This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft File: 46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json) Hash identifier: p9hDKrw3l6V02AAureb4D+Ahv69Nx9HUsyy4dM86cSo= Subject key identifier: 26:06:9E:B4:F6:91:BF:36:51:0D:37:37:A5:2D:A4:9A:CB:DF:E5:26 Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79 Certificate issuer: /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279 Certificate serial: 019AF1645356CAFFB9720744EB4C6B45FFB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 02:01:15 +0000 Manifest this update: Sat 06 Dec 2025 02:01:15 +0000 Manifest next update: Sun 07 Dec 2025 02:01:15 +0000 Files and hashes: 1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: uUOmU6NtK6yQ4qPRW1pKGGFJzcWJ4AOqdK7EW4TbNFQ=) 2: kM9y4GrDXnCdNW0cB_r7lGW0ZiE.roa (hash: zTejL3tH1JMvgJP62ZpXEO3alzMxsTDuTLqKj9I1/dA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:53:56:ca:ff:b9:72:07:44:eb:4c:6b:45:ff:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279 Validity Not Before: Dec 6 02:01:15 2025 GMT Not After : Dec 7 02:01:15 2025 GMT Subject: CN=26069eb4f691bf36510d3737a52da49acbdfe526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:05:e7:32:b3:0e:9f:ac:1d:c0:44:a2:d8: 7b:14:5d:65:ea:de:a0:23:b9:cb:c0:d7:af:74:af: 0e:d3:68:fb:8d:6f:cc:d3:8e:6e:90:ee:86:0f:87: e8:94:7d:83:c0:09:67:ec:e5:3c:0f:7a:db:c7:13: 16:44:36:fb:ca:50:88:0b:64:54:13:c1:90:f0:b7: da:e7:9d:90:9f:6a:77:e7:86:09:ea:59:c9:bb:44: 69:0a:09:05:75:6a:8f:36:70:09:f1:93:f2:20:b5: 66:a5:78:0f:8b:d0:ac:a4:c4:2a:0b:d3:a9:aa:e5: f4:c1:94:21:3b:e9:15:2a:2b:eb:4a:d8:46:28:e3: 06:e4:f0:84:c4:b3:bc:57:73:7d:51:3f:6e:ac:27: 95:a3:95:34:cb:09:5e:69:13:42:b9:59:36:8a:49: 0d:f3:62:65:4f:1b:0f:8c:90:3b:4a:90:eb:a2:e5: 80:e4:ba:46:9a:5b:db:96:71:80:ae:7b:1b:0a:f4: 01:45:ca:3a:df:af:42:fa:98:d9:c4:12:a5:9e:4b: 96:96:48:38:4c:63:f5:28:09:a4:9a:d0:ae:ff:9d: d5:1b:ef:22:4c:dc:0a:b4:6b:b6:ff:bd:92:60:27: df:6f:74:02:11:d6:1d:d0:dd:6d:56:83:84:62:1e: 9d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:06:9E:B4:F6:91:BF:36:51:0D:37:37:A5:2D:A4:9A:CB:DF:E5:26 X509v3 Authority Key Identifier: keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e8:54:33:78:60:e9:0c:c2:cc:bd:10:5f:c1:c3:6c:9c:3b: c8:81:78:f4:d7:16:6c:f6:ff:1f:b4:68:9c:45:99:8e:d8:26: 6b:1c:60:79:05:5a:3e:ed:49:73:94:25:2a:53:5b:31:ea:47: b6:f0:50:04:6b:5a:8e:d4:b7:7e:d0:23:b9:05:b8:7e:a8:6f: 7b:00:bd:bb:d9:08:c3:c0:f3:af:f9:23:75:f5:3d:20:e5:19: 00:98:d1:f3:2f:71:48:f5:1f:d5:79:c4:28:ec:f3:2f:b0:39: b7:d6:62:6e:ee:92:5f:79:b3:52:b0:03:7d:84:2d:83:de:89: 21:f0:f0:84:d8:4a:e6:4d:0d:b8:4e:a4:81:d4:f5:0b:6e:05: 03:b9:ee:42:af:72:de:2c:93:14:52:41:06:35:fb:10:cb:73: 62:a8:ac:89:82:97:68:a2:cd:d0:f7:47:64:3f:61:fc:4a:c0: be:7f:29:95:4c:a0:b5:7b:5a:4c:76:b3:1a:a9:61:6f:64:3d: 94:c2:59:c8:b1:10:81:09:b9:0b:d1:69:8e:b8:75:c7:e6:bf: bd:88:f0:55:4b:e3:a4:1a:5a:0f:07:17:9b:bc:34:63:65:9a: 03:08:88:79:24:db:b8:f8:06:70:3d:78:54:09:4a:b9:9f:d5: 5c:9d:69:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFNWyv+5cgdE60xrRf+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYWM2MzVmZDQ1ZjU0NzFjNmMyYzNmZTQ1ZWYxYmI0MzM4 YmMyNzkwHhcNMjUxMjA2MDIwMTE1WhcNMjUxMjA3MDIwMTE1WjAzMTEwLwYDVQQD EygyNjA2OWViNGY2OTFiZjM2NTEwZDM3MzdhNTJkYTQ5YWNiZGZlNTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXQF5zKzDp+sHcBEoth7FF1l6t6g I7nLwNevdK8O02j7jW/M045ukO6GD4folH2DwAln7OU8D3rbxxMWRDb7ylCIC2RU E8GQ8Lfa552Qn2p354YJ6lnJu0RpCgkFdWqPNnAJ8ZPyILVmpXgPi9CspMQqC9Op quX0wZQhO+kVKivrSthGKOMG5PCExLO8V3N9UT9urCeVo5U0ywleaRNCuVk2ikkN 82JlTxsPjJA7SpDrouWA5LpGmlvblnGArnsbCvQBRco6369C+pjZxBKlnkuWlkg4 TGP1KAmkmtCu/53VG+8iTNwKtGu2/72SYCffb3QCEdYd0N1tVoOEYh6dlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYGnrT2kb82UQ03N6UtpJrL3+UmMB8GA1UdIwQY MBaAFOOsY1/UX1RxxsLD/kXvG7Qzi8J5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAt MWQyMzQ4ZGJkMDM2LzEvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAtMWQyMzQ4ZGJkMDM2 LzEvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuhUM3hg 6QzCzL0QX8HDbJw7yIF49NcWbPb/H7RonEWZjtgmaxxgeQVaPu1Jc5QlKlNbMepH tvBQBGtajtS3ftAjuQW4fqhvewC9u9kIw8Dzr/kjdfU9IOUZAJjR8y9xSPUf1XnE KOzzL7A5t9Zibu6SX3mzUrADfYQtg96JIfDwhNhK5k0NuE6kgdT1C24FA7nuQq9y 3iyTFFJBBjX7EMtzYqisiYKXaKLN0PdHZD9h/ErAvn8plUygtXtaTHazGqlhb2Q9 lMJZyLEQgQm5C9Fpjrh1x+a/vYjwVUvjpBpaDwcXm7w0Y2WaAwiIeSTbuPgGcD14 VAlKuZ/VXJ1p1g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:34 2025 by rpki-client