIVE/exD/HqqWPolLfylTEaHFudMB8GA1UdIwQY MBaAFONxBge6eoFekRxIkvlosYrmYEOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUt MTI2ZDVlNjBmZGQxLzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUtMTI2ZDVlNjBmZGQx LzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmKV7uBA Vq21NSWkVSD7ABkLPjniFnDxn4/s7V+VOSsgX85Yc1S+VAQogbiCWouGplmM2Srz 2hmGpoC8Zcz4mo5YQcMPBO6BCOia3MbLNxDeX3C/hOqYY41HqPrzFP09XEhftcmo qlHnata6Bd2uktHSg6cu1WZtaGk99UsOXelYjRIVGfURhisiBUHbzBr31QOk2gVm aCRWHQ0h8VIGQnqvRsv9vMOsleUz7dd3eW7yeT1gbUt3ynhLkIc/VFqajuzx2JkF Rlgy+CmivV/KKrzSsMfQ3TnU6D1YDlo3SN1RAtriFzWbLQ3a1/NaWTIUnybixJLN BxwU5faTtwTDXQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:10:41 2025 by rpki-client