This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft File: 46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json) Hash identifier: hmkW5s8rUtnYZf6WEWVi+IOgWM/fASuDCpOqAQVe9HY= Subject key identifier: 34:4B:B0:23:CE:B4:0C:A7:F3:98:2D:14:52:DF:7B:EF:F0:91:1E:A6 Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63 Certificate issuer: /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63 Certificate serial: 019B337B71FB5B53B6C5BDAE4646D16141AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft Manifest number: 086F Signing time: Thu 18 Dec 2025 22:01:26 +0000 Manifest this update: Thu 18 Dec 2025 22:01:26 +0000 Manifest next update: Fri 19 Dec 2025 22:01:26 +0000 Files and hashes: 1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: onZYTY8xiaDZXBFqu6FbYGoY0WVmHDTBJklJ57FPm5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:71:fb:5b:53:b6:c5:bd:ae:46:46:d1:61:41:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63 Validity Not Before: Dec 18 22:01:26 2025 GMT Not After : Dec 19 22:01:26 2025 GMT Subject: CN=344bb023ceb40ca7f3982d1452df7beff0911ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bc:7e:c4:60:ab:68:d8:00:3d:42:07:ff:62: 6a:0e:5a:49:62:68:20:d6:9f:b6:21:24:ab:30:52: 53:91:a3:1d:24:eb:cc:bc:1d:d8:a4:75:60:49:58: 2b:94:ea:03:c4:bf:ef:84:ce:12:cc:01:60:5a:41: bc:39:b2:ac:9a:4e:4b:a5:ca:8c:a5:04:22:7d:4f: 01:ff:60:1d:62:b4:86:b8:05:eb:b7:fd:b3:1a:58: ee:f6:7d:f1:36:6c:32:07:5b:21:ad:b7:03:73:d3: 28:bd:f3:4b:0c:84:71:6c:c1:09:0d:72:a8:fb:c2: 74:3b:6b:1d:31:89:85:eb:df:ca:b7:c0:21:fc:78: 30:bf:15:68:a6:a8:1e:c1:97:ce:b4:be:6f:b2:93: c9:23:00:5a:a9:56:6b:35:f7:07:79:d1:d5:a6:a2: ac:dd:2e:2e:3b:be:0b:23:7d:91:02:87:98:ae:b8: 23:15:9f:dd:6f:66:c9:34:73:74:30:68:7b:d4:41: a7:4d:51:b7:11:8d:a7:74:25:52:31:63:4d:63:3d: 07:51:aa:82:94:6b:12:a4:ee:87:26:13:59:b0:9f: a6:b6:cc:89:c6:f8:68:81:7b:e2:b9:79:88:bc:f1: 76:29:ce:82:1f:48:30:ed:be:dd:80:48:bd:04:c0: 8b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4B:B0:23:CE:B4:0C:A7:F3:98:2D:14:52:DF:7B:EF:F0:91:1E:A6 X509v3 Authority Key Identifier: keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8f:9b:ed:0c:44:f3:a5:17:44:e9:38:65:63:3a:5a:9d:70: 59:2f:ba:2a:2a:f7:5b:75:73:03:dd:f1:7f:02:66:f4:62:bd: 35:dd:6d:51:1d:0a:db:08:79:05:da:6f:3c:97:e9:32:ed:cd: cf:97:8b:47:83:38:9f:fb:15:d0:90:1d:ba:73:18:4b:18:77: 22:23:5c:3e:65:ee:55:da:bd:5f:35:2a:14:ed:52:6b:85:b3: 82:13:39:d5:a3:31:c8:ee:b2:49:5d:30:78:81:98:99:ba:9e: eb:81:29:59:dc:f6:fe:01:8a:21:3b:06:30:d7:1b:54:b4:f3: 75:51:20:8c:46:fb:73:66:d5:7e:4c:26:65:20:27:3d:4d:b2: 30:b3:9c:b9:91:4a:ca:2e:cc:6f:f1:6e:da:5a:25:18:18:2a: b8:c9:bf:44:65:2f:46:d4:7a:ac:0a:92:59:0e:f8:e2:41:6e: 7f:14:d1:22:28:43:18:92:02:85:9a:af:3f:f7:1d:f4:fb:83: dc:9c:aa:8b:32:08:ac:95:66:78:7a:90:d4:25:f6:84:ff:8e: e6:52:89:ae:c3:70:d9:f1:e3:a3:36:f5:5e:13:9b:19:ba:d6: 5d:13:3b:c2:6f:2b:02:49:f1:cf:12:ca:c6:d3:c6:db:8c:da: f9:c3:7c:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze3H7W1O2xb2uRkbRYUGtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYTE4YzBjN2FkYjk4NGI1Zjc3OTc3ZTA4MDBhODlhNTFl ZmJiNjMwHhcNMjUxMjE4MjIwMTI2WhcNMjUxMjE5MjIwMTI2WjAzMTEwLwYDVQQD EygzNDRiYjAyM2NlYjQwY2E3ZjM5ODJkMTQ1MmRmN2JlZmYwOTExZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrx+xGCraNgAPUIH/2JqDlpJYmgg 1p+2ISSrMFJTkaMdJOvMvB3YpHVgSVgrlOoDxL/vhM4SzAFgWkG8ObKsmk5LpcqM pQQifU8B/2AdYrSGuAXrt/2zGlju9n3xNmwyB1shrbcDc9MovfNLDIRxbMEJDXKo +8J0O2sdMYmF69/Kt8Ah/HgwvxVopqgewZfOtL5vspPJIwBaqVZrNfcHedHVpqKs 3S4uO74LI32RAoeYrrgjFZ/db2bJNHN0MGh71EGnTVG3EY2ndCVSMWNNYz0HUaqC lGsSpO6HJhNZsJ+mtsyJxvhogXviuXmIvPF2Kc6CH0gw7b7dgEi9BMCLowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRLsCPOtAyn85gtFFLfe+/wkR6mMB8GA1UdIwQY MBaAFOOhjAx625hLX3eXfggAqJpR77tjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kOTlmMmYtY2VlMS00MDI0LTgyMDgt YmNmMzAyNjBjZTYwLzEvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kOTlmMmYtY2VlMS00MDI0LTgyMDgtYmNmMzAyNjBjZTYw LzEvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVo+b7QxE 86UXROk4ZWM6Wp1wWS+6Kir3W3VzA93xfwJm9GK9Nd1tUR0K2wh5BdpvPJfpMu3N z5eLR4M4n/sV0JAdunMYSxh3IiNcPmXuVdq9XzUqFO1Sa4WzghM51aMxyO6ySV0w eIGYmbqe64EpWdz2/gGKITsGMNcbVLTzdVEgjEb7c2bVfkwmZSAnPU2yMLOcuZFK yi7Mb/Fu2lolGBgquMm/RGUvRtR6rAqSWQ744kFufxTRIihDGJIChZqvP/cd9PuD 3JyqizIIrJVmeHqQ1CX2hP+O5lKJrsNw2fHjozb1XhObGbrWXRM7wm8rAknxzxLK xtPG24za+cN8kQ== -----END CERTIFICATE-----Generated at Fri Dec 19 04:55:53 2025 by rpki-client