This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json) Hash identifier: pURVn2u7UL/Af1+CfYv6FQtGvriUyD6jdmV/ZIr52BY= Subject key identifier: B2:B9:9B:60:CB:2A:56:25:05:EC:29:D5:86:BF:35:69:B3:33:14:EA Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b Certificate serial: 019B41A4986B8D1ECBCB5423EDB315589C6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft Manifest number: 0274 Signing time: Sun 21 Dec 2025 16:01:04 +0000 Manifest this update: Sun 21 Dec 2025 16:01:04 +0000 Manifest next update: Mon 22 Dec 2025 16:01:04 +0000 Files and hashes: 1: 4hEwPlQV2R3wkknVQDbhfUdi-Hg.roa (hash: mjLFc+VoWHA5LJYiCj4OZP4v7wKlAoLVjBHa2WdTgLI=) 2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: Gtw4yOxVOmMDoI+gbz5pzfjvyGwItK59xnCJjSp/UDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:98:6b:8d:1e:cb:cb:54:23:ed:b3:15:58:9c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b Validity Not Before: Dec 21 16:01:04 2025 GMT Not After : Dec 22 16:01:04 2025 GMT Subject: CN=b2b99b60cb2a562505ec29d586bf3569b33314ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:5b:34:47:29:e4:30:f0:1f:08:05:ce:75: a6:82:53:c4:b2:6a:84:8e:a2:16:30:41:73:16:e6: 26:47:78:13:89:6b:4e:5b:40:f6:48:71:66:cb:71: be:8f:99:7b:a1:8c:05:c8:80:87:fb:d0:88:79:54: 5a:f8:c6:42:ba:13:6c:73:9a:ed:ec:47:dd:14:40: 68:d4:9c:4c:db:47:e6:31:f8:8f:84:ea:07:9d:66: 52:36:52:8b:29:02:57:28:80:22:b1:8b:5c:b2:cf: 63:82:be:f8:d7:61:41:35:46:01:86:6a:04:a3:df: c1:4c:9b:a4:5b:45:79:da:9f:96:14:cd:00:f9:15: ac:ae:46:ce:43:3c:d5:97:58:22:70:2d:ad:94:e1: 11:a2:e0:f0:83:a2:01:b4:9e:e6:dd:0a:05:52:d2: 16:3e:bf:dd:db:63:f8:d7:20:0a:99:05:a9:86:48: f9:75:d3:00:10:27:17:00:1f:ac:bb:98:17:02:7d: 78:a8:8f:46:64:f2:c0:7a:a5:34:1a:76:93:d4:6b: 89:43:1e:f9:c8:0c:2a:71:8d:9a:0d:cf:46:e6:27: 54:2a:c3:bb:16:9b:8f:0c:5d:84:d4:03:ad:8e:43: 0f:39:d1:33:52:58:dc:f1:9b:07:3e:75:50:16:a6: 83:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B9:9B:60:CB:2A:56:25:05:EC:29:D5:86:BF:35:69:B3:33:14:EA X509v3 Authority Key Identifier: keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:15:27:1b:b0:55:a6:4f:ec:27:6c:a4:97:d5:64:bb:67:3f: 53:4a:6d:3f:15:e7:99:fd:02:76:d8:0d:3f:e6:b3:b4:1c:60: 38:1c:c6:9a:4c:9a:bf:50:3d:cc:36:a3:88:ca:f2:8e:98:5e: 3f:1f:44:d0:00:b7:c9:6d:bb:6b:7c:74:5e:85:96:bd:1f:5e: f1:70:52:17:c6:6d:b9:62:9b:d3:2c:17:86:96:31:cc:47:e5: 8c:7b:a0:fe:ad:3b:db:82:9a:d1:98:cc:44:28:c0:db:2c:39: 07:69:93:45:12:b9:1d:09:74:7d:47:47:4a:4a:e3:1c:d8:07: 84:97:c4:0a:9b:a1:17:b7:cf:7f:ff:f9:77:5d:5a:63:e0:9a: d5:26:cc:4c:4e:23:c5:47:97:7c:ca:74:10:41:56:f8:97:d3: 27:4f:60:19:b5:09:1f:70:92:e2:40:4d:cb:21:ea:71:73:c1: a8:0d:17:e1:32:5f:b1:72:ac:63:99:82:fe:de:28:76:03:07: c8:86:4c:65:2e:96:dd:9d:16:39:34:12:be:2f:fa:e4:9e:dc: e1:7e:ff:5a:0e:56:02:ec:4a:e5:4a:32:a5:ff:7e:f8:53:2c: cc:c2:04:b4:d3:44:da:be:4f:bc:a6:c7:64:b9:1e:34:e9:40: 13:f8:64:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpJhrjR7Ly1Qj7bMVWJxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDY3ZTUyYjRiNWIyNDEyZmVjMDE0OGRmYzZjYjFiMzRl OTI3NGIwHhcNMjUxMjIxMTYwMTA0WhcNMjUxMjIyMTYwMTA0WjAzMTEwLwYDVQQD EyhiMmI5OWI2MGNiMmE1NjI1MDVlYzI5ZDU4NmJmMzU2OWIzMzMxNGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscpbNEcp5DDwHwgFznWmglPEsmqE jqIWMEFzFuYmR3gTiWtOW0D2SHFmy3G+j5l7oYwFyICH+9CIeVRa+MZCuhNsc5rt 7EfdFEBo1JxM20fmMfiPhOoHnWZSNlKLKQJXKIAisYtcss9jgr7412FBNUYBhmoE o9/BTJukW0V52p+WFM0A+RWsrkbOQzzVl1gicC2tlOERouDwg6IBtJ7m3QoFUtIW Pr/d22P41yAKmQWphkj5ddMAECcXAB+su5gXAn14qI9GZPLAeqU0GnaT1GuJQx75 yAwqcY2aDc9G5idUKsO7FpuPDF2E1AOtjkMPOdEzUljc8ZsHPnVQFqaD0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLK5m2DLKlYlBewp1Ya/NWmzMxTqMB8GA1UdIwQY MBaAFJ8GflK0tbJBL+wBSN/Gyxs06SdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUt MDJhMDliN2E0ZWI3LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUtMDJhMDliN2E0ZWI3 LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhUnG7BV pk/sJ2ykl9Vku2c/U0ptPxXnmf0CdtgNP+aztBxgOBzGmkyav1A9zDajiMryjphe Px9E0AC3yW27a3x0XoWWvR9e8XBSF8ZtuWKb0ywXhpYxzEfljHug/q0724Ka0ZjM RCjA2yw5B2mTRRK5HQl0fUdHSkrjHNgHhJfECpuhF7fPf//5d11aY+Ca1SbMTE4j xUeXfMp0EEFW+JfTJ09gGbUJH3CS4kBNyyHqcXPBqA0X4TJfsXKsY5mC/t4odgMH yIZMZS6W3Z0WOTQSvi/65J7c4X7/Wg5WAuxK5Uoypf9++FMszMIEtNNE2r5PvKbH ZLkeNOlAE/hkYg== -----END CERTIFICATE-----Generated at Sun Dec 21 23:42:12 2025 by rpki-client