This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft File: nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json) Hash identifier: oJ5LXgpu4mf3mQ7meVok/SHMD/JbOUJOPQI+v7WVtAM= Subject key identifier: 53:21:B3:10:94:ED:B8:A7:03:C5:0F:92:9C:7C:20:CB:DB:42:1F:29 Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19 Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19 Certificate serial: 019AF27662BC6E303D8F914BA837C73A4BF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft Manifest number: 1291 Signing time: Sat 06 Dec 2025 07:00:36 +0000 Manifest this update: Sat 06 Dec 2025 07:00:36 +0000 Manifest next update: Sun 07 Dec 2025 07:00:36 +0000 Files and hashes: 1: 5yK2af_g5CTlXz9q-R5Ey4S2raY.roa (hash: LxU9aJpGxPnyOcQ82YucJ2+C9wvejuknSWDM/RouRtA=) 2: HXLS-XKu3_p7nhpZ2K8scEyS_rc.roa (hash: 8XJ8ceqUC/FtGHEdtNIo+tnT3APlE19braxx2C56keI=) 3: NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa (hash: qXIyT3lUz5bJt0IF4d25cysT8WLakbijoLlu5EAXUys=) 4: _fuT4R68BHlPpUP6HiVZDSmxINI.roa (hash: bvu+tWo4UXme3jTLsLEJ6SMX9XI3uAoVhAKkTxW9r90=) 5: boOUh_OegScUQI0rJ0GXkth8K70.roa (hash: h8bMxthrp6BSgypE0yBkUmIOsuBuRoBa/El8mfbO7Rs=) 6: dencvyi0TxmMkZDQCX9rZJN2RzU.roa (hash: B52p98p3HEzzhef7/oXAaRqNFYHk2h3tC+DtHUn18nc=) 7: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: RUgM/P7jukvE1+ZnDV31qXVdzaYEiCnf2E7VlMU3sRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:62:bc:6e:30:3d:8f:91:4b:a8:37:c7:3a:4b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19 Validity Not Before: Dec 6 07:00:36 2025 GMT Not After : Dec 7 07:00:36 2025 GMT Subject: CN=5321b31094edb8a703c50f929c7c20cbdb421f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ae:6b:47:a2:8c:cc:e2:e7:88:e8:b2:4a:61: 90:07:0b:8c:cf:bf:4c:a6:2a:69:7e:d5:f4:6c:8e: 11:98:33:68:cb:ee:98:73:d3:25:55:b9:fc:06:59: 65:c5:f3:a2:09:ae:d1:1e:29:63:e3:bb:bc:21:13: 98:f6:73:ea:a7:e0:ef:90:83:7e:16:8e:d1:27:46: b2:94:71:af:05:ba:e2:83:1c:c0:5d:f9:d8:02:16: a5:1b:c7:ae:9a:1e:ee:b3:6f:a4:81:0c:db:00:ef: 73:9c:8c:82:1d:70:5d:38:f1:b4:f0:f2:a8:d9:f5: 90:ad:1d:e3:5c:1f:8b:e6:56:77:c2:d8:92:dd:24: 1c:ef:e7:75:60:1d:1c:cc:49:f7:42:4d:ff:f7:6e: 2d:cf:3d:22:2b:fe:dc:8a:08:23:00:61:c1:41:5e: 9f:4a:f4:a6:8d:de:dd:38:6a:54:da:b1:4e:bf:53: 03:07:6f:3b:f6:be:7d:ca:2c:a2:eb:62:b7:62:66: 48:c4:f0:f8:c4:55:5c:eb:55:d9:af:ad:99:69:bc: f2:a9:9a:b8:80:85:c6:35:3d:12:e7:b9:c6:23:3d: 79:f1:d3:40:2d:f4:0c:29:c6:95:49:f8:35:d2:50: 83:4f:b7:68:ab:8c:43:3f:5b:d6:2f:23:d7:4b:b3: c8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:21:B3:10:94:ED:B8:A7:03:C5:0F:92:9C:7C:20:CB:DB:42:1F:29 X509v3 Authority Key Identifier: keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2c:59:04:01:35:7d:91:8f:da:8e:ea:a8:06:88:04:5e:ef: 64:08:a1:07:b2:67:b5:18:64:df:fa:fc:40:96:2e:e5:cf:30: ab:12:0d:74:a5:c6:a4:73:44:5c:1d:a8:38:c7:66:8f:31:ed: 92:21:af:74:b0:df:66:d4:cf:48:a0:76:f1:54:c7:07:9c:5a: bd:4a:b6:8f:11:81:64:7b:7b:d1:52:76:7a:d9:5f:a4:b0:41: f7:1b:43:c3:14:20:52:0d:72:d8:25:3d:d5:11:f6:e7:f8:fd: 51:4a:a8:f5:27:24:e0:48:59:39:09:88:31:6b:bb:b1:55:e8: 68:87:99:9d:be:67:41:26:b2:7f:ad:4c:14:09:44:fa:4c:0e: b6:5f:9a:eb:03:a3:43:ba:3d:9a:73:51:49:a8:59:8c:b2:ac: b6:1c:c8:4b:9f:46:46:41:b1:7b:ee:4d:11:d7:64:1b:81:60: 0c:71:8b:79:61:fe:85:a8:ae:bf:91:e1:a1:76:d5:5d:40:a0: b2:5f:d5:7e:98:c9:ba:f3:97:85:27:ec:ef:fc:90:cb:eb:f8: b8:37:a2:3a:ad:87:81:3c:48:d0:10:9f:0f:36:8f:6e:4b:96: b9:41:51:ac:bc:b1:7e:8a:5b:f7:4d:89:72:56:21:04:29:2b: e3:d3:88:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmK8bjA9j5FLqDfHOkvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNmI5Nzc0Yzk0ODc2Yzk4MzIxZGUzMjAxYjExYjc1YTEz NThkMTkwHhcNMjUxMjA2MDcwMDM2WhcNMjUxMjA3MDcwMDM2WjAzMTEwLwYDVQQD Eyg1MzIxYjMxMDk0ZWRiOGE3MDNjNTBmOTI5YzdjMjBjYmRiNDIxZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q5rR6KMzOLniOiySmGQBwuMz79M pippftX0bI4RmDNoy+6Yc9MlVbn8BlllxfOiCa7RHilj47u8IROY9nPqp+DvkIN+ Fo7RJ0aylHGvBbrigxzAXfnYAhalG8eumh7us2+kgQzbAO9znIyCHXBdOPG08PKo 2fWQrR3jXB+L5lZ3wtiS3SQc7+d1YB0czEn3Qk3/924tzz0iK/7ciggjAGHBQV6f SvSmjd7dOGpU2rFOv1MDB2879r59yiyi62K3YmZIxPD4xFVc61XZr62ZabzyqZq4 gIXGNT0S57nGIz158dNALfQMKcaVSfg10lCDT7doq4xDP1vWLyPXS7PIwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMhsxCU7binA8UPkpx8IMvbQh8pMB8GA1UdIwQY MBaAFJ1rl3TJSHbJgyHeMgGxG3WhNY0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5Njgt YTU2YmRmYWRiODFlLzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5NjgtYTU2YmRmYWRiODFl LzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyxZBAE1 fZGP2o7qqAaIBF7vZAihB7JntRhk3/r8QJYu5c8wqxINdKXGpHNEXB2oOMdmjzHt kiGvdLDfZtTPSKB28VTHB5xavUq2jxGBZHt70VJ2etlfpLBB9xtDwxQgUg1y2CU9 1RH25/j9UUqo9Sck4EhZOQmIMWu7sVXoaIeZnb5nQSayf61MFAlE+kwOtl+a6wOj Q7o9mnNRSahZjLKsthzIS59GRkGxe+5NEddkG4FgDHGLeWH+haiuv5HhoXbVXUCg sl/VfpjJuvOXhSfs7/yQy+v4uDeiOq2HgTxI0BCfDzaPbkuWuUFRrLyxfopb902J clYhBCkr49OIaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:11:19 2025 by rpki-client