This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft File: ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft (raw, json) Hash identifier: UEdZYKQWhVLDOi+HhUd4qRUnns9Rm6SE8YkEe+8Iy9E= Subject key identifier: 22:7A:F9:3A:C3:6B:89:3C:02:62:AB:25:4E:13:C9:C1:A6:41:9A:B4 Authority key identifier: 9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D Certificate issuer: /CN=9edc3ff166155e6988be8095fcb420001d8be21d Certificate serial: 019B52CF51C35586D486D27FC9C3C06CF065 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft Manifest number: 1791 Signing time: Thu 25 Dec 2025 00:01:17 +0000 Manifest this update: Thu 25 Dec 2025 00:01:17 +0000 Manifest next update: Fri 26 Dec 2025 00:01:17 +0000 Files and hashes: 1: 9f1wfLMKGBE8v9MkOS4m3itL3mw.roa (hash: bPIUPhKEdbriAsko7Y4dw04AFw67jLRfl2Ngnf52fJ8=) 2: ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl (hash: 1o0vhz75UiUHiBINHVyGxmliVeZ7QZs9r6VM+P20ELM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:51:c3:55:86:d4:86:d2:7f:c9:c3:c0:6c:f0:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9edc3ff166155e6988be8095fcb420001d8be21d Validity Not Before: Dec 25 00:01:17 2025 GMT Not After : Dec 26 00:01:17 2025 GMT Subject: CN=227af93ac36b893c0262ab254e13c9c1a6419ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:73:42:b3:4e:01:b4:f3:45:6c:7e:0f:75: 3b:c0:8d:c8:26:f7:a7:81:2f:5e:0f:25:fe:c5:d5: 8e:20:6c:4b:ae:75:72:fe:28:43:93:5c:dc:bb:ac: f7:a4:9c:93:0f:fd:da:d6:2a:d9:d2:cf:01:b7:44: 86:a3:9d:56:68:cd:54:dd:6a:dc:3c:a8:c6:9b:f4: 73:6c:5c:2c:b9:0f:c8:4e:ac:85:1c:b7:91:29:28: f7:26:9b:ed:b9:f3:e9:34:77:fa:84:86:5a:b0:4e: 4d:ec:8b:ec:41:d5:6b:ed:97:82:16:13:5e:bb:d7: f2:f6:69:71:96:93:a3:e5:d8:c4:90:3d:42:c9:44: 39:b4:e7:e4:3d:05:0e:42:ad:60:1a:70:c6:d9:bc: b3:56:6d:64:16:8a:5d:01:57:1f:2f:52:a1:f7:93: be:41:5b:53:20:6e:2b:12:85:ba:a2:17:d2:bd:52: db:15:5f:d7:9b:e1:3e:7f:83:71:64:79:e8:bb:7c: 4b:48:08:b4:5d:46:0e:e9:15:39:80:e4:d6:24:84: de:ad:53:83:b0:11:e1:e5:d9:60:5b:4d:4c:d2:df: 88:73:1f:83:89:06:d7:27:44:87:63:26:08:9d:88: 75:be:8c:eb:95:99:d0:d8:bf:e1:4b:d1:a9:39:24: 08:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7A:F9:3A:C3:6B:89:3C:02:62:AB:25:4E:13:C9:C1:A6:41:9A:B4 X509v3 Authority Key Identifier: keyid:9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:8e:ed:6e:d2:81:93:75:a2:c4:d2:d0:b5:96:91:fc:bc:b3: f8:3f:76:5e:bf:e0:ca:12:44:8c:40:b5:24:52:6b:e0:cd:a4: 9c:ed:50:9b:11:7b:c2:93:22:56:9f:6a:c8:45:d2:04:42:71: 61:8a:b3:22:1a:71:57:57:c6:d0:63:52:55:c9:9d:52:c7:a4: 3b:b3:00:28:9a:7a:c4:dd:9e:71:85:a8:0b:bb:3a:5e:02:f8: 4e:13:da:48:b5:6c:21:68:d7:95:58:3d:56:9b:4f:11:d6:c1: c3:fb:65:5d:a1:f8:0f:b0:9d:7d:59:f2:46:07:24:e3:a9:a0: 21:5d:dc:ff:e0:46:88:94:10:f4:6f:ac:2d:f4:53:1f:e6:b4: a8:9d:1d:a1:d1:3c:e8:15:5c:d5:f6:e0:f5:65:d4:39:79:2f: 79:71:90:b3:41:9f:45:8e:b8:4e:9c:06:ec:3e:e9:7d:5a:9a: c0:5e:a9:d5:83:ad:93:40:fa:ae:39:1c:b1:4f:01:cd:17:e2: 3d:76:e0:ad:df:1c:49:08:a6:94:44:14:e8:57:a6:e2:34:25: 8c:99:fa:f0:f0:9a:c9:ec:19:9d:89:60:a4:09:36:b3:4e:95: 75:f0:a0:27:20:02:9b:98:87:c5:23:0f:42:ef:68:da:43:d9: 3a:f7:b3:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSz1HDVYbUhtJ/ycPAbPBlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZGMzZmYxNjYxNTVlNjk4OGJlODA5NWZjYjQyMDAwMWQ4 YmUyMWQwHhcNMjUxMjI1MDAwMTE3WhcNMjUxMjI2MDAwMTE3WjAzMTEwLwYDVQQD EygyMjdhZjkzYWMzNmI4OTNjMDI2MmFiMjU0ZTEzYzljMWE2NDE5YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/JzQrNOAbTzRWx+D3U7wI3IJven gS9eDyX+xdWOIGxLrnVy/ihDk1zcu6z3pJyTD/3a1irZ0s8Bt0SGo51WaM1U3Wrc PKjGm/RzbFwsuQ/ITqyFHLeRKSj3JpvtufPpNHf6hIZasE5N7IvsQdVr7ZeCFhNe u9fy9mlxlpOj5djEkD1CyUQ5tOfkPQUOQq1gGnDG2byzVm1kFopdAVcfL1Kh95O+ QVtTIG4rEoW6ohfSvVLbFV/Xm+E+f4NxZHnou3xLSAi0XUYO6RU5gOTWJITerVOD sBHh5dlgW01M0t+Icx+DiQbXJ0SHYyYInYh1vozrlZnQ2L/hS9GpOSQI5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJ6+TrDa4k8AmKrJU4TycGmQZq0MB8GA1UdIwQY MBaAFJ7cP/FmFV5piL6Alfy0IAAdi+IdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnR3XzhXWVZYbW1Jdm9DVl9MUWdBQjJMNGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80ZmZjYjAtYmM1Ny00NjAyLWFkM2Qt NTI0ZDE0NDMwMWZmLzEvbnR3XzhXWVZYbW1Jdm9DVl9MUWdBQjJMNGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80ZmZjYjAtYmM1Ny00NjAyLWFkM2QtNTI0ZDE0NDMwMWZm LzEvbnR3XzhXWVZYbW1Jdm9DVl9MUWdBQjJMNGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUo7tbtKB k3WixNLQtZaR/Lyz+D92Xr/gyhJEjEC1JFJr4M2knO1QmxF7wpMiVp9qyEXSBEJx YYqzIhpxV1fG0GNSVcmdUsekO7MAKJp6xN2ecYWoC7s6XgL4ThPaSLVsIWjXlVg9 VptPEdbBw/tlXaH4D7CdfVnyRgck46mgIV3c/+BGiJQQ9G+sLfRTH+a0qJ0dodE8 6BVc1fbg9WXUOXkveXGQs0GfRY64TpwG7D7pfVqawF6p1YOtk0D6rjkcsU8BzRfi PXbgrd8cSQimlEQU6Fem4jQljJn68PCayewZnYlgpAk2s06VdfCgJyACm5iHxSMP Qu9o2kPZOvezaA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:23:46 2025 by rpki-client