This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json) Hash identifier: w4354W6ItbnTPVXJ9jemjEsViYD9sryCU/yT+JFSabc= Subject key identifier: 1B:82:2F:6C:4A:32:A6:9C:9D:CC:12:DF:4F:A0:44:F8:9B:16:F6:AC Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0 Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0 Certificate serial: 019B40FFC9D183D43BFD7FC0A88DAD6A9730 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft Manifest number: 104A Signing time: Sun 21 Dec 2025 13:01:03 +0000 Manifest this update: Sun 21 Dec 2025 13:01:03 +0000 Manifest next update: Mon 22 Dec 2025 13:01:03 +0000 Files and hashes: 1: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: G9d6lWs7Hy1X8hykORoSKQ0H59AxwpXsVRTaD1/wOz0=) 2: wTe6nqB8fZi5LCCWrszMuZB2Wbc.roa (hash: J68IWCsFvDV9cShA3lK5AicjeJ9rPLGBf/VEjmcr5l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:c9:d1:83:d4:3b:fd:7f:c0:a8:8d:ad:6a:97:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0 Validity Not Before: Dec 21 13:01:03 2025 GMT Not After : Dec 22 13:01:03 2025 GMT Subject: CN=1b822f6c4a32a69c9dcc12df4fa044f89b16f6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:7b:8f:e4:ca:96:5e:b2:4e:f0:4e:90:8a: 9e:77:74:68:6c:f3:a1:29:15:84:ec:44:59:e3:87: 0d:f5:41:a0:7a:a4:fa:81:44:59:ee:99:27:ef:a6: e5:54:c6:eb:3d:49:7d:d8:fd:de:3d:68:90:2d:04: 03:40:c0:c0:12:e7:17:be:40:d7:eb:d8:2c:30:bb: 41:66:32:b9:02:fe:a3:a0:91:ab:12:7f:1a:be:5a: 51:76:f1:66:4c:ae:2f:ea:49:63:bb:b1:6b:3c:22: 70:14:1e:cf:9b:b2:5f:19:88:c0:06:63:4e:3f:08: 90:19:12:e4:5a:cd:c6:ab:41:07:41:7c:c1:47:d3: 42:2b:b6:b8:c2:1d:8a:a8:e4:c7:5d:58:47:18:8d: a7:3d:84:aa:8c:07:a1:56:f2:aa:1c:fa:2f:96:3b: e1:8c:cd:cc:01:3e:ca:76:8f:aa:3e:98:45:22:2a: e6:1b:84:67:3f:ae:e8:95:cd:f3:75:2b:b5:00:17: 34:5f:c7:fb:51:07:c3:e6:dd:34:4d:82:60:4b:c8: 4a:5d:7c:18:34:c3:ff:84:52:3e:53:9d:05:1c:a7: fb:e3:0a:22:16:0d:8b:af:1d:b3:0f:c3:ff:16:48: a0:7c:fd:d5:89:91:30:9f:98:66:0d:a1:be:a5:d4: 01:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:82:2F:6C:4A:32:A6:9C:9D:CC:12:DF:4F:A0:44:F8:9B:16:F6:AC X509v3 Authority Key Identifier: keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4a:8d:7d:ef:28:4f:d8:a1:21:92:f4:99:27:67:8b:d5:ce: 98:52:ca:04:03:44:94:97:1a:94:49:49:03:40:2e:8b:02:83: c2:c9:b9:fa:76:ce:ed:87:ab:f4:13:73:c3:02:ce:f2:c3:3f: 14:58:44:8f:11:92:18:9a:df:c3:28:77:16:92:a4:33:ca:9c: e8:64:36:15:fe:0d:59:d5:3b:d7:46:0c:cb:c8:0d:9a:56:10: bf:bc:f5:74:3a:1d:26:3a:a4:ce:6d:dd:3f:80:48:19:89:df: 4d:a8:95:b4:d2:d9:5c:12:af:16:a9:0a:b5:5f:38:9a:98:e2: f8:9e:23:6a:27:06:d3:d3:9a:7c:48:ae:12:8f:a2:81:50:e4: 39:37:8e:37:74:6d:de:7e:cf:07:5a:9b:f5:98:5b:2c:3a:c5: 4a:bf:37:1e:e8:ab:bd:6e:38:f1:e3:71:c5:ba:2d:b3:b2:a3: 2a:5a:72:39:ad:52:c3:c6:80:d9:4b:be:21:3b:ab:46:cf:b3: 63:4e:72:54:ac:fe:60:5f:83:81:cc:5d:17:69:26:21:a5:e8: e0:14:68:51:6d:99:be:f0:71:f6:33:b5:d4:be:f8:24:cb:14: b8:7b:c3:6d:3e:88:08:ea:03:4b:ac:94:ab:6b:df:e0:46:0e: 03:4d:6d:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/8nRg9Q7/X/AqI2tapcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNjliNmIyYTBhNzI4MThkMWZhOWE0NmVmMmFkNzgxMmI5 NWJjYzAwHhcNMjUxMjIxMTMwMTAzWhcNMjUxMjIyMTMwMTAzWjAzMTEwLwYDVQQD EygxYjgyMmY2YzRhMzJhNjljOWRjYzEyZGY0ZmEwNDRmODliMTZmNmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbF7j+TKll6yTvBOkIqed3RobPOh KRWE7ERZ44cN9UGgeqT6gURZ7pkn76blVMbrPUl92P3ePWiQLQQDQMDAEucXvkDX 69gsMLtBZjK5Av6joJGrEn8avlpRdvFmTK4v6klju7FrPCJwFB7Pm7JfGYjABmNO PwiQGRLkWs3Gq0EHQXzBR9NCK7a4wh2KqOTHXVhHGI2nPYSqjAehVvKqHPovljvh jM3MAT7Kdo+qPphFIirmG4RnP67olc3zdSu1ABc0X8f7UQfD5t00TYJgS8hKXXwY NMP/hFI+U50FHKf74woiFg2Lrx2zD8P/FkigfP3ViZEwn5hmDaG+pdQBFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuCL2xKMqacncwS30+gRPibFvasMB8GA1UdIwQY MBaAFJ1ptrKgpygY0fqaRu8q14ErlbzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzkt Mzk2MDc4MjFhMDlhLzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzktMzk2MDc4MjFhMDlh LzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEqNfe8o T9ihIZL0mSdni9XOmFLKBANElJcalElJA0AuiwKDwsm5+nbO7Yer9BNzwwLO8sM/ FFhEjxGSGJrfwyh3FpKkM8qc6GQ2Ff4NWdU710YMy8gNmlYQv7z1dDodJjqkzm3d P4BIGYnfTaiVtNLZXBKvFqkKtV84mpji+J4jaicG09OafEiuEo+igVDkOTeON3Rt 3n7PB1qb9ZhbLDrFSr83HuirvW448eNxxbots7KjKlpyOa1Sw8aA2Uu+ITurRs+z Y05yVKz+YF+DgcxdF2kmIaXo4BRoUW2ZvvBx9jO11L74JMsUuHvDbT6ICOoDS6yU q2vf4EYOA01tSQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:58:18 2025 by rpki-client