This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json) Hash identifier: PCA8OtzYknvy9QzAVhZAeNs3EFa1/SSGfjElasutdjE= Subject key identifier: 74:F7:F5:53:52:5D:ED:BD:9C:2F:83:5A:68:DF:16:F5:A8:66:1C:A2 Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb Certificate serial: 019B0AED21974B7892CEFA9DBA9086BFF2DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 01:01:11 +0000 Manifest this update: Thu 11 Dec 2025 01:01:11 +0000 Manifest next update: Fri 12 Dec 2025 01:01:11 +0000 Files and hashes: 1: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: 1/Zf1a04zyEY6bSKPeipT19YLmmC/GtwZ+dLigAVcx0=) 2: ge72rIVKenfFe0v5asZR_PaxIp4.roa (hash: o9engqettqOIJ9n8PYQ/SXW11G8NZE3fZOewqKwRqSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:ed:21:97:4b:78:92:ce:fa:9d:ba:90:86:bf:f2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb Validity Not Before: Dec 11 01:01:11 2025 GMT Not After : Dec 12 01:01:11 2025 GMT Subject: CN=74f7f553525dedbd9c2f835a68df16f5a8661ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f1:dd:ef:e8:90:20:ab:8f:ed:02:c1:f0:d4: ff:a3:c7:40:d8:06:fc:8f:cf:f6:17:a0:69:86:a9: 90:e2:d5:d8:be:f6:bb:e2:38:d0:06:14:06:7b:69: 44:0d:d1:2e:b9:fa:a1:60:12:19:7f:a4:48:52:43: eb:36:f3:e6:eb:1f:82:97:80:f6:62:d4:0a:3a:74: 08:33:e5:ef:69:a1:2a:78:f7:3d:8c:43:ff:8f:ab: c6:82:a8:7f:50:63:5e:fd:56:08:ba:c8:d8:ed:ce: 71:e9:6b:e5:2e:d1:24:36:92:dc:c0:29:05:17:3b: 1f:9d:42:8f:a1:0d:70:ce:07:7f:fc:22:98:a5:3e: e6:c1:2c:f8:af:29:e0:fd:97:05:cd:9c:a5:ca:3a: 4d:f2:24:42:33:e7:53:50:aa:dd:49:ed:2c:a4:ac: d8:3e:9a:72:f2:9e:38:94:f8:ec:b2:fe:7d:1a:a8: ae:34:51:d7:f9:60:0a:df:62:59:b1:fe:5f:52:49: 29:03:5b:11:c4:6c:e8:9b:52:99:a4:93:09:b7:b3: f8:40:f8:3f:af:86:75:c9:13:78:e7:ad:3e:9e:7b: 39:eb:96:6d:fb:24:b0:6a:3b:fe:23:2e:90:11:23: 7d:23:b6:9a:75:a5:7a:bd:6f:5d:54:de:22:80:ca: 50:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F7:F5:53:52:5D:ED:BD:9C:2F:83:5A:68:DF:16:F5:A8:66:1C:A2 X509v3 Authority Key Identifier: keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:41:e4:6c:e9:32:7d:4d:4c:8e:51:44:4a:1e:42:af:56:90: fb:95:48:31:4b:08:1b:97:10:39:17:10:87:d6:00:f8:fe:1a: 0b:84:eb:2a:a0:6c:2d:eb:ea:cc:02:18:d8:4f:9e:72:ca:0a: 3a:de:aa:96:ac:56:a8:b4:69:db:a3:1d:6b:ed:3b:08:f9:24: 73:ea:c1:b1:11:ff:2c:f6:bb:19:83:6a:11:37:c4:64:6e:f3: 58:c8:dd:a3:c6:fc:fd:84:71:bb:f0:e0:49:e9:d1:a8:b1:65: 23:9a:fa:01:9b:e1:08:92:06:17:df:f5:22:d9:17:01:ac:44: 7b:aa:83:41:22:f9:a2:dc:ce:52:7f:3a:6c:e3:36:30:f8:c0: b6:7b:66:8d:5e:c0:b6:e0:27:f1:bc:f3:90:2e:88:40:90:23: 73:46:4c:99:0c:1f:c1:8e:16:16:0e:08:fb:de:71:68:89:77: b7:2b:33:8f:1a:7f:a1:71:57:5c:52:89:52:f3:13:60:dc:49: 51:83:40:ec:bb:f4:08:a5:26:cb:0b:c6:d3:03:e1:2c:57:c3: c7:0a:c8:a0:9c:04:8b:1c:b4:4c:b6:bc:32:ed:6c:da:5f:11: de:34:bf:8e:6f:9e:76:db:39:25:b2:f2:f3:c6:99:dc:28:ac: d4:69:34:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsK7SGXS3iSzvqdupCGv/LdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YWMzMDhjOTRmNTdiMTFjZWUxYmE4NGVmMTI3ODQ0N2M2 Nzg1ZWIwHhcNMjUxMjExMDEwMTExWhcNMjUxMjEyMDEwMTExWjAzMTEwLwYDVQQD Eyg3NGY3ZjU1MzUyNWRlZGJkOWMyZjgzNWE2OGRmMTZmNWE4NjYxY2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/Hd7+iQIKuP7QLB8NT/o8dA2Ab8 j8/2F6BphqmQ4tXYvva74jjQBhQGe2lEDdEuufqhYBIZf6RIUkPrNvPm6x+Cl4D2 YtQKOnQIM+XvaaEqePc9jEP/j6vGgqh/UGNe/VYIusjY7c5x6WvlLtEkNpLcwCkF FzsfnUKPoQ1wzgd//CKYpT7mwSz4ryng/ZcFzZylyjpN8iRCM+dTUKrdSe0spKzY Pppy8p44lPjssv59GqiuNFHX+WAK32JZsf5fUkkpA1sRxGzom1KZpJMJt7P4QPg/ r4Z1yRN4560+nns565Zt+ySwajv+Iy6QESN9I7aadaV6vW9dVN4igMpQ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHT39VNSXe29nC+DWmjfFvWoZhyiMB8GA1UdIwQY MBaAFDWsMIyU9XsRzuG6hO8SeER8Z4XrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yYjMyMTgtNTQyYy00ZDk1LWFjMDct NjBkMzU1NTRjZTY0LzEvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8yYjMyMTgtNTQyYy00ZDk1LWFjMDctNjBkMzU1NTRjZTY0 LzEvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEHkbOky fU1MjlFESh5Cr1aQ+5VIMUsIG5cQORcQh9YA+P4aC4TrKqBsLevqzAIY2E+ecsoK Ot6qlqxWqLRp26Mda+07CPkkc+rBsRH/LPa7GYNqETfEZG7zWMjdo8b8/YRxu/Dg SenRqLFlI5r6AZvhCJIGF9/1ItkXAaxEe6qDQSL5otzOUn86bOM2MPjAtntmjV7A tuAn8bzzkC6IQJAjc0ZMmQwfwY4WFg4I+95xaIl3tyszjxp/oXFXXFKJUvMTYNxJ UYNA7Lv0CKUmywvG0wPhLFfDxwrIoJwEixy0TLa8Mu1s2l8R3jS/jm+edts5JbLy 88aZ3Cis1Gk0RA== -----END CERTIFICATE-----Generated at Thu Dec 11 07:06:03 2025 by rpki-client