This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft File: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json) Hash identifier: wny1wK8yJY2oRnB5S6lNw7m6ffvMR6AFvO8+OKzi+yo= Subject key identifier: 52:56:37:A4:B2:44:E2:60:82:B4:DE:D4:A6:C6:B6:E0:68:85:55:AE Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40 Certificate issuer: /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140 Certificate serial: 019AF49C4B3979904A27DA255819475F92C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft Manifest number: 108E Signing time: Sat 06 Dec 2025 17:01:14 +0000 Manifest this update: Sat 06 Dec 2025 17:01:14 +0000 Manifest next update: Sun 07 Dec 2025 17:01:14 +0000 Files and hashes: 1: S97lFgLq26JbbTYFy87788PSLWo.roa (hash: is6nhjEc4wx03A1n5kSCHVis+Wuf1J/yxv2gFot2aXA=) 2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: bp5JfRJtpq7lhDa7CUhzBuCk/phDDZzxjpjkIAw29XU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:4b:39:79:90:4a:27:da:25:58:19:47:5f:92:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140 Validity Not Before: Dec 6 17:01:14 2025 GMT Not After : Dec 7 17:01:14 2025 GMT Subject: CN=525637a4b244e26082b4ded4a6c6b6e0688555ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:22:8a:e3:fc:45:c2:9a:ea:f9:13:e4:1c:47: 5e:6c:27:0e:78:a4:50:d3:d9:22:51:07:3f:0e:fb: 7a:ea:22:2a:0b:a6:94:d6:5a:5e:a6:81:bd:ad:03: 87:c8:b2:e1:f3:4f:83:ec:0b:39:88:2d:ba:32:c2: 9d:8f:98:0c:ea:54:30:9d:c6:75:45:9b:1c:d7:87: b5:08:b8:6e:f9:17:0f:9c:9e:0b:54:64:46:da:ed: 7a:8f:41:31:44:a0:0f:a3:56:2c:77:87:ea:b1:8c: cc:b3:59:58:79:9a:2f:66:ca:9f:76:8d:0c:3e:42: ad:f6:7b:08:1e:f2:53:dd:f1:45:f8:16:01:50:aa: 4e:88:49:38:df:43:b7:e0:e1:54:36:5a:1c:38:1f: c2:72:b3:7b:c7:d0:ec:23:a3:ad:4e:fa:58:4c:28: 1c:2d:ca:ca:e7:15:ef:2e:d9:c4:9a:cb:cd:7f:f1: b3:6c:7d:6b:00:c3:37:a2:1b:43:5b:f2:f8:44:cc: e1:f3:87:f2:e7:68:2b:ca:14:1e:6b:84:3b:91:21: f2:a5:01:7b:ca:03:28:50:6c:86:7b:89:77:5d:31: f6:fa:2c:35:b1:cb:14:49:86:2b:91:f8:1f:c7:90: a5:4b:36:10:48:49:f4:d4:ec:80:5e:a4:73:ee:0f: 67:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:56:37:A4:B2:44:E2:60:82:B4:DE:D4:A6:C6:B6:E0:68:85:55:AE X509v3 Authority Key Identifier: keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:67:34:1f:94:25:04:2d:31:27:0f:e0:56:73:e2:07:9f:66: e6:dc:90:20:51:8e:19:a6:dc:ba:99:0a:1c:0f:a4:3d:74:99: 2a:0b:43:a3:bd:2a:ee:c8:a6:78:dc:84:a8:5c:85:9f:7b:c8: 52:10:06:11:79:de:e9:01:49:f9:40:60:fb:22:0d:de:26:9b: b2:a6:d5:60:fa:9e:1a:2d:d7:cb:23:6a:dc:51:3a:e6:ca:b4: 25:1f:ef:ea:2c:de:9c:0c:42:7b:3d:32:cc:9b:aa:77:14:c2: 00:8d:f7:6c:f6:43:13:d1:da:93:35:08:27:8d:b4:f1:38:2d: c2:f7:c0:3f:77:16:ce:40:94:62:42:1e:7d:6e:6a:92:7b:3c: 6d:39:c4:a8:db:fe:61:fd:4b:50:bb:fb:32:6f:83:02:04:23: cd:a8:8a:3a:9c:31:ff:fd:19:24:61:c7:1b:00:9d:78:25:e1: 0c:40:82:07:19:f5:dc:2f:04:35:05:88:2b:32:f3:76:1f:35: 21:dd:d1:b8:ef:c2:0c:a0:19:1e:82:90:30:38:86:1f:56:01: 62:a5:bc:d9:e7:96:df:34:46:84:fe:4f:c0:e7:05:d5:54:0a: f7:ce:ee:f4:47:6c:18:fd:2d:f2:d5:c1:fa:37:47:34:41:2b: 7f:57:72:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nEs5eZBKJ9olWBlHX5LIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNjZhNWNmYTM5Y2ZhOTFlMzEzNDQzZjYxM2U3M2NjZTcz ZjIxNDAwHhcNMjUxMjA2MTcwMTE0WhcNMjUxMjA3MTcwMTE0WjAzMTEwLwYDVQQD Eyg1MjU2MzdhNGIyNDRlMjYwODJiNGRlZDRhNmM2YjZlMDY4ODU1NWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iKK4/xFwprq+RPkHEdebCcOeKRQ 09kiUQc/Dvt66iIqC6aU1lpepoG9rQOHyLLh80+D7As5iC26MsKdj5gM6lQwncZ1 RZsc14e1CLhu+RcPnJ4LVGRG2u16j0ExRKAPo1Ysd4fqsYzMs1lYeZovZsqfdo0M PkKt9nsIHvJT3fFF+BYBUKpOiEk430O34OFUNlocOB/CcrN7x9DsI6OtTvpYTCgc LcrK5xXvLtnEmsvNf/GzbH1rAMM3ohtDW/L4RMzh84fy52gryhQea4Q7kSHypQF7 ygMoUGyGe4l3XTH2+iw1scsUSYYrkfgfx5ClSzYQSEn01OyAXqRz7g9nXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJWN6SyROJggrTe1KbGtuBohVWuMB8GA1UdIwQY MBaAFJ1mpc+jnPqR4xNEP2E+c8znPyFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYt YTE5NTA3ZGU3NWI0LzEvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYtYTE5NTA3ZGU3NWI0 LzEvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmc0H5Ql BC0xJw/gVnPiB59m5tyQIFGOGabcupkKHA+kPXSZKgtDo70q7simeNyEqFyFn3vI UhAGEXne6QFJ+UBg+yIN3iabsqbVYPqeGi3XyyNq3FE65sq0JR/v6izenAxCez0y zJuqdxTCAI33bPZDE9HakzUIJ4208TgtwvfAP3cWzkCUYkIefW5qkns8bTnEqNv+ Yf1LULv7Mm+DAgQjzaiKOpwx//0ZJGHHGwCdeCXhDECCBxn13C8ENQWIKzLzdh81 Id3RuO/CDKAZHoKQMDiGH1YBYqW82eeW3zRGhP5PwOcF1VQK987u9EdsGP0t8tXB +jdHNEErf1dyjw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:43 2025 by rpki-client