This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft File: ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft (raw, json) Hash identifier: QFJ9hjpyBlof/BIsoVYXUWJOJRdeASaFCAMgZyogOhA= Subject key identifier: D2:A5:61:79:3B:E1:DF:F6:EC:ED:D6:55:7E:B0:27:FD:42:23:56:27 Authority key identifier: 9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7 Certificate issuer: /CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7 Certificate serial: 019AF3C0318E6995BA8BB8B36D5096598990 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft Manifest number: 08BB Signing time: Sat 06 Dec 2025 13:00:50 +0000 Manifest this update: Sat 06 Dec 2025 13:00:50 +0000 Manifest next update: Sun 07 Dec 2025 13:00:50 +0000 Files and hashes: 1: ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl (hash: Hp2i5gCWqkDi07CiwJnliCVRVsug7qj9+QCnf7P73ec=) 2: z5plCbvdkup7MxI7T8lBnb_bFXc.roa (hash: gJ70ebUSb97tS8RCU2JGa9RBjyi3gQiPSVEBaoEhFFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:31:8e:69:95:ba:8b:b8:b3:6d:50:96:59:89:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7 Validity Not Before: Dec 6 13:00:50 2025 GMT Not After : Dec 7 13:00:50 2025 GMT Subject: CN=d2a561793be1dff6ecedd6557eb027fd42235627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:78:d4:0d:54:28:a2:ca:6a:9d:54:a1:e5: 99:67:3f:ad:6d:32:95:5e:19:3a:78:e1:24:4a:e8: 87:0f:86:18:9b:fe:a3:52:b2:7d:49:c9:fd:2d:9e: df:49:8c:67:e1:ea:d3:f8:ed:0b:4b:40:a6:98:0a: 10:33:bb:5b:7c:13:44:6b:c7:a6:67:82:a4:5c:30: ae:24:5a:d9:d2:ec:98:19:83:07:84:06:4f:b1:f8: 4b:87:74:10:72:5e:b3:d9:53:9e:6f:f4:a5:be:75: 7d:56:33:ce:87:d0:a3:33:af:dc:2e:4d:99:cd:b3: e9:48:bb:d3:9f:a4:bc:67:62:94:be:9e:a3:39:8c: f5:ec:88:cf:5e:c7:66:8a:5d:96:ab:5c:96:93:5e: da:5a:ee:3c:12:31:d7:b7:98:36:94:0e:a3:13:aa: 42:b5:ea:0a:a2:fa:05:8b:69:58:0a:db:84:f9:d7: 5c:ed:d1:ab:8d:72:52:86:07:2f:d2:2b:5e:48:b8: b7:0f:53:e9:0f:57:45:8b:46:2e:93:f9:be:0b:81: 6f:ed:e7:40:4d:be:f9:7d:ab:fe:61:7b:d5:a5:ab: 64:2e:08:90:1c:b1:91:a3:60:d2:95:06:0b:a2:05: 71:8c:a9:50:8d:bd:0e:1c:a1:5f:30:88:63:5a:7e: 3f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A5:61:79:3B:E1:DF:F6:EC:ED:D6:55:7E:B0:27:FD:42:23:56:27 X509v3 Authority Key Identifier: keyid:9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ea:53:da:5d:e7:a2:34:89:2b:04:34:c5:52:7e:02:90:5e: 3a:a2:7d:d1:d4:a5:89:23:1c:8c:c4:47:e1:6a:77:5d:17:bf: 3e:47:3f:22:1c:61:b5:8f:8f:8b:0d:06:de:69:32:a6:21:c5: 7d:1a:3e:96:60:e1:e8:c6:2c:3b:0f:5c:54:03:a4:be:df:ba: 30:88:8a:de:f3:53:fb:e8:ce:87:67:f3:97:92:d2:5b:ac:bc: d6:14:8f:5e:89:42:92:93:22:51:a4:b0:c2:3e:28:2c:36:7e: dc:a8:23:10:f3:35:a2:12:e1:55:89:29:5f:58:46:f4:15:af: e0:29:b6:85:48:e1:9a:34:c7:3b:eb:b7:9c:3b:f5:12:d2:99: 0c:39:a1:8d:b0:03:f1:35:fa:ac:46:3f:71:c1:0c:8b:7c:bd: a5:34:d2:88:20:f6:3e:d5:00:4d:fe:b6:5c:0b:d7:84:5a:f2: ee:ca:23:f7:4b:cb:7e:08:ea:77:89:85:99:60:f9:ab:08:e5: e1:fd:2d:25:01:bc:7d:75:00:c6:1b:51:6a:88:a4:c8:3a:c3: ba:45:10:27:2f:3f:51:6c:da:2c:c4:40:29:37:82:0c:25:97: ab:dd:ef:0c:64:a7:9c:8b:4a:aa:66:1a:a0:4a:55:c9:ef:c3: 6a:f3:bf:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDGOaZW6i7izbVCWWYmQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMGRlNGYyNjI3NWVhNWZjMmYyM2M4YjRkN2UwNmQ3MmIz YjczYzcwHhcNMjUxMjA2MTMwMDUwWhcNMjUxMjA3MTMwMDUwWjAzMTEwLwYDVQQD EyhkMmE1NjE3OTNiZTFkZmY2ZWNlZGQ2NTU3ZWIwMjdmZDQyMjM1NjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4l41A1UKKLKap1UoeWZZz+tbTKV Xhk6eOEkSuiHD4YYm/6jUrJ9Scn9LZ7fSYxn4erT+O0LS0CmmAoQM7tbfBNEa8em Z4KkXDCuJFrZ0uyYGYMHhAZPsfhLh3QQcl6z2VOeb/SlvnV9VjPOh9CjM6/cLk2Z zbPpSLvTn6S8Z2KUvp6jOYz17IjPXsdmil2Wq1yWk17aWu48EjHXt5g2lA6jE6pC teoKovoFi2lYCtuE+ddc7dGrjXJShgcv0iteSLi3D1PpD1dFi0Yuk/m+C4Fv7edA Tb75fav+YXvVpatkLgiQHLGRo2DSlQYLogVxjKlQjb0OHKFfMIhjWn4/BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKlYXk74d/27O3WVX6wJ/1CI1YnMB8GA1UdIwQY MBaAFJ4N5PJidepfwvI8i01+BtcrO3PHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmczazhtSjE2bF9DOGp5TFRYNEcxeXM3YzhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lYWM5OTctY2UxZS00NTliLTk0MzYt ZWQ3MDY3Zjk4N2Q5LzEvbmczazhtSjE2bF9DOGp5TFRYNEcxeXM3YzhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lYWM5OTctY2UxZS00NTliLTk0MzYtZWQ3MDY3Zjk4N2Q5 LzEvbmczazhtSjE2bF9DOGp5TFRYNEcxeXM3YzhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcepT2l3n ojSJKwQ0xVJ+ApBeOqJ90dSliSMcjMRH4Wp3XRe/Pkc/IhxhtY+Piw0G3mkypiHF fRo+lmDh6MYsOw9cVAOkvt+6MIiK3vNT++jOh2fzl5LSW6y81hSPXolCkpMiUaSw wj4oLDZ+3KgjEPM1ohLhVYkpX1hG9BWv4Cm2hUjhmjTHO+u3nDv1EtKZDDmhjbAD 8TX6rEY/ccEMi3y9pTTSiCD2PtUATf62XAvXhFry7soj90vLfgjqd4mFmWD5qwjl 4f0tJQG8fXUAxhtRaoikyDrDukUQJy8/UWzaLMRAKTeCDCWXq93vDGSnnItKqmYa oEpVye/DavO/0w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:48:54 2025 by rpki-client