This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json) Hash identifier: 6ESbX+l5tpaatzgTVZ7fahIk2ep+nADt9L1s/6ieuKg= Subject key identifier: 7E:B1:D0:9E:5A:EA:41:33:A5:A2:65:93:02:42:99:8E:FC:81:79:24 Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6 Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6 Certificate serial: 019AF19B59E9D175DD1C96989539CDF28D17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft Manifest number: 0B8F Signing time: Sat 06 Dec 2025 03:01:21 +0000 Manifest this update: Sat 06 Dec 2025 03:01:21 +0000 Manifest next update: Sun 07 Dec 2025 03:01:21 +0000 Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: 4XT4yJA+IydsQSMHTS5c14oBpY0mqGWw0xNGgp6TzaU=) 2: dQrN5l4ER8ioZrR3Ol61rF1mTIM.roa (hash: i6nZan7ltRkXD1mx1+9g2E7sNbpHefpKiqIOGyeWWGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:59:e9:d1:75:dd:1c:96:98:95:39:cd:f2:8d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6 Validity Not Before: Dec 6 03:01:21 2025 GMT Not After : Dec 7 03:01:21 2025 GMT Subject: CN=7eb1d09e5aea4133a5a265930242998efc817924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:ce:7a:d4:bd:08:67:50:be:be:0e:47:49: 7c:a5:5e:30:88:6f:af:52:75:6d:83:6e:28:64:e7: ea:6e:db:ce:7c:ba:01:2d:b8:5b:c4:da:db:47:bb: 7b:a0:24:03:a2:83:0d:55:fa:12:6c:90:1b:ee:35: 72:22:bf:3f:ef:c1:b6:2f:4a:41:65:f9:67:ef:d8: d8:49:d9:69:07:aa:10:50:78:a5:57:e4:63:a9:3c: 34:29:a1:5a:dd:bc:9d:94:5f:83:07:f2:cb:ce:fe: a0:c8:8d:45:b9:4a:fa:fc:68:11:23:20:27:f1:5e: 33:f2:77:be:91:6b:ea:4c:c5:94:2c:5d:e6:1e:69: ba:4d:69:3e:35:a2:f3:42:49:1b:9d:ce:00:89:d2: f5:82:1d:6b:72:24:5e:34:50:be:79:7d:39:e5:66: db:ed:99:13:76:3e:bc:ad:fa:50:55:61:c6:5d:4b: ab:ca:c1:39:33:9e:30:24:29:10:7f:c3:4b:b0:fd: b0:60:8f:09:bf:f1:e8:0c:32:e2:33:6f:76:e5:3c: 2a:5e:1b:7b:4f:96:1d:8d:b7:94:93:a7:84:67:90: 42:11:f1:67:e3:09:b2:df:b7:5d:39:87:39:dc:4b: 8d:47:33:4d:8b:f8:53:d3:cc:bf:c2:9d:ee:e3:6d: 44:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B1:D0:9E:5A:EA:41:33:A5:A2:65:93:02:42:99:8E:FC:81:79:24 X509v3 Authority Key Identifier: keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ef:e2:a0:3e:ee:fc:3c:5c:a5:36:e2:67:7c:3e:60:01:db: 1f:7b:7b:23:96:4d:b0:fb:a2:9a:9d:31:cc:1c:56:e2:59:80: f2:f2:f9:04:7c:d9:de:3b:be:21:0a:4c:b4:7b:2c:b9:3d:a3: a9:64:4b:7c:8f:c8:d1:ef:1e:ac:9c:8e:6e:55:5b:8d:48:ca: c8:81:ce:bc:ca:03:2a:cd:21:f8:bc:72:00:1d:bb:2b:d8:96: 88:a2:4d:be:0d:e0:6f:69:e2:d3:9c:6f:90:b2:30:82:fd:41: 69:f7:3a:bc:c6:1e:6c:86:05:cd:35:0e:6d:c6:2c:d5:3f:33: a9:f4:5f:8a:c7:4f:85:dc:bf:32:7e:c3:8d:cd:d7:70:19:50: ad:60:4d:fc:5f:a4:19:95:61:f5:1c:62:88:b8:eb:f7:6a:2c: 49:83:04:41:1e:5c:22:5d:3d:05:cc:e9:e0:11:40:a0:c6:0b: 21:39:68:c5:c5:75:aa:ba:5f:0d:c4:b3:eb:93:3f:2d:f6:3c: cf:fa:25:0c:b2:f9:c7:3b:71:3c:c9:53:83:d0:54:c7:60:a8: 01:14:49:a2:60:cd:6a:b1:6d:1d:7a:ed:7e:98:61:48:02:94: 6d:69:f7:d7:c1:72:35:e8:79:59:47:b0:74:c6:52:28:38:7e: 34:bd:cf:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1np0XXdHJaYlTnN8o0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MDhlMDRmZDdiZjgxYjY3NWRjYmU3YjI5YWEyNjNjOTEy MDc4YjYwHhcNMjUxMjA2MDMwMTIxWhcNMjUxMjA3MDMwMTIxWjAzMTEwLwYDVQQD Eyg3ZWIxZDA5ZTVhZWE0MTMzYTVhMjY1OTMwMjQyOTk4ZWZjODE3OTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiPOetS9CGdQvr4OR0l8pV4wiG+v UnVtg24oZOfqbtvOfLoBLbhbxNrbR7t7oCQDooMNVfoSbJAb7jVyIr8/78G2L0pB Zfln79jYSdlpB6oQUHilV+RjqTw0KaFa3bydlF+DB/LLzv6gyI1FuUr6/GgRIyAn 8V4z8ne+kWvqTMWULF3mHmm6TWk+NaLzQkkbnc4AidL1gh1rciReNFC+eX055Wbb 7ZkTdj68rfpQVWHGXUurysE5M54wJCkQf8NLsP2wYI8Jv/HoDDLiM2925TwqXht7 T5YdjbeUk6eEZ5BCEfFn4wmy37ddOYc53EuNRzNNi/hT08y/wp3u421EbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6x0J5a6kEzpaJlkwJCmY78gXkkMB8GA1UdIwQY MBaAFDcI4E/Xv4G2ddy+eymqJjyRIHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMmZjZmEtN2RjMS00MjAwLTg5OWUt YmM0OTNkNWNiYjVjLzEvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMmZjZmEtN2RjMS00MjAwLTg5OWUtYmM0OTNkNWNiYjVj LzEvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAne/ioD7u /DxcpTbiZ3w+YAHbH3t7I5ZNsPuimp0xzBxW4lmA8vL5BHzZ3ju+IQpMtHssuT2j qWRLfI/I0e8erJyOblVbjUjKyIHOvMoDKs0h+LxyAB27K9iWiKJNvg3gb2ni05xv kLIwgv1Bafc6vMYebIYFzTUObcYs1T8zqfRfisdPhdy/Mn7Djc3XcBlQrWBN/F+k GZVh9RxiiLjr92osSYMEQR5cIl09Bczp4BFAoMYLITloxcV1qrpfDcSz65M/LfY8 z/olDLL5xztxPMlTg9BUx2CoARRJomDNarFtHXrtfphhSAKUbWn318FyNeh5WUew dMZSKDh+NL3PcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:45 2025 by rpki-client