This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft File: 46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json) Hash identifier: ewJjbKn652g9nLCT+rrChzmvzGH0VgEOz8yibpQutQI= Subject key identifier: 34:A4:57:13:BA:0D:EF:EC:C4:FC:C4:2D:48:E9:CC:EC:E1:48:F5:7D Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63 Certificate issuer: /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63 Certificate serial: 019C41D8AB23116D42AACFD6D6900245B8BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft Manifest number: 08FB Signing time: Mon 09 Feb 2026 10:00:44 +0000 Manifest this update: Mon 09 Feb 2026 10:00:44 +0000 Manifest next update: Tue 10 Feb 2026 10:00:44 +0000 Files and hashes: 1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: dsS3Qq66Ku5assmlubCFKaAjm/OiF7bvN08blNdTOz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:ab:23:11:6d:42:aa:cf:d6:d6:90:02:45:b8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63 Validity Not Before: Feb 9 10:00:44 2026 GMT Not After : Feb 10 10:00:44 2026 GMT Subject: CN=34a45713ba0defecc4fcc42d48e9ccece148f57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e8:ef:45:20:d0:2f:da:4e:19:81:d3:0e:4b: 51:a0:2b:55:2b:e5:b5:59:f3:9a:d8:c9:69:37:36: b3:06:6d:e7:41:d4:31:52:75:ad:8d:a8:53:6f:2d: dd:4e:32:71:87:e5:47:f6:b5:e1:82:0b:be:2d:11: 94:9b:e2:60:16:42:9f:0f:55:5d:81:bd:82:54:ea: 46:27:ff:72:f3:97:9c:c9:7e:d0:34:e9:a1:2a:99: 5d:b8:1f:b9:75:fa:f3:7f:f3:32:52:03:12:d8:31: 4b:af:dc:ed:ee:4e:90:fa:c7:a5:fd:ee:d7:d9:43: 71:cd:90:79:9a:ff:3d:d0:46:ab:12:af:73:79:f3: d6:5b:6d:dc:60:f9:15:dd:83:5b:3e:9f:17:01:cc: 3d:7d:da:87:e1:b5:a7:64:70:fd:cc:22:01:48:97: da:64:0d:de:6c:0f:a0:66:d9:eb:94:7a:d6:37:ca: 2e:80:b6:69:44:aa:70:75:4e:0f:c7:38:b6:bf:f4: f4:03:4c:0a:fe:76:73:c2:cf:a4:d5:f8:c4:42:ca: 1d:a0:8d:1b:60:69:b9:50:dc:a9:87:c3:f8:27:3d: bf:99:5f:f8:22:a1:06:dc:db:ff:a7:28:81:14:ee: 2a:5b:9b:b0:0e:b4:1d:b4:c1:7a:05:2b:dd:79:a3: 16:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A4:57:13:BA:0D:EF:EC:C4:FC:C4:2D:48:E9:CC:EC:E1:48:F5:7D X509v3 Authority Key Identifier: keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:33:1c:74:2b:fc:c7:a2:df:83:b0:46:c6:bd:ab:93:10:98: 65:5d:8e:a3:bd:aa:7b:58:54:80:05:f6:84:70:d4:74:b8:33: 07:e5:64:4d:95:70:db:a1:a3:2d:01:bd:8d:04:f2:98:b6:9b: cb:1f:be:eb:99:3b:05:dc:93:5c:6e:d4:e8:02:59:55:d9:b2: ba:20:9b:cd:17:85:49:2d:ba:14:93:d9:7e:15:85:78:de:76: b3:8e:14:09:8d:fc:a1:e1:74:b5:13:fa:f9:2b:21:bd:1b:d7: 73:c9:13:a4:48:74:4a:8b:eb:26:00:ff:66:de:b2:85:04:91: 0b:ef:f5:8c:80:1a:74:24:c9:91:13:68:81:67:bb:95:41:85: 98:43:9c:3c:4d:4d:c8:ca:ed:44:e0:36:33:fc:2d:20:00:35: 7b:3d:5a:5e:17:63:f6:4d:96:d6:1c:f5:42:30:35:6a:d2:a4: 9f:79:8c:50:5d:90:95:da:10:35:ea:a9:4b:35:49:03:65:53: 54:23:e8:c6:6d:24:13:ea:23:2a:c0:9c:7f:4b:9b:2e:04:bc: 6f:7f:fa:47:61:96:0a:b8:05:4f:11:fa:9b:cb:06:1e:72:95: f5:f3:9b:b3:d4:32:f7:a6:d7:e0:97:6a:50:08:a2:69:d0:64: e3:14:30:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2KsjEW1Cqs/W1pACRbi6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYTE4YzBjN2FkYjk4NGI1Zjc3OTc3ZTA4MDBhODlhNTFl ZmJiNjMwHhcNMjYwMjA5MTAwMDQ0WhcNMjYwMjEwMTAwMDQ0WjAzMTEwLwYDVQQD EygzNGE0NTcxM2JhMGRlZmVjYzRmY2M0MmQ0OGU5Y2NlY2UxNDhmNTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArujvRSDQL9pOGYHTDktRoCtVK+W1 WfOa2MlpNzazBm3nQdQxUnWtjahTby3dTjJxh+VH9rXhggu+LRGUm+JgFkKfD1Vd gb2CVOpGJ/9y85ecyX7QNOmhKplduB+5dfrzf/MyUgMS2DFLr9zt7k6Q+sel/e7X 2UNxzZB5mv890EarEq9zefPWW23cYPkV3YNbPp8XAcw9fdqH4bWnZHD9zCIBSJfa ZA3ebA+gZtnrlHrWN8ougLZpRKpwdU4Pxzi2v/T0A0wK/nZzws+k1fjEQsodoI0b YGm5UNyph8P4Jz2/mV/4IqEG3Nv/pyiBFO4qW5uwDrQdtMF6BSvdeaMWTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSkVxO6De/sxPzELUjpzOzhSPV9MB8GA1UdIwQY MBaAFOOhjAx625hLX3eXfggAqJpR77tjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kOTlmMmYtY2VlMS00MDI0LTgyMDgt YmNmMzAyNjBjZTYwLzEvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kOTlmMmYtY2VlMS00MDI0LTgyMDgtYmNmMzAyNjBjZTYw LzEvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTMcdCv8 x6Lfg7BGxr2rkxCYZV2Oo72qe1hUgAX2hHDUdLgzB+VkTZVw26GjLQG9jQTymLab yx++65k7BdyTXG7U6AJZVdmyuiCbzReFSS26FJPZfhWFeN52s44UCY38oeF0tRP6 +SshvRvXc8kTpEh0SovrJgD/Zt6yhQSRC+/1jIAadCTJkRNogWe7lUGFmEOcPE1N yMrtROA2M/wtIAA1ez1aXhdj9k2W1hz1QjA1atKkn3mMUF2QldoQNeqpSzVJA2VT VCPoxm0kE+ojKsCcf0ubLgS8b3/6R2GWCrgFTxH6m8sGHnKV9fObs9Qy96bX4Jdq UAiiadBk4xQwsQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:35 2026 by rpki-client