This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json) Hash identifier: uUuXNkEGgMeOcAh+1QRD8TzA8eqibQaibjpWOg6Ze5s= Subject key identifier: BE:F4:30:E5:25:34:C5:DA:33:0B:4F:DF:3F:11:FB:47:59:39:AF:25 Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7 Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7 Certificate serial: 019B0E936B2A15D880DC757AD01BC4F5A048 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft Manifest number: 0FB4 Signing time: Thu 11 Dec 2025 18:01:40 +0000 Manifest this update: Thu 11 Dec 2025 18:01:40 +0000 Manifest next update: Fri 12 Dec 2025 18:01:40 +0000 Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: RnHGiH96witjc79zVO1kZvcmnHoklJwV7NeZQTlK3nM=) 2: PmVcb6mc4PNxZC_ptgP_O-XbGLI.roa (hash: pKGXoSvQeFa7SbcSS7sBYIQ1DYaO2+BzF5Gj11hr5Ic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:6b:2a:15:d8:80:dc:75:7a:d0:1b:c4:f5:a0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7 Validity Not Before: Dec 11 18:01:40 2025 GMT Not After : Dec 12 18:01:40 2025 GMT Subject: CN=bef430e52534c5da330b4fdf3f11fb475939af25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:f8:a5:5c:62:9a:36:12:a3:df:93:70:10: 4c:07:df:db:d4:2e:00:d1:5c:3b:37:67:5a:83:6d: 29:78:8d:7b:a9:fe:15:ef:a4:d3:c2:73:4a:23:0a: 89:06:ff:80:28:6a:16:3d:e7:6e:85:08:2d:7c:50: e0:07:71:96:d2:25:a4:f0:82:b6:37:04:83:46:de: 74:93:6d:33:a9:0f:e0:1b:2b:fd:23:d7:cc:91:de: b1:00:64:cd:57:40:84:ef:f0:37:c1:85:7f:ea:ce: 92:5b:c3:f6:4d:91:c3:dd:9b:98:1a:90:e4:dd:a1: 22:4d:e4:a6:0b:4c:64:ba:55:b4:00:6f:1e:fd:44: cc:d1:a7:56:39:f5:20:19:a3:b2:0b:65:3e:9e:14: cd:35:81:c6:12:c9:03:ea:af:9f:0d:8f:40:42:8b: 27:d1:0e:e6:27:4a:38:ec:7b:5f:9b:7d:aa:4e:9e: a5:20:03:60:d9:bc:8f:c6:d2:13:e4:3c:00:ef:12: 54:e2:ca:28:9b:70:28:ad:28:bf:85:0b:19:35:2a: 8f:17:66:70:11:81:49:bc:f4:7e:30:60:7a:cf:3d: ae:8c:ad:5c:a6:a9:de:a7:9d:8e:e2:19:71:cd:cc: aa:33:a6:ac:b4:f6:9f:54:0a:39:14:4d:2e:ec:89: c2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F4:30:E5:25:34:C5:DA:33:0B:4F:DF:3F:11:FB:47:59:39:AF:25 X509v3 Authority Key Identifier: keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:57:eb:23:83:41:e1:7e:03:16:8a:d2:00:fd:3a:4c:c0:e1: c8:66:7f:9e:90:39:ee:8e:9c:eb:51:2b:07:2e:bc:d1:b2:f7: 1b:5f:44:5e:90:cc:08:51:51:c9:90:c1:e4:23:78:be:7b:ed: c3:b3:c7:e0:8e:b5:34:b7:a9:13:fa:51:e3:6e:75:d8:84:bd: 37:0a:72:02:ca:68:b9:9f:c0:ab:1e:a8:8d:23:0f:0d:a2:8c: be:72:a1:0f:10:6e:4c:3f:e7:a8:64:2b:1e:e5:ad:89:bc:5a: 5e:ab:3a:64:6f:80:70:1d:04:52:6b:64:78:b6:34:1a:b8:5e: 92:37:c8:3b:61:33:86:2b:84:8a:3f:18:a8:c2:ce:b7:5f:f7: 31:5f:32:94:85:01:3d:38:2c:df:7d:d1:58:12:ce:e5:c0:d0: 6b:52:18:3a:97:6d:f0:da:f4:c5:91:4a:58:60:fb:24:8a:18: b7:4c:b2:f6:f2:d9:08:87:c0:74:57:ef:5d:ff:dc:ad:99:7a: 72:4c:f3:1e:87:a4:90:73:0e:07:0f:ef:8d:f5:9f:61:1d:5e: ff:ec:67:01:31:fc:0d:fb:24:71:83:08:42:1b:e0:1a:a7:3a: c9:d2:c8:d6:6e:69:0b:87:37:b1:aa:e9:92:6e:da:6b:57:4b: 05:89:91:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk2sqFdiA3HV60BvE9aBIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTVmMGZiZjNkNmJmM2ExNmEyNGJlYzc4MGNiMGZkNmVk ZjMxZTcwHhcNMjUxMjExMTgwMTQwWhcNMjUxMjEyMTgwMTQwWjAzMTEwLwYDVQQD EyhiZWY0MzBlNTI1MzRjNWRhMzMwYjRmZGYzZjExZmI0NzU5MzlhZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIz4pVximjYSo9+TcBBMB9/b1C4A 0Vw7N2dag20peI17qf4V76TTwnNKIwqJBv+AKGoWPeduhQgtfFDgB3GW0iWk8IK2 NwSDRt50k20zqQ/gGyv9I9fMkd6xAGTNV0CE7/A3wYV/6s6SW8P2TZHD3ZuYGpDk 3aEiTeSmC0xkulW0AG8e/UTM0adWOfUgGaOyC2U+nhTNNYHGEskD6q+fDY9AQosn 0Q7mJ0o47Htfm32qTp6lIANg2byPxtIT5DwA7xJU4soom3AorSi/hQsZNSqPF2Zw EYFJvPR+MGB6zz2ujK1cpqnep52O4hlxzcyqM6astPafVAo5FE0u7InCqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL70MOUlNMXaMwtP3z8R+0dZOa8lMB8GA1UdIwQY MBaAFDXl8Pvz1r86FqJL7HgMsP1u3zHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iNmJhYTQtYzEzMS00MzBkLTgwNmEt MmU5NjdhNGNkZGUxLzEvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iNmJhYTQtYzEzMS00MzBkLTgwNmEtMmU5NjdhNGNkZGUx LzEvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1frI4NB 4X4DForSAP06TMDhyGZ/npA57o6c61ErBy680bL3G19EXpDMCFFRyZDB5CN4vnvt w7PH4I61NLepE/pR42512IS9NwpyAspouZ/Aqx6ojSMPDaKMvnKhDxBuTD/nqGQr HuWtibxaXqs6ZG+AcB0EUmtkeLY0GrhekjfIO2EzhiuEij8YqMLOt1/3MV8ylIUB PTgs333RWBLO5cDQa1IYOpdt8Nr0xZFKWGD7JIoYt0yy9vLZCIfAdFfvXf/crZl6 ckzzHoekkHMOBw/vjfWfYR1e/+xnATH8DfskcYMIQhvgGqc6ydLI1m5pC4c3sarp km7aa1dLBYmRag== -----END CERTIFICATE-----Generated at Fri Dec 12 03:49:59 2025 by rpki-client