This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft File: 46dKvLE4LCK5GtQH_UM5q4uoG4I.mft (raw, json) Hash identifier: iqOazKpjldiIuWY3tTkzjHIi8DqovB4Mw4MpT8Z0pbM= Subject key identifier: 0F:DA:15:9A:09:5F:7B:46:CE:C0:F5:8E:A5:1F:DE:5D:AA:55:A8:BF Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82 Certificate issuer: /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82 Certificate serial: 019AF12D979CBD4DB286FD3D234C2A1DC156 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: 46dKvLE4LCK5GtQH_UM5q4uoG4I.crl (hash: iBaWcoPpOpYk+dSvEkMFuUMH/yrMmjGv13igwHzk4ac=) 2: 9xuRyXwVaekffVcG8_NstMNBt-k.roa (hash: M9/x2Ndgn+GMwlguZER0SDySKrmyfH7+TGAZyq7NYpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:97:9c:bd:4d:b2:86:fd:3d:23:4c:2a:1d:c1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82 Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=0fda159a095f7b46cec0f58ea51fde5daa55a8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0f:9e:71:ec:6b:0f:df:aa:ac:2e:ad:30:12: f0:d6:3d:9d:04:ed:9c:ab:ec:23:01:42:ce:20:92: 29:1c:11:88:85:5c:52:f3:23:ff:16:25:7b:eb:a0: 91:75:e2:d5:5d:92:f7:30:08:01:50:94:97:26:6d: e4:f4:a7:0b:f4:dd:24:af:7e:f6:43:34:e2:a8:ad: ea:2b:a0:fa:b8:dc:ad:75:82:1a:d8:86:cc:27:43: 12:84:37:8a:a5:0a:db:d0:e5:ff:a9:d6:fe:cf:36: 56:4e:60:11:b0:ce:90:5a:6f:17:e0:cc:db:4e:bf: 39:5c:36:42:55:b7:1e:25:a6:c0:5c:e8:b6:76:73: 52:df:e6:e4:4d:93:78:ff:c3:b6:d0:f3:99:34:1d: 05:58:ef:1b:58:16:f5:f9:c0:52:1b:e1:4f:69:c7: e8:ae:a1:f6:dc:8c:78:94:fe:85:39:85:63:61:fe: 79:b8:13:58:2c:96:6b:55:31:74:88:89:35:15:10: 70:2b:b9:f3:6e:75:43:da:63:39:b6:13:05:50:2b: df:12:39:a9:09:13:02:7d:ca:85:8f:d8:7d:a2:08: 54:b9:40:33:6a:db:7e:50:79:4b:c1:0d:6d:54:ef: 36:ec:f7:27:15:27:f5:f3:0d:95:b1:da:34:7c:fe: a7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DA:15:9A:09:5F:7B:46:CE:C0:F5:8E:A5:1F:DE:5D:AA:55:A8:BF X509v3 Authority Key Identifier: keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:b7:a3:10:62:23:df:a7:b0:c8:48:66:a4:39:f0:99:ca:46: 2a:02:5a:a5:18:a9:9a:34:af:0d:cf:c0:bf:87:b2:6c:f0:9e: 07:93:c1:72:78:aa:b6:9d:f3:84:c0:c3:c9:40:87:2c:30:74: b6:79:f1:e0:44:99:bd:98:e9:0e:62:f9:c2:e7:09:86:5f:46: 5f:f8:1a:81:07:1d:4b:3c:ca:0e:2f:5a:0f:e6:c5:b3:16:7e: 89:d9:33:0b:2e:6c:4b:61:d9:76:a8:03:e0:09:85:65:0b:f5: 23:6e:4b:03:16:a4:62:04:29:d2:9e:de:79:cf:ca:5d:e2:97: 35:e9:cc:ea:a4:ec:67:af:cb:93:77:7c:97:15:48:56:1b:c1: 09:54:d0:76:89:82:28:8b:74:71:b4:12:fd:c9:d1:1b:e6:ef: 22:06:42:f8:34:36:c2:42:34:79:56:b5:02:f1:b2:42:ec:cd: 70:7f:77:38:72:13:97:ff:76:70:47:86:e3:95:55:c6:58:99: a6:7f:99:81:a4:29:58:e5:73:10:e8:48:f3:a0:c6:5f:59:81: a2:a0:ec:80:e2:f8:33:6e:0f:df:61:a0:5e:43:dc:ef:08:ad: 31:f5:f7:cb:25:36:c4:65:43:74:4c:e8:e3:01:8a:07:fa:ad: 67:31:d6:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZecvU2yhv09I0wqHcFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYTc0YWJjYjEzODJjMjJiOTFhZDQwN2ZkNDMzOWFiOGJh ODFiODIwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD EygwZmRhMTU5YTA5NWY3YjQ2Y2VjMGY1OGVhNTFmZGU1ZGFhNTVhOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q+ecexrD9+qrC6tMBLw1j2dBO2c q+wjAULOIJIpHBGIhVxS8yP/FiV766CRdeLVXZL3MAgBUJSXJm3k9KcL9N0kr372 QzTiqK3qK6D6uNytdYIa2IbMJ0MShDeKpQrb0OX/qdb+zzZWTmARsM6QWm8X4Mzb Tr85XDZCVbceJabAXOi2dnNS3+bkTZN4/8O20POZNB0FWO8bWBb1+cBSG+FPacfo rqH23Ix4lP6FOYVjYf55uBNYLJZrVTF0iIk1FRBwK7nzbnVD2mM5thMFUCvfEjmp CRMCfcqFj9h9oghUuUAzatt+UHlLwQ1tVO827PcnFSf18w2Vsdo0fP6n/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/aFZoJX3tGzsD1jqUf3l2qVai/MB8GA1UdIwQY MBaAFOOnSryxOCwiuRrUB/1DOauLqBuCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDZkS3ZMRTRMQ0s1R3RRSF9VTTVxNHVvRzRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mOTFlYTgtN2VlYS00NGZiLWFmMjct NWMwODZkZGM5YTI2LzEvNDZkS3ZMRTRMQ0s1R3RRSF9VTTVxNHVvRzRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mOTFlYTgtN2VlYS00NGZiLWFmMjctNWMwODZkZGM5YTI2 LzEvNDZkS3ZMRTRMQ0s1R3RRSF9VTTVxNHVvRzRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAurejEGIj 36ewyEhmpDnwmcpGKgJapRipmjSvDc/Av4eybPCeB5PBcniqtp3zhMDDyUCHLDB0 tnnx4ESZvZjpDmL5wucJhl9GX/gagQcdSzzKDi9aD+bFsxZ+idkzCy5sS2HZdqgD 4AmFZQv1I25LAxakYgQp0p7eec/KXeKXNenM6qTsZ6/Lk3d8lxVIVhvBCVTQdomC KIt0cbQS/cnRG+bvIgZC+DQ2wkI0eVa1AvGyQuzNcH93OHITl/92cEeG45VVxliZ pn+ZgaQpWOVzEOhI86DGX1mBoqDsgOL4M24P32GgXkPc7witMfX3yyU2xGVDdEzo 4wGKB/qtZzHWvg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:34 2025 by rpki-client