This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json) Hash identifier: PrIgpLn8KthvFrC/FrOuFoSAsTsnoXbnq7RnJDhc3Q4= Subject key identifier: D5:70:BC:8B:CE:61:42:48:3E:D1:82:90:0F:F5:B2:7C:80:EE:DA:3C Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7 Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7 Certificate serial: 019AF19B6D1C7EA3168FBCA0133103B98BB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft Manifest number: 0FA5 Signing time: Sat 06 Dec 2025 03:01:26 +0000 Manifest this update: Sat 06 Dec 2025 03:01:26 +0000 Manifest next update: Sun 07 Dec 2025 03:01:26 +0000 Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: l7yCZlBaXypKvqYfyW+k0pzKG9fE8abArk5+LggssGg=) 2: PmVcb6mc4PNxZC_ptgP_O-XbGLI.roa (hash: pKGXoSvQeFa7SbcSS7sBYIQ1DYaO2+BzF5Gj11hr5Ic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6d:1c:7e:a3:16:8f:bc:a0:13:31:03:b9:8b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7 Validity Not Before: Dec 6 03:01:26 2025 GMT Not After : Dec 7 03:01:26 2025 GMT Subject: CN=d570bc8bce6142483ed182900ff5b27c80eeda3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:dd:76:8b:24:d8:ee:b8:04:30:b2:ab:fe: 61:c0:09:bc:96:d6:7a:b7:ae:7a:fb:ac:12:bc:da: 9c:d3:c8:cc:75:0b:34:f2:61:a1:e4:16:4c:01:b5: e8:71:fb:8f:a5:58:b3:22:3b:1f:f4:e3:11:0a:0f: 47:7f:a8:e4:de:45:da:ec:8b:a3:b3:23:14:ce:bf: 3a:cd:2d:04:e0:93:45:f7:67:91:8e:df:80:b7:4b: 22:44:d4:b0:05:9b:e4:a6:67:6a:ac:01:f0:53:96: e7:25:b9:4b:95:f8:8f:67:c8:f9:00:e5:42:54:79: b4:ed:f5:8c:fc:98:f0:d3:5d:5e:3a:93:ec:c7:07: bc:dd:4e:36:a5:c5:73:af:73:f8:a5:92:ef:f8:87: 18:13:a1:e7:d8:ea:f3:4e:08:53:db:dd:90:ff:48: 22:42:7c:fe:63:73:2e:ba:f3:7f:db:e5:9c:c2:92: 35:4d:79:30:61:f8:a4:77:e0:ee:50:d3:90:2b:4e: 0d:7d:33:c4:98:c9:7e:bb:d3:43:71:4e:6c:f0:6a: 01:d2:14:f1:0e:d4:6f:c5:c9:b9:d4:e0:65:17:39: ac:8d:b2:4e:d7:5a:f1:50:4a:6f:f9:7d:91:9d:1b: cb:f3:4b:77:bd:66:18:c4:5f:38:d1:1d:3c:3c:13: e8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:70:BC:8B:CE:61:42:48:3E:D1:82:90:0F:F5:B2:7C:80:EE:DA:3C X509v3 Authority Key Identifier: keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d6:5e:17:2f:c6:f7:1b:77:0e:87:32:aa:76:33:b1:95:61: 94:1b:6d:ec:b2:2b:ec:e0:2e:2b:91:4d:fd:7b:7a:45:65:44: 6a:4b:43:61:2f:5a:bb:01:51:3b:53:e5:68:cf:dd:a9:cb:49: 86:f6:3b:f9:e7:8f:e5:10:08:21:5e:61:e4:21:ef:2e:36:cb: ea:20:09:ec:ab:6e:d9:c4:03:22:e5:a4:f3:98:03:83:e7:c3: 45:a3:20:c1:4b:e9:67:41:e7:86:ad:3a:d5:d2:2e:a6:a9:c6: cc:92:80:75:dd:28:3f:71:57:72:8c:5e:0e:c6:3b:df:37:6d: 98:73:c7:dc:c6:07:b5:ab:1e:88:e8:1f:33:f0:3e:e3:b9:c8: 3c:3c:96:f0:e9:0c:17:e7:a0:ac:f7:97:bd:0d:a5:e6:74:8d: 75:85:7e:a7:87:1a:65:ce:86:63:4a:b5:10:7d:11:3f:1f:af: 18:a2:28:25:e0:61:21:f6:89:6c:c2:34:44:83:30:25:d9:8a: 59:e0:d5:11:a9:a0:38:25:0e:5c:5d:16:a0:25:57:dc:36:44: 96:7e:56:32:aa:d3:6d:54:d5:ea:2e:03:51:1f:fb:32:93:2a: 49:a0:83:45:9f:68:9a:9a:80:bd:1e:6f:c7:8d:6e:20:fa:0a: 5c:f2:9c:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm20cfqMWj7ygEzEDuYuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTVmMGZiZjNkNmJmM2ExNmEyNGJlYzc4MGNiMGZkNmVk ZjMxZTcwHhcNMjUxMjA2MDMwMTI2WhcNMjUxMjA3MDMwMTI2WjAzMTEwLwYDVQQD EyhkNTcwYmM4YmNlNjE0MjQ4M2VkMTgyOTAwZmY1YjI3YzgwZWVkYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS/ddosk2O64BDCyq/5hwAm8ltZ6 t656+6wSvNqc08jMdQs08mGh5BZMAbXocfuPpVizIjsf9OMRCg9Hf6jk3kXa7Iuj syMUzr86zS0E4JNF92eRjt+At0siRNSwBZvkpmdqrAHwU5bnJblLlfiPZ8j5AOVC VHm07fWM/Jjw011eOpPsxwe83U42pcVzr3P4pZLv+IcYE6Hn2OrzTghT292Q/0gi Qnz+Y3MuuvN/2+WcwpI1TXkwYfikd+DuUNOQK04NfTPEmMl+u9NDcU5s8GoB0hTx DtRvxcm51OBlFzmsjbJO11rxUEpv+X2RnRvL80t3vWYYxF840R08PBPogwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVwvIvOYUJIPtGCkA/1snyA7to8MB8GA1UdIwQY MBaAFDXl8Pvz1r86FqJL7HgMsP1u3zHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iNmJhYTQtYzEzMS00MzBkLTgwNmEt MmU5NjdhNGNkZGUxLzEvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iNmJhYTQtYzEzMS00MzBkLTgwNmEtMmU5NjdhNGNkZGUx LzEvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9ZeFy/G 9xt3DocyqnYzsZVhlBtt7LIr7OAuK5FN/Xt6RWVEaktDYS9auwFRO1PlaM/dqctJ hvY7+eeP5RAIIV5h5CHvLjbL6iAJ7Ktu2cQDIuWk85gDg+fDRaMgwUvpZ0Hnhq06 1dIupqnGzJKAdd0oP3FXcoxeDsY73zdtmHPH3MYHtaseiOgfM/A+47nIPDyW8OkM F+egrPeXvQ2l5nSNdYV+p4caZc6GY0q1EH0RPx+vGKIoJeBhIfaJbMI0RIMwJdmK WeDVEamgOCUOXF0WoCVX3DZEln5WMqrTbVTV6i4DUR/7MpMqSaCDRZ9ompqAvR5v x41uIPoKXPKc4w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:34 2025 by rpki-client