This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json) Hash identifier: CcySmVEJSaSWfY+11KxNJfaWrtvOEOzZ68jz2n9DSC4= Subject key identifier: 69:93:06:20:C1:B4:01:36:8E:AD:B9:C4:F5:20:F0:0F:53:37:EA:F3 Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80 Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780 Certificate serial: 019AF12E3FD596D07BB864390F94E3E01BD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft Manifest number: 1203 Signing time: Sat 06 Dec 2025 01:02:11 +0000 Manifest this update: Sat 06 Dec 2025 01:02:11 +0000 Manifest next update: Sun 07 Dec 2025 01:02:11 +0000 Files and hashes: 1: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (hash: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=) 2: Q8bZioVPDoZ4xd-x42q6Z5HkkPQ.roa (hash: uBME2SsaTDhptgYkDGLlHO5wga4qvwY0K6f/+pZrE38=) 3: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: KNFaCJutUW+6khSWWAo+GVcDZddjsX+UjGktx30VsRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3f:d5:96:d0:7b:b8:64:39:0f:94:e3:e0:1b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780 Validity Not Before: Dec 6 01:02:11 2025 GMT Not After : Dec 7 01:02:11 2025 GMT Subject: CN=69930620c1b401368eadb9c4f520f00f5337eaf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:1b:67:3e:5e:ed:4e:33:67:03:cc:f0:be: 6b:89:47:de:7d:9f:7f:0e:bb:68:53:72:58:f6:50: a4:bf:54:74:ac:c7:4a:82:d3:3c:2f:6d:7b:fb:12: 1e:38:19:cb:de:f6:d5:82:d7:da:4f:3a:a2:53:bb: 27:63:48:55:ae:5d:43:8c:03:af:89:f7:d2:66:e8: e8:a9:b4:9d:75:b2:50:1c:06:b4:46:68:f5:56:d8: b6:42:f1:97:e2:0e:35:55:ca:10:ea:b4:e1:d3:40: 9c:d6:c5:02:a6:38:c6:b3:73:ba:bb:28:8d:06:d7: a6:e6:ed:f7:1c:86:09:0b:5d:d4:91:22:d1:9a:6d: d1:1d:b4:b2:e3:ec:f7:77:82:ed:02:8c:ff:13:f1: 5b:24:7a:35:62:15:7e:ec:e1:2f:c3:e1:ec:94:3a: b7:13:6d:87:6d:0e:13:42:ab:93:1c:a7:27:01:8f: 67:cf:31:e8:dd:e5:d9:b7:a2:2f:00:fc:b1:d0:0a: 54:26:98:be:09:00:62:e1:da:56:d1:f1:98:4e:41: 35:0a:65:3f:2c:ed:28:c2:aa:47:04:14:f0:dc:d4: 6a:fe:d4:9c:91:e5:a3:24:3d:fb:3e:8d:35:db:0c: b4:1d:43:13:4f:4a:e2:e7:d8:b7:4a:ac:a6:64:00: 55:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:93:06:20:C1:B4:01:36:8E:AD:B9:C4:F5:20:F0:0F:53:37:EA:F3 X509v3 Authority Key Identifier: keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:61:e0:98:04:f6:52:3b:dd:32:c1:c0:c7:e2:67:eb:1b:41: 97:e4:ca:75:54:ab:50:0d:64:32:70:49:88:f3:67:ae:81:33: ac:83:b0:51:b3:2a:0e:f1:04:62:d8:3d:5c:0b:c3:49:da:3f: c5:ba:86:da:4a:67:80:7d:bf:5c:8c:70:2e:4e:50:7f:e0:c5: b8:b9:e1:e1:94:43:06:1b:89:11:67:34:03:0e:c1:ae:32:fb: 6e:0b:07:f8:1c:08:80:57:f5:c1:36:af:e7:43:83:a5:75:59: a4:88:10:29:74:8b:6f:23:07:d8:ba:4d:22:23:6a:6a:54:84: 7c:f5:ce:1e:2c:21:8e:1f:9b:a5:d7:b5:15:b4:1e:81:89:6f: ea:52:87:3a:27:4f:42:13:dd:7c:a6:71:9f:a2:d6:6a:b1:94: 4d:ab:b0:cc:b0:ac:55:17:24:8f:f8:7f:7c:0c:e6:78:b3:bf: 77:cd:9a:21:97:9f:eb:64:a4:1f:95:ed:f4:de:16:b6:7d:9a: 1a:07:4e:cc:b5:65:79:9d:61:c0:ca:0a:53:46:4c:fe:8c:a6: 72:29:ab:04:4c:7a:0e:54:5b:7d:67:49:f1:26:52:ed:f5:ac: 39:00:73:a5:17:d4:27:42:29:32:ea:59:3f:5b:f4:64:67:8b: ce:e1:2c:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLj/VltB7uGQ5D5Tj4BvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDRiM2NmMjRjZjRiODFiMjIyMTE0NmEwMGYyMjc3YmMz NDg3ODAwHhcNMjUxMjA2MDEwMjExWhcNMjUxMjA3MDEwMjExWjAzMTEwLwYDVQQD Eyg2OTkzMDYyMGMxYjQwMTM2OGVhZGI5YzRmNTIwZjAwZjUzMzdlYWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokUbZz5e7U4zZwPM8L5riUfefZ9/ DrtoU3JY9lCkv1R0rMdKgtM8L217+xIeOBnL3vbVgtfaTzqiU7snY0hVrl1DjAOv iffSZujoqbSddbJQHAa0Rmj1Vti2QvGX4g41VcoQ6rTh00Cc1sUCpjjGs3O6uyiN Btem5u33HIYJC13UkSLRmm3RHbSy4+z3d4LtAoz/E/FbJHo1YhV+7OEvw+HslDq3 E22HbQ4TQquTHKcnAY9nzzHo3eXZt6IvAPyx0ApUJpi+CQBi4dpW0fGYTkE1CmU/ LO0owqpHBBTw3NRq/tSckeWjJD37Po012wy0HUMTT0ri59i3SqymZABVmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmTBiDBtAE2jq25xPUg8A9TN+rzMB8GA1UdIwQY MBaAFJ8Es88kz0uBsiIRRqAPIne8NIeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kYTM1OGMtMmU0Ny00NGVjLWIwYzUt MmFkOTY4YjM2MmRlLzEvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kYTM1OGMtMmU0Ny00NGVjLWIwYzUtMmFkOTY4YjM2MmRl LzEvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGHgmAT2 UjvdMsHAx+Jn6xtBl+TKdVSrUA1kMnBJiPNnroEzrIOwUbMqDvEEYtg9XAvDSdo/ xbqG2kpngH2/XIxwLk5Qf+DFuLnh4ZRDBhuJEWc0Aw7BrjL7bgsH+BwIgFf1wTav 50ODpXVZpIgQKXSLbyMH2LpNIiNqalSEfPXOHiwhjh+bpde1FbQegYlv6lKHOidP QhPdfKZxn6LWarGUTauwzLCsVRckj/h/fAzmeLO/d82aIZef62SkH5Xt9N4Wtn2a GgdOzLVleZ1hwMoKU0ZM/oymcimrBEx6DlRbfWdJ8SZS7fWsOQBzpRfUJ0IpMupZ P1v0ZGeLzuEspQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:58 2025 by rpki-client