This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json) Hash identifier: 1QsnANcpizVt3BXFTxuz06kZG91LBF70YCizjNiCpgg= Subject key identifier: 95:B6:20:DE:28:93:8E:53:6C:74:39:12:53:C8:E0:98:A0:14:1A:E8 Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80 Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780 Certificate serial: 019B34C51A9FB3D1FB6D4D3058251881E377 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft Manifest number: 1226 Signing time: Fri 19 Dec 2025 04:01:31 +0000 Manifest this update: Fri 19 Dec 2025 04:01:31 +0000 Manifest next update: Sat 20 Dec 2025 04:01:31 +0000 Files and hashes: 1: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (hash: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=) 2: Q8bZioVPDoZ4xd-x42q6Z5HkkPQ.roa (hash: uBME2SsaTDhptgYkDGLlHO5wga4qvwY0K6f/+pZrE38=) 3: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: QscpCMShz3IbyFs2keVa+s9Ebcysg3KJYeBTLMRylGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:1a:9f:b3:d1:fb:6d:4d:30:58:25:18:81:e3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780 Validity Not Before: Dec 19 04:01:31 2025 GMT Not After : Dec 20 04:01:31 2025 GMT Subject: CN=95b620de28938e536c74391253c8e098a0141ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0e:da:0c:8a:eb:00:98:fc:f9:07:ac:63:cd: 0d:f1:12:f8:bc:2c:e3:c7:9c:90:78:a8:59:34:7b: 1a:26:b3:de:c9:bd:3d:8a:4e:5a:c3:02:4b:7d:22: ca:82:b1:2f:94:6d:ee:06:8c:33:ea:2a:2f:a7:2e: 44:5f:4b:90:7f:b0:1f:a3:12:c0:e1:b1:8a:77:1f: 27:a1:b6:f0:56:93:fd:aa:93:cb:b5:dd:0e:16:e3: 30:26:e4:34:83:2b:1e:bb:e5:cb:74:ec:2b:a2:2f: d5:b6:91:7f:7f:92:b2:f3:4c:d1:27:ab:94:14:f1: 50:84:e9:0c:40:f5:05:5f:38:56:ac:84:5d:68:e5: 3c:02:8c:00:96:41:a7:6f:15:80:2d:3d:4d:ab:1a: 95:6c:31:f1:da:7d:c7:df:86:b6:1f:df:31:ea:07: 6a:5b:f6:83:2a:1b:5c:0e:43:9f:7e:7d:e5:80:b5: 69:b0:77:48:6d:98:22:f2:12:97:04:a8:06:64:c5: 4f:2b:29:e9:74:c5:5f:5d:39:95:07:2d:a2:3c:9d: 68:10:17:8a:bf:42:17:b5:6c:8d:d4:d7:b9:13:73: 66:a9:4f:1f:cd:7f:a0:d2:76:a3:50:26:73:8e:c8: 41:ff:c1:ff:79:16:1b:6f:65:1b:90:f0:15:e8:30: 12:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B6:20:DE:28:93:8E:53:6C:74:39:12:53:C8:E0:98:A0:14:1A:E8 X509v3 Authority Key Identifier: keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d5:f2:41:ed:b9:c7:0c:33:07:0d:05:94:32:b8:ad:c7:ee: dd:c7:7c:e1:b1:0f:18:c6:3c:f9:f4:bd:bb:d3:f7:75:ea:f6: 79:5e:31:2e:ba:5e:b2:1b:b9:a0:72:6b:ce:ea:c4:b4:96:bb: 09:2c:da:dc:5c:b1:ac:c8:78:b4:33:be:a9:09:dc:7d:aa:c7: fe:a6:c5:2d:68:6f:c9:98:aa:e0:27:83:1a:c3:d5:6d:a9:f5: 5d:0d:0b:dc:22:f7:5a:c0:c0:63:59:7a:51:98:96:0f:0b:d5: 6b:fb:06:53:8a:00:15:da:d2:b0:49:d1:1c:44:67:46:ce:cf: 36:03:b1:f0:18:ed:ff:f2:84:2a:10:eb:16:38:30:c7:aa:95: 0d:61:fb:2e:41:a8:39:ad:75:0b:dc:24:c3:1f:bf:9b:97:10: 78:54:8e:10:ee:75:6b:7a:79:b4:f2:08:8f:98:a5:80:ac:d4: 55:08:80:2b:79:9f:11:33:df:8e:48:38:5b:58:36:15:df:14: dc:d7:ea:9b:3f:2f:0e:cf:99:10:13:0a:f0:29:52:00:d2:f9: 08:87:d8:da:e5:9d:02:2d:5c:fa:9d:e9:bc:9e:2f:56:dc:9a: 25:ca:6d:d1:ce:95:c8:99:a1:c2:73:67:5e:09:89:3f:fc:51: f4:fc:4b:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xRqfs9H7bU0wWCUYgeN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDRiM2NmMjRjZjRiODFiMjIyMTE0NmEwMGYyMjc3YmMz NDg3ODAwHhcNMjUxMjE5MDQwMTMxWhcNMjUxMjIwMDQwMTMxWjAzMTEwLwYDVQQD Eyg5NWI2MjBkZTI4OTM4ZTUzNmM3NDM5MTI1M2M4ZTA5OGEwMTQxYWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ7aDIrrAJj8+QesY80N8RL4vCzj x5yQeKhZNHsaJrPeyb09ik5awwJLfSLKgrEvlG3uBowz6iovpy5EX0uQf7AfoxLA 4bGKdx8nobbwVpP9qpPLtd0OFuMwJuQ0gyseu+XLdOwroi/VtpF/f5Ky80zRJ6uU FPFQhOkMQPUFXzhWrIRdaOU8AowAlkGnbxWALT1NqxqVbDHx2n3H34a2H98x6gdq W/aDKhtcDkOffn3lgLVpsHdIbZgi8hKXBKgGZMVPKynpdMVfXTmVBy2iPJ1oEBeK v0IXtWyN1Ne5E3NmqU8fzX+g0najUCZzjshB/8H/eRYbb2UbkPAV6DASRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJW2IN4ok45TbHQ5ElPI4JigFBroMB8GA1UdIwQY MBaAFJ8Es88kz0uBsiIRRqAPIne8NIeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kYTM1OGMtMmU0Ny00NGVjLWIwYzUt MmFkOTY4YjM2MmRlLzEvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kYTM1OGMtMmU0Ny00NGVjLWIwYzUtMmFkOTY4YjM2MmRl LzEvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9XyQe25 xwwzBw0FlDK4rcfu3cd84bEPGMY8+fS9u9P3der2eV4xLrpeshu5oHJrzurEtJa7 CSza3FyxrMh4tDO+qQncfarH/qbFLWhvyZiq4CeDGsPVban1XQ0L3CL3WsDAY1l6 UZiWDwvVa/sGU4oAFdrSsEnRHERnRs7PNgOx8Bjt//KEKhDrFjgwx6qVDWH7LkGo Oa11C9wkwx+/m5cQeFSOEO51a3p5tPIIj5ilgKzUVQiAK3mfETPfjkg4W1g2Fd8U 3Nfqmz8vDs+ZEBMK8ClSANL5CIfY2uWdAi1c+p3pvJ4vVtyaJcpt0c6VyJmhwnNn XgmJP/xR9PxLjA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:58:31 2025 by rpki-client