This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft File: 46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json) Hash identifier: zs7jxZMf7pTHSj9zvgwGelKAE6y5KHUvQtc/jZLVbvY= Subject key identifier: 96:6C:01:C8:5E:38:75:87:6C:B6:F3:7D:DF:08:EC:BC:4C:5A:A9:7D Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63 Certificate issuer: /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63 Certificate serial: 019AF1D2233573B4C815AB5DA575ABBBD575 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft Manifest number: 084D Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: uRjExni92rq/V8/U7lA501JWcUmm45xsipOmNcKy7ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:23:35:73:b4:c8:15:ab:5d:a5:75:ab:bb:d5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63 Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=966c01c85e3875876cb6f37ddf08ecbc4c5aa97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:33:fc:ea:a6:a6:af:52:71:f2:e6:1a:b7: 53:32:85:47:b5:55:d0:f8:9e:f4:ca:7a:c1:de:c6: ae:39:c6:d7:32:fd:fc:5d:6b:5d:bb:c3:2a:f5:59: 0d:9d:4a:85:9d:2c:05:99:4e:fb:6e:76:51:9d:c5: 14:18:2f:3a:10:f2:9d:f2:93:06:e5:dd:cd:f4:69: da:e9:47:83:b7:11:7a:9b:92:07:ce:c2:a2:e1:62: bd:e2:99:0d:fe:25:38:d7:a0:c4:22:0e:13:ab:69: 45:02:5a:39:3f:48:b4:e5:2d:f9:39:9d:4f:7e:7b: ee:06:9f:c4:b3:0f:cf:ed:20:d0:7c:bd:ec:64:62: f5:bf:b7:63:04:e6:05:b3:31:8e:f4:9b:44:28:88: d8:97:f0:ec:d3:0a:17:07:14:d4:c1:c2:e5:cc:df: 85:fb:69:de:4e:cf:98:e0:86:28:6a:b8:bc:bd:d0: 6a:2e:4b:9e:7b:40:6f:3f:b4:86:33:ce:a3:21:a9: ce:2a:6d:5b:a4:bd:58:a4:dd:04:cc:fb:f3:3c:0b: 70:72:db:53:29:a8:df:00:cc:b7:3d:09:f4:de:61: fd:8e:08:4f:cb:2f:5d:20:d1:d1:57:77:8c:e3:65: 7b:41:34:f0:ed:57:9a:95:d6:ed:01:c7:53:ec:17: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6C:01:C8:5E:38:75:87:6C:B6:F3:7D:DF:08:EC:BC:4C:5A:A9:7D X509v3 Authority Key Identifier: keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:33:e5:01:10:06:44:ff:b7:2d:9e:0c:28:0e:0b:bc:c9:c8: 16:82:b8:5f:22:fd:30:be:14:85:00:37:c7:19:93:b2:11:73: bf:ef:d7:2a:21:d2:f3:15:75:9f:e7:6c:33:22:58:39:a7:5a: a3:87:e2:37:d4:61:f4:01:e7:d5:91:e2:a0:57:a5:a7:78:b9: 21:29:f7:e1:ce:9e:e6:1d:b6:7f:7b:99:2e:cb:08:e7:b9:8d: f3:2a:d9:a7:73:86:af:8e:32:96:ae:50:5b:2b:bc:69:ce:97: f4:4f:5f:3a:a7:9c:84:04:68:be:97:d4:50:60:f7:d9:e8:e1: f0:dd:58:91:ab:63:ee:d1:94:65:e2:6d:32:7c:0c:25:24:17: 44:73:20:d0:5b:e6:65:7d:8c:4c:23:19:c2:41:f0:1c:ee:04: 60:b1:90:47:d4:ab:0f:b5:b4:9f:96:59:85:13:8c:53:b8:63: 47:b3:1a:8c:8e:3f:c9:96:cb:b2:90:94:33:b0:4e:29:d3:9b: a2:35:6f:0b:ae:6d:32:d1:c2:36:9b:35:99:65:4b:c1:1b:3c: ae:67:c2:d6:e0:db:6d:c0:93:74:0f:f6:3c:f5:4b:0c:d0:4f: 90:50:9d:3b:8d:fc:2c:cb:fc:03:a8:1a:ed:3f:52:e9:7b:16: bc:50:9d:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iM1c7TIFatdpXWru9V1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYTE4YzBjN2FkYjk4NGI1Zjc3OTc3ZTA4MDBhODlhNTFl ZmJiNjMwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD Eyg5NjZjMDFjODVlMzg3NTg3NmNiNmYzN2RkZjA4ZWNiYzRjNWFhOTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6wz/Oqmpq9ScfLmGrdTMoVHtVXQ +J70ynrB3sauOcbXMv38XWtdu8Mq9VkNnUqFnSwFmU77bnZRncUUGC86EPKd8pMG 5d3N9Gna6UeDtxF6m5IHzsKi4WK94pkN/iU416DEIg4Tq2lFAlo5P0i05S35OZ1P fnvuBp/Esw/P7SDQfL3sZGL1v7djBOYFszGO9JtEKIjYl/Ds0woXBxTUwcLlzN+F +2neTs+Y4IYoari8vdBqLkuee0BvP7SGM86jIanOKm1bpL1YpN0EzPvzPAtwcttT KajfAMy3PQn03mH9jghPyy9dINHRV3eM42V7QTTw7VealdbtAcdT7BewxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZsAcheOHWHbLbzfd8I7LxMWql9MB8GA1UdIwQY MBaAFOOhjAx625hLX3eXfggAqJpR77tjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kOTlmMmYtY2VlMS00MDI0LTgyMDgt YmNmMzAyNjBjZTYwLzEvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kOTlmMmYtY2VlMS00MDI0LTgyMDgtYmNmMzAyNjBjZTYw LzEvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzPlARAG RP+3LZ4MKA4LvMnIFoK4XyL9ML4UhQA3xxmTshFzv+/XKiHS8xV1n+dsMyJYOada o4fiN9Rh9AHn1ZHioFelp3i5ISn34c6e5h22f3uZLssI57mN8yrZp3OGr44ylq5Q Wyu8ac6X9E9fOqechARovpfUUGD32ejh8N1Ykatj7tGUZeJtMnwMJSQXRHMg0Fvm ZX2MTCMZwkHwHO4EYLGQR9SrD7W0n5ZZhROMU7hjR7MajI4/yZbLspCUM7BOKdOb ojVvC65tMtHCNps1mWVLwRs8rmfC1uDbbcCTdA/2PPVLDNBPkFCdO438LMv8A6ga 7T9S6XsWvFCdJA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:34 2025 by rpki-client