This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft File: ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft (raw, json) Hash identifier: D17LAGNRo+TMWJZAWM49Beym8b5eMnSNKW8mptoOnv0= Subject key identifier: BE:5F:DB:DC:2A:6B:36:DC:03:45:26:6F:1C:DB:B7:ED:55:64:56:15 Authority key identifier: 9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D Certificate issuer: /CN=9edc3ff166155e6988be8095fcb420001d8be21d Certificate serial: 019B4B155FED9943805450599F4D81E21F1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 12:00:50 +0000 Manifest this update: Tue 23 Dec 2025 12:00:50 +0000 Manifest next update: Wed 24 Dec 2025 12:00:50 +0000 Files and hashes: 1: 9f1wfLMKGBE8v9MkOS4m3itL3mw.roa (hash: bPIUPhKEdbriAsko7Y4dw04AFw67jLRfl2Ngnf52fJ8=) 2: ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl (hash: jrZ2sC0BLGhw8j0B5fAtpBNLRhS8j3SKJdsrW1r9c1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:5f:ed:99:43:80:54:50:59:9f:4d:81:e2:1f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9edc3ff166155e6988be8095fcb420001d8be21d Validity Not Before: Dec 23 12:00:50 2025 GMT Not After : Dec 24 12:00:50 2025 GMT Subject: CN=be5fdbdc2a6b36dc0345266f1cdbb7ed55645615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:47:d1:20:7f:1d:53:ef:62:8a:43:19:cf: 40:84:30:13:ac:ad:a5:2e:79:87:9e:31:ce:06:c5: 41:5d:0f:46:8f:8c:c9:63:30:5a:3a:56:e0:b5:5d: 83:58:57:e7:16:99:d4:0d:1c:d5:92:e1:08:8f:46: 5c:4d:9f:6e:ca:66:56:ab:02:20:3d:7c:21:53:a3: 5c:fc:e3:fa:78:70:62:7e:17:e2:9c:c4:a4:5d:b6: 18:5f:30:c3:43:3a:1b:98:1e:db:ad:f8:b4:eb:1f: 53:05:12:66:7c:4e:fd:13:aa:6f:b4:23:a9:2d:e6: f1:66:07:9a:8d:37:dd:61:11:07:e2:29:8f:dd:56: 4a:9c:a9:19:a8:a1:6d:05:14:e1:5d:12:ff:98:4c: 99:77:a5:22:48:aa:2f:4c:97:f4:97:f0:e4:7f:f4: 95:78:be:e2:ac:53:30:b5:58:64:63:c2:40:83:f7: 19:f5:a1:d7:a1:5d:d1:a0:06:f1:a0:51:a8:f4:af: be:4f:e7:1c:b8:a3:e5:71:2d:88:b5:5b:69:a7:35: ca:fe:71:0d:9a:b5:0a:0f:51:97:7d:46:27:5c:df: 63:67:f2:b1:1c:08:19:27:6d:3d:50:26:96:38:0a: 24:d3:37:26:2e:bc:e9:02:a0:41:ad:ba:9c:cc:c4: c8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5F:DB:DC:2A:6B:36:DC:03:45:26:6F:1C:DB:B7:ED:55:64:56:15 X509v3 Authority Key Identifier: keyid:9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:2e:83:70:1d:45:8c:7c:b9:4d:1b:8e:28:d1:90:52:9a:99: 74:26:5c:87:90:94:bf:cf:1d:a4:0d:e9:3f:01:3e:a8:24:56: 5c:33:3c:ef:94:fc:83:22:ba:9f:e9:c0:cc:11:88:d9:f0:ed: 57:fe:3d:01:56:bb:ee:f2:b9:ce:13:15:86:6b:e5:53:6a:72: 2d:24:8a:00:7f:5c:61:1f:58:27:bb:c4:fe:3b:bc:36:28:c5: d2:9a:a8:21:62:d9:19:59:9a:ae:22:2a:5d:76:b2:6e:90:46: 06:07:1b:47:88:01:bb:53:5f:cc:e7:9c:1c:54:c2:35:ce:a5: 71:4f:80:64:31:59:20:8f:a5:ed:8c:3f:a2:61:91:56:5c:9e: 78:12:2c:67:9f:3f:23:aa:70:35:4e:5c:61:8e:3d:c7:1e:b3: 2f:e9:06:78:db:7f:af:ca:8a:22:78:3d:10:c3:5c:de:40:5d: 44:ff:02:58:c8:38:4b:94:da:22:69:a7:2a:70:6a:5a:5b:16: 73:ca:43:65:ec:65:63:63:68:cf:75:dc:3b:26:75:cd:3d:7f: 4b:5d:ac:ac:84:0e:8c:14:80:a0:aa:64:25:f3:5f:d0:54:21: d4:f5:ae:e3:e6:8e:4b:c2:53:40:31:c8:5a:6e:e9:d7:0f:d3: b4:aa:7d:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFV/tmUOAVFBZn02B4h8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZGMzZmYxNjYxNTVlNjk4OGJlODA5NWZjYjQyMDAwMWQ4 YmUyMWQwHhcNMjUxMjIzMTIwMDUwWhcNMjUxMjI0MTIwMDUwWjAzMTEwLwYDVQQD EyhiZTVmZGJkYzJhNmIzNmRjMDM0NTI2NmYxY2RiYjdlZDU1NjQ1NjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHBH0SB/HVPvYopDGc9AhDATrK2l LnmHnjHOBsVBXQ9Gj4zJYzBaOlbgtV2DWFfnFpnUDRzVkuEIj0ZcTZ9uymZWqwIg PXwhU6Nc/OP6eHBifhfinMSkXbYYXzDDQzobmB7brfi06x9TBRJmfE79E6pvtCOp LebxZgeajTfdYREH4imP3VZKnKkZqKFtBRThXRL/mEyZd6UiSKovTJf0l/Dkf/SV eL7irFMwtVhkY8JAg/cZ9aHXoV3RoAbxoFGo9K++T+ccuKPlcS2ItVtppzXK/nEN mrUKD1GXfUYnXN9jZ/KxHAgZJ209UCaWOAok0zcmLrzpAqBBrbqczMTIRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5f29wqazbcA0Umbxzbt+1VZFYVMB8GA1UdIwQY MBaAFJ7cP/FmFV5piL6Alfy0IAAdi+IdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnR3XzhXWVZYbW1Jdm9DVl9MUWdBQjJMNGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80ZmZjYjAtYmM1Ny00NjAyLWFkM2Qt NTI0ZDE0NDMwMWZmLzEvbnR3XzhXWVZYbW1Jdm9DVl9MUWdBQjJMNGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80ZmZjYjAtYmM1Ny00NjAyLWFkM2QtNTI0ZDE0NDMwMWZm LzEvbnR3XzhXWVZYbW1Jdm9DVl9MUWdBQjJMNGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVC6DcB1F jHy5TRuOKNGQUpqZdCZch5CUv88dpA3pPwE+qCRWXDM875T8gyK6n+nAzBGI2fDt V/49AVa77vK5zhMVhmvlU2pyLSSKAH9cYR9YJ7vE/ju8NijF0pqoIWLZGVmariIq XXaybpBGBgcbR4gBu1NfzOecHFTCNc6lcU+AZDFZII+l7Yw/omGRVlyeeBIsZ58/ I6pwNU5cYY49xx6zL+kGeNt/r8qKIng9EMNc3kBdRP8CWMg4S5TaImmnKnBqWlsW c8pDZexlY2Noz3XcOyZ1zT1/S12srIQOjBSAoKpkJfNf0FQh1PWu4+aOS8JTQDHI Wm7p1w/TtKp9Uw== -----END CERTIFICATE-----Generated at Tue Dec 23 17:19:00 2025 by rpki-client