This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json) Hash identifier: GGcg4GRHp6rSm263IC6qyf+1lV+fSp7xsCQ61bPQYVo= Subject key identifier: CF:B1:45:6E:40:19:C5:31:2A:C6:87:52:A7:F3:34:57:83:B9:61:9F Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05 Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05 Certificate serial: 019B3D90A5F781DEAA7D39D27AB88986F4A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft Manifest number: 07A7 Signing time: Sat 20 Dec 2025 21:00:48 +0000 Manifest this update: Sat 20 Dec 2025 21:00:48 +0000 Manifest next update: Sun 21 Dec 2025 21:00:48 +0000 Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: OqTD/qbzvt4lQTM2PGG6/VpQSMsuS1QyKwIVcdiOaYQ=) 2: wa6e-L5g3p2SNEGIRb1a4oqT56I.roa (hash: iBFSre5PI6/cZlAuQmnNGFmFLfmyjvaYR/9ZuSUPyuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:a5:f7:81:de:aa:7d:39:d2:7a:b8:89:86:f4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05 Validity Not Before: Dec 20 21:00:48 2025 GMT Not After : Dec 21 21:00:48 2025 GMT Subject: CN=cfb1456e4019c5312ac68752a7f3345783b9619f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:83:3a:e4:b3:80:de:11:5f:91:04:39:1a:3f: 8b:32:ec:42:91:0a:ea:1c:df:14:85:76:07:5b:9e: 3b:a6:14:b4:50:1e:1a:94:e6:59:b4:e7:3b:a5:71: c6:15:36:d3:3e:89:01:91:69:23:c4:39:ed:75:79: 9e:e6:b3:78:c8:36:83:47:b2:6a:8f:6b:39:54:55: c1:34:22:88:01:47:f5:f8:4b:f7:75:e5:e0:1a:6a: 3e:5d:03:bb:ca:be:6d:ac:dc:f3:0d:07:10:5e:af: d0:a4:55:7f:9f:7e:b2:f5:49:d2:f2:a4:b4:ab:46: 05:c3:70:97:71:fe:cc:72:9b:c1:b3:a5:1d:03:1c: 1d:7d:02:9b:00:69:68:5f:1c:0b:14:dd:c4:14:a5: d1:0a:bb:0a:99:20:7c:1c:0a:55:5b:d4:73:7f:73: 8d:ca:40:e5:9c:eb:6f:42:4f:47:ab:06:12:d4:c4: ef:45:0d:21:b7:57:06:f0:5f:09:77:c1:52:f0:c4: ba:27:2b:f9:06:84:fd:12:79:7a:03:7a:25:62:d4: 01:0e:81:5f:aa:60:9b:58:ee:47:19:10:a3:7c:50: e7:77:06:76:21:d3:aa:b0:f0:29:1a:39:bb:1f:4b: 8b:59:59:80:f1:eb:40:88:23:43:66:65:0c:3c:4c: ae:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B1:45:6E:40:19:C5:31:2A:C6:87:52:A7:F3:34:57:83:B9:61:9F X509v3 Authority Key Identifier: keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:08:6f:2d:d9:24:af:df:5b:57:53:46:48:72:51:f0:ae:9a: 17:ae:04:72:63:21:35:6a:7f:99:99:41:89:81:fa:93:57:ba: 78:90:16:b8:d2:4c:e9:f6:80:ad:80:af:01:79:26:d6:bf:8f: ed:ee:cc:ed:bd:9d:fb:5c:2e:38:7f:60:e9:8a:64:44:af:0d: d6:e6:fa:8d:f1:79:5b:28:d3:67:ab:a6:86:33:10:4b:28:0e: 2e:22:19:22:3b:ac:83:2e:f6:33:8a:57:19:79:75:5d:33:43: 3d:32:40:f5:61:66:d8:41:e3:7f:4e:72:c1:4e:be:d5:c9:15: 82:9a:b9:69:fc:ca:19:c7:41:35:af:0d:9c:28:04:cf:6e:f3: 47:8f:e2:cc:28:44:3d:ef:da:5b:8f:12:aa:3f:c2:5c:55:43: 0c:4b:fa:1b:b7:4d:92:31:85:44:d2:eb:60:9b:39:a7:2b:66: 68:6a:f3:ee:64:b1:1f:8e:c1:1e:8c:dc:5b:dd:24:90:af:ec: 33:fe:9a:cf:8f:e6:56:f7:5f:e8:98:2d:06:00:87:02:e1:49: fc:82:01:c0:b6:1c:e8:94:cd:ec:9a:ea:06:42:9f:3c:41:6d: 2a:99:03:2c:d1:c7:50:20:1b:c2:39:6e:5e:42:8d:fb:0f:4b: dd:69:8d:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKX3gd6qfTnSeriJhvSgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDRjM2E4NjMzOGUxNzA2MDVlNjY1ZDM0ZDhhNWM4Njk5 NDhhMDUwHhcNMjUxMjIwMjEwMDQ4WhcNMjUxMjIxMjEwMDQ4WjAzMTEwLwYDVQQD EyhjZmIxNDU2ZTQwMTljNTMxMmFjNjg3NTJhN2YzMzQ1NzgzYjk2MTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYM65LOA3hFfkQQ5Gj+LMuxCkQrq HN8UhXYHW547phS0UB4alOZZtOc7pXHGFTbTPokBkWkjxDntdXme5rN4yDaDR7Jq j2s5VFXBNCKIAUf1+Ev3deXgGmo+XQO7yr5trNzzDQcQXq/QpFV/n36y9UnS8qS0 q0YFw3CXcf7McpvBs6UdAxwdfQKbAGloXxwLFN3EFKXRCrsKmSB8HApVW9Rzf3ON ykDlnOtvQk9HqwYS1MTvRQ0ht1cG8F8Jd8FS8MS6Jyv5BoT9Enl6A3olYtQBDoFf qmCbWO5HGRCjfFDndwZ2IdOqsPApGjm7H0uLWVmA8etAiCNDZmUMPEyuNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+xRW5AGcUxKsaHUqfzNFeDuWGfMB8GA1UdIwQY MBaAFJ8Ew6hjOOFwYF5mXTTYpchplIoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84NDllMjYtNjQ3Mi00NDQwLWEwMzgt N2JhYTkyYTgyOGVjLzEvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84NDllMjYtNjQ3Mi00NDQwLWEwMzgtN2JhYTkyYTgyOGVj LzEvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAhvLdkk r99bV1NGSHJR8K6aF64EcmMhNWp/mZlBiYH6k1e6eJAWuNJM6faArYCvAXkm1r+P 7e7M7b2d+1wuOH9g6YpkRK8N1ub6jfF5WyjTZ6umhjMQSygOLiIZIjusgy72M4pX GXl1XTNDPTJA9WFm2EHjf05ywU6+1ckVgpq5afzKGcdBNa8NnCgEz27zR4/izChE Pe/aW48Sqj/CXFVDDEv6G7dNkjGFRNLrYJs5pytmaGrz7mSxH47BHozcW90kkK/s M/6az4/mVvdf6JgtBgCHAuFJ/IIBwLYc6JTN7JrqBkKfPEFtKpkDLNHHUCAbwjlu XkKN+w9L3WmNwg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:36:14 2025 by rpki-client