This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft File: 46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json) Hash identifier: bMb3gdXQedPvNRkvXoaElbxFJVay/RZbESOntA/kJ1Q= Subject key identifier: 8D:2F:A1:37:F9:1C:38:67:EB:B9:C4:1B:18:0F:AB:36:93:B0:54:94 Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79 Certificate issuer: /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279 Certificate serial: 019B239A1B24A1540F546D750AA0EE9245D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft Manifest number: 170E Signing time: Mon 15 Dec 2025 20:01:00 +0000 Manifest this update: Mon 15 Dec 2025 20:01:00 +0000 Manifest next update: Tue 16 Dec 2025 20:01:00 +0000 Files and hashes: 1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: 0AOZ4qSlRW7gb6x/gM516oN8DAJ8DNAIxzxqOei5C38=) 2: kM9y4GrDXnCdNW0cB_r7lGW0ZiE.roa (hash: zTejL3tH1JMvgJP62ZpXEO3alzMxsTDuTLqKj9I1/dA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:9a:1b:24:a1:54:0f:54:6d:75:0a:a0:ee:92:45:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279 Validity Not Before: Dec 15 20:01:00 2025 GMT Not After : Dec 16 20:01:00 2025 GMT Subject: CN=8d2fa137f91c3867ebb9c41b180fab3693b05494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0b:f0:55:3c:49:87:94:29:62:bf:19:93:d3: a6:2c:de:b4:29:a2:32:00:f3:8b:31:e1:17:48:b7: 51:1a:32:92:b2:0e:db:fa:52:b8:8f:f1:af:4f:5a: 67:51:fa:b7:d6:3a:0e:81:e8:c0:da:2f:b0:2f:68: 82:0d:29:d0:f2:15:db:ec:4c:90:02:6d:4c:2f:42: e1:73:ba:5c:e7:15:78:fe:02:c8:c0:0d:b4:e8:3e: 8d:06:9c:1e:16:d4:52:3f:8c:da:83:2d:8f:fb:5d: d0:5a:ed:9d:ef:4b:75:dc:de:56:68:b6:3e:f8:aa: b1:12:fa:ce:02:ea:c5:f7:e0:41:20:4e:db:d4:8d: 15:47:de:03:8b:eb:07:ab:09:b4:dc:e3:4f:e0:3b: d8:c0:9a:b9:ed:ff:0c:8c:7b:97:07:ff:df:bb:82: 66:15:0c:73:af:05:fa:64:05:13:3d:7c:0c:37:8f: 62:41:65:4b:e1:05:87:d0:4b:74:dc:28:fb:db:ab: e5:5c:d8:cb:66:ce:ec:b1:0c:18:9e:9c:97:33:92: 4f:37:18:3e:d6:9b:36:63:96:51:86:bd:91:aa:2d: 42:a6:9b:9a:de:bb:5b:64:f4:96:8f:82:fc:95:6f: 50:59:e9:49:d5:a2:f1:48:44:20:1c:b2:47:5b:5f: 36:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2F:A1:37:F9:1C:38:67:EB:B9:C4:1B:18:0F:AB:36:93:B0:54:94 X509v3 Authority Key Identifier: keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:59:7f:3c:41:02:fd:8e:7a:40:2e:9f:48:42:99:ba:0e:ae: a8:e7:b6:1a:fe:83:1a:b2:ea:03:04:42:af:69:65:08:b1:d0: b1:38:c2:37:92:f0:43:70:c8:b7:63:22:52:37:8f:db:20:2a: 6e:b8:fe:40:a6:94:70:f9:96:ac:70:d9:86:d8:86:e1:3a:35: 8a:5b:77:5c:7f:92:98:de:96:43:13:1d:c4:cb:2c:0d:b4:82: c3:88:37:87:cd:f8:2f:d5:39:35:d9:86:65:62:04:cb:c4:91: 26:f6:9b:c5:f8:53:90:e1:96:a4:08:21:cc:96:0c:35:cc:bf: 7e:af:b8:cd:ce:ac:2e:a2:f9:0b:95:77:32:33:30:62:3b:70: 40:01:36:64:da:dd:69:45:a2:9e:03:cb:76:4a:1a:28:4a:51: f5:f6:04:ef:99:90:d7:65:9a:6c:df:6f:bd:d6:d2:83:be:68: 1f:2b:19:83:ec:ba:49:2f:5c:00:e0:65:95:2e:00:e0:ff:90: e1:ea:f8:5d:5d:71:ef:8a:2b:88:75:15:19:0a:65:cf:56:6a: 74:86:10:5f:b1:f6:a5:25:1e:93:ed:ef:95:ff:b2:e3:8e:59: 4f:95:8c:32:6d:85:c0:21:71:e7:82:9f:24:66:83:19:26:fe: b7:df:35:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmhskoVQPVG11CqDukkXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYWM2MzVmZDQ1ZjU0NzFjNmMyYzNmZTQ1ZWYxYmI0MzM4 YmMyNzkwHhcNMjUxMjE1MjAwMTAwWhcNMjUxMjE2MjAwMTAwWjAzMTEwLwYDVQQD Eyg4ZDJmYTEzN2Y5MWMzODY3ZWJiOWM0MWIxODBmYWIzNjkzYjA1NDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AvwVTxJh5QpYr8Zk9OmLN60KaIy APOLMeEXSLdRGjKSsg7b+lK4j/GvT1pnUfq31joOgejA2i+wL2iCDSnQ8hXb7EyQ Am1ML0Lhc7pc5xV4/gLIwA206D6NBpweFtRSP4zagy2P+13QWu2d70t13N5WaLY+ +KqxEvrOAurF9+BBIE7b1I0VR94Di+sHqwm03ONP4DvYwJq57f8MjHuXB//fu4Jm FQxzrwX6ZAUTPXwMN49iQWVL4QWH0Et03Cj726vlXNjLZs7ssQwYnpyXM5JPNxg+ 1ps2Y5ZRhr2Rqi1Cppua3rtbZPSWj4L8lW9QWelJ1aLxSEQgHLJHW182rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0voTf5HDhn67nEGxgPqzaTsFSUMB8GA1UdIwQY MBaAFOOsY1/UX1RxxsLD/kXvG7Qzi8J5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAt MWQyMzQ4ZGJkMDM2LzEvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAtMWQyMzQ4ZGJkMDM2 LzEvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVl/PEEC /Y56QC6fSEKZug6uqOe2Gv6DGrLqAwRCr2llCLHQsTjCN5LwQ3DIt2MiUjeP2yAq brj+QKaUcPmWrHDZhtiG4To1ilt3XH+SmN6WQxMdxMssDbSCw4g3h834L9U5NdmG ZWIEy8SRJvabxfhTkOGWpAghzJYMNcy/fq+4zc6sLqL5C5V3MjMwYjtwQAE2ZNrd aUWingPLdkoaKEpR9fYE75mQ12WabN9vvdbSg75oHysZg+y6SS9cAOBllS4A4P+Q 4er4XV1x74oriHUVGQplz1ZqdIYQX7H2pSUek+3vlf+y445ZT5WMMm2FwCFx54Kf JGaDGSb+t981Yg== -----END CERTIFICATE-----Generated at Mon Dec 15 21:46:56 2025 by rpki-client