This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json) Hash identifier: t7Tuf1adRFmIrugInYI8QWHxXcTIhEDM+3L7MmGlhkQ= Subject key identifier: 2A:D9:F3:C7:D6:25:B4:29:8F:F6:87:86:4E:FA:75:3A:BF:8D:12:F8 Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019AF31BC268C5FF66FE8106BD6AD3CD3FC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft Manifest number: 177D Signing time: Sat 06 Dec 2025 10:01:13 +0000 Manifest this update: Sat 06 Dec 2025 10:01:13 +0000 Manifest next update: Sun 07 Dec 2025 10:01:13 +0000 Files and hashes: 1: 1ZViwBwJWukG7x8H8vOJHhjrl20.roa (hash: +aEN4SwtP07CGGNGf2sl0Ng37swdYqF9I3PWCaVNvKY=) 2: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (hash: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=) 3: BZBW5YOkIp9LbtIp95M8WoQVxcY.roa (hash: X42F21g8cnpx/mEkXiPNfQhd+7IgYORDgkACnwHFRjA=) 4: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (hash: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=) 5: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (hash: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=) 6: KQKnhvNwWTU2NwWKmxos8lsTq2w.roa (hash: Ob2XqyhjsR1rJOoaGwq+W5YGqKxtaeb2w0HEJGVT8k0=) 7: Nw0MJW1-17GSjmW0I-SeXIKcXZc.roa (hash: bVKXfQW3a25ibMtG9JEwc2vSFy0FIYerrDATet1Yfbc=) 8: Q8hPg5UjvdR5qe3RUKGr181TIsc.roa (hash: HQ9muwIQ/VGCuDJxXs8tCzXWThyvXdcPzV4TeZjGo30=) 9: ZFn-3T3HpfQBuAHKtlkfBlzyMFE.roa (hash: bL5zNEbul9UL3VC1iqKC23m10I1zTh///EbTXCvQGbo=) 10: _HwnYOx8loE1jVo8nfivar_tdig.roa (hash: QhMEIV71/g1ejlZrBi4D/Eo8F39EvYYIljovFNhdaUA=) 11: adv2I8ohQ_Aaz3Td1g442WIiJb8.roa (hash: Dm02CNuasphr+tPivahhTRsXMIx045kC5rG2wb2fZlE=) 12: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: wWk3YL706v2G9rJrHN4qngHqHUD/kPZTxovB+ioXPeE=) 13: wRQWlx5VTlfOioAPy2QXY4Uk2Xg.roa (hash: rPHBxj4mRhTnPsN1GhR6ZZjmr/wkKhGGUErpiW2+PN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c2:68:c5:ff:66:fe:81:06:bd:6a:d3:cd:3f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Dec 6 10:01:13 2025 GMT Not After : Dec 7 10:01:13 2025 GMT Subject: CN=2ad9f3c7d625b4298ff687864efa753abf8d12f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:37:12:7d:7c:4d:da:31:7c:e6:ab:8a:fe: b9:f4:e9:25:68:25:2e:77:fe:5c:4b:4b:dd:ca:76: 2d:e3:33:5a:2e:8f:5f:1e:5f:9a:d8:c5:80:f4:fc: 69:f2:7a:03:aa:2c:83:58:05:35:18:26:6f:ea:69: 4e:27:d2:11:41:5a:87:b4:a5:6e:43:9c:09:0a:13: 02:31:86:fc:46:7d:5a:7f:a2:c8:e0:81:51:9f:54: e0:58:c7:4e:1c:04:65:16:ee:7f:bd:9a:eb:a8:14: ff:cd:d5:26:fc:68:84:32:a0:b3:1a:fb:bd:b3:64: e1:00:a6:2d:3f:db:ed:3e:12:0c:18:cf:d4:c6:ce: 16:4d:b5:14:20:41:a7:dd:95:88:21:a6:a3:17:9a: 8b:50:a6:34:52:e6:c9:66:3e:61:c8:2e:6c:ed:d9: 7b:3f:9a:55:27:4a:3b:bc:60:b2:72:d8:e1:91:ac: 05:84:33:f0:3b:a2:6d:7f:58:9a:93:58:48:91:7b: fa:ad:01:21:f9:38:22:b1:a8:c0:29:ee:0f:47:ec: f9:16:8b:c6:cf:88:68:ad:af:3f:ac:e2:1a:d4:8e: 7c:b1:ee:63:af:6b:bd:f1:85:53:a2:3c:0e:89:37: 3d:b9:36:65:b3:ce:21:e9:34:75:0d:7f:21:a6:53: 3f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D9:F3:C7:D6:25:B4:29:8F:F6:87:86:4E:FA:75:3A:BF:8D:12:F8 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bb:8d:03:d5:f1:af:c8:1f:a2:0f:59:5a:47:e3:3e:df:18: f8:f3:60:d8:0b:c9:8f:0c:ec:67:42:75:5f:37:ab:c6:50:cb: 80:96:48:94:74:e2:16:fb:a6:e7:1b:96:97:37:ae:8e:78:85: 57:82:06:91:01:82:2e:97:1e:5e:bd:82:21:3c:c0:01:5c:4f: a4:3d:ea:49:73:d3:7f:d7:18:4c:32:b8:f0:0e:71:9b:da:6d: b0:f0:96:d5:a1:52:bd:2c:b8:3c:3c:18:72:ac:66:cf:d3:49: 6b:3d:26:36:39:f4:8b:09:3b:f7:ac:25:e6:9b:e6:c3:f9:fc: 6a:b4:13:59:76:d7:5c:fe:48:32:97:38:e0:55:9e:5c:b1:50: 63:68:ab:ab:d1:9d:b8:ac:46:f7:3d:e9:8d:8b:b8:40:0f:fb: fa:f3:8e:a1:1e:6c:43:f1:3d:4e:7c:58:f3:5e:3f:e9:0b:7b: 33:b6:89:46:8a:5c:4d:f8:6e:be:89:a6:80:ee:09:e2:b1:89: 57:2f:f8:35:d3:a3:38:66:51:b6:a1:b9:be:9e:c4:f8:e3:a4: 6b:e8:96:60:85:c7:81:6a:96:f9:17:87:22:cc:91:fe:c8:eb: 49:0b:b9:0a:3f:d3:07:6c:03:16:ab:bb:d9:8d:78:86:39:df: de:9b:81:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8Joxf9m/oEGvWrTzT/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjUxMjA2MTAwMTEzWhcNMjUxMjA3MTAwMTEzWjAzMTEwLwYDVQQD EygyYWQ5ZjNjN2Q2MjViNDI5OGZmNjg3ODY0ZWZhNzUzYWJmOGQxMmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupk3En18TdoxfOariv659OklaCUu d/5cS0vdynYt4zNaLo9fHl+a2MWA9Pxp8noDqiyDWAU1GCZv6mlOJ9IRQVqHtKVu Q5wJChMCMYb8Rn1af6LI4IFRn1TgWMdOHARlFu5/vZrrqBT/zdUm/GiEMqCzGvu9 s2ThAKYtP9vtPhIMGM/Uxs4WTbUUIEGn3ZWIIaajF5qLUKY0UubJZj5hyC5s7dl7 P5pVJ0o7vGCyctjhkawFhDPwO6Jtf1iak1hIkXv6rQEh+TgisajAKe4PR+z5FovG z4hora8/rOIa1I58se5jr2u98YVTojwOiTc9uTZls84h6TR1DX8hplM/FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrZ88fWJbQpj/aHhk76dTq/jRL4MB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALruNA9Xx r8gfog9ZWkfjPt8Y+PNg2AvJjwzsZ0J1XzerxlDLgJZIlHTiFvum5xuWlzeujniF V4IGkQGCLpceXr2CITzAAVxPpD3qSXPTf9cYTDK48A5xm9ptsPCW1aFSvSy4PDwY cqxmz9NJaz0mNjn0iwk796wl5pvmw/n8arQTWXbXXP5IMpc44FWeXLFQY2irq9Gd uKxG9z3pjYu4QA/7+vOOoR5sQ/E9TnxY814/6Qt7M7aJRopcTfhuvommgO4J4rGJ Vy/4NdOjOGZRtqG5vp7E+OOka+iWYIXHgWqW+ReHIsyR/sjrSQu5Cj/TB2wDFqu7 2Y14hjnf3puB3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:11:52 2025 by rpki-client