This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft File: 46ttsqw26Ykzq5momk2cFp6l77s.mft (raw, json) Hash identifier: +nBeRvAMrKcv+sGn841oTkD2yTAgTAcCSQxnMeCvTHU= Subject key identifier: 94:CA:CF:0E:23:64:35:50:CF:D5:D6:6F:8D:DF:E8:B4:FE:6D:0E:1A Authority key identifier: E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB Certificate issuer: /CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb Certificate serial: 019B67686E54F3B899AC5B6BFD8C6614DEAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft Manifest number: 1680 Signing time: Mon 29 Dec 2025 00:00:55 +0000 Manifest this update: Mon 29 Dec 2025 00:00:55 +0000 Manifest next update: Tue 30 Dec 2025 00:00:55 +0000 Files and hashes: 1: 46ttsqw26Ykzq5momk2cFp6l77s.crl (hash: TwgqaJpgExEJhUWxmsL5Ecq4uLaSXMjD3vrxcsEjm74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:6e:54:f3:b8:99:ac:5b:6b:fd:8c:66:14:de:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb Validity Not Before: Dec 29 00:00:55 2025 GMT Not After : Dec 30 00:00:55 2025 GMT Subject: CN=94cacf0e23643550cfd5d66f8ddfe8b4fe6d0e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bf:e6:01:ca:3d:9b:2a:61:d2:86:ea:cb:45: 56:bc:ae:b2:1e:02:2f:7d:ee:a1:fd:45:ef:1f:f3: 90:59:71:f1:82:a2:e6:92:f0:e8:f6:ed:ac:06:91: 43:6f:45:c6:b4:7d:de:00:a3:46:97:96:fc:4a:f4: dc:51:e0:09:18:59:5c:34:a4:71:81:03:68:59:56: f2:96:a2:b7:ad:f7:11:2a:34:69:9e:6a:e0:65:60: a8:3a:85:2c:8c:e8:db:24:11:61:1f:a5:f1:b4:44: 1b:bd:7f:82:de:b0:d4:71:f6:58:b3:a4:58:51:4a: 21:0c:9f:9c:f8:71:5a:c7:a3:49:5d:30:44:cb:c7: e6:94:6d:a4:28:04:3e:41:fa:ca:25:23:1e:64:e8: 53:44:c9:f5:81:d4:57:98:8f:30:3a:0b:9c:c5:7f: 3b:65:9e:ed:32:29:ad:0f:ad:69:6c:79:42:d3:00: 7d:e3:b4:45:66:7d:03:7b:1d:f1:12:36:10:81:c4: bb:b0:19:43:a5:77:a2:ff:a5:e6:1f:ed:1a:25:63: ad:02:f2:71:b9:06:5d:70:00:fe:63:2d:96:0d:ea: e6:86:29:98:5a:a6:2c:02:62:4e:df:40:1f:da:ae: db:cc:59:00:d7:31:bf:fe:f6:c8:f2:c3:48:ee:3f: fe:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CA:CF:0E:23:64:35:50:CF:D5:D6:6F:8D:DF:E8:B4:FE:6D:0E:1A X509v3 Authority Key Identifier: keyid:E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:67:8b:0c:b0:89:23:73:4c:ad:02:9e:1b:86:54:60:31:f6: 93:9a:8d:b4:59:c9:8a:5b:80:57:0b:36:04:0b:3d:ab:1a:bf: bf:ae:7c:fa:8c:a7:a9:4c:cf:8b:7a:e7:60:3b:1b:bb:be:2e: 1d:06:e0:88:fe:6a:fc:62:4d:f7:2a:f7:78:70:78:82:41:47: d9:98:75:bb:73:c8:58:c0:c6:03:c4:17:7f:e9:99:f3:58:39: 46:97:31:b4:8f:9f:d7:c4:c0:4f:c5:1b:1c:c9:d9:00:e6:eb: 6c:54:31:78:96:42:01:24:6b:9e:e2:08:ab:42:fa:0d:f2:93: 10:25:ae:bb:bb:a2:82:fe:5c:e2:bf:ba:07:6e:f2:68:18:a3: aa:1c:bc:cc:6b:f1:de:df:c5:fd:1b:7a:43:2c:a6:5c:7e:a4: aa:37:0f:02:0d:36:28:c0:65:7c:d8:81:99:5d:41:bc:c8:9d: 68:08:e2:c7:b2:b6:53:32:66:0b:c5:fa:77:79:30:4e:3c:90: a8:7d:24:07:ca:aa:43:48:0a:67:7a:fa:7a:e4:95:82:94:e0: 87:ac:65:83:57:9a:ba:58:55:27:b0:07:35:14:12:54:e5:3f: df:2a:37:7a:67:99:18:cc:4b:60:b4:e4:b5:4e:21:5a:63:b9: d5:18:0c:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaG5U87iZrFtr/YxmFN6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYWI2ZGIyYWMzNmU5ODkzM2FiOTlhODlhNGQ5YzE2OWVh NWVmYmIwHhcNMjUxMjI5MDAwMDU1WhcNMjUxMjMwMDAwMDU1WjAzMTEwLwYDVQQD Eyg5NGNhY2YwZTIzNjQzNTUwY2ZkNWQ2NmY4ZGRmZThiNGZlNmQwZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67/mAco9myph0obqy0VWvK6yHgIv fe6h/UXvH/OQWXHxgqLmkvDo9u2sBpFDb0XGtH3eAKNGl5b8SvTcUeAJGFlcNKRx gQNoWVbylqK3rfcRKjRpnmrgZWCoOoUsjOjbJBFhH6XxtEQbvX+C3rDUcfZYs6RY UUohDJ+c+HFax6NJXTBEy8fmlG2kKAQ+QfrKJSMeZOhTRMn1gdRXmI8wOgucxX87 ZZ7tMimtD61pbHlC0wB947RFZn0Dex3xEjYQgcS7sBlDpXei/6XmH+0aJWOtAvJx uQZdcAD+Yy2WDermhimYWqYsAmJO30Af2q7bzFkA1zG//vbI8sNI7j/+1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTKzw4jZDVQz9XWb43f6LT+bQ4aMB8GA1UdIwQY MBaAFOOrbbKsNumJM6uZqJpNnBaepe+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDZ0dHNxdzI2WWt6cTVtb21rMmNGcDZsNzdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lZDAxYWEtMTVmYS00M2E2LThhMTUt ZjI2ZjUwODM0ZjI5LzEvNDZ0dHNxdzI2WWt6cTVtb21rMmNGcDZsNzdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9lZDAxYWEtMTVmYS00M2E2LThhMTUtZjI2ZjUwODM0ZjI5 LzEvNDZ0dHNxdzI2WWt6cTVtb21rMmNGcDZsNzdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGeLDLCJ I3NMrQKeG4ZUYDH2k5qNtFnJiluAVws2BAs9qxq/v658+oynqUzPi3rnYDsbu74u HQbgiP5q/GJN9yr3eHB4gkFH2Zh1u3PIWMDGA8QXf+mZ81g5RpcxtI+f18TAT8Ub HMnZAObrbFQxeJZCASRrnuIIq0L6DfKTECWuu7uigv5c4r+6B27yaBijqhy8zGvx 3t/F/Rt6QyymXH6kqjcPAg02KMBlfNiBmV1BvMidaAjix7K2UzJmC8X6d3kwTjyQ qH0kB8qqQ0gKZ3r6euSVgpTgh6xlg1eaulhVJ7AHNRQSVOU/3yo3emeZGMxLYLTk tU4hWmO51RgMlQ== -----END CERTIFICATE-----Generated at Mon Dec 29 01:15:05 2025 by rpki-client