This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft File: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json) Hash identifier: qxdw2SoopiE7yBHgyf6bxtxm4ccPFCvElz/+N2eN+R8= Subject key identifier: 97:7C:BC:57:78:64:6D:C3:9F:7B:C2:3D:61:EA:1C:88:8A:DD:7A:91 Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40 Certificate issuer: /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140 Certificate serial: 019B619DC01E230C1875787A9DD4BBEF4F15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft Manifest number: 10C7 Signing time: Sat 27 Dec 2025 21:01:26 +0000 Manifest this update: Sat 27 Dec 2025 21:01:26 +0000 Manifest next update: Sun 28 Dec 2025 21:01:26 +0000 Files and hashes: 1: LejGA9jv_aQRL8_fX-o1hcfe12g.roa (hash: KzvU7cDKChtmts0/63ODDqiOWBu9aRfolS2LJyBW0BQ=) 2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: rkI0bMhQ7WqMzqe0YTt9oAl3AkKSJ6E5UuP+GVfzMGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 21:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:c0:1e:23:0c:18:75:78:7a:9d:d4:bb:ef:4f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140 Validity Not Before: Dec 27 21:01:26 2025 GMT Not After : Dec 28 21:01:26 2025 GMT Subject: CN=977cbc5778646dc39f7bc23d61ea1c888add7a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2f:78:1d:be:9f:ec:b1:81:8a:f7:5b:0e:d5: d2:a6:3d:51:6e:8d:0b:28:70:2a:fe:a0:98:03:96: f4:fa:a0:a7:40:ff:d1:c6:b3:b1:40:8e:d6:45:95: ec:68:9a:fe:66:6e:9d:24:71:59:f2:b8:87:96:5d: 80:b0:48:b3:85:a4:9f:4c:3d:96:da:d1:4f:0e:4a: 18:66:e3:e7:e8:0d:52:d3:fc:a3:d5:47:f1:c0:d6: 8a:86:c2:ef:01:2d:6f:f6:21:ea:9b:31:80:38:12: 02:6e:7e:78:24:6b:94:4e:fe:8b:cd:a7:8a:80:3a: c3:74:9f:93:d8:6d:01:89:6b:ba:69:eb:af:5d:50: fb:01:76:39:6a:fb:d3:44:9c:22:a4:69:e4:57:a9: 6c:11:7c:ff:10:71:02:cf:e1:52:5c:10:c3:43:d0: 5d:d3:24:c1:ef:c1:2c:2b:f8:80:f4:35:cd:62:5a: fc:70:6e:b4:30:71:23:0a:43:c3:e5:60:b0:79:d3: 3f:19:57:c6:c8:2e:14:48:50:c6:e4:c6:3c:9d:16: 6a:5a:d2:e6:aa:a6:2a:59:86:aa:cc:2d:d3:6c:e6: 7f:ea:5e:1d:31:02:7a:0c:25:72:e4:33:df:6b:81: cf:52:e0:0e:2c:19:56:a4:78:f1:76:6a:e2:1e:4c: 53:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7C:BC:57:78:64:6D:C3:9F:7B:C2:3D:61:EA:1C:88:8A:DD:7A:91 X509v3 Authority Key Identifier: keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:1a:62:7f:77:b3:c4:15:f3:0d:68:da:ab:5d:b2:bc:be:53: cb:70:c4:d3:7e:81:41:4f:e1:59:07:39:7a:72:11:9a:66:4e: 5e:7b:19:9e:fe:a6:01:1c:13:d7:bb:44:54:5d:9e:96:13:9e: 93:35:21:f0:9c:d5:1b:68:64:07:40:ae:40:62:a3:de:11:23: 77:77:08:8f:c3:5d:46:a2:69:24:ef:20:37:0e:b3:37:5a:54: 04:0d:ad:f0:4c:c8:55:58:31:2b:cf:3a:ff:a7:4e:00:4d:70: 3f:8a:94:6b:6c:70:f7:fc:8d:5d:2a:09:27:f1:04:d3:8d:c3: 8e:6b:dd:b2:3a:2c:40:85:12:4b:ad:0a:d6:4a:07:f9:39:ac: 3f:1d:0d:1b:c0:a2:8f:f6:c1:16:0c:6c:38:ad:db:a9:c1:26: bb:cf:a6:e3:1b:0b:a0:2d:1b:61:01:7f:eb:eb:3a:0d:1e:8e: 7e:cc:f6:66:ba:3d:2b:7b:d7:99:7a:0a:0a:6c:5a:99:76:76: 9a:b3:46:0c:87:4c:7a:cc:b4:24:c9:45:25:1c:1f:1c:e2:87: 21:77:5a:33:34:15:a7:d6:e4:97:cb:9f:b2:b8:e2:b4:c2:e5: 95:23:98:92:f7:3c:42:fb:4b:f9:4c:12:73:51:b5:85:44:d1: a7:c8:73:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthncAeIwwYdXh6ndS7708VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNjZhNWNmYTM5Y2ZhOTFlMzEzNDQzZjYxM2U3M2NjZTcz ZjIxNDAwHhcNMjUxMjI3MjEwMTI2WhcNMjUxMjI4MjEwMTI2WjAzMTEwLwYDVQQD Eyg5NzdjYmM1Nzc4NjQ2ZGMzOWY3YmMyM2Q2MWVhMWM4ODhhZGQ3YTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS94Hb6f7LGBivdbDtXSpj1Rbo0L KHAq/qCYA5b0+qCnQP/RxrOxQI7WRZXsaJr+Zm6dJHFZ8riHll2AsEizhaSfTD2W 2tFPDkoYZuPn6A1S0/yj1UfxwNaKhsLvAS1v9iHqmzGAOBICbn54JGuUTv6LzaeK gDrDdJ+T2G0BiWu6aeuvXVD7AXY5avvTRJwipGnkV6lsEXz/EHECz+FSXBDDQ9Bd 0yTB78EsK/iA9DXNYlr8cG60MHEjCkPD5WCwedM/GVfGyC4USFDG5MY8nRZqWtLm qqYqWYaqzC3TbOZ/6l4dMQJ6DCVy5DPfa4HPUuAOLBlWpHjxdmriHkxTLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJd8vFd4ZG3Dn3vCPWHqHIiK3XqRMB8GA1UdIwQY MBaAFJ1mpc+jnPqR4xNEP2E+c8znPyFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYt YTE5NTA3ZGU3NWI0LzEvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83NjI3NDMtNzE2NC00MzNlLThiYjYtYTE5NTA3ZGU3NWI0 LzEvbldhbHo2T2MtcEhqRTBRX1lUNXp6T2NfSVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghpif3ez xBXzDWjaq12yvL5Ty3DE036BQU/hWQc5enIRmmZOXnsZnv6mARwT17tEVF2elhOe kzUh8JzVG2hkB0CuQGKj3hEjd3cIj8NdRqJpJO8gNw6zN1pUBA2t8EzIVVgxK886 /6dOAE1wP4qUa2xw9/yNXSoJJ/EE043DjmvdsjosQIUSS60K1koH+TmsPx0NG8Ci j/bBFgxsOK3bqcEmu8+m4xsLoC0bYQF/6+s6DR6Ofsz2Zro9K3vXmXoKCmxamXZ2 mrNGDIdMesy0JMlFJRwfHOKHIXdaMzQVp9bkl8ufsrjitMLllSOYkvc8QvtL+UwS c1G1hUTRp8hzog== -----END CERTIFICATE-----Generated at Sun Dec 28 05:04:08 2025 by rpki-client