This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json) Hash identifier: HQCscSh+ZQeCkW2lovfYRdKxELpSEQvSre/yAOnn84o= Subject key identifier: 46:12:17:9B:6A:F7:94:25:52:A6:DA:37:E9:6B:A6:75:C0:A9:65:10 Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b Certificate serial: 019B5ABFED4E8CE495DE2CF8CD773C371A19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft Manifest number: 0281 Signing time: Fri 26 Dec 2025 13:01:26 +0000 Manifest this update: Fri 26 Dec 2025 13:01:26 +0000 Manifest next update: Sat 27 Dec 2025 13:01:26 +0000 Files and hashes: 1: 4hEwPlQV2R3wkknVQDbhfUdi-Hg.roa (hash: mjLFc+VoWHA5LJYiCj4OZP4v7wKlAoLVjBHa2WdTgLI=) 2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: RpV15O2OjUmRkhlfAwTzpPOyGzXqoygClNGArhFfyUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:ed:4e:8c:e4:95:de:2c:f8:cd:77:3c:37:1a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b Validity Not Before: Dec 26 13:01:26 2025 GMT Not After : Dec 27 13:01:26 2025 GMT Subject: CN=4612179b6af7942552a6da37e96ba675c0a96510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:cb:f3:09:0b:a9:91:e8:ef:f2:4c:7e:c3: 03:2b:a6:ca:6c:71:17:51:dc:6f:2c:c5:af:49:01: d7:0c:0a:c5:6d:1e:7e:c2:2c:50:37:b7:3e:da:b5: 74:3d:62:7d:ce:b8:d0:c1:81:20:19:14:68:4d:d0: 97:96:51:6f:30:27:88:2a:4b:1c:c5:32:87:4a:b0: 53:c2:15:5e:a9:e9:17:c2:fc:4f:76:e2:93:d2:64: c0:62:51:2f:24:6f:fd:4d:d3:8e:2e:49:a9:09:0c: 4c:6d:be:47:a5:5f:7e:ed:17:ab:41:08:5c:98:2a: 5f:30:dc:fd:bf:b3:fe:f8:63:48:ba:4d:23:50:95: 71:2f:ef:f7:ef:1c:2e:3e:5e:6c:21:9c:12:f3:b4: da:79:91:af:f2:20:1f:62:54:cc:61:af:3d:2a:ac: 77:c1:e2:1b:8e:51:40:41:09:c6:30:ba:3e:39:34: f0:07:a7:85:b4:0b:99:9c:a9:7a:17:36:01:5e:7a: 48:2f:b6:40:1f:34:1e:85:ce:b2:44:29:b2:72:ca: f8:77:98:f6:ba:b3:28:d2:5b:98:13:f6:a3:bd:1e: f6:22:72:1c:94:b5:e6:ea:7e:ea:ac:b4:ff:3f:03: a7:1c:48:95:4f:51:84:46:74:8a:fc:7a:b7:a9:10: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:12:17:9B:6A:F7:94:25:52:A6:DA:37:E9:6B:A6:75:C0:A9:65:10 X509v3 Authority Key Identifier: keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:92:a9:36:21:0b:ca:c0:cf:0e:ed:37:a1:13:63:cb:77:2e: 58:48:59:4d:35:b8:45:26:4a:64:3a:ac:de:9f:4c:f4:f3:6b: 5f:02:3e:74:17:ec:d4:07:67:c2:4c:47:6b:ce:f0:06:71:e6: 37:34:4b:bf:34:13:17:d4:53:eb:6f:b5:84:ab:d8:ab:50:4b: 67:24:91:19:b4:af:8a:47:ac:65:18:ef:2a:25:4c:2f:d8:e9: 1f:7e:89:b5:a2:1f:80:15:12:80:28:fc:a5:d4:0a:81:d9:41: f9:57:81:51:89:38:d6:5b:2e:c6:bf:07:14:4e:20:d8:f8:75: 0c:bd:4d:2c:ef:9d:e5:94:ea:d6:d7:11:4d:c1:96:36:07:e0: 55:95:28:7d:79:bb:ac:d2:8a:8e:9b:07:1b:52:17:43:a6:a8: 11:a7:9e:b5:d0:54:1a:ff:78:5e:12:11:16:36:87:5a:93:51: 6e:07:2d:a3:40:11:9e:f5:f7:25:be:01:f3:ef:11:75:9d:32: e1:bf:19:9d:83:d2:6d:22:99:1f:c1:0e:76:c1:cd:aa:ec:ba: 61:7d:cb:44:e0:61:e8:c2:db:89:af:3a:80:4e:a2:97:35:6d: bc:6a:e8:14:68:4a:9d:cd:fd:52:e9:95:15:a0:1d:c0:59:ec: 0f:07:c9:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav+1OjOSV3iz4zXc8NxoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDY3ZTUyYjRiNWIyNDEyZmVjMDE0OGRmYzZjYjFiMzRl OTI3NGIwHhcNMjUxMjI2MTMwMTI2WhcNMjUxMjI3MTMwMTI2WjAzMTEwLwYDVQQD Eyg0NjEyMTc5YjZhZjc5NDI1NTJhNmRhMzdlOTZiYTY3NWMwYTk2NTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/nL8wkLqZHo7/JMfsMDK6bKbHEX UdxvLMWvSQHXDArFbR5+wixQN7c+2rV0PWJ9zrjQwYEgGRRoTdCXllFvMCeIKksc xTKHSrBTwhVeqekXwvxPduKT0mTAYlEvJG/9TdOOLkmpCQxMbb5HpV9+7RerQQhc mCpfMNz9v7P++GNIuk0jUJVxL+/37xwuPl5sIZwS87TaeZGv8iAfYlTMYa89Kqx3 weIbjlFAQQnGMLo+OTTwB6eFtAuZnKl6FzYBXnpIL7ZAHzQehc6yRCmycsr4d5j2 urMo0luYE/ajvR72InIclLXm6n7qrLT/PwOnHEiVT1GERnSK/Hq3qRAkwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYSF5tq95QlUqbaN+lrpnXAqWUQMB8GA1UdIwQY MBaAFJ8GflK0tbJBL+wBSN/Gyxs06SdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUt MDJhMDliN2E0ZWI3LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUtMDJhMDliN2E0ZWI3 LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpKpNiEL ysDPDu03oRNjy3cuWEhZTTW4RSZKZDqs3p9M9PNrXwI+dBfs1AdnwkxHa87wBnHm NzRLvzQTF9RT62+1hKvYq1BLZySRGbSvikesZRjvKiVML9jpH36JtaIfgBUSgCj8 pdQKgdlB+VeBUYk41lsuxr8HFE4g2Ph1DL1NLO+d5ZTq1tcRTcGWNgfgVZUofXm7 rNKKjpsHG1IXQ6aoEaeetdBUGv94XhIRFjaHWpNRbgcto0ARnvX3Jb4B8+8RdZ0y 4b8ZnYPSbSKZH8EOdsHNquy6YX3LROBh6MLbia86gE6ilzVtvGroFGhKnc39UumV FaAdwFnsDwfJvg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:42 2025 by rpki-client