This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft File: c46JPc00f32rX3DTUfj84d6qZdE.mft (raw, json) Hash identifier: 0dgEOQi4j/T0cwXCdTEZlJYetjrFvswgJYDSxbFtPC4= Subject key identifier: 0A:C5:2C:B3:99:8C:1D:E5:E7:F9:26:73:27:30:77:9D:D5:8D:8B:53 Authority key identifier: 73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1 Certificate issuer: /CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1 Certificate serial: 019B318CCA41BBE359CAE039E486609B018A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 13:01:08 +0000 Manifest this update: Thu 18 Dec 2025 13:01:08 +0000 Manifest next update: Fri 19 Dec 2025 13:01:08 +0000 Files and hashes: 1: 3ktEzDL0WvhnsuJm2C6DIk-mHBM.roa (hash: OJtb++yW5+MtXw5QSymaUjcZIRPMQ11YahPbPvwPK4Q=) 2: c46JPc00f32rX3DTUfj84d6qZdE.crl (hash: Ew/OoYZAN4+fEDrdayyfeAk9p/Zu6xnQ0m16kipMYbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:ca:41:bb:e3:59:ca:e0:39:e4:86:60:9b:01:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1 Validity Not Before: Dec 18 13:01:08 2025 GMT Not After : Dec 19 13:01:08 2025 GMT Subject: CN=0ac52cb3998c1de5e7f926732730779dd58d8b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:29:b8:47:88:3c:45:e5:22:85:52:1d:3f: 7a:4a:60:04:0a:89:b6:31:fe:1d:07:c8:73:d9:17: d9:34:5d:35:d4:96:37:10:ca:44:24:b2:9f:29:e9: 77:ea:be:c8:6b:45:cf:a6:30:db:6f:ce:51:d7:c9: e4:64:34:c5:66:84:8c:e1:13:34:ea:bc:fd:91:4b: 3b:6d:54:4b:8b:92:0e:a9:3b:76:d2:2b:c7:a6:75: d6:7a:a7:bf:81:94:d1:74:0a:b3:9e:42:a9:f2:61: 06:f3:f0:92:1e:ec:38:fa:09:9e:04:ad:6a:15:00: 47:5e:f5:d4:65:05:80:97:48:6b:c1:42:19:5d:31: c9:c2:13:a3:b3:39:f4:a9:3b:23:df:c3:00:94:f0: 85:85:d4:3e:dc:0b:ff:69:f5:2e:73:01:9d:65:7f: 50:3e:5e:84:2f:df:66:0e:2c:02:73:6c:49:e3:3c: f9:7a:58:0b:f2:2d:07:e6:1f:ea:3a:55:92:be:75: 8a:3b:4b:ff:c9:05:60:1f:82:07:99:9f:b8:93:39: 24:51:59:89:07:d7:97:73:04:22:d3:0a:17:e2:2f: 6a:9b:2f:3d:91:9b:29:60:d7:1a:1a:35:72:98:c1: f9:7b:43:c6:f9:75:db:c9:84:d0:36:97:08:37:f6: a9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C5:2C:B3:99:8C:1D:E5:E7:F9:26:73:27:30:77:9D:D5:8D:8B:53 X509v3 Authority Key Identifier: keyid:73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fb:9b:7d:cd:1c:ee:28:e6:fc:1c:ee:bc:df:e5:ee:2d:d4: 7d:fb:f2:d4:43:28:06:95:53:1d:8b:ca:96:2f:ec:52:6c:e6: 03:ec:46:18:85:40:ef:56:a1:a8:e6:51:a8:6c:ec:da:33:5c: b2:5a:c4:2b:36:59:4f:e4:86:41:01:66:f1:dd:82:fc:cd:d3: 24:06:27:5f:4d:3f:37:cd:47:65:8d:ae:8e:dc:13:ec:f4:3a: 52:2c:72:2c:8d:1e:8c:3c:fe:43:94:3f:7f:1d:f6:23:b7:63: a7:b6:b9:65:32:29:d4:23:e4:41:4f:c3:e8:ec:13:89:0c:30: b6:28:cc:d6:cb:2b:f3:60:8f:9f:8d:31:65:f9:22:19:55:4a: 3a:be:2e:e6:38:3f:e3:df:ef:f9:28:db:2e:d1:71:4b:a5:8b: 94:0a:8b:39:df:8f:f3:72:5f:80:5e:4c:4f:87:48:74:cc:20: f8:fa:67:20:8d:d4:07:59:f4:26:f9:a1:30:84:a3:08:78:e7: d1:90:37:f8:0d:32:4f:b1:3f:bc:94:3d:4b:3b:66:09:c8:40: d9:e9:70:67:a9:f4:34:d6:56:d6:7e:3e:22:f6:55:c7:b1:7e: fa:11:12:a1:7f:5e:1d:8a:f6:dc:18:88:c8:6b:10:68:44:83: af:2e:84:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjMpBu+NZyuA55IZgmwGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczOGU4OTNkY2QzNDdmN2RhYjVmNzBkMzUxZjhmY2UxZGVh YTY1ZDEwHhcNMjUxMjE4MTMwMTA4WhcNMjUxMjE5MTMwMTA4WjAzMTEwLwYDVQQD EygwYWM1MmNiMzk5OGMxZGU1ZTdmOTI2NzMyNzMwNzc5ZGQ1OGQ4YjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUopuEeIPEXlIoVSHT96SmAECom2 Mf4dB8hz2RfZNF011JY3EMpEJLKfKel36r7Ia0XPpjDbb85R18nkZDTFZoSM4RM0 6rz9kUs7bVRLi5IOqTt20ivHpnXWeqe/gZTRdAqznkKp8mEG8/CSHuw4+gmeBK1q FQBHXvXUZQWAl0hrwUIZXTHJwhOjszn0qTsj38MAlPCFhdQ+3Av/afUucwGdZX9Q Pl6EL99mDiwCc2xJ4zz5elgL8i0H5h/qOlWSvnWKO0v/yQVgH4IHmZ+4kzkkUVmJ B9eXcwQi0woX4i9qmy89kZspYNcaGjVymMH5e0PG+XXbyYTQNpcIN/apewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArFLLOZjB3l5/kmcycwd53VjYtTMB8GA1UdIwQY MBaAFHOOiT3NNH99q19w01H4/OHeqmXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yNTUxNDktOGM0Yi00Y2Q4LTkxOWYt NzdiYjUzMjIyOGI0LzEvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8yNTUxNDktOGM0Yi00Y2Q4LTkxOWYtNzdiYjUzMjIyOGI0 LzEvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPubfc0c 7ijm/BzuvN/l7i3Uffvy1EMoBpVTHYvKli/sUmzmA+xGGIVA71ahqOZRqGzs2jNc slrEKzZZT+SGQQFm8d2C/M3TJAYnX00/N81HZY2ujtwT7PQ6UixyLI0ejDz+Q5Q/ fx32I7djp7a5ZTIp1CPkQU/D6OwTiQwwtijM1ssr82CPn40xZfkiGVVKOr4u5jg/ 49/v+SjbLtFxS6WLlAqLOd+P83JfgF5MT4dIdMwg+PpnII3UB1n0JvmhMISjCHjn 0ZA3+A0yT7E/vJQ9SztmCchA2elwZ6n0NNZW1n4+IvZVx7F++hESoX9eHYr23BiI yGsQaESDry6Erw== -----END CERTIFICATE-----Generated at Thu Dec 18 19:05:28 2025 by rpki-client