This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json) Hash identifier: s8t7sFmZe0Go31Bb+FD8hBWDu4FuS1M+E0CH57YFwLY= Subject key identifier: EF:EA:AD:E6:15:AD:65:DB:42:9B:3F:B6:C8:66:51:2E:0D:DF:DE:41 Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6 Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6 Certificate serial: 019B44A5F845ADFFE43B5AF0933358EE5938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft Manifest number: 0BBA Signing time: Mon 22 Dec 2025 06:01:26 +0000 Manifest this update: Mon 22 Dec 2025 06:01:26 +0000 Manifest next update: Tue 23 Dec 2025 06:01:26 +0000 Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: YbiSXo/LJY0kmdgxL/8lUuJyxszwvp7EOPsKmTuuOro=) 2: dQrN5l4ER8ioZrR3Ol61rF1mTIM.roa (hash: i6nZan7ltRkXD1mx1+9g2E7sNbpHefpKiqIOGyeWWGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:f8:45:ad:ff:e4:3b:5a:f0:93:33:58:ee:59:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6 Validity Not Before: Dec 22 06:01:26 2025 GMT Not After : Dec 23 06:01:26 2025 GMT Subject: CN=efeaade615ad65db429b3fb6c866512e0ddfde41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:37:a2:53:06:ac:15:13:a6:a1:6b:30:91:10: b8:ff:db:67:d2:8e:34:c1:cb:20:58:06:ff:4b:94: 09:14:4f:ce:3f:a7:d4:e1:44:c5:8f:7b:fe:a7:de: 27:9f:9d:b6:f1:43:a5:3f:6b:23:2c:d2:b8:aa:91: 47:00:11:da:23:3d:ae:6a:e1:54:dc:d6:c7:a1:79: a1:7f:8b:fa:b1:4a:04:51:ea:51:db:c4:1f:0e:b0: b2:e7:84:f2:f1:fd:19:70:dc:e1:26:73:5e:00:84: 8d:13:0d:dd:98:2d:52:2b:60:6d:44:5a:ea:ef:73: 67:73:4c:2d:b6:0b:91:b2:d5:a0:38:0a:ac:f5:34: 0a:f6:6a:62:ec:f7:d3:41:66:72:00:d3:e5:39:65: a3:83:73:81:e7:25:d1:d0:78:b6:b1:c3:2a:5d:c0: 67:d9:62:69:9a:02:c8:fd:ee:13:a2:c5:60:a0:4c: 20:40:83:d0:a1:09:72:6b:f0:1c:74:2f:cc:97:67: 9f:35:df:e5:f6:70:b1:41:17:4a:de:1d:15:62:f4: 10:c6:09:fa:f7:f7:e2:82:ce:50:90:14:cd:cb:d2: c8:3b:72:74:43:a0:f4:93:b3:f1:59:2a:bb:4e:53: 1d:8b:22:0d:8f:70:2b:f2:6f:be:a6:06:c2:f3:7a: ad:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EA:AD:E6:15:AD:65:DB:42:9B:3F:B6:C8:66:51:2E:0D:DF:DE:41 X509v3 Authority Key Identifier: keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:3b:52:d1:56:12:f0:6c:eb:34:79:86:16:24:a8:56:d4:72: db:fd:1d:16:cf:11:af:65:3d:af:7c:b4:08:8f:65:70:1a:1c: 39:fe:be:60:d4:a6:52:8a:a9:dd:c8:85:f8:3c:57:e3:95:6f: 7c:b5:e9:2a:2e:c2:85:3d:aa:f8:f2:97:e6:c0:06:83:11:df: 0c:b3:4a:85:b6:55:2c:1d:fd:7d:a4:59:31:d3:e1:05:92:6a: 99:28:0d:1d:30:ca:f3:24:67:c2:88:2b:61:f7:ef:91:23:5d: be:0c:5a:36:18:07:b3:a8:38:13:e2:43:9e:81:b8:2f:89:d2: 32:49:08:9d:d3:62:05:6f:e1:36:4f:68:44:ca:d1:78:3a:4b: 3c:ee:45:78:d3:f3:e9:53:59:69:01:f2:1c:de:c2:27:89:aa: c6:16:11:7c:c3:a2:96:63:77:c8:1e:5c:27:b9:80:02:8d:4d: fe:00:42:9d:bd:09:9e:3a:cf:9f:b1:7b:a9:e3:18:9e:b1:60: fd:a7:de:ad:39:4f:dc:8d:6b:be:65:82:f8:a2:81:0d:22:aa: fb:f3:9c:d1:f3:c4:43:32:48:52:01:07:e4:2b:f2:2c:ed:59: 41:a3:60:ba:18:09:03:8c:60:26:08:85:ec:44:d2:e9:d0:b3: ed:42:c1:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpfhFrf/kO1rwkzNY7lk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MDhlMDRmZDdiZjgxYjY3NWRjYmU3YjI5YWEyNjNjOTEy MDc4YjYwHhcNMjUxMjIyMDYwMTI2WhcNMjUxMjIzMDYwMTI2WjAzMTEwLwYDVQQD EyhlZmVhYWRlNjE1YWQ2NWRiNDI5YjNmYjZjODY2NTEyZTBkZGZkZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjeiUwasFROmoWswkRC4/9tn0o40 wcsgWAb/S5QJFE/OP6fU4UTFj3v+p94nn5228UOlP2sjLNK4qpFHABHaIz2uauFU 3NbHoXmhf4v6sUoEUepR28QfDrCy54Ty8f0ZcNzhJnNeAISNEw3dmC1SK2BtRFrq 73Nnc0wttguRstWgOAqs9TQK9mpi7PfTQWZyANPlOWWjg3OB5yXR0Hi2scMqXcBn 2WJpmgLI/e4TosVgoEwgQIPQoQlya/AcdC/Ml2efNd/l9nCxQRdK3h0VYvQQxgn6 9/figs5QkBTNy9LIO3J0Q6D0k7PxWSq7TlMdiyINj3Ar8m++pgbC83qtjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/qreYVrWXbQps/tshmUS4N395BMB8GA1UdIwQY MBaAFDcI4E/Xv4G2ddy+eymqJjyRIHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMmZjZmEtN2RjMS00MjAwLTg5OWUt YmM0OTNkNWNiYjVjLzEvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMmZjZmEtN2RjMS00MjAwLTg5OWUtYmM0OTNkNWNiYjVj LzEvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDtS0VYS 8GzrNHmGFiSoVtRy2/0dFs8Rr2U9r3y0CI9lcBocOf6+YNSmUoqp3ciF+DxX45Vv fLXpKi7ChT2q+PKX5sAGgxHfDLNKhbZVLB39faRZMdPhBZJqmSgNHTDK8yRnwogr YffvkSNdvgxaNhgHs6g4E+JDnoG4L4nSMkkIndNiBW/hNk9oRMrReDpLPO5FeNPz 6VNZaQHyHN7CJ4mqxhYRfMOilmN3yB5cJ7mAAo1N/gBCnb0JnjrPn7F7qeMYnrFg /aferTlP3I1rvmWC+KKBDSKq+/Oc0fPEQzJIUgEH5CvyLO1ZQaNguhgJA4xgJgiF 7ETS6dCz7ULBeA== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:55 2025 by rpki-client