This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft File: 46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json) Hash identifier: P6UP8uF5wMo338slVU1zFQuwNXE/JfiV1D7Mz3qJaT8= Subject key identifier: FF:87:55:7A:E4:61:64:5D:E0:D7:0F:89:32:4C:68:41:9C:3C:DC:83 Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63 Certificate issuer: /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63 Certificate serial: 019B5FE5A4CAA9CD74EEFB2B961AD33034A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft Manifest number: 0886 Signing time: Sat 27 Dec 2025 13:00:43 +0000 Manifest this update: Sat 27 Dec 2025 13:00:43 +0000 Manifest next update: Sun 28 Dec 2025 13:00:43 +0000 Files and hashes: 1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: O+ZfZKUMDRtR2yJD7o6Rn9Ks65+OJnd7Tr8khSwxt7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:e5:a4:ca:a9:cd:74:ee:fb:2b:96:1a:d3:30:34:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63 Validity Not Before: Dec 27 13:00:43 2025 GMT Not After : Dec 28 13:00:43 2025 GMT Subject: CN=ff87557ae461645de0d70f89324c68419c3cdc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:39:51:46:68:14:f1:52:09:db:83:cb:ae: 51:88:33:db:b6:0f:f9:64:00:97:3d:94:bd:5c:fa: 5c:46:13:90:d2:15:21:77:ae:ac:5b:46:52:d9:dc: 53:6f:5e:5c:91:7d:78:6d:ec:f7:0a:e4:58:7e:93: ff:1b:8c:5e:bf:b2:6c:9a:02:3b:e0:f5:85:6a:7d: 55:79:35:dc:ee:1d:35:f9:2e:a8:86:3c:ef:1d:7e: 2b:6b:0e:e4:f5:64:2b:80:82:6b:e0:57:44:87:9c: 14:3a:18:94:46:5d:cf:46:92:c6:90:b2:83:fb:9e: 1c:a6:30:0f:b2:81:0d:77:ae:dd:2b:58:44:2b:43: 24:b2:de:a8:97:ef:46:a1:26:cc:12:67:2e:6f:d2: 56:7a:2a:47:02:5d:cd:a6:45:5b:20:ff:64:19:70: fe:f7:f1:2e:2a:d3:6a:d6:ee:df:1a:a3:f8:08:db: 84:04:3c:10:1b:02:df:63:c4:52:1b:0d:0c:9f:29: 02:d3:5c:f6:8c:3f:4b:c1:fc:4c:39:81:ba:d4:32: 8c:66:4b:e4:a7:8c:0b:86:b6:56:f3:35:49:4a:45: 6e:5d:9b:c7:2a:5d:15:e4:60:87:96:ee:8a:dc:11: f3:85:fd:e9:ba:f3:02:14:da:a2:a4:61:a4:1e:93: f5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:87:55:7A:E4:61:64:5D:E0:D7:0F:89:32:4C:68:41:9C:3C:DC:83 X509v3 Authority Key Identifier: keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b6:a1:c1:b8:6c:c9:81:5d:72:b7:b5:f0:ab:ba:02:c0:80: 89:37:0f:43:c6:40:58:ed:86:53:0c:c8:4b:d8:62:48:88:23: 26:de:92:76:3d:88:e6:ef:07:86:0a:16:22:0a:ee:02:26:b5: 14:9d:20:32:18:ab:87:a9:7a:36:b4:2f:88:d5:ee:d9:33:2a: 46:fd:c8:b0:09:e5:9c:41:3d:4f:93:4c:3f:41:78:ae:a6:88: ed:75:43:6a:45:81:40:48:86:07:84:af:cc:4e:66:5b:b8:ac: 59:63:79:f0:69:13:7a:39:47:3b:ea:31:05:d4:7a:bf:8f:35: 12:2c:e9:6c:54:8b:84:21:22:13:3e:cb:b9:b1:f4:60:54:df: 63:62:ea:66:e2:9a:08:10:ca:0d:16:4a:b7:be:0d:f0:ff:cd: 52:07:c5:46:c1:0d:10:db:f3:8c:ab:d8:4c:9c:08:7f:4a:9e: f1:5b:70:78:90:64:6e:b2:8b:b5:21:a5:7b:b4:4a:bc:d6:4d: 27:19:b2:c1:fb:ee:ef:34:47:39:24:32:fe:32:af:47:35:3f: a0:82:d2:bb:c5:02:ee:08:e1:65:ce:a4:3b:86:3e:ce:c4:c7: cf:43:d8:04:c7:2d:1e:0a:45:a3:8a:93:b9:f6:89:e1:84:a7: 4a:3d:f3:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtf5aTKqc107vsrlhrTMDSiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYTE4YzBjN2FkYjk4NGI1Zjc3OTc3ZTA4MDBhODlhNTFl ZmJiNjMwHhcNMjUxMjI3MTMwMDQzWhcNMjUxMjI4MTMwMDQzWjAzMTEwLwYDVQQD EyhmZjg3NTU3YWU0NjE2NDVkZTBkNzBmODkzMjRjNjg0MTljM2NkYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+E5UUZoFPFSCduDy65RiDPbtg/5 ZACXPZS9XPpcRhOQ0hUhd66sW0ZS2dxTb15ckX14bez3CuRYfpP/G4xev7JsmgI7 4PWFan1VeTXc7h01+S6ohjzvHX4raw7k9WQrgIJr4FdEh5wUOhiURl3PRpLGkLKD +54cpjAPsoENd67dK1hEK0Mkst6ol+9GoSbMEmcub9JWeipHAl3NpkVbIP9kGXD+ 9/EuKtNq1u7fGqP4CNuEBDwQGwLfY8RSGw0MnykC01z2jD9LwfxMOYG61DKMZkvk p4wLhrZW8zVJSkVuXZvHKl0V5GCHlu6K3BHzhf3puvMCFNqipGGkHpP1yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+HVXrkYWRd4NcPiTJMaEGcPNyDMB8GA1UdIwQY MBaAFOOhjAx625hLX3eXfggAqJpR77tjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kOTlmMmYtY2VlMS00MDI0LTgyMDgt YmNmMzAyNjBjZTYwLzEvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kOTlmMmYtY2VlMS00MDI0LTgyMDgtYmNmMzAyNjBjZTYw LzEvNDZHTURIcmJtRXRmZDVkLUNBQ29tbEh2dTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrahwbhs yYFdcre18Ku6AsCAiTcPQ8ZAWO2GUwzIS9hiSIgjJt6Sdj2I5u8HhgoWIgruAia1 FJ0gMhirh6l6NrQviNXu2TMqRv3IsAnlnEE9T5NMP0F4rqaI7XVDakWBQEiGB4Sv zE5mW7isWWN58GkTejlHO+oxBdR6v481EizpbFSLhCEiEz7LubH0YFTfY2LqZuKa CBDKDRZKt74N8P/NUgfFRsENENvzjKvYTJwIf0qe8VtweJBkbrKLtSGle7RKvNZN Jxmywfvu7zRHOSQy/jKvRzU/oILSu8UC7gjhZc6kO4Y+zsTHz0PYBMctHgpFo4qT ufaJ4YSnSj3zMA== -----END CERTIFICATE-----Generated at Sat Dec 27 15:40:08 2025 by rpki-client