This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft File: c46JPc00f32rX3DTUfj84d6qZdE.mft (raw, json) Hash identifier: 6IqrvRaKGk1RD29FY7LFZjBa1VPI0Jf0bN3+SlZ/TQs= Subject key identifier: 0B:40:8A:1B:D5:71:79:59:2D:DA:9E:45:C9:F1:60:15:2B:82:EB:93 Authority key identifier: 73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1 Certificate issuer: /CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1 Certificate serial: 019AF1D1F5A099841910C3DC0B4BD1AC45A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:01:00 +0000 Manifest this update: Sat 06 Dec 2025 04:01:00 +0000 Manifest next update: Sun 07 Dec 2025 04:01:00 +0000 Files and hashes: 1: 3ktEzDL0WvhnsuJm2C6DIk-mHBM.roa (hash: OJtb++yW5+MtXw5QSymaUjcZIRPMQ11YahPbPvwPK4Q=) 2: c46JPc00f32rX3DTUfj84d6qZdE.crl (hash: aSmPBoIJp2q5YYeZk3hwNe6s0WnOQJq8fjkmhXwiBFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f5:a0:99:84:19:10:c3:dc:0b:4b:d1:ac:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1 Validity Not Before: Dec 6 04:01:00 2025 GMT Not After : Dec 7 04:01:00 2025 GMT Subject: CN=0b408a1bd57179592dda9e45c9f160152b82eb93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4c:d1:a5:5d:49:88:5a:3d:69:97:49:9a:9e: fb:2a:2b:da:e6:bb:9a:df:4a:d5:88:0b:1d:09:96: 09:b6:5a:db:16:98:54:23:b0:a6:b9:b7:a1:ef:51: b4:de:4d:7d:be:0a:41:b2:4d:2b:f8:aa:2e:bc:4d: 57:d4:1c:62:00:de:ef:d3:ae:2e:7f:67:2f:8f:53: be:2d:f5:35:1f:79:c6:17:aa:55:6d:c6:c5:52:c8: e8:d9:e0:21:50:e3:3c:78:03:66:23:c1:72:4f:12: 87:1a:d4:d5:22:ee:e5:f4:60:1d:ee:ac:fd:7a:1f: 12:d4:cb:0d:24:ec:b0:b7:44:0b:7f:e7:03:cd:71: cf:02:b9:a7:3e:ec:69:68:b1:5d:c5:da:4e:93:e3: 2c:ed:62:29:0b:df:2d:bc:13:0a:4a:fb:46:f9:c3: 40:ce:dd:3b:d2:95:d2:d5:c9:a9:53:03:a7:a8:84: 50:b0:d6:23:01:6e:44:af:5d:93:7f:7c:df:fe:01: e2:4b:96:60:18:0d:f3:bc:f3:61:04:9b:b9:21:27: 0b:2f:bb:c3:2d:20:21:1a:70:1a:a2:c9:4a:a7:0e: d0:f3:d3:33:ad:45:4d:ac:10:5c:79:c7:2d:9b:ee: cb:45:e6:4b:2d:71:32:8a:72:41:cc:1f:81:76:db: 2a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:40:8A:1B:D5:71:79:59:2D:DA:9E:45:C9:F1:60:15:2B:82:EB:93 X509v3 Authority Key Identifier: keyid:73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:62:b1:50:aa:02:9a:93:48:39:91:ef:9c:ff:b2:6f:1e:a0: 87:a2:55:52:1e:00:3f:7d:a7:83:08:0a:85:42:85:c2:7b:69: b5:cf:9e:28:68:b5:98:c7:02:f4:1e:4d:c6:6a:7d:70:81:32: 4b:1c:52:b4:66:e2:8f:e9:10:3e:cb:b5:09:08:57:f7:4c:8c: ea:0b:71:c0:d2:9a:8d:cc:e3:d2:48:f1:5d:2f:a6:07:ee:46: 8f:22:65:1c:1e:da:1b:df:d2:ef:19:a7:54:aa:9b:17:eb:91: 47:00:95:ce:c7:de:56:ee:68:15:0b:a2:66:e3:df:dd:39:28: 57:17:48:40:57:c7:80:15:d2:4c:9d:42:ee:cb:9a:db:ac:7b: 08:a2:00:e8:ff:ca:1a:40:81:75:7a:52:41:d2:db:63:8d:71: 6a:87:0f:34:a7:34:bf:a3:e2:36:3d:e6:7e:90:8f:70:fc:4d: 29:dc:9f:e4:b6:a6:a9:69:76:35:36:da:c9:83:cb:cd:55:e5: 0d:28:46:fd:86:6a:b2:d1:09:09:d9:53:27:59:20:f9:25:8b: 9e:17:f4:74:38:93:bd:43:5d:a3:b3:78:38:c3:6f:e9:3d:33: fb:08:ac:e2:f3:3c:b6:90:1a:67:0f:5f:34:50:e9:99:3b:5d: e8:d7:86:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fWgmYQZEMPcC0vRrEWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczOGU4OTNkY2QzNDdmN2RhYjVmNzBkMzUxZjhmY2UxZGVh YTY1ZDEwHhcNMjUxMjA2MDQwMTAwWhcNMjUxMjA3MDQwMTAwWjAzMTEwLwYDVQQD EygwYjQwOGExYmQ1NzE3OTU5MmRkYTllNDVjOWYxNjAxNTJiODJlYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kzRpV1JiFo9aZdJmp77Kiva5rua 30rViAsdCZYJtlrbFphUI7Cmubeh71G03k19vgpBsk0r+KouvE1X1BxiAN7v064u f2cvj1O+LfU1H3nGF6pVbcbFUsjo2eAhUOM8eANmI8FyTxKHGtTVIu7l9GAd7qz9 eh8S1MsNJOywt0QLf+cDzXHPArmnPuxpaLFdxdpOk+Ms7WIpC98tvBMKSvtG+cNA zt070pXS1cmpUwOnqIRQsNYjAW5Er12Tf3zf/gHiS5ZgGA3zvPNhBJu5IScLL7vD LSAhGnAaoslKpw7Q89MzrUVNrBBcecctm+7LReZLLXEyinJBzB+BdtsqqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtAihvVcXlZLdqeRcnxYBUrguuTMB8GA1UdIwQY MBaAFHOOiT3NNH99q19w01H4/OHeqmXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yNTUxNDktOGM0Yi00Y2Q4LTkxOWYt NzdiYjUzMjIyOGI0LzEvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8yNTUxNDktOGM0Yi00Y2Q4LTkxOWYtNzdiYjUzMjIyOGI0 LzEvYzQ2SlBjMDBmMzJyWDNEVFVmajg0ZDZxWmRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWKxUKoC mpNIOZHvnP+ybx6gh6JVUh4AP32ngwgKhUKFwntptc+eKGi1mMcC9B5Nxmp9cIEy SxxStGbij+kQPsu1CQhX90yM6gtxwNKajczj0kjxXS+mB+5GjyJlHB7aG9/S7xmn VKqbF+uRRwCVzsfeVu5oFQuiZuPf3TkoVxdIQFfHgBXSTJ1C7sua26x7CKIA6P/K GkCBdXpSQdLbY41xaocPNKc0v6PiNj3mfpCPcPxNKdyf5LamqWl2NTbayYPLzVXl DShG/YZqstEJCdlTJ1kg+SWLnhf0dDiTvUNdo7N4OMNv6T0z+wis4vM8tpAaZw9f NFDpmTtd6NeGKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:54 2025 by rpki-client