This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json) Hash identifier: N2c9RuYAEMTB2yrVkn489tl92yB1KslHqHJgknPczPo= Subject key identifier: B5:AD:F2:82:37:99:0F:C8:15:12:61:5B:AD:16:1B:27:83:46:87:00 Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0 Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0 Certificate serial: 019B337B494E554D750F423544A7695DD4C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft Manifest number: 1043 Signing time: Thu 18 Dec 2025 22:01:16 +0000 Manifest this update: Thu 18 Dec 2025 22:01:16 +0000 Manifest next update: Fri 19 Dec 2025 22:01:16 +0000 Files and hashes: 1: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: j+xTtz57QsEF17EqeFWfKPqA/YGDZY6i7AeUIQXpcMM=) 2: wTe6nqB8fZi5LCCWrszMuZB2Wbc.roa (hash: J68IWCsFvDV9cShA3lK5AicjeJ9rPLGBf/VEjmcr5l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:49:4e:55:4d:75:0f:42:35:44:a7:69:5d:d4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0 Validity Not Before: Dec 18 22:01:16 2025 GMT Not After : Dec 19 22:01:16 2025 GMT Subject: CN=b5adf28237990fc81512615bad161b2783468700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2e:a4:0d:3a:17:d3:8c:d9:80:8c:33:4b:3c: 60:cf:92:47:49:8b:04:7d:c9:32:09:ea:39:ff:61: 1e:8f:30:2a:0a:c5:1e:a9:c1:3b:71:4b:42:94:88: 30:7d:1c:58:7e:68:11:d2:2a:8e:5f:4c:41:2b:04: c1:bb:d9:18:a3:a6:60:e3:3e:83:15:d3:5f:c2:33: 0d:94:bc:bb:ac:c4:b4:fa:36:18:69:c9:b9:6b:3d: c3:38:30:50:4b:7d:09:05:d9:3f:39:22:ab:2a:f6: 11:ec:61:de:c9:8b:db:94:12:7c:6b:f5:b8:7f:9b: 43:c5:90:5e:97:a4:cd:b7:f0:21:cf:bd:a7:f6:c4: 95:68:c0:62:2f:21:2a:74:36:11:78:37:2c:fe:8c: 2b:bc:4c:fb:01:84:69:d5:47:0e:df:0c:65:67:45: be:af:70:3b:63:4f:72:95:7f:0a:12:66:f1:a9:f2: d4:bf:c6:25:ca:31:84:00:59:9f:fa:5b:cd:ff:34: 3f:b3:5c:2d:8c:eb:db:fc:77:7a:80:b5:ee:e9:13: 30:1f:85:10:e0:df:cb:74:e7:9b:b9:09:a2:30:cc: 2c:e8:99:a3:f9:e2:cd:a6:b6:a2:67:71:a1:c1:be: 1a:d6:19:df:9b:26:48:0a:bd:80:d2:08:d8:e7:90: 85:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AD:F2:82:37:99:0F:C8:15:12:61:5B:AD:16:1B:27:83:46:87:00 X509v3 Authority Key Identifier: keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:df:30:88:d1:c0:88:5b:1c:7d:0c:15:fa:b6:0c:b9:f6:16: 30:fc:b4:00:84:0b:12:e6:a6:a8:2c:d7:b4:14:0c:fa:3b:64: a5:97:25:1b:33:7b:42:e2:d5:8e:7e:4b:07:dc:fc:c7:5c:87: 36:2d:c3:0b:15:77:05:bf:f7:41:62:2a:e9:e9:23:29:7d:82: 34:af:0a:cc:d8:04:54:4b:0b:be:6e:54:87:4d:0b:51:6b:ce: 5e:8b:e0:0d:dc:a1:24:c1:a6:0c:0a:ee:de:72:c5:2d:e7:4e: f9:8a:bf:21:6e:15:58:d5:7b:b3:db:1d:5c:fc:00:22:40:3f: 88:e5:7a:86:b5:a4:90:eb:c0:38:6b:dc:28:78:51:b2:9f:53: 4a:6f:d6:8f:64:d8:94:d8:08:d5:8c:2b:57:1c:f7:40:1f:53: aa:b9:ff:a6:07:a6:9d:17:40:ec:52:89:e4:a6:e9:c9:46:0f: d4:5a:cb:7c:93:ed:2b:0b:38:36:9c:c5:ee:63:a1:2a:6e:f2: 0c:b9:de:d5:c0:27:88:3f:cf:5e:7c:9a:f2:c2:0f:77:c2:39: d1:9a:b4:52:f9:86:60:cc:ba:26:64:f1:fd:0b:a7:9c:45:c5: 64:4e:77:12:87:1b:da:e6:22:b1:78:84:39:cc:f1:ee:a1:eb: 0f:55:13:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze0lOVU11D0I1RKdpXdTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNjliNmIyYTBhNzI4MThkMWZhOWE0NmVmMmFkNzgxMmI5 NWJjYzAwHhcNMjUxMjE4MjIwMTE2WhcNMjUxMjE5MjIwMTE2WjAzMTEwLwYDVQQD EyhiNWFkZjI4MjM3OTkwZmM4MTUxMjYxNWJhZDE2MWIyNzgzNDY4NzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy6kDToX04zZgIwzSzxgz5JHSYsE fckyCeo5/2EejzAqCsUeqcE7cUtClIgwfRxYfmgR0iqOX0xBKwTBu9kYo6Zg4z6D FdNfwjMNlLy7rMS0+jYYacm5az3DODBQS30JBdk/OSKrKvYR7GHeyYvblBJ8a/W4 f5tDxZBel6TNt/Ahz72n9sSVaMBiLyEqdDYReDcs/owrvEz7AYRp1UcO3wxlZ0W+ r3A7Y09ylX8KEmbxqfLUv8YlyjGEAFmf+lvN/zQ/s1wtjOvb/Hd6gLXu6RMwH4UQ 4N/LdOebuQmiMMws6Jmj+eLNpraiZ3Ghwb4a1hnfmyZICr2A0gjY55CFhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWt8oI3mQ/IFRJhW60WGyeDRocAMB8GA1UdIwQY MBaAFJ1ptrKgpygY0fqaRu8q14ErlbzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzkt Mzk2MDc4MjFhMDlhLzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzktMzk2MDc4MjFhMDlh LzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA98wiNHA iFscfQwV+rYMufYWMPy0AIQLEuamqCzXtBQM+jtkpZclGzN7QuLVjn5LB9z8x1yH Ni3DCxV3Bb/3QWIq6ekjKX2CNK8KzNgEVEsLvm5Uh00LUWvOXovgDdyhJMGmDAru 3nLFLedO+Yq/IW4VWNV7s9sdXPwAIkA/iOV6hrWkkOvAOGvcKHhRsp9TSm/Wj2TY lNgI1YwrVxz3QB9Tqrn/pgemnRdA7FKJ5KbpyUYP1FrLfJPtKws4NpzF7mOhKm7y DLne1cAniD/PXnya8sIPd8I50Zq0UvmGYMy6JmTx/QunnEXFZE53Eocb2uYisXiE Oczx7qHrD1UTuw== -----END CERTIFICATE-----Generated at Fri Dec 19 03:00:38 2025 by rpki-client