This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft File: 46ttsqw26Ykzq5momk2cFp6l77s.mft (raw, json) Hash identifier: thcACilK8aG7Z5bITuvaNwjh1JclS/HtNCP5WVYOafA= Subject key identifier: 19:0F:E3:A5:DB:60:FE:6E:8A:D6:47:0D:9F:C2:66:C8:B5:73:C7:09 Authority key identifier: E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB Certificate issuer: /CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb Certificate serial: 019AF19AD711C1C6D7F836BABDD76250EBCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft Manifest number: 1643 Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: 46ttsqw26Ykzq5momk2cFp6l77s.crl (hash: eaXbQpfZ1hFjyB+l5SoNcld1kMKGEmoC/OGRFnp2ymo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d7:11:c1:c6:d7:f8:36:ba:bd:d7:62:50:eb:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=190fe3a5db60fe6e8ad6470d9fc266c8b573c709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:57:28:e8:50:cc:e3:a0:f9:cf:cf:50:4e:66: 8d:60:c0:e0:6b:dc:20:62:bd:10:3e:05:aa:a6:ee: 70:2b:70:95:3b:fb:be:90:11:68:52:44:94:b4:38: 51:11:cf:e3:d6:fe:35:c5:f4:a4:80:cd:9e:7a:72: 86:74:27:ae:69:11:b5:14:af:c1:39:40:ae:1a:d7: ee:a7:41:1a:7e:92:4c:38:a6:9c:17:d7:d3:f2:65: 06:b6:7a:30:ad:83:5d:85:79:26:98:5c:d4:a6:4f: d7:63:e7:ce:31:40:f6:6f:83:06:cc:09:a8:3a:d9: a5:e1:7a:c3:1f:02:06:d6:98:7e:85:07:f6:07:b8: ed:b9:ec:6f:e2:6d:a6:c5:7c:ca:bc:95:54:be:79: 63:65:2a:12:7a:7d:28:b7:32:4b:ad:a7:26:d0:85: 47:da:20:a2:90:9c:d9:33:8e:0b:75:88:da:a3:c0: 9e:45:6d:d1:5a:de:9d:22:e8:4f:b4:9e:b7:64:ed: 83:12:26:32:57:b1:f3:5f:cb:3a:82:da:0d:31:eb: 4f:4a:50:72:f9:85:3a:5b:f4:9a:ca:30:ac:dc:b0: 68:28:ac:c6:64:81:2f:ee:54:46:10:37:ee:5a:30: c6:7a:16:6d:a4:1e:14:b3:98:a7:59:53:33:9f:5c: 09:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0F:E3:A5:DB:60:FE:6E:8A:D6:47:0D:9F:C2:66:C8:B5:73:C7:09 X509v3 Authority Key Identifier: keyid:E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:de:64:96:01:65:59:49:71:03:cb:1f:36:5c:ce:20:00:33: ef:40:57:d0:ed:63:65:b9:a0:7b:6c:69:4b:39:7b:85:67:e8: b3:fb:43:bc:d0:e8:f3:a8:de:3a:73:f4:55:46:48:86:c4:50: f4:a5:10:17:7d:e2:16:18:4b:88:23:3b:f6:59:fc:73:ac:3e: 09:67:8a:c0:49:82:58:33:70:6e:95:d6:32:6b:14:75:ea:7a: 87:67:4e:da:23:a5:07:20:be:d4:c6:c1:0d:97:e6:08:9d:31: 35:84:8d:80:89:1b:b5:5e:26:f2:cc:90:ad:29:13:8e:0c:52: 29:34:6a:e6:ac:cb:1b:44:e5:bd:5c:65:05:b2:b0:9e:51:24: d4:aa:bb:91:eb:c7:83:55:37:b4:bf:96:7d:95:41:72:5e:73: d9:92:69:61:86:04:b3:62:33:33:76:b8:53:af:32:21:de:a3: 7e:c4:b5:48:5b:b6:91:a9:0d:2f:4d:07:f4:f3:d3:66:cd:52: e3:c0:c5:d5:1e:bf:1b:02:32:db:01:ee:c2:aa:65:8b:4a:7c: db:7c:1f:4e:ca:f3:4c:6b:b1:ee:aa:c4:3a:64:b7:db:44:33: 69:2b:13:95:9e:6b:26:72:12:31:ba:d1:d4:9b:18:91:9f:c4: 5b:18:d6:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtcRwcbX+Da6vddiUOvOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYWI2ZGIyYWMzNmU5ODkzM2FiOTlhODlhNGQ5YzE2OWVh NWVmYmIwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD EygxOTBmZTNhNWRiNjBmZTZlOGFkNjQ3MGQ5ZmMyNjZjOGI1NzNjNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVco6FDM46D5z89QTmaNYMDga9wg Yr0QPgWqpu5wK3CVO/u+kBFoUkSUtDhREc/j1v41xfSkgM2eenKGdCeuaRG1FK/B OUCuGtfup0EafpJMOKacF9fT8mUGtnowrYNdhXkmmFzUpk/XY+fOMUD2b4MGzAmo Otml4XrDHwIG1ph+hQf2B7jtuexv4m2mxXzKvJVUvnljZSoSen0otzJLracm0IVH 2iCikJzZM44LdYjao8CeRW3RWt6dIuhPtJ63ZO2DEiYyV7HzX8s6gtoNMetPSlBy +YU6W/SayjCs3LBoKKzGZIEv7lRGEDfuWjDGehZtpB4Us5inWVMzn1wJzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkP46XbYP5uitZHDZ/CZsi1c8cJMB8GA1UdIwQY MBaAFOOrbbKsNumJM6uZqJpNnBaepe+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDZ0dHNxdzI2WWt6cTVtb21rMmNGcDZsNzdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lZDAxYWEtMTVmYS00M2E2LThhMTUt ZjI2ZjUwODM0ZjI5LzEvNDZ0dHNxdzI2WWt6cTVtb21rMmNGcDZsNzdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9lZDAxYWEtMTVmYS00M2E2LThhMTUtZjI2ZjUwODM0ZjI5 LzEvNDZ0dHNxdzI2WWt6cTVtb21rMmNGcDZsNzdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADd5klgFl WUlxA8sfNlzOIAAz70BX0O1jZbmge2xpSzl7hWfos/tDvNDo86jeOnP0VUZIhsRQ 9KUQF33iFhhLiCM79ln8c6w+CWeKwEmCWDNwbpXWMmsUdep6h2dO2iOlByC+1MbB DZfmCJ0xNYSNgIkbtV4m8syQrSkTjgxSKTRq5qzLG0TlvVxlBbKwnlEk1Kq7kevH g1U3tL+WfZVBcl5z2ZJpYYYEs2IzM3a4U68yId6jfsS1SFu2kakNL00H9PPTZs1S 48DF1R6/GwIy2wHuwqpli0p823wfTsrzTGux7qrEOmS320QzaSsTlZ5rJnISMbrR 1JsYkZ/EWxjWag== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:35 2025 by rpki-client