This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft File: nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json) Hash identifier: OBxW35wnsRNkM25W650QvEcjVvqcOM7Cn3jH0xbVHcE= Subject key identifier: 99:EA:97:D4:E2:4E:4B:16:09:18:CD:7B:2E:44:26:26:93:64:E6:C8 Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2 Certificate issuer: /CN=9d2d86c028bfc38e875455cf82689a36265302c2 Certificate serial: 019AF50B74835197EC48087BD8D9C6737425 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:02:39 +0000 Manifest this update: Sat 06 Dec 2025 19:02:39 +0000 Manifest next update: Sun 07 Dec 2025 19:02:39 +0000 Files and hashes: 1: BCfHRxvaBlgRu7FF6R1aFrqf-D4.roa (hash: jY82l74QOduMSK8Hp/MMojju94Gfvr7fCtUmoiSODw8=) 2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: XinEgiwfuTFUBPw16SDFJuIaEbAeFJ1ymh5NBY4EiOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:74:83:51:97:ec:48:08:7b:d8:d9:c6:73:74:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2 Validity Not Before: Dec 6 19:02:39 2025 GMT Not After : Dec 7 19:02:39 2025 GMT Subject: CN=99ea97d4e24e4b160918cd7b2e4426269364e6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:aa:36:9c:e6:dd:99:7a:65:3e:00:af:2e:7c: dc:07:55:81:2a:da:7b:e5:1e:e8:eb:c1:6f:6d:02: fe:45:c4:f4:da:39:8c:b6:90:c9:00:02:58:b3:81: 26:36:09:1a:51:52:80:62:22:89:f6:4c:c5:58:14: 6d:74:80:dc:a9:28:9a:1d:f2:84:da:e8:49:cb:e9: 3e:e5:f7:48:c3:d6:fe:1e:99:a7:2d:84:65:b3:d3: 78:d8:42:02:c6:82:a3:7d:b9:95:71:c8:b9:19:d6: ae:c2:c0:dc:9a:ec:af:e2:63:ab:84:5f:6e:00:f1: 9b:e3:ba:0a:54:d4:43:a3:b8:be:9b:ad:f5:25:cb: bb:70:aa:b5:ec:43:c7:cd:c5:a0:bf:8e:79:e2:6d: b0:ef:f4:85:12:2a:62:17:d2:25:bc:d5:4d:46:2d: bb:82:0b:ad:1b:02:8f:02:d7:31:00:6d:3c:5c:23: 07:b9:cd:72:0f:84:10:f6:79:b3:f8:49:61:1e:7e: a6:fa:05:2f:58:4a:b1:7f:d2:e2:03:2d:e3:01:c9: e5:0f:6c:ad:aa:ed:1c:a3:cc:0d:90:ba:c0:a8:11: 9a:d5:8c:25:50:ef:a0:4d:e3:75:0e:7c:88:a8:85: a2:2c:eb:85:c2:b0:0d:0f:e5:04:50:fb:cb:8c:32: 10:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EA:97:D4:E2:4E:4B:16:09:18:CD:7B:2E:44:26:26:93:64:E6:C8 X509v3 Authority Key Identifier: keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:84:9f:54:2f:0f:46:24:1a:6b:eb:6d:d5:20:f7:27:9d:f5: 10:5c:42:72:53:6b:2c:ad:fc:ba:97:88:c3:67:60:3f:28:f9: db:0b:6f:8f:db:f0:31:6d:23:10:32:4a:b1:c2:48:66:28:46: 17:68:a6:ae:cd:ca:6b:09:e2:37:62:a4:ad:52:72:61:8a:9c: bd:22:75:05:19:ef:79:c1:4f:7e:3f:f5:a4:15:25:f0:44:35: 69:73:bf:f4:ac:0c:e8:9f:2f:0f:52:05:72:5f:51:d2:ad:a4: f2:b5:bf:58:3d:e1:66:45:de:e8:14:32:1a:8c:fd:9c:27:6a: 07:d1:1a:22:5c:1c:0a:1c:82:e7:d8:5b:25:97:59:be:1f:2a: d6:57:85:1a:89:6c:8e:07:28:0f:07:77:dc:ea:3b:c0:eb:b5: 80:f1:06:f5:d7:e9:c3:12:26:78:4f:9e:1e:e6:93:e9:7f:95: 78:eb:5c:35:66:96:89:06:a7:b5:f0:18:46:93:47:34:65:8c: eb:72:1a:8b:28:b2:11:0e:db:9a:9e:4a:76:47:62:b9:dc:d9: 14:82:27:86:c3:ba:b3:f7:f4:f8:3c:fc:12:a7:97:a9:a2:d3: 1f:d2:17:0a:81:1f:fb:a9:4b:af:85:80:af:73:fb:c9:d8:63: 3f:a1:ba:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C3SDUZfsSAh72NnGc3QlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmQ4NmMwMjhiZmMzOGU4NzU0NTVjZjgyNjg5YTM2MjY1 MzAyYzIwHhcNMjUxMjA2MTkwMjM5WhcNMjUxMjA3MTkwMjM5WjAzMTEwLwYDVQQD Eyg5OWVhOTdkNGUyNGU0YjE2MDkxOGNkN2IyZTQ0MjYyNjkzNjRlNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKo2nObdmXplPgCvLnzcB1WBKtp7 5R7o68FvbQL+RcT02jmMtpDJAAJYs4EmNgkaUVKAYiKJ9kzFWBRtdIDcqSiaHfKE 2uhJy+k+5fdIw9b+HpmnLYRls9N42EICxoKjfbmVcci5GdauwsDcmuyv4mOrhF9u APGb47oKVNRDo7i+m631Jcu7cKq17EPHzcWgv4554m2w7/SFEipiF9IlvNVNRi27 ggutGwKPAtcxAG08XCMHuc1yD4QQ9nmz+ElhHn6m+gUvWEqxf9LiAy3jAcnlD2yt qu0co8wNkLrAqBGa1YwlUO+gTeN1DnyIqIWiLOuFwrAND+UEUPvLjDIQFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnql9TiTksWCRjNey5EJiaTZObIMB8GA1UdIwQY MBaAFJ0thsAov8OOh1RVz4JomjYmUwLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jMDc4ZmQtZDJiNi00NmJhLWE2YmEt NDRjM2I3NWQzZjMzLzEvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9jMDc4ZmQtZDJiNi00NmJhLWE2YmEtNDRjM2I3NWQzZjMz LzEvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfISfVC8P RiQaa+tt1SD3J531EFxCclNrLK38upeIw2dgPyj52wtvj9vwMW0jEDJKscJIZihG F2imrs3KawniN2KkrVJyYYqcvSJ1BRnvecFPfj/1pBUl8EQ1aXO/9KwM6J8vD1IF cl9R0q2k8rW/WD3hZkXe6BQyGoz9nCdqB9EaIlwcChyC59hbJZdZvh8q1leFGols jgcoDwd33Oo7wOu1gPEG9dfpwxImeE+eHuaT6X+VeOtcNWaWiQantfAYRpNHNGWM 63IaiyiyEQ7bmp5KdkdiudzZFIInhsO6s/f0+Dz8EqeXqaLTH9IXCoEf+6lLr4WA r3P7ydhjP6G6pw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:34:37 2025 by rpki-client