This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft File: nwM4t9tUQAKUEDl1Fckw60UtdbA.mft (raw, json) Hash identifier: CiEqJh2Z4GYmHRJW7vGdq9B37WrJWojhNCUEuMqaHMo= Subject key identifier: 1F:AB:94:DE:F9:86:A1:21:DA:08:04:34:DB:26:C1:B7:62:87:FD:83 Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0 Certificate issuer: /CN=9f0338b7db5440029410397515c930eb452d75b0 Certificate serial: 019B37FCB858BFEC419CF590FE7DBFA7794B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 19:01:07 +0000 Manifest this update: Fri 19 Dec 2025 19:01:07 +0000 Manifest next update: Sat 20 Dec 2025 19:01:07 +0000 Files and hashes: 1: HhSxQEAct_Hilmn4S8Eq6DvrLvI.roa (hash: crLyXY2X5OyUyjzwP0FotFChrfWXLKr+2gME4D4k2t8=) 2: nwM4t9tUQAKUEDl1Fckw60UtdbA.crl (hash: OkYJfiZJc2tS/3z0/D/4ShCtZamfLl4fWeT7qen/b3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:b8:58:bf:ec:41:9c:f5:90:fe:7d:bf:a7:79:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0 Validity Not Before: Dec 19 19:01:07 2025 GMT Not After : Dec 20 19:01:07 2025 GMT Subject: CN=1fab94def986a121da080434db26c1b76287fd83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:09:68:23:6a:a3:83:22:29:c2:17:45:14:1f: b7:33:48:55:ed:c2:99:75:d4:fd:e8:84:74:9c:66: 7f:92:af:fa:77:99:04:84:87:89:44:fd:4d:18:16: 96:f4:9b:4d:8d:8d:ec:22:bf:51:fa:c7:9a:77:67: 40:22:a6:e9:ca:a7:ac:85:af:d4:5d:43:b2:0c:17: 7d:3a:20:d9:4c:8b:2f:d0:56:44:21:d7:e1:7f:38: 48:e2:d1:98:f6:e4:e4:bd:64:ba:00:b3:37:ec:89: 32:09:e6:12:42:95:9e:da:4c:19:a6:40:2e:11:f2: 31:d4:35:2d:d2:4b:37:0a:6f:dd:a1:7b:0f:c6:e8: bb:b8:d5:27:72:29:ea:34:04:fd:78:a3:e0:dd:f9: 41:ed:78:71:f4:94:c5:d1:af:1c:cb:e6:1d:29:5d: b8:1d:ad:f2:c9:8c:fc:9d:75:64:bd:e0:c4:bb:fa: b6:93:52:b1:88:72:83:81:f5:18:2a:dc:e7:bb:bc: 03:f1:2a:a2:f3:5a:e6:56:66:4d:03:94:de:f3:28: f9:0c:db:e9:ba:77:c6:a5:25:1e:fb:89:70:7a:38: df:e8:55:c1:ed:0c:6e:a6:d0:44:40:50:60:d0:dd: 5c:d7:91:bd:7e:46:53:86:85:16:fd:64:cf:d7:0d: 91:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AB:94:DE:F9:86:A1:21:DA:08:04:34:DB:26:C1:B7:62:87:FD:83 X509v3 Authority Key Identifier: keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cb:b0:b3:50:69:f3:ba:d1:8b:31:f7:32:d2:5e:93:c5:af: c6:e8:17:a4:1a:ec:d7:dd:c9:aa:7e:60:4e:71:a1:fa:64:f9: f4:24:db:30:c5:d2:8d:f6:05:84:c9:de:c5:fc:0b:2f:89:83: 99:8c:50:c7:71:cf:18:f9:7e:79:23:61:e5:a5:fa:c8:c8:79: 4f:af:ed:cb:5c:68:04:fa:c4:eb:ad:66:e1:49:34:16:8e:aa: 52:af:88:9d:da:25:00:93:6f:93:fc:69:92:a6:05:85:9f:0e: e8:f3:e5:6e:ad:17:09:b4:56:df:f5:db:05:a9:c7:90:85:d1: 56:d4:13:cf:cb:0b:eb:40:c8:d4:e5:0b:a4:91:24:10:cc:03: 91:86:46:26:ae:ca:e7:48:44:55:5b:55:e0:70:5d:0a:0a:72: 87:0b:30:f7:1a:a0:9f:bb:ee:be:21:9b:c2:6a:08:23:14:5a: 86:7d:67:88:24:a9:32:9c:26:99:eb:72:88:35:9e:1f:09:2d: cc:77:1c:a6:7a:5b:d5:65:d5:de:59:62:53:14:f8:3f:85:28: f9:65:28:b0:0a:47:9b:2c:b5:84:94:68:51:4b:a8:ec:63:4c: 07:d4:21:0b:08:02:77:73:9a:fc:82:97:bb:15:ee:6c:86:68: 77:58:e4:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/LhYv+xBnPWQ/n2/p3lLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDMzOGI3ZGI1NDQwMDI5NDEwMzk3NTE1YzkzMGViNDUy ZDc1YjAwHhcNMjUxMjE5MTkwMTA3WhcNMjUxMjIwMTkwMTA3WjAzMTEwLwYDVQQD EygxZmFiOTRkZWY5ODZhMTIxZGEwODA0MzRkYjI2YzFiNzYyODdmZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QloI2qjgyIpwhdFFB+3M0hV7cKZ ddT96IR0nGZ/kq/6d5kEhIeJRP1NGBaW9JtNjY3sIr9R+sead2dAIqbpyqesha/U XUOyDBd9OiDZTIsv0FZEIdfhfzhI4tGY9uTkvWS6ALM37IkyCeYSQpWe2kwZpkAu EfIx1DUt0ks3Cm/doXsPxui7uNUncinqNAT9eKPg3flB7Xhx9JTF0a8cy+YdKV24 Ha3yyYz8nXVkveDEu/q2k1KxiHKDgfUYKtznu7wD8Sqi81rmVmZNA5Te8yj5DNvp unfGpSUe+4lwejjf6FXB7QxuptBEQFBg0N1c15G9fkZThoUW/WTP1w2RcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+rlN75hqEh2ggENNsmwbdih/2DMB8GA1UdIwQY MBaAFJ8DOLfbVEAClBA5dRXJMOtFLXWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndNNHQ5dFVRQUtVRURsMUZja3c2MFV0ZGJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xNjY2MWMtZTc3Yi00MWMzLTgwZTQt MTRlZTMyZmM1ZDA2LzEvbndNNHQ5dFVRQUtVRURsMUZja3c2MFV0ZGJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xNjY2MWMtZTc3Yi00MWMzLTgwZTQtMTRlZTMyZmM1ZDA2 LzEvbndNNHQ5dFVRQUtVRURsMUZja3c2MFV0ZGJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsuws1Bp 87rRizH3MtJek8WvxugXpBrs193Jqn5gTnGh+mT59CTbMMXSjfYFhMnexfwLL4mD mYxQx3HPGPl+eSNh5aX6yMh5T6/ty1xoBPrE661m4Uk0Fo6qUq+IndolAJNvk/xp kqYFhZ8O6PPlbq0XCbRW3/XbBanHkIXRVtQTz8sL60DI1OULpJEkEMwDkYZGJq7K 50hEVVtV4HBdCgpyhwsw9xqgn7vuviGbwmoIIxRahn1niCSpMpwmmetyiDWeHwkt zHccpnpb1WXV3lliUxT4P4Uo+WUosApHmyy1hJRoUUuo7GNMB9QhCwgCd3Oa/IKX uxXubIZod1jk4Q== -----END CERTIFICATE-----Generated at Fri Dec 19 23:53:31 2025 by rpki-client