This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft File: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json) Hash identifier: YPxEnjBDq2sm/3EFmOVKizWAMjpdLzgqJ3LPmukximo= Subject key identifier: 6C:9D:24:81:AA:9E:DE:90:8D:42:97:7A:CB:E9:99:A8:81:42:6D:DD Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40 Certificate issuer: /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140 Certificate serial: 019AF0BF94CB4B4383C7E369B11C2D0DDB25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft Manifest number: 108C Signing time: Fri 05 Dec 2025 23:01:18 +0000 Manifest this update: Fri 05 Dec 2025 23:01:18 +0000 Manifest next update: Sat 06 Dec 2025 23:01:18 +0000 Files and hashes: 1: S97lFgLq26JbbTYFy87788PSLWo.roa (hash: is6nhjEc4wx03A1n5kSCHVis+Wuf1J/yxv2gFot2aXA=) 2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: qTX4uqPilwfN/A3VKDw0yB4QAtOYyv+aoM7sqn01kAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:94:cb:4b:43:83:c7:e3:69:b1:1c:2d:0d:db:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140 Validity Not Before: Dec 5 23:01:18 2025 GMT Not After : Dec 6 23:01:18 2025 GMT Subject: CN=6c9d2481aa9ede908d42977acbe999a881426ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:84:34:c8:09:7f:67:11:8b:42:75:27:81:17: 6e:ee:88:f8:08:df:46:58:40:16:c5:37:78:cb:b4: 52:89:9e:d3:ee:ad:a4:0d:1a:d6:fd:43:98:6a:d3: 41:13:a1:2a:0d:36:72:97:b7:23:72:11:52:6b:c0: f0:81:77:ac:8b:f6:05:37:36:96:64:ef:2b:24:3d: 74:84:73:57:a9:ba:23:9e:e4:ea:3e:ed:b0:5a:23: cf:34:a4:bf:29:f8:2a:7d:65:c9:de:5e:a9:e4:9b: 4a:23:ad:32:11:5d:9c:7d:af:f1:c4:2b:72:7e:da: 33:d3:a6:fa:32:c0:43:1a:d6:64:6f:82:3d:ee:09: 58:3a:9e:d5:4c:6b:b6:0e:47:2a:eb:51:01:00:32: 71:fc:70:76:61:78:d9:f7:26:93:cd:58:94:33:a7: 60:a0:96:04:1a:f8:e8:06:29:8b:2d:95:82:71:32: e3:3d:e8:8b:5e:3b:4c:58:8b:0d:0e:e7:dd:2c:5c: f7:75:0f:9b:6f:93:72:02:93:2f:6d:44:d2:79:a7: 20:e8:a7:15:39:86:46:77:b3:e4:77:b1:e7:b4:54: 96:a7:e9:04:04:e0:b8:03:39:88:98:08:71:84:3c: e1:3e:df:a0:e0:3e:f6:da:4f:fc:63:a9:d0:da:2d: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9D:24:81:AA:9E:DE:90:8D:42:97:7A:CB:E9:99:A8:81:42:6D:DD X509v3 Authority Key Identifier: keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:f1:56:a4:eb:d9:d2:5b:d5:fd:14:7e:76:57:e8:67:58:cb: 86:37:be:f2:b3:cc:2b:29:b4:38:53:b8:66:c5:14:7e:de:fe: 45:d1:15:8a:5c:09:f4:fd:51:e9:7a:35:85:e7:63:b3:e5:f0: f7:ca:0d:3b:72:c9:fc:5d:23:3b:b3:30:b9:7f:09:20:5b:58: 41:c9:80:39:9f:c1:71:de:7b:fd:6e:93:5a:71:d5:ff:2c:bc: 14:70:39:00:e3:93:89:d1:85:12:ba:48:00:2d:c2:03:01:c1: 6b:d9:ef:a4:5c:54:33:99:90:cf:c7:08:6b:09:3e:33:25:77: 3b:e0:b6:e2:20:55:36:f6:cf:8e:db:38:44:7a:34:20:e0:6c: ec:f1:94:bf:ef:8c:23:c7:2e:b1:66:e2:55:e7:2a:9e:9c:56: 6a:1c:42:19:00:65:2f:91:e6:a1:f3:c9:d5:8f:94:24:94:4e: ac:39:00:28:2b:b8:82:4d:50:d3:6b:9e:8b:bf:a8:3d:0e:73: 92:cc:dc:e1:bc:75:50:24:5e:d0:62:e5:c6:59:8e:72:ab:1a: f7:2d:a3:04:8a:b3:9f:39:40:f0:4a:17:69:31:2f:74:3b:b3: f5:d2:61:38:3c:c7:60:c3:c8:41:59:7b:43:25:89:46:da:73: e9:31:bd:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5TLS0ODx+NpsRwtDdslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNjZhNWNmYTM5Y2ZhOTFlMzEzNDQzZjYxM2U3M2NjZTcz ZjIxNDAwHhcNMjUxMjA1MjMwMTE4WhcNMjUxMjA2MjMwMTE4WjAzMTEwLwYDVQQD Eyg2YzlkMjQ4MWFhOWVkZTkwOGQ0Mjk3N2FjYmU5OTlhODgxNDI2ZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YQ0yAl/ZxGLQnUngRdu7oj4CN9G WEAWxTd4y7RSiZ7T7q2kDRrW/UOYatNBE6EqDTZyl7cjchFSa8DwgXesi/YFNzaW ZO8rJD10hHNXqbojnuTqPu2wWiPPNKS/KfgqfWXJ3l6p5JtKI60yEV2cfa/xxCty ftoz06b6MsBDGtZkb4I97glYOp7VTGu2Dkcq61EBADJx/HB2YXjZ9yaTzViUM6dg oJYEGvjoBimLLZWCcTLjPeiLXjtMWIsNDufdLFz3dQ+bb5NyApMvbUTSeacg6KcV OYZGd7Pkd7HntFSWp+kEBOC4AzmImAhxhDzhPt+g4D722k/8Y6nQ2i2vsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGydJIGqnt6QjUKXesvpmaiBQm3dMB8GA1UdIwQY MBaAFJ1mpc+jnPqR4xNEP2E+c8znPyFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYt YTE5NTA3ZGU3NWI0LzEvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYtYTE5NTA3ZGU3NWI0 LzEvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvFWpOvZ 0lvV/RR+dlfoZ1jLhje+8rPMKym0OFO4ZsUUft7+RdEVilwJ9P1R6Xo1hedjs+Xw 98oNO3LJ/F0jO7MwuX8JIFtYQcmAOZ/Bcd57/W6TWnHV/yy8FHA5AOOTidGFErpI AC3CAwHBa9nvpFxUM5mQz8cIawk+MyV3O+C24iBVNvbPjts4RHo0IOBs7PGUv++M I8cusWbiVecqnpxWahxCGQBlL5HmofPJ1Y+UJJROrDkAKCu4gk1Q02uei7+oPQ5z kszc4bx1UCRe0GLlxlmOcqsa9y2jBIqznzlA8EoXaTEvdDuz9dJhODzHYMPIQVl7 QyWJRtpz6TG9sw== -----END CERTIFICATE-----Generated at Sat Dec 6 02:47:05 2025 by rpki-client