This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json) Hash identifier: SDsoEludheRPAE/F4cNcnF8ZzUsQSVfKiCSHKDiMAfA= Subject key identifier: 48:C7:4E:6B:B5:C8:6E:1A:08:B4:F1:30:D8:B6:8D:1D:2D:5F:3E:44 Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb Certificate serial: 019B3D2355644C85F92EF22749F4CA4A688E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 19:01:24 +0000 Manifest this update: Sat 20 Dec 2025 19:01:24 +0000 Manifest next update: Sun 21 Dec 2025 19:01:24 +0000 Files and hashes: 1: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: dFkWAJy+n0avPgmzY5vzqq4QjGpTpgi0k/yUfa+PBJg=) 2: ge72rIVKenfFe0v5asZR_PaxIp4.roa (hash: o9engqettqOIJ9n8PYQ/SXW11G8NZE3fZOewqKwRqSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:55:64:4c:85:f9:2e:f2:27:49:f4:ca:4a:68:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb Validity Not Before: Dec 20 19:01:24 2025 GMT Not After : Dec 21 19:01:24 2025 GMT Subject: CN=48c74e6bb5c86e1a08b4f130d8b68d1d2d5f3e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:5e:27:82:4f:d8:15:e7:6c:69:b2:e4:bf: af:92:bf:d8:1b:d9:e4:3a:e3:ed:16:b1:8a:f5:4f: 7d:22:6e:7d:d3:28:84:76:5f:fc:06:49:42:c5:43: 6f:4e:71:3f:f7:66:65:4e:7c:d6:83:39:4e:73:4c: 23:72:df:e8:d8:2c:d5:44:7a:f8:5e:ad:da:88:8e: a8:fe:68:d3:1c:4c:3b:87:df:70:88:bd:cb:2c:7a: 81:8a:45:1d:7e:2f:6b:10:93:5d:21:fe:b9:18:90: 2b:f8:87:61:7d:8d:5b:e2:c4:99:a1:47:9e:37:5a: 8c:fc:da:57:ff:c2:cd:1c:94:ca:b6:1f:0c:35:05: c2:e6:b2:5c:71:26:e3:86:1a:13:96:06:ad:e1:8c: 15:ad:42:64:7c:e8:66:ba:66:c7:1e:10:a0:e8:c8: dd:f2:86:99:d3:b8:97:46:e8:7f:11:d5:f3:8e:29: 41:6a:b3:df:73:83:79:e5:1a:63:c0:4a:42:39:f1: 68:05:7f:23:b0:4f:a6:4d:68:9e:ee:92:27:80:0c: 7b:03:4e:c9:eb:06:e0:a3:01:3c:aa:32:9f:ca:11: 84:42:07:ec:03:a1:8f:67:d8:b3:36:a5:b2:13:5e: a6:27:b3:ed:9c:8b:1c:36:bb:52:e5:f1:6a:3c:ff: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C7:4E:6B:B5:C8:6E:1A:08:B4:F1:30:D8:B6:8D:1D:2D:5F:3E:44 X509v3 Authority Key Identifier: keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4c:ef:af:b3:2b:dc:37:ed:ce:94:df:31:da:f3:d7:5c:ab: 30:85:14:0c:d0:a7:6a:c1:fe:6a:c2:9b:1f:24:ad:ca:15:ff: 3d:2e:2a:b1:aa:11:9d:78:75:93:92:0e:b0:3f:9e:c4:31:98: 22:b2:c2:95:8c:21:ee:93:dc:26:04:f1:4d:a7:c8:6d:9b:41: 46:d5:81:13:6c:e5:00:e8:a4:1d:00:85:ae:29:c4:58:17:9c: d7:7d:1c:58:2b:6d:db:e0:3a:d2:77:48:32:f6:63:c3:d2:c1: f6:0d:62:55:d0:df:37:73:96:b3:ce:dd:3b:5b:b1:25:93:3c: cc:83:ae:1b:28:b8:76:6e:d8:05:a9:08:b3:3d:fb:a3:5c:52: 60:2e:5a:2e:07:9d:4a:11:a0:3d:01:96:cc:38:49:d0:eb:b8: 90:76:9c:5b:99:cc:71:a8:16:4c:ff:10:f1:1e:3d:54:33:c3: 92:f1:86:3f:7f:16:57:4d:c8:9c:89:5a:93:05:51:7d:1d:af: a7:e9:e6:cb:6d:a7:ae:ef:57:82:3a:06:c0:58:bf:0d:29:23: eb:36:73:a8:c9:33:2d:f4:3f:62:f8:db:90:38:18:7b:73:5c: d8:c9:d8:af:42:fb:ab:38:9d:85:12:79:84:92:b7:5b:23:2c: a8:5a:6b:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I1VkTIX5LvInSfTKSmiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YWMzMDhjOTRmNTdiMTFjZWUxYmE4NGVmMTI3ODQ0N2M2 Nzg1ZWIwHhcNMjUxMjIwMTkwMTI0WhcNMjUxMjIxMTkwMTI0WjAzMTEwLwYDVQQD Eyg0OGM3NGU2YmI1Yzg2ZTFhMDhiNGYxMzBkOGI2OGQxZDJkNWYzZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr01eJ4JP2BXnbGmy5L+vkr/YG9nk OuPtFrGK9U99Im590yiEdl/8BklCxUNvTnE/92ZlTnzWgzlOc0wjct/o2CzVRHr4 Xq3aiI6o/mjTHEw7h99wiL3LLHqBikUdfi9rEJNdIf65GJAr+IdhfY1b4sSZoUee N1qM/NpX/8LNHJTKth8MNQXC5rJccSbjhhoTlgat4YwVrUJkfOhmumbHHhCg6Mjd 8oaZ07iXRuh/EdXzjilBarPfc4N55RpjwEpCOfFoBX8jsE+mTWie7pIngAx7A07J 6wbgowE8qjKfyhGEQgfsA6GPZ9izNqWyE16mJ7PtnIscNrtS5fFqPP8dywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjHTmu1yG4aCLTxMNi2jR0tXz5EMB8GA1UdIwQY MBaAFDWsMIyU9XsRzuG6hO8SeER8Z4XrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yYjMyMTgtNTQyYy00ZDk1LWFjMDct NjBkMzU1NTRjZTY0LzEvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8yYjMyMTgtNTQyYy00ZDk1LWFjMDctNjBkMzU1NTRjZTY0 LzEvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0zvr7Mr 3DftzpTfMdrz11yrMIUUDNCnasH+asKbHyStyhX/PS4qsaoRnXh1k5IOsD+exDGY IrLClYwh7pPcJgTxTafIbZtBRtWBE2zlAOikHQCFrinEWBec130cWCtt2+A60ndI MvZjw9LB9g1iVdDfN3OWs87dO1uxJZM8zIOuGyi4dm7YBakIsz37o1xSYC5aLged ShGgPQGWzDhJ0Ou4kHacW5nMcagWTP8Q8R49VDPDkvGGP38WV03InIlakwVRfR2v p+nmy22nru9XgjoGwFi/DSkj6zZzqMkzLfQ/YvjbkDgYe3Nc2MnYr0L7qzidhRJ5 hJK3WyMsqFprhQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:07:25 2025 by rpki-client