This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft File: 46iYuhJQyJicx22fi1PR28YrKJA.mft (raw, json) Hash identifier: kOHS4yKHjAyWBENH2od92hu2sB843RnvZO1eMQXwCd8= Subject key identifier: 87:56:D8:E6:9A:D0:C9:C4:5B:E2:E0:1B:A8:57:17:B1:83:E2:E3:6D Authority key identifier: E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90 Certificate issuer: /CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890 Certificate serial: 019AF2091BD2A16CF0C8B38902D911C26447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft Manifest number: 0CBA Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: 46iYuhJQyJicx22fi1PR28YrKJA.crl (hash: KTd/AQp6oNnwkpk2PD7Sk1VaJE4mUFM/sCDOjSO9mPg=) 2: iPsc5cdyBdI5OoAXm1WxUyXcwKs.roa (hash: uev/ryB2qmGhnPuUk4GEhG25G76cZsNfJpVAjKwYXdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1b:d2:a1:6c:f0:c8:b3:89:02:d9:11:c2:64:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890 Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=8756d8e69ad0c9c45be2e01ba85717b183e2e36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:e0:73:27:73:de:58:73:6c:73:ae:00:9b: f1:e1:cc:b9:68:05:35:5e:8c:e6:45:68:73:7c:17: 22:3d:50:7d:5a:e9:97:ba:cd:f3:9f:db:f6:4f:ba: c6:05:47:81:e0:9d:9b:43:a6:12:3f:08:1b:3a:f3: cf:81:36:ab:c5:5f:27:ef:30:20:3f:87:17:e0:a8: 41:19:f8:7a:e6:15:46:e2:7a:e9:e7:25:b7:ba:87: 4a:fb:cc:79:91:7a:a7:9d:31:aa:32:0c:89:a8:7c: 56:e4:4b:9b:c7:12:2a:6f:9a:db:6f:b2:ac:10:f0: 7b:37:4c:20:95:23:a3:3f:2b:d0:cf:f1:a0:fa:3f: 72:aa:fc:66:ce:32:9f:8d:d3:f8:e5:87:f3:f9:eb: 63:45:a8:08:b1:63:ec:63:17:e4:16:d5:33:4a:6e: 36:88:b2:7c:e1:86:5b:fb:b1:c8:00:33:30:d6:08: ae:32:15:78:0b:53:d7:74:1f:cd:89:81:51:7c:bc: 29:10:de:80:b6:58:56:61:81:14:ee:ec:da:37:f5: de:58:1c:7f:85:71:ca:23:7b:8d:1e:d1:84:df:6b: bb:99:88:a1:d7:10:83:a3:13:ae:5a:4b:30:27:30: 67:a1:12:1a:5e:e0:69:ae:22:64:33:40:8b:01:93: bf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:56:D8:E6:9A:D0:C9:C4:5B:E2:E0:1B:A8:57:17:B1:83:E2:E3:6D X509v3 Authority Key Identifier: keyid:E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:65:42:f9:e7:7b:0f:5f:e7:fa:c2:81:d7:b9:a5:d1:3a:29: f9:2b:34:1f:f0:36:8a:ed:e6:e2:50:0e:4a:ec:cb:30:57:10: b6:b2:a1:29:09:73:42:6f:20:45:27:0f:85:c1:01:73:aa:f9: 8c:ec:3d:37:ec:d5:d4:61:85:d6:8c:d6:90:f2:dc:69:6c:be: 5f:51:bf:8a:84:d9:87:ef:a4:36:21:49:ed:c3:96:87:9b:57: 10:dd:9a:1a:8f:e5:24:2c:4c:56:01:f7:a1:4c:66:6f:ae:22: 9c:d4:1a:69:1d:85:47:77:d0:00:7a:48:a5:c0:b2:3a:2f:68: 7d:2b:29:5e:a7:10:06:34:bb:ab:70:2b:82:c3:32:03:a0:06: 3b:a3:e8:fb:c0:9e:19:c2:3c:32:8e:d5:a9:26:8e:c3:92:4b: 36:1a:a5:85:d1:17:90:34:d3:39:6a:f1:bc:88:34:83:15:8d: ef:c1:f9:c5:3a:79:fe:77:29:31:5b:7a:2c:cd:3d:ba:ce:e4: 26:53:6d:a3:60:62:ab:9c:c4:5c:24:0f:de:a2:28:4d:be:3d: 17:ce:b4:48:c1:6f:70:bb:81:a3:b6:c3:b8:0c:36:72:84:d1: 52:dc:ae:0e:fd:8b:82:38:dd:e6:a7:d2:ee:8e:16:e5:6d:2e: 42:f9:96:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRvSoWzwyLOJAtkRwmRHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYTg5OGJhMTI1MGM4OTg5Y2M3NmQ5ZjhiNTNkMWRiYzYy YjI4OTAwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD Eyg4NzU2ZDhlNjlhZDBjOWM0NWJlMmUwMWJhODU3MTdiMTgzZTJlMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnvgcydz3lhzbHOuAJvx4cy5aAU1 XozmRWhzfBciPVB9WumXus3zn9v2T7rGBUeB4J2bQ6YSPwgbOvPPgTarxV8n7zAg P4cX4KhBGfh65hVG4nrp5yW3uodK+8x5kXqnnTGqMgyJqHxW5EubxxIqb5rbb7Ks EPB7N0wglSOjPyvQz/Gg+j9yqvxmzjKfjdP45Yfz+etjRagIsWPsYxfkFtUzSm42 iLJ84YZb+7HIADMw1giuMhV4C1PXdB/NiYFRfLwpEN6AtlhWYYEU7uzaN/XeWBx/ hXHKI3uNHtGE32u7mYih1xCDoxOuWkswJzBnoRIaXuBpriJkM0CLAZO/WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdW2Oaa0MnEW+LgG6hXF7GD4uNtMB8GA1UdIwQY MBaAFOOomLoSUMiYnMdtn4tT0dvGKyiQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDZpWXVoSlF5SmljeDIyZmkxUFIyOFlyS0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iNjg4ZGEtNzY1Yy00NDgxLThlYjMt NzMwMzgzMjExZjI1LzEvNDZpWXVoSlF5SmljeDIyZmkxUFIyOFlyS0pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9iNjg4ZGEtNzY1Yy00NDgxLThlYjMtNzMwMzgzMjExZjI1 LzEvNDZpWXVoSlF5SmljeDIyZmkxUFIyOFlyS0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmVC+ed7 D1/n+sKB17ml0Top+Ss0H/A2iu3m4lAOSuzLMFcQtrKhKQlzQm8gRScPhcEBc6r5 jOw9N+zV1GGF1ozWkPLcaWy+X1G/ioTZh++kNiFJ7cOWh5tXEN2aGo/lJCxMVgH3 oUxmb64inNQaaR2FR3fQAHpIpcCyOi9ofSspXqcQBjS7q3ArgsMyA6AGO6Po+8Ce GcI8Mo7VqSaOw5JLNhqlhdEXkDTTOWrxvIg0gxWN78H5xTp5/ncpMVt6LM09us7k JlNto2Biq5zEXCQP3qIoTb49F860SMFvcLuBo7bDuAw2coTRUtyuDv2Lgjjd5qfS 7o4W5W0uQvmWyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:54 2025 by rpki-client