This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft File: nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json) Hash identifier: 2IfCS9rihXEBt4HwVahB4MJdv0fl8ey3evYOwUucFI4= Subject key identifier: 6E:88:F0:2E:73:54:D2:83:4F:56:27:21:CF:F0:83:A1:F7:B5:17:38 Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19 Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19 Certificate serial: 019B0F6F1DD388E414E313B28B6E5A166682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft Manifest number: 12A0 Signing time: Thu 11 Dec 2025 22:01:38 +0000 Manifest this update: Thu 11 Dec 2025 22:01:38 +0000 Manifest next update: Fri 12 Dec 2025 22:01:38 +0000 Files and hashes: 1: 5yK2af_g5CTlXz9q-R5Ey4S2raY.roa (hash: LxU9aJpGxPnyOcQ82YucJ2+C9wvejuknSWDM/RouRtA=) 2: HXLS-XKu3_p7nhpZ2K8scEyS_rc.roa (hash: 8XJ8ceqUC/FtGHEdtNIo+tnT3APlE19braxx2C56keI=) 3: NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa (hash: qXIyT3lUz5bJt0IF4d25cysT8WLakbijoLlu5EAXUys=) 4: _fuT4R68BHlPpUP6HiVZDSmxINI.roa (hash: bvu+tWo4UXme3jTLsLEJ6SMX9XI3uAoVhAKkTxW9r90=) 5: boOUh_OegScUQI0rJ0GXkth8K70.roa (hash: h8bMxthrp6BSgypE0yBkUmIOsuBuRoBa/El8mfbO7Rs=) 6: dencvyi0TxmMkZDQCX9rZJN2RzU.roa (hash: B52p98p3HEzzhef7/oXAaRqNFYHk2h3tC+DtHUn18nc=) 7: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: IadjgYQHtO59e/4pCL/FaMEEbMwBwY808yyRVUZfqyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6f:1d:d3:88:e4:14:e3:13:b2:8b:6e:5a:16:66:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19 Validity Not Before: Dec 11 22:01:38 2025 GMT Not After : Dec 12 22:01:38 2025 GMT Subject: CN=6e88f02e7354d2834f562721cff083a1f7b51738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:da:ef:b0:fc:de:8d:12:11:95:d7:39:9d:13: ea:55:6f:a1:97:34:6b:94:65:d5:7d:cc:67:2d:c0: 13:99:40:22:e8:cf:e7:31:74:9c:51:91:5d:73:73: 06:40:23:d3:6e:e3:21:98:5d:0d:4c:9d:2a:2a:4c: e8:91:40:a6:db:92:1d:9d:fb:0b:8f:f0:9c:36:86: 1a:77:60:84:e7:d9:06:bf:30:12:7a:cd:5e:59:00: 1c:51:d0:c5:3f:16:2f:dd:9e:d9:01:83:85:3e:78: 77:62:71:b7:f9:10:73:c5:1c:68:50:49:e5:11:bc: de:4d:74:bf:bd:30:64:12:02:9c:0d:ad:e0:26:46: 8f:5b:10:4d:24:c8:f9:a2:59:47:ed:4b:88:f7:b9: 04:b6:be:ec:a1:32:23:27:22:c7:b8:c3:ed:81:2c: b6:9c:2e:04:a9:a3:67:0a:03:e8:78:58:71:6a:44: 19:5f:84:d2:4f:f5:11:56:9e:55:92:81:b6:0f:51: 5d:9a:5d:17:d1:86:45:64:e9:9b:5c:5f:9e:66:02: ec:72:a1:1e:6f:66:b4:54:c4:df:22:c0:54:44:78: 77:30:7a:cc:4b:4b:12:16:1b:0e:87:1e:13:53:e9: d8:cf:fa:bb:60:00:bc:ab:9f:79:ed:fe:5f:ac:29: ff:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:88:F0:2E:73:54:D2:83:4F:56:27:21:CF:F0:83:A1:F7:B5:17:38 X509v3 Authority Key Identifier: keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b0:b8:9e:40:65:bc:2d:13:a4:ec:64:8d:e4:bf:e1:eb:99: 67:67:fc:60:39:a4:cc:60:c1:39:08:94:28:df:e7:64:9d:84: f2:3e:0c:de:4d:75:10:66:13:cb:f8:ff:fe:07:bf:d2:40:a7: af:14:52:e0:ec:f6:ab:6c:96:39:fb:ff:50:d5:4d:e9:65:15: a6:d1:a2:41:92:71:cb:7f:fa:70:73:cc:be:db:0d:be:2b:38: bb:cb:c3:c0:49:eb:b7:4c:e8:f6:0a:93:a2:b3:78:f9:51:49: ad:ce:63:93:ed:a5:55:e2:ff:e3:95:d8:90:7f:88:36:cc:cb: 10:11:6b:50:3a:b3:0f:ee:7d:ec:19:bc:32:81:63:72:bc:38: 5c:d7:70:b4:e2:72:12:57:21:8a:73:f8:08:aa:9f:f1:15:65: 23:98:a0:98:9d:2b:08:f5:04:fa:97:d3:52:3b:5d:c6:20:dd: 1c:16:4d:d5:46:b7:c1:a0:f8:52:89:e9:24:0f:b0:b6:8f:97: da:59:a2:da:5d:74:75:25:d1:24:6d:45:d1:33:8f:ae:73:14: ca:47:58:48:04:63:1e:4d:00:d6:70:25:98:e8:da:5b:3c:90: 7a:80:42:3e:75:96:6a:3f:9f:c5:9e:bf:3f:6f:94:fa:85:12: 66:c1:c8:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbx3TiOQU4xOyi25aFmaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNmI5Nzc0Yzk0ODc2Yzk4MzIxZGUzMjAxYjExYjc1YTEz NThkMTkwHhcNMjUxMjExMjIwMTM4WhcNMjUxMjEyMjIwMTM4WjAzMTEwLwYDVQQD Eyg2ZTg4ZjAyZTczNTRkMjgzNGY1NjI3MjFjZmYwODNhMWY3YjUxNzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidrvsPzejRIRldc5nRPqVW+hlzRr lGXVfcxnLcATmUAi6M/nMXScUZFdc3MGQCPTbuMhmF0NTJ0qKkzokUCm25IdnfsL j/CcNoYad2CE59kGvzASes1eWQAcUdDFPxYv3Z7ZAYOFPnh3YnG3+RBzxRxoUEnl EbzeTXS/vTBkEgKcDa3gJkaPWxBNJMj5ollH7UuI97kEtr7soTIjJyLHuMPtgSy2 nC4EqaNnCgPoeFhxakQZX4TST/URVp5VkoG2D1Fdml0X0YZFZOmbXF+eZgLscqEe b2a0VMTfIsBURHh3MHrMS0sSFhsOhx4TU+nYz/q7YAC8q5957f5frCn/DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6I8C5zVNKDT1YnIc/wg6H3tRc4MB8GA1UdIwQY MBaAFJ1rl3TJSHbJgyHeMgGxG3WhNY0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5Njgt YTU2YmRmYWRiODFlLzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5NjgtYTU2YmRmYWRiODFl LzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbC4nkBl vC0TpOxkjeS/4euZZ2f8YDmkzGDBOQiUKN/nZJ2E8j4M3k11EGYTy/j//ge/0kCn rxRS4Oz2q2yWOfv/UNVN6WUVptGiQZJxy3/6cHPMvtsNvis4u8vDwEnrt0zo9gqT orN4+VFJrc5jk+2lVeL/45XYkH+INszLEBFrUDqzD+597Bm8MoFjcrw4XNdwtOJy ElchinP4CKqf8RVlI5igmJ0rCPUE+pfTUjtdxiDdHBZN1Ua3waD4UonpJA+wto+X 2lmi2l10dSXRJG1F0TOPrnMUykdYSARjHk0A1nAlmOjaWzyQeoBCPnWWaj+fxZ6/ P2+U+oUSZsHIdA== -----END CERTIFICATE-----Generated at Fri Dec 12 05:57:09 2025 by rpki-client