This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft File: nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json) Hash identifier: lwz2BA7ulNXWTKroiS3w8Vcbw/t99DGbR3fPJ3vLeVc= Subject key identifier: F8:62:E8:1A:63:25:D4:54:1C:47:D2:8F:EE:56:C7:F3:DB:64:47:89 Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2 Certificate issuer: /CN=9d2d86c028bfc38e875455cf82689a36265302c2 Certificate serial: 019B2D0BB0427FE4732CC5708D84F9ECFFC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 16:01:39 +0000 Manifest this update: Wed 17 Dec 2025 16:01:39 +0000 Manifest next update: Thu 18 Dec 2025 16:01:39 +0000 Files and hashes: 1: BCfHRxvaBlgRu7FF6R1aFrqf-D4.roa (hash: jY82l74QOduMSK8Hp/MMojju94Gfvr7fCtUmoiSODw8=) 2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: +Q7N0k8uGB7d4eYpvGMrBoQDPJ3qaiKccx+RxJRYmG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:b0:42:7f:e4:73:2c:c5:70:8d:84:f9:ec:ff:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2 Validity Not Before: Dec 17 16:01:39 2025 GMT Not After : Dec 18 16:01:39 2025 GMT Subject: CN=f862e81a6325d4541c47d28fee56c7f3db644789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e6:b4:b8:57:ab:65:1c:01:a5:56:0d:68:68: a9:9f:b0:74:fb:12:2c:91:d4:b9:02:10:f9:66:f4: 8f:c3:1f:e1:be:09:21:be:1b:0f:1b:58:21:d3:59: 1c:ae:e7:db:83:ba:d6:29:07:76:00:b8:06:39:27: b7:86:a5:6d:59:05:b8:8d:ed:b4:9c:1f:0a:ca:0f: c7:09:b7:9f:b6:97:bf:81:f9:3b:d6:7c:f5:1f:eb: 07:01:03:ab:3e:80:d8:e0:6a:3e:f5:70:38:9e:7a: f2:11:d3:d6:53:fe:e3:99:33:ba:e1:f8:c5:77:b8: d8:62:f5:ac:d9:1a:24:41:e6:d3:64:5c:c8:b0:b1: cd:7b:d3:f0:74:d1:b7:4b:24:21:b4:60:52:63:3e: 30:07:99:89:54:c0:7c:6f:8c:43:15:c4:c0:6d:f2: 6a:22:1c:28:40:7d:28:89:3d:14:94:0f:64:3e:4b: 6d:10:7d:80:9d:40:0b:bb:fa:50:cf:f4:dd:5a:26: 4d:80:0a:dc:55:20:20:e9:5b:9b:6a:6f:d6:66:c0: 9d:e5:be:8b:1e:28:71:8d:87:81:aa:da:25:d6:3f: f3:94:ee:e6:f3:26:e8:3e:2c:0f:2d:c6:08:83:ad: 65:34:fc:f3:1b:75:94:9e:6e:de:8d:e9:88:66:09: 31:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:62:E8:1A:63:25:D4:54:1C:47:D2:8F:EE:56:C7:F3:DB:64:47:89 X509v3 Authority Key Identifier: keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2e:68:08:1f:7e:17:4f:f7:39:ba:af:c5:31:c3:3f:d3:2d: 99:b8:5a:1e:1d:01:87:33:c9:e9:1a:15:b2:78:86:52:82:3e: ed:a5:dc:a4:0c:a0:1e:95:f0:88:9f:b9:f7:2e:4c:49:cd:31: 32:e2:5a:9f:83:47:82:3d:e2:51:22:47:fc:a6:23:ba:af:e1: 2e:42:a1:64:d8:8d:0f:91:ee:49:63:0b:27:1f:7b:47:50:b9: 91:55:b4:f0:c3:14:36:f1:d9:a9:57:d6:1d:76:b9:b8:62:07: 93:2e:4c:9f:41:f1:72:19:0b:7f:ec:5e:a5:4e:fe:a8:dc:f0: 0f:62:f2:8b:d0:41:d2:7d:08:e5:56:75:d2:e9:2c:82:9b:d5: 42:ac:f8:7d:8e:f5:2b:cc:7a:d2:f4:d8:ff:c2:93:2f:d5:c0: 42:86:3e:a0:b3:b1:74:fd:62:23:dc:50:6f:a6:5c:73:1e:b0: 05:2c:b7:39:b8:2a:59:7a:31:bb:53:11:bc:de:04:7d:be:0f: af:c6:3a:f8:1f:bd:f4:b1:74:27:a4:7e:63:cb:33:81:52:ce: c4:ef:1f:2a:a1:e6:1c:5e:dd:b6:ed:93:d4:9b:68:66:3c:ae: 98:21:19:a2:46:e8:51:bd:ff:af:5c:88:0b:ca:62:e0:b0:e5: 40:86:88:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC7BCf+RzLMVwjYT57P/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmQ4NmMwMjhiZmMzOGU4NzU0NTVjZjgyNjg5YTM2MjY1 MzAyYzIwHhcNMjUxMjE3MTYwMTM5WhcNMjUxMjE4MTYwMTM5WjAzMTEwLwYDVQQD EyhmODYyZTgxYTYzMjVkNDU0MWM0N2QyOGZlZTU2YzdmM2RiNjQ0Nzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmea0uFerZRwBpVYNaGipn7B0+xIs kdS5AhD5ZvSPwx/hvgkhvhsPG1gh01kcrufbg7rWKQd2ALgGOSe3hqVtWQW4je20 nB8Kyg/HCbeftpe/gfk71nz1H+sHAQOrPoDY4Go+9XA4nnryEdPWU/7jmTO64fjF d7jYYvWs2RokQebTZFzIsLHNe9PwdNG3SyQhtGBSYz4wB5mJVMB8b4xDFcTAbfJq IhwoQH0oiT0UlA9kPkttEH2AnUALu/pQz/TdWiZNgArcVSAg6Vubam/WZsCd5b6L HihxjYeBqtol1j/zlO7m8yboPiwPLcYIg61lNPzzG3WUnm7ejemIZgkxTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhi6BpjJdRUHEfSj+5Wx/PbZEeJMB8GA1UdIwQY MBaAFJ0thsAov8OOh1RVz4JomjYmUwLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jMDc4ZmQtZDJiNi00NmJhLWE2YmEt NDRjM2I3NWQzZjMzLzEvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9jMDc4ZmQtZDJiNi00NmJhLWE2YmEtNDRjM2I3NWQzZjMz LzEvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfi5oCB9+ F0/3ObqvxTHDP9MtmbhaHh0BhzPJ6RoVsniGUoI+7aXcpAygHpXwiJ+59y5MSc0x MuJan4NHgj3iUSJH/KYjuq/hLkKhZNiND5HuSWMLJx97R1C5kVW08MMUNvHZqVfW HXa5uGIHky5Mn0HxchkLf+xepU7+qNzwD2Lyi9BB0n0I5VZ10uksgpvVQqz4fY71 K8x60vTY/8KTL9XAQoY+oLOxdP1iI9xQb6Zccx6wBSy3ObgqWXoxu1MRvN4Efb4P r8Y6+B+99LF0J6R+Y8szgVLOxO8fKqHmHF7dtu2T1JtoZjyumCEZokboUb3/r1yI C8pi4LDlQIaInA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:04:45 2025 by rpki-client