This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft File: NW4BARgaykJR6fJKj2NzXi9evc0.mft (raw, json) Hash identifier: k0HC8ku7LZ9YgBE7ScKurO38w25lA0eLgn8twXcg2ck= Subject key identifier: 62:FE:03:46:C1:8E:9C:78:01:5A:51:ED:F5:BF:15:AB:89:94:16:1E Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD Certificate issuer: /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd Certificate serial: 019B1B7251D18866B3A1126E0113339BB636 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft Manifest number: 0484 Signing time: Sun 14 Dec 2025 06:00:35 +0000 Manifest this update: Sun 14 Dec 2025 06:00:35 +0000 Manifest next update: Mon 15 Dec 2025 06:00:35 +0000 Files and hashes: 1: NW4BARgaykJR6fJKj2NzXi9evc0.crl (hash: SuxjQnf6T7aGh7TOg5FMIix4Sp8wi0KV6VunMFm5GHQ=) 2: dEoQSu71Ws9XnNjOfEdbibTdInI.roa (hash: sYA0jY+C8zad7z34ckQV3VzC0yGLwcHRH79SGfsU6zY=) 3: y-NIwscX11p02xnh21oGE_zmYCI.roa (hash: +Y0OYgxDa6WhuGqqRO+OXeS1WkoYTiwyapeS/DlTCTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:72:51:d1:88:66:b3:a1:12:6e:01:13:33:9b:b6:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd Validity Not Before: Dec 14 06:00:35 2025 GMT Not After : Dec 15 06:00:35 2025 GMT Subject: CN=62fe0346c18e9c78015a51edf5bf15ab8994161e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:a2:a0:05:6f:f3:85:69:65:90:83:4b:ac: 0e:c2:4c:55:c8:70:b4:77:cf:71:af:a6:d6:18:1f: 5b:8f:5f:0c:2d:84:4d:90:48:ec:b1:4a:b3:72:4b: 41:fd:20:2b:3b:b5:5a:51:b5:03:7f:cc:c8:9a:2b: 31:49:b9:33:28:2c:b4:2e:0a:15:0f:31:39:7f:12: 05:1e:42:ee:5b:ac:07:48:47:1b:e0:bc:d9:a3:4b: 12:41:b3:09:46:de:55:3a:81:4f:b8:3f:ca:c0:d3: 9f:b3:eb:12:32:74:98:7b:83:1d:de:3e:fb:db:e5: 1e:ab:11:39:20:6d:8e:6b:6e:5f:fc:5c:ba:95:5a: d2:61:85:33:ba:5d:b4:4a:55:9e:9e:17:09:eb:c7: 07:63:4c:f2:5c:74:8d:7d:a2:73:83:8b:0d:45:f2: db:7e:d3:79:26:ad:82:f1:7f:21:44:fc:ed:14:3f: fd:d7:9d:00:6b:88:67:af:f4:46:11:05:57:29:77: d0:bb:30:67:b0:c8:cd:6b:6c:fc:70:9f:13:75:bb: bc:6a:41:71:b0:04:1b:72:f7:42:63:b7:c3:75:a9: 41:cd:f3:cf:a7:86:3d:69:9a:1b:53:51:73:16:e3: 7f:9a:81:9f:5d:45:64:d9:11:28:58:04:d7:15:37: b0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FE:03:46:C1:8E:9C:78:01:5A:51:ED:F5:BF:15:AB:89:94:16:1E X509v3 Authority Key Identifier: keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:89:12:9e:e7:d0:a4:9f:b0:16:83:d6:b8:4a:f8:3d:9d:68: 06:82:a6:e8:0a:ba:7c:3c:41:73:a0:a3:54:bc:c9:f0:7f:ca: 42:fb:d7:00:03:13:49:ef:fe:a0:2b:da:bb:5b:f5:aa:0f:0c: f3:a6:7c:0f:36:f1:21:d0:d0:e8:f3:b9:c7:c9:88:72:18:17: b2:e9:ef:87:de:69:2f:2c:a1:1f:18:86:65:98:bb:22:02:a5: 7a:9d:0e:be:50:55:04:e2:da:0e:9d:3d:26:c4:28:35:29:5a: ea:ca:a8:60:31:96:87:61:c0:0d:bd:b6:2d:c6:e9:ca:c3:3e: 8a:18:aa:2b:ce:10:ad:86:9e:0e:7b:06:f9:86:05:ce:ee:a4: 87:6c:4b:a0:5e:18:60:7d:f9:4a:4a:d5:74:ab:3b:20:00:4c: a0:d4:78:48:7f:0e:c9:0c:fc:59:25:a8:41:29:ff:c0:1d:13: da:57:5b:df:08:95:d3:d6:5e:5a:fa:d7:fc:f3:7b:d7:82:73: 29:a4:e6:8a:ca:1b:5c:f4:0f:42:86:e1:9c:a8:44:6e:20:c2: d9:2a:e7:c9:d2:71:8d:3e:76:d3:7a:cb:9b:b1:55:fb:69:35: d5:fb:98:f7:55:64:0b:bb:e3:32:6d:a8:a9:16:b5:f9:ec:20: d2:81:8b:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbclHRiGazoRJuARMzm7Y2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NmUwMTAxMTgxYWNhNDI1MWU5ZjI0YThmNjM3MzVlMmY1 ZWJkY2QwHhcNMjUxMjE0MDYwMDM1WhcNMjUxMjE1MDYwMDM1WjAzMTEwLwYDVQQD Eyg2MmZlMDM0NmMxOGU5Yzc4MDE1YTUxZWRmNWJmMTVhYjg5OTQxNjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVCioAVv84VpZZCDS6wOwkxVyHC0 d89xr6bWGB9bj18MLYRNkEjssUqzcktB/SArO7VaUbUDf8zImisxSbkzKCy0LgoV DzE5fxIFHkLuW6wHSEcb4LzZo0sSQbMJRt5VOoFPuD/KwNOfs+sSMnSYe4Md3j77 2+UeqxE5IG2Oa25f/Fy6lVrSYYUzul20SlWenhcJ68cHY0zyXHSNfaJzg4sNRfLb ftN5Jq2C8X8hRPztFD/9150Aa4hnr/RGEQVXKXfQuzBnsMjNa2z8cJ8Tdbu8akFx sAQbcvdCY7fDdalBzfPPp4Y9aZobU1FzFuN/moGfXUVk2REoWATXFTewpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGL+A0bBjpx4AVpR7fW/FauJlBYeMB8GA1UdIwQY MBaAFDVuAQEYGspCUenySo9jc14vXr3NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlc0QkFSZ2F5a0pSNmZKS2oyTnpYaTlldmMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jZjZlMmYtNThmZi00MWUwLThkMGMt OWQ1ZTM0YjAyZTViLzEvTlc0QkFSZ2F5a0pSNmZKS2oyTnpYaTlldmMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jZjZlMmYtNThmZi00MWUwLThkMGMtOWQ1ZTM0YjAyZTVi LzEvTlc0QkFSZ2F5a0pSNmZKS2oyTnpYaTlldmMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdokSnufQ pJ+wFoPWuEr4PZ1oBoKm6Aq6fDxBc6CjVLzJ8H/KQvvXAAMTSe/+oCvau1v1qg8M 86Z8DzbxIdDQ6PO5x8mIchgXsunvh95pLyyhHxiGZZi7IgKlep0OvlBVBOLaDp09 JsQoNSla6sqoYDGWh2HADb22LcbpysM+ihiqK84QrYaeDnsG+YYFzu6kh2xLoF4Y YH35SkrVdKs7IABMoNR4SH8OyQz8WSWoQSn/wB0T2ldb3wiV09ZeWvrX/PN714Jz KaTmisobXPQPQobhnKhEbiDC2SrnydJxjT5203rLm7FV+2k11fuY91VkC7vjMm2o qRa1+ewg0oGLQg== -----END CERTIFICATE-----Generated at Sun Dec 14 16:19:35 2025 by rpki-client