This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft File: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json) Hash identifier: BJfWZbGX5gR2hgXVE0vMaLbfLe2Bb69R1ZS5HNO4ZUE= Subject key identifier: CE:73:AA:92:C8:EA:4A:D6:93:7A:1F:7A:6B:FC:28:5A:6E:50:EA:34 Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40 Certificate issuer: /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140 Certificate serial: 019B44A579525925304D91B505C6A479183D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft Manifest number: 10B8 Signing time: Mon 22 Dec 2025 06:00:53 +0000 Manifest this update: Mon 22 Dec 2025 06:00:53 +0000 Manifest next update: Tue 23 Dec 2025 06:00:53 +0000 Files and hashes: 1: LejGA9jv_aQRL8_fX-o1hcfe12g.roa (hash: KzvU7cDKChtmts0/63ODDqiOWBu9aRfolS2LJyBW0BQ=) 2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: R+0meW5oAes6LyOdQtIxlfhsdzZZT2N+CRpaAVyREWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:79:52:59:25:30:4d:91:b5:05:c6:a4:79:18:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140 Validity Not Before: Dec 22 06:00:53 2025 GMT Not After : Dec 23 06:00:53 2025 GMT Subject: CN=ce73aa92c8ea4ad6937a1f7a6bfc285a6e50ea34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:29:a6:d0:1f:2c:f8:5b:95:21:7d:18:1e: 2d:ea:0d:bd:36:9a:de:6a:66:67:c2:e1:f1:1a:c0: 44:c9:53:d5:61:dd:f7:4b:b9:0b:ab:fe:66:90:65: 7e:bb:92:03:74:a9:7f:9c:c4:87:43:8a:4f:34:3b: 6f:c8:e9:eb:14:52:13:c0:9c:c5:37:ed:fa:bc:4f: 98:21:59:90:39:2c:d8:86:88:32:ff:a4:7d:ad:d5: ee:19:6b:0d:c2:43:5f:c2:31:cf:92:ab:97:94:8d: d8:06:86:f2:a5:b8:65:31:2f:56:4b:88:e4:87:94: 96:86:20:8b:51:39:71:25:ae:b8:e1:12:f1:2e:fd: 09:0d:82:74:44:d1:28:08:95:39:1d:86:6e:62:42: 59:44:3b:0c:db:1e:b1:d7:e4:0e:06:6a:4a:8c:d9: b3:3e:31:a9:4b:1b:7a:5e:7c:6e:5f:6d:71:80:06: 9c:67:b7:de:9a:d1:e3:43:62:da:7b:ca:23:31:e4: ee:1e:e1:f9:88:0a:1c:2c:62:1b:80:74:62:75:bd: 2f:8d:b8:50:12:cd:fe:4d:62:a2:93:de:d1:48:f9: be:da:ca:68:ef:a4:bf:3d:d2:be:7b:fe:01:e0:11: 95:76:d8:1f:7e:aa:e2:44:12:b2:51:08:bd:f4:34: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:73:AA:92:C8:EA:4A:D6:93:7A:1F:7A:6B:FC:28:5A:6E:50:EA:34 X509v3 Authority Key Identifier: keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:58:a0:c9:90:c2:87:1b:2d:86:b9:34:dd:73:1b:0e:50:f2: 23:80:81:cf:b1:6f:1c:07:1a:12:6f:f4:86:bd:85:b6:cf:70: 5b:a1:f1:de:06:16:19:dc:37:06:94:09:a3:2d:69:ab:1d:d1: 11:d7:9f:0c:9e:3f:12:0a:d7:a3:23:ec:5e:96:57:06:0c:4a: 75:ad:01:0b:fe:67:59:05:fc:86:d2:01:7e:56:38:ca:83:8c: d3:2e:4b:59:3d:f4:da:81:c6:92:6a:b7:d2:cd:41:88:cf:ed: 47:0e:60:94:62:a5:58:cb:28:3e:28:f3:4c:72:45:72:95:c6: 89:0c:6c:87:bb:f6:a4:fb:76:e1:b4:a7:55:48:37:89:7f:55: 26:aa:d6:61:b3:85:c0:7a:f3:16:3f:14:f2:ec:fc:b0:e4:d8: d4:e6:1c:2c:39:cc:af:45:84:b8:0d:bc:f0:64:f4:11:61:45: c2:c0:6a:d8:ec:f3:86:a3:e9:c7:90:2d:48:bd:a7:46:ae:3e: 51:56:2c:43:16:fa:1b:0c:24:5b:0e:68:9e:8e:5d:5d:61:74: 21:b1:5a:03:9f:e1:9f:33:fc:67:d9:83:93:4a:74:1f:ce:ba: c2:d8:bc:f9:d6:70:5d:6a:78:3e:32:d3:ae:f3:0f:ea:13:62: db:73:a0:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpXlSWSUwTZG1BcakeRg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNjZhNWNmYTM5Y2ZhOTFlMzEzNDQzZjYxM2U3M2NjZTcz ZjIxNDAwHhcNMjUxMjIyMDYwMDUzWhcNMjUxMjIzMDYwMDUzWjAzMTEwLwYDVQQD EyhjZTczYWE5MmM4ZWE0YWQ2OTM3YTFmN2E2YmZjMjg1YTZlNTBlYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLEpptAfLPhblSF9GB4t6g29Npre amZnwuHxGsBEyVPVYd33S7kLq/5mkGV+u5IDdKl/nMSHQ4pPNDtvyOnrFFITwJzF N+36vE+YIVmQOSzYhogy/6R9rdXuGWsNwkNfwjHPkquXlI3YBobypbhlMS9WS4jk h5SWhiCLUTlxJa644RLxLv0JDYJ0RNEoCJU5HYZuYkJZRDsM2x6x1+QOBmpKjNmz PjGpSxt6XnxuX21xgAacZ7femtHjQ2Lae8ojMeTuHuH5iAocLGIbgHRidb0vjbhQ Es3+TWKik97RSPm+2spo76S/PdK+e/4B4BGVdtgffqriRBKyUQi99DTsRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5zqpLI6krWk3ofemv8KFpuUOo0MB8GA1UdIwQY MBaAFJ1mpc+jnPqR4xNEP2E+c8znPyFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYt YTE5NTA3ZGU3NWI0LzEvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYtYTE5NTA3ZGU3NWI0 LzEvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1igyZDC hxsthrk03XMbDlDyI4CBz7FvHAcaEm/0hr2Fts9wW6Hx3gYWGdw3BpQJoy1pqx3R EdefDJ4/EgrXoyPsXpZXBgxKda0BC/5nWQX8htIBflY4yoOM0y5LWT302oHGkmq3 0s1BiM/tRw5glGKlWMsoPijzTHJFcpXGiQxsh7v2pPt24bSnVUg3iX9VJqrWYbOF wHrzFj8U8uz8sOTY1OYcLDnMr0WEuA288GT0EWFFwsBq2OzzhqPpx5AtSL2nRq4+ UVYsQxb6GwwkWw5ono5dXWF0IbFaA5/hnzP8Z9mDk0p0H866wti8+dZwXWp4PjLT rvMP6hNi23OgYA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:51 2025 by rpki-client