This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json) Hash identifier: mtA24I+AXdt4aDeBprvbgpdFHCYBEK5/qKXHTtT6evQ= Subject key identifier: 64:E0:E8:0E:C2:69:24:F9:6B:F6:5A:AB:9C:88:F9:65:37:95:25:05 Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0 Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0 Certificate serial: 019AF5AF1325A38094BD5192C14E4E9B3E45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft Manifest number: 1023 Signing time: Sat 06 Dec 2025 22:01:22 +0000 Manifest this update: Sat 06 Dec 2025 22:01:22 +0000 Manifest next update: Sun 07 Dec 2025 22:01:22 +0000 Files and hashes: 1: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: m/OTtJeEL/r344/KMQqeusiJXhCTa+GAp310ejiCnV0=) 2: wTe6nqB8fZi5LCCWrszMuZB2Wbc.roa (hash: J68IWCsFvDV9cShA3lK5AicjeJ9rPLGBf/VEjmcr5l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:13:25:a3:80:94:bd:51:92:c1:4e:4e:9b:3e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0 Validity Not Before: Dec 6 22:01:22 2025 GMT Not After : Dec 7 22:01:22 2025 GMT Subject: CN=64e0e80ec26924f96bf65aab9c88f96537952505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:b2:cb:9b:62:91:0a:c7:c5:4d:6d:e4:de: a7:d3:3c:d3:5e:4c:cc:87:a3:79:77:05:9a:7b:2f: 03:ea:c5:52:74:8e:e7:e1:6f:3f:0d:ac:57:df:e5: 25:ea:17:e0:9d:c4:ee:f6:47:b7:39:3d:f9:d4:03: b5:10:1c:fd:5d:36:57:df:eb:cf:62:20:2d:87:48: 94:d8:e2:97:81:1e:1a:3e:29:d2:3c:70:c0:99:1d: 4b:a5:12:ed:b1:99:e9:76:49:7a:28:4b:da:6e:a0: b9:98:88:b2:6f:79:35:6c:3a:b0:d2:7a:4f:bb:f5: a5:8f:b5:44:12:41:fd:f9:a9:d4:2e:0f:e2:67:ed: 6f:66:c2:2f:b1:5f:1f:25:22:cc:9e:f8:7e:f5:b4: a8:a3:74:a0:ba:28:bd:8c:76:ee:8a:61:ac:cd:20: ed:c3:7d:6e:bc:85:39:07:e6:c0:ff:86:57:f9:dd: 05:42:c8:2c:ba:b8:7f:db:60:c8:79:41:8f:22:2e: 29:f7:0f:40:fd:1b:24:d7:44:1a:2e:a4:07:3d:46: 4c:9c:38:56:c5:1c:e9:d3:8a:f8:1d:dd:47:87:60: 5b:70:d1:bb:45:39:29:95:b1:55:cc:c6:25:c6:68: be:e8:10:bd:82:77:d5:4b:9b:08:c8:8b:55:16:63: 5a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E0:E8:0E:C2:69:24:F9:6B:F6:5A:AB:9C:88:F9:65:37:95:25:05 X509v3 Authority Key Identifier: keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a9:ca:f0:4a:4a:2e:b8:04:fe:cb:f3:b2:22:25:f9:14:59: f4:df:a5:22:a6:bc:1d:1a:7a:db:9e:08:99:8d:69:4e:bf:bb: 46:0b:cf:40:67:58:09:e8:17:95:f7:17:63:d1:dc:74:ed:29: 22:a6:63:e9:cf:b8:70:5b:d0:de:bc:2e:cb:ed:4c:09:b4:9d: bf:cc:5c:49:5f:d5:be:d5:13:06:47:b0:3f:7f:35:77:54:8f: 9b:dd:28:ad:b5:4c:64:11:de:18:88:76:33:ae:11:f7:c2:83: c9:e4:3e:18:a8:77:00:71:82:9a:c4:1e:b5:d5:7b:5f:ca:69: 4e:76:55:70:c5:d7:45:41:7b:bb:1e:51:d5:8e:de:d3:3f:5e: 6b:6d:fb:7e:5e:48:59:48:58:fd:aa:c7:91:63:3a:19:5a:43: 22:0c:eb:39:24:47:0d:99:26:8b:1e:74:0a:23:12:75:40:6a: d4:30:9b:13:52:71:4a:5d:26:48:b1:7d:b5:2a:91:7c:ca:4d: eb:8d:89:68:9a:d0:d3:ec:41:2b:f0:73:69:cc:b3:a5:a5:c0: 0f:4d:52:21:6b:2c:1a:b4:62:74:fe:60:d6:ee:47:60:ec:5b: f0:1a:a6:1c:79:e0:da:fe:f0:52:24:9b:19:3d:be:fe:2d:b6: 7f:91:4e:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rxMlo4CUvVGSwU5Omz5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNjliNmIyYTBhNzI4MThkMWZhOWE0NmVmMmFkNzgxMmI5 NWJjYzAwHhcNMjUxMjA2MjIwMTIyWhcNMjUxMjA3MjIwMTIyWjAzMTEwLwYDVQQD Eyg2NGUwZTgwZWMyNjkyNGY5NmJmNjVhYWI5Yzg4Zjk2NTM3OTUyNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUiyy5tikQrHxU1t5N6n0zzTXkzM h6N5dwWaey8D6sVSdI7n4W8/DaxX3+Ul6hfgncTu9ke3OT351AO1EBz9XTZX3+vP YiAth0iU2OKXgR4aPinSPHDAmR1LpRLtsZnpdkl6KEvabqC5mIiyb3k1bDqw0npP u/Wlj7VEEkH9+anULg/iZ+1vZsIvsV8fJSLMnvh+9bSoo3Sguii9jHbuimGszSDt w31uvIU5B+bA/4ZX+d0FQsgsurh/22DIeUGPIi4p9w9A/Rsk10QaLqQHPUZMnDhW xRzp04r4Hd1Hh2BbcNG7RTkplbFVzMYlxmi+6BC9gnfVS5sIyItVFmNaPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTg6A7CaST5a/Zaq5yI+WU3lSUFMB8GA1UdIwQY MBaAFJ1ptrKgpygY0fqaRu8q14ErlbzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzkt Mzk2MDc4MjFhMDlhLzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzktMzk2MDc4MjFhMDlh LzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6nK8EpK LrgE/svzsiIl+RRZ9N+lIqa8HRp6254ImY1pTr+7RgvPQGdYCegXlfcXY9HcdO0p IqZj6c+4cFvQ3rwuy+1MCbSdv8xcSV/VvtUTBkewP381d1SPm90orbVMZBHeGIh2 M64R98KDyeQ+GKh3AHGCmsQetdV7X8ppTnZVcMXXRUF7ux5R1Y7e0z9ea237fl5I WUhY/arHkWM6GVpDIgzrOSRHDZkmix50CiMSdUBq1DCbE1JxSl0mSLF9tSqRfMpN 642JaJrQ0+xBK/BzacyzpaXAD01SIWssGrRidP5g1u5HYOxb8BqmHHng2v7wUiSb GT2+/i22f5FOBg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:13:57 2025 by rpki-client