This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json) Hash identifier: x/TwR25gBEb9yJLBmk13ZwYurWKR1j7OX6VmKCWIETk= Subject key identifier: 11:82:D1:D7:6D:D6:88:0B:85:56:24:B9:22:CC:C6:91:32:2E:0A:1A Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92 Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892 Certificate serial: 019AF352602832A78623E3FFD251CC4861F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 11:00:53 +0000 Manifest this update: Sat 06 Dec 2025 11:00:53 +0000 Manifest next update: Sun 07 Dec 2025 11:00:53 +0000 Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: 1fXfyVRZm3yTptDjiAffn78y74tefjFZfjBwHnuL/yk=) 2: sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa (hash: VInHBflevKh8uKrJkW73psQEtmEHrPxva/qTjQRvp1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:60:28:32:a7:86:23:e3:ff:d2:51:cc:48:61:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892 Validity Not Before: Dec 6 11:00:53 2025 GMT Not After : Dec 7 11:00:53 2025 GMT Subject: CN=1182d1d76dd6880b855624b922ccc691322e0a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:20:20:a7:19:27:e1:7f:c6:e9:88:48:d3: 68:0f:5d:e8:82:ef:60:37:0a:55:52:0a:48:63:44: f7:02:03:ae:6f:1c:27:99:f0:18:ec:fa:44:71:8f: 3f:19:f5:50:c7:bd:9b:83:cc:0e:80:34:16:b9:68: c5:4c:d7:2d:7a:77:bd:28:8e:22:c7:48:26:46:d3: 79:09:0a:ba:b2:2b:00:21:f0:0c:1e:c1:85:95:12: 32:86:88:ca:55:89:b5:cd:7f:6a:d2:2d:cf:3e:16: 10:78:3e:18:ff:88:63:2c:22:05:92:fd:48:37:cc: d7:42:50:45:fa:aa:d0:fb:e9:3c:71:1b:a5:79:8a: ca:79:e6:8c:b6:49:bb:20:b9:cc:2c:69:9b:02:25: 30:5a:0e:9d:55:2a:e9:1b:01:40:5a:34:7b:bb:93: 52:47:25:e3:c0:22:98:7c:7a:ff:08:c2:ec:67:6e: 81:d3:2c:29:aa:85:2c:c1:10:8e:85:81:12:e3:37: 8b:ab:bf:97:c0:aa:ab:49:bc:b9:41:1f:5a:67:93: 65:8a:a8:99:9d:86:6c:5a:b2:0d:4f:23:68:34:8f: d2:17:d0:5d:78:2b:5a:6e:7c:c6:ec:b5:13:c8:c5: 57:d8:9f:c4:7b:31:2f:34:f3:5a:84:02:5d:87:e3: 56:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:82:D1:D7:6D:D6:88:0B:85:56:24:B9:22:CC:C6:91:32:2E:0A:1A X509v3 Authority Key Identifier: keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:a4:0b:b0:e1:a5:66:24:96:9d:62:75:a2:5f:8a:37:31:7d: b7:65:79:b7:84:3a:a0:36:e2:3a:fb:d5:c0:9b:fd:b4:1a:54: 53:34:5f:e7:0b:b0:a9:e3:b5:74:b9:e2:6d:b3:67:5b:93:55: 25:05:7d:19:f1:f1:ce:c8:b7:79:59:c3:82:da:82:d2:de:51: 44:77:ca:3f:8d:81:49:53:ae:e9:41:73:41:ca:35:18:be:97: 61:16:bd:33:53:e1:79:cb:98:58:5b:f0:b2:40:1f:0c:f3:82: 12:f3:e9:26:47:a3:23:e3:a6:cd:7a:1a:ac:97:a1:cb:bb:78: e9:62:e4:0b:7e:4a:2f:40:27:6d:c9:92:a4:f0:94:e7:a7:29: f8:75:fd:53:7b:a1:18:fe:c3:b3:6a:80:99:f6:d6:d6:d6:fe: 67:94:bd:d7:dd:37:09:7c:f4:55:93:3b:a4:95:22:ce:8f:6f: f1:9c:21:4e:f5:b5:e7:af:56:02:de:39:f8:78:11:a1:8d:35: 09:2c:5f:82:f1:ec:bc:1e:a1:8b:00:17:b2:72:33:fe:d2:cb: 7f:2a:6d:ef:44:6d:7e:5a:43:41:fb:ad:b4:31:0e:cb:9e:1c: 77:d4:98:f3:b1:aa:2f:64:f8:20:90:e5:0c:ef:ff:62:44:28: f6:90:51:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUmAoMqeGI+P/0lHMSGH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NmU0NzQ0NzMxZGE0NGYwOGZhNWU5MmM1ZWIyYTQ3NGQ0 OWE4OTIwHhcNMjUxMjA2MTEwMDUzWhcNMjUxMjA3MTEwMDUzWjAzMTEwLwYDVQQD EygxMTgyZDFkNzZkZDY4ODBiODU1NjI0YjkyMmNjYzY5MTMyMmUwYTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLUgIKcZJ+F/xumISNNoD13ogu9g NwpVUgpIY0T3AgOubxwnmfAY7PpEcY8/GfVQx72bg8wOgDQWuWjFTNctene9KI4i x0gmRtN5CQq6sisAIfAMHsGFlRIyhojKVYm1zX9q0i3PPhYQeD4Y/4hjLCIFkv1I N8zXQlBF+qrQ++k8cRuleYrKeeaMtkm7ILnMLGmbAiUwWg6dVSrpGwFAWjR7u5NS RyXjwCKYfHr/CMLsZ26B0ywpqoUswRCOhYES4zeLq7+XwKqrSby5QR9aZ5NliqiZ nYZsWrINTyNoNI/SF9BdeCtabnzG7LUTyMVX2J/EezEvNPNahAJdh+NWRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGC0ddt1ogLhVYkuSLMxpEyLgoaMB8GA1UdIwQY MBaAFDVuR0RzHaRPCPpeksXrKkdNSaiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUt MGM1MDFkNjg5NzVhLzEvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUtMGM1MDFkNjg5NzVh LzEvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzaQLsOGl ZiSWnWJ1ol+KNzF9t2V5t4Q6oDbiOvvVwJv9tBpUUzRf5wuwqeO1dLnibbNnW5NV JQV9GfHxzsi3eVnDgtqC0t5RRHfKP42BSVOu6UFzQco1GL6XYRa9M1PhecuYWFvw skAfDPOCEvPpJkejI+OmzXoarJehy7t46WLkC35KL0AnbcmSpPCU56cp+HX9U3uh GP7Ds2qAmfbW1tb+Z5S91903CXz0VZM7pJUizo9v8ZwhTvW1569WAt45+HgRoY01 CSxfgvHsvB6hiwAXsnIz/tLLfypt70RtflpDQfuttDEOy54cd9SY87GqL2T4IJDl DO//YkQo9pBR4g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:54 2025 by rpki-client