This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft File: 46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json) Hash identifier: BBfsImCGWWXBxNyg3T4AwRvXS2IOQ1rdoeIH56LtR+4= Subject key identifier: 32:5D:81:A8:5E:80:81:07:26:E2:20:5E:D2:0D:EB:7A:9B:DE:E6:A8 Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79 Certificate issuer: /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279 Certificate serial: 019B446EA263ECF30524DDA4446832AF5955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft Manifest number: 171F Signing time: Mon 22 Dec 2025 05:00:59 +0000 Manifest this update: Mon 22 Dec 2025 05:00:59 +0000 Manifest next update: Tue 23 Dec 2025 05:00:59 +0000 Files and hashes: 1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: L7WNilEoO2JHQl2D8snT/JpQ6PcwSFGS1vLgWkQ9d9Q=) 2: kM9y4GrDXnCdNW0cB_r7lGW0ZiE.roa (hash: zTejL3tH1JMvgJP62ZpXEO3alzMxsTDuTLqKj9I1/dA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:a2:63:ec:f3:05:24:dd:a4:44:68:32:af:59:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279 Validity Not Before: Dec 22 05:00:59 2025 GMT Not After : Dec 23 05:00:59 2025 GMT Subject: CN=325d81a85e80810726e2205ed20deb7a9bdee6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:e8:2a:85:22:ec:28:9c:43:bd:95:a9:08: 8d:80:5c:2a:3e:1a:2f:29:0e:67:6f:77:90:21:1f: 8c:83:99:f7:0c:a1:c4:a5:3a:55:0b:23:1c:bc:63: 70:fa:3d:e6:49:89:40:75:da:11:f5:d9:c2:40:93: f0:44:df:ba:20:ea:45:df:1c:db:b3:d9:fb:97:69: 5a:1c:30:fb:36:38:26:d1:74:3e:72:db:65:f4:56: 87:85:98:a5:08:1f:4f:25:c6:f6:22:62:4a:b0:44: a6:23:3a:58:1b:80:01:e0:e8:6f:9d:a2:2d:75:99: bd:54:34:75:3e:1a:1c:84:dd:82:c7:64:52:ed:14: 76:98:2d:69:b3:66:e6:e9:16:70:3c:aa:8c:20:5f: 4a:32:51:2e:38:ea:51:e1:94:a3:7b:85:b1:b3:2a: 07:89:a2:1f:2f:14:7c:40:84:ae:74:b1:8e:26:f1: c9:74:ea:7a:e5:46:81:57:a3:33:a0:a4:ee:7d:3c: 24:76:68:79:7c:72:04:f7:f7:d1:e8:c7:6d:9f:b8: e4:1c:9e:7c:7a:4e:bb:97:1f:d8:45:cf:a3:51:62: a4:d9:f7:b5:92:bc:91:a8:ef:87:5a:52:d9:7e:d6: 72:ea:17:28:2f:a6:27:9e:0e:92:6e:9f:da:69:cc: 77:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5D:81:A8:5E:80:81:07:26:E2:20:5E:D2:0D:EB:7A:9B:DE:E6:A8 X509v3 Authority Key Identifier: keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:4a:69:2d:6f:ad:26:6a:c8:53:99:00:d3:14:0f:61:ac:fe: b4:1f:9c:b3:08:4f:9b:8b:ef:9f:c7:65:b0:df:a0:29:e5:26: 4b:cc:dc:85:0e:de:20:c9:70:0d:da:05:bb:8c:61:46:ad:22: 29:97:ab:62:53:dc:71:46:6b:f3:81:68:13:e9:0c:98:ae:a6: 6f:f8:02:5e:f0:cf:0f:80:e3:16:cc:96:53:4e:9e:ca:94:91: ea:8d:95:b7:c3:54:f9:fc:1a:aa:0e:ab:07:a6:4a:c6:bf:9c: 99:53:a1:bd:d1:70:54:d8:2b:3a:ab:d5:b0:d8:3e:d5:fb:e7: ba:93:8f:a8:19:7e:33:25:4e:f1:7b:44:66:09:5d:9c:e1:9f: 23:a5:46:c5:77:1c:43:2d:81:3c:75:ba:85:bb:e9:25:31:fe: ca:c8:94:09:6a:cc:7c:5d:b6:8f:ea:58:f8:34:43:bc:1f:30: 4e:51:87:71:cf:c6:62:e8:4d:5a:92:be:89:fc:c4:e7:d7:8b: 99:04:5a:df:d0:1a:ba:20:0a:f1:11:32:b3:f8:06:72:11:34: 0f:f1:a9:1e:1a:f0:62:65:ce:36:07:87:b2:f9:dc:05:e3:11: df:d9:30:24:5d:93:34:64:72:06:45:07:58:2e:3d:26:fd:bd: 4a:16:d3:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbqJj7PMFJN2kRGgyr1lVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYWM2MzVmZDQ1ZjU0NzFjNmMyYzNmZTQ1ZWYxYmI0MzM4 YmMyNzkwHhcNMjUxMjIyMDUwMDU5WhcNMjUxMjIzMDUwMDU5WjAzMTEwLwYDVQQD EygzMjVkODFhODVlODA4MTA3MjZlMjIwNWVkMjBkZWI3YTliZGVlNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd7oKoUi7CicQ72VqQiNgFwqPhov KQ5nb3eQIR+Mg5n3DKHEpTpVCyMcvGNw+j3mSYlAddoR9dnCQJPwRN+6IOpF3xzb s9n7l2laHDD7Njgm0XQ+cttl9FaHhZilCB9PJcb2ImJKsESmIzpYG4AB4OhvnaIt dZm9VDR1PhochN2Cx2RS7RR2mC1ps2bm6RZwPKqMIF9KMlEuOOpR4ZSje4WxsyoH iaIfLxR8QISudLGOJvHJdOp65UaBV6MzoKTufTwkdmh5fHIE9/fR6Mdtn7jkHJ58 ek67lx/YRc+jUWKk2fe1kryRqO+HWlLZftZy6hcoL6Ynng6Sbp/aacx3pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJdgahegIEHJuIgXtIN63qb3uaoMB8GA1UdIwQY MBaAFOOsY1/UX1RxxsLD/kXvG7Qzi8J5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAt MWQyMzQ4ZGJkMDM2LzEvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAtMWQyMzQ4ZGJkMDM2 LzEvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkppLW+t JmrIU5kA0xQPYaz+tB+cswhPm4vvn8dlsN+gKeUmS8zchQ7eIMlwDdoFu4xhRq0i KZerYlPccUZr84FoE+kMmK6mb/gCXvDPD4DjFsyWU06eypSR6o2Vt8NU+fwaqg6r B6ZKxr+cmVOhvdFwVNgrOqvVsNg+1fvnupOPqBl+MyVO8XtEZgldnOGfI6VGxXcc Qy2BPHW6hbvpJTH+ysiUCWrMfF22j+pY+DRDvB8wTlGHcc/GYuhNWpK+ifzE59eL mQRa39AauiAK8REys/gGchE0D/GpHhrwYmXONgeHsvncBeMR39kwJF2TNGRyBkUH WC49Jv29ShbTaw== -----END CERTIFICATE-----Generated at Mon Dec 22 09:54:23 2025 by rpki-client