This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft File: nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json) Hash identifier: OVXV3MlN/exjOidgpM2eOYP9CAXpMtfEGIe0I9h1WKg= Subject key identifier: 47:2D:BC:85:31:27:22:23:FF:63:22:68:65:A5:D9:F2:15:41:CD:0D Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19 Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19 Certificate serial: 019B32319DC894F0475F40D8B1994FBB2F3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft Manifest number: 12B2 Signing time: Thu 18 Dec 2025 16:01:10 +0000 Manifest this update: Thu 18 Dec 2025 16:01:10 +0000 Manifest next update: Fri 19 Dec 2025 16:01:10 +0000 Files and hashes: 1: 5yK2af_g5CTlXz9q-R5Ey4S2raY.roa (hash: LxU9aJpGxPnyOcQ82YucJ2+C9wvejuknSWDM/RouRtA=) 2: HXLS-XKu3_p7nhpZ2K8scEyS_rc.roa (hash: 8XJ8ceqUC/FtGHEdtNIo+tnT3APlE19braxx2C56keI=) 3: NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa (hash: qXIyT3lUz5bJt0IF4d25cysT8WLakbijoLlu5EAXUys=) 4: _fuT4R68BHlPpUP6HiVZDSmxINI.roa (hash: bvu+tWo4UXme3jTLsLEJ6SMX9XI3uAoVhAKkTxW9r90=) 5: boOUh_OegScUQI0rJ0GXkth8K70.roa (hash: h8bMxthrp6BSgypE0yBkUmIOsuBuRoBa/El8mfbO7Rs=) 6: dencvyi0TxmMkZDQCX9rZJN2RzU.roa (hash: B52p98p3HEzzhef7/oXAaRqNFYHk2h3tC+DtHUn18nc=) 7: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: tqcBW5lqipTZCjIVOAlSkovpkN4AnNqEoXHWV2jYNmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:9d:c8:94:f0:47:5f:40:d8:b1:99:4f:bb:2f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19 Validity Not Before: Dec 18 16:01:10 2025 GMT Not After : Dec 19 16:01:10 2025 GMT Subject: CN=472dbc8531272223ff63226865a5d9f21541cd0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2d:9a:1a:28:6e:37:11:e3:bf:68:0b:f5:d1: df:f3:d2:96:23:12:86:01:67:76:e2:d6:ec:ee:76: f3:9a:52:3a:88:d8:54:83:0f:53:a7:8d:e4:47:da: 38:9b:00:62:91:0e:af:9b:ce:7e:6f:2b:7f:d6:6f: 9d:ff:21:82:09:1a:cd:b9:2d:6e:4e:20:c4:81:fd: 0a:94:9d:af:15:5c:b6:d3:9d:18:24:86:24:dd:4b: 63:5d:09:c5:58:f8:29:93:2e:ed:54:e7:6d:2a:10: 8f:2e:18:80:b1:f4:22:04:39:30:de:c1:7e:49:b4: 5a:65:4d:9a:b0:12:ae:55:3c:49:ca:4e:1a:86:2a: f2:a2:49:bd:06:cd:2b:98:3f:1f:a2:ca:b7:6f:b8: 79:c9:f5:0d:3f:09:1d:52:49:3b:46:fd:dd:e9:4c: 49:b3:f4:29:70:ad:41:ca:42:8d:db:41:40:ec:67: 88:87:69:9b:55:94:dd:2e:05:ad:c5:78:57:8a:6f: 2e:21:9b:53:bd:a9:a9:fe:de:0e:f2:3f:ee:e4:7a: 85:79:c3:82:95:7e:17:fe:d3:6b:4b:65:db:d2:60: 4f:3a:48:1b:e5:f6:fb:5d:47:70:b8:30:ec:32:33: e0:51:ab:98:71:a8:96:6f:27:d0:80:47:78:a9:c3: b8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2D:BC:85:31:27:22:23:FF:63:22:68:65:A5:D9:F2:15:41:CD:0D X509v3 Authority Key Identifier: keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:44:c4:36:e4:a1:5c:22:34:8f:12:81:2c:26:bb:65:5f:89: 03:bb:a5:1c:7c:a8:19:82:3d:b2:17:60:ba:b6:4e:ad:37:eb: f1:88:46:d9:14:a5:db:56:8e:fa:de:94:b5:3a:da:0f:7a:87: 52:8f:99:2c:e1:08:48:1a:69:d6:e4:a8:fb:b8:76:d8:6e:14: b2:7e:e8:cb:1b:41:ef:4a:c6:fd:af:21:f9:7b:86:60:55:e8: 3f:08:19:4b:ca:c4:60:5e:0f:bc:ee:c7:f8:0e:61:19:84:d3: 7b:74:31:ce:8b:d1:a5:55:e1:77:72:b3:da:14:0a:98:19:25: 52:bc:c2:9d:13:ef:0d:e7:7e:9b:17:cb:d9:b3:d5:9e:f0:18: 26:ca:79:44:10:47:32:d5:01:be:39:91:29:47:0b:a5:9e:d5: 16:cf:a4:3c:9f:ae:10:c5:4a:02:6d:cb:21:59:f1:ba:d9:8a: 7e:b9:c8:0c:06:dc:b0:42:7e:91:dd:69:d6:d0:34:53:1f:b4: cd:31:03:2a:62:35:c5:ef:ce:f7:cd:7e:ed:28:69:64:d4:41: ee:84:62:9d:8d:96:cd:0a:38:bc:ad:ac:22:88:35:1d:9b:8b: c2:43:a7:15:1c:16:a3:1f:0f:c9:f5:79:71:c6:a1:a0:19:7d: 12:ee:67:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMZ3IlPBHX0DYsZlPuy87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNmI5Nzc0Yzk0ODc2Yzk4MzIxZGUzMjAxYjExYjc1YTEz NThkMTkwHhcNMjUxMjE4MTYwMTEwWhcNMjUxMjE5MTYwMTEwWjAzMTEwLwYDVQQD Eyg0NzJkYmM4NTMxMjcyMjIzZmY2MzIyNjg2NWE1ZDlmMjE1NDFjZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C2aGihuNxHjv2gL9dHf89KWIxKG AWd24tbs7nbzmlI6iNhUgw9Tp43kR9o4mwBikQ6vm85+byt/1m+d/yGCCRrNuS1u TiDEgf0KlJ2vFVy2050YJIYk3UtjXQnFWPgpky7tVOdtKhCPLhiAsfQiBDkw3sF+ SbRaZU2asBKuVTxJyk4ahiryokm9Bs0rmD8fosq3b7h5yfUNPwkdUkk7Rv3d6UxJ s/QpcK1BykKN20FA7GeIh2mbVZTdLgWtxXhXim8uIZtTvamp/t4O8j/u5HqFecOC lX4X/tNrS2Xb0mBPOkgb5fb7XUdwuDDsMjPgUauYcaiWbyfQgEd4qcO41wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEctvIUxJyIj/2MiaGWl2fIVQc0NMB8GA1UdIwQY MBaAFJ1rl3TJSHbJgyHeMgGxG3WhNY0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5Njgt YTU2YmRmYWRiODFlLzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5NjgtYTU2YmRmYWRiODFl LzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUTENuSh XCI0jxKBLCa7ZV+JA7ulHHyoGYI9shdgurZOrTfr8YhG2RSl21aO+t6UtTraD3qH Uo+ZLOEISBpp1uSo+7h22G4Usn7oyxtB70rG/a8h+XuGYFXoPwgZS8rEYF4PvO7H +A5hGYTTe3QxzovRpVXhd3Kz2hQKmBklUrzCnRPvDed+mxfL2bPVnvAYJsp5RBBH MtUBvjmRKUcLpZ7VFs+kPJ+uEMVKAm3LIVnxutmKfrnIDAbcsEJ+kd1p1tA0Ux+0 zTEDKmI1xe/O981+7ShpZNRB7oRinY2WzQo4vK2sIog1HZuLwkOnFRwWox8PyfV5 ccahoBl9Eu5nHA== -----END CERTIFICATE-----Generated at Thu Dec 18 21:49:29 2025 by rpki-client