This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json) Hash identifier: W5saeWINQIcu0jD93ISkCvX50h+MyVCjc5FUQnyGFlQ= Subject key identifier: 53:A1:A2:AB:CF:EE:5A:37:58:CE:13:62:F8:48:CC:3C:15:A0:EB:B6 Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b Certificate serial: 019AF4658A6472165AAE16DCB1CCC00B0F84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft Manifest number: 024C Signing time: Sat 06 Dec 2025 16:01:26 +0000 Manifest this update: Sat 06 Dec 2025 16:01:26 +0000 Manifest next update: Sun 07 Dec 2025 16:01:26 +0000 Files and hashes: 1: 4hEwPlQV2R3wkknVQDbhfUdi-Hg.roa (hash: mjLFc+VoWHA5LJYiCj4OZP4v7wKlAoLVjBHa2WdTgLI=) 2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: Ggc1FsEvvx0Yv04qHafo7M1OR9xEAX0sdq1QRyNkhIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:8a:64:72:16:5a:ae:16:dc:b1:cc:c0:0b:0f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b Validity Not Before: Dec 6 16:01:26 2025 GMT Not After : Dec 7 16:01:26 2025 GMT Subject: CN=53a1a2abcfee5a3758ce1362f848cc3c15a0ebb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:0a:0c:bb:39:e5:1e:0d:fb:42:29:71:63: df:41:fe:47:b2:eb:78:11:d2:4e:3f:62:fa:ac:18: 2f:5c:08:06:5d:39:b5:4f:26:33:5e:2e:15:b7:42: da:4d:28:1b:02:33:d2:6b:c3:4f:0f:1a:ce:9d:92: d7:1e:d0:81:f6:28:77:47:a6:c6:db:c8:ae:a6:aa: 98:a9:2f:a7:85:61:db:6e:55:57:e1:bb:2a:3f:c8: 03:85:b0:a3:38:61:05:09:4b:84:e9:8d:ad:dd:ad: 89:5c:14:7a:66:45:2a:97:a2:af:c3:08:8a:7a:3d: e9:66:16:88:b7:e4:03:18:9f:db:8c:94:91:1f:f3: 21:a9:da:48:55:b0:b9:ed:ca:c7:a4:aa:31:f5:8a: fe:55:fb:ba:3d:aa:00:36:f3:bd:b6:83:b5:75:5f: 64:f0:35:77:a1:ba:c3:9d:bb:22:f7:d7:cf:40:87: 38:47:8d:fe:85:9c:87:24:e8:5e:87:69:94:60:f5: c1:34:ef:a2:16:a3:ef:3f:1e:87:c9:35:76:a3:8d: 20:a5:50:c8:33:cd:4c:2f:be:72:34:4f:03:1e:b7: 98:6d:e9:80:16:80:51:9e:99:e9:27:69:a9:e0:09: 61:bf:dd:c8:89:8a:de:f6:45:3f:bb:02:7e:7e:3e: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A1:A2:AB:CF:EE:5A:37:58:CE:13:62:F8:48:CC:3C:15:A0:EB:B6 X509v3 Authority Key Identifier: keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:84:8b:00:7c:3d:4b:b5:33:bd:fe:9b:a4:fa:95:db:d4:50: 90:31:31:ba:e1:c7:51:32:4c:1e:82:8d:5d:78:11:f9:5a:f6: f5:e8:3b:11:b5:9c:07:19:7e:05:ac:00:12:df:2a:d2:31:4b: 99:45:a6:7c:b0:79:0c:42:5d:65:03:c5:7c:ed:a4:3b:9d:ca: ae:24:49:98:7d:dd:bc:49:9c:20:7f:67:6a:6c:ed:19:9d:fe: 64:bf:dc:2b:99:09:45:d0:8a:03:50:6b:bc:31:3c:2e:a5:20: 61:4b:99:e9:98:f4:4f:31:a8:78:ea:20:47:70:4a:a1:68:9f: fb:5b:ad:09:11:ef:0f:9d:e3:26:58:9a:8d:2a:4a:93:ca:db: 60:e6:61:13:d4:34:7a:ac:ee:9b:b5:92:2f:20:92:82:73:da: 46:29:43:ad:51:9e:c1:2e:c6:8f:e3:3b:1c:be:3d:6c:c7:d6: ab:18:ce:78:6b:56:a9:79:7d:55:57:d9:04:3b:c5:01:0e:43: 1e:44:50:e9:86:18:bf:c6:4a:87:26:f7:78:8f:ac:fb:e2:bc: 77:95:99:3e:7b:ed:42:7c:86:5d:26:8e:0d:e8:dd:1d:7b:5e: c2:5c:04:6e:8c:7c:6f:cc:5c:bc:16:4b:fd:8b:78:ae:c5:35: 66:b1:f9:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYpkchZarhbcsczACw+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDY3ZTUyYjRiNWIyNDEyZmVjMDE0OGRmYzZjYjFiMzRl OTI3NGIwHhcNMjUxMjA2MTYwMTI2WhcNMjUxMjA3MTYwMTI2WjAzMTEwLwYDVQQD Eyg1M2ExYTJhYmNmZWU1YTM3NThjZTEzNjJmODQ4Y2MzYzE1YTBlYmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym8KDLs55R4N+0IpcWPfQf5Hsut4 EdJOP2L6rBgvXAgGXTm1TyYzXi4Vt0LaTSgbAjPSa8NPDxrOnZLXHtCB9ih3R6bG 28iupqqYqS+nhWHbblVX4bsqP8gDhbCjOGEFCUuE6Y2t3a2JXBR6ZkUql6KvwwiK ej3pZhaIt+QDGJ/bjJSRH/MhqdpIVbC57crHpKox9Yr+Vfu6PaoANvO9toO1dV9k 8DV3obrDnbsi99fPQIc4R43+hZyHJOheh2mUYPXBNO+iFqPvPx6HyTV2o40gpVDI M81ML75yNE8DHreYbemAFoBRnpnpJ2mp4Alhv93IiYre9kU/uwJ+fj65CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOhoqvP7lo3WM4TYvhIzDwVoOu2MB8GA1UdIwQY MBaAFJ8GflK0tbJBL+wBSN/Gyxs06SdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUt MDJhMDliN2E0ZWI3LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUtMDJhMDliN2E0ZWI3 LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYSLAHw9 S7Uzvf6bpPqV29RQkDExuuHHUTJMHoKNXXgR+Vr29eg7EbWcBxl+BawAEt8q0jFL mUWmfLB5DEJdZQPFfO2kO53KriRJmH3dvEmcIH9namztGZ3+ZL/cK5kJRdCKA1Br vDE8LqUgYUuZ6Zj0TzGoeOogR3BKoWif+1utCRHvD53jJliajSpKk8rbYOZhE9Q0 eqzum7WSLyCSgnPaRilDrVGewS7Gj+M7HL49bMfWqxjOeGtWqXl9VVfZBDvFAQ5D HkRQ6YYYv8ZKhyb3eI+s++K8d5WZPnvtQnyGXSaODejdHXtewlwEbox8b8xcvBZL /Yt4rsU1ZrH5Tg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:04 2025 by rpki-client