This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json) Hash identifier: ryCk8SZELqiZ7++NFICreMIWgBfOb7nW4ldtri233Lk= Subject key identifier: 2B:58:26:43:63:A0:2E:EF:72:AA:51:88:0D:7E:44:49:EA:BC:D7:17 Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4 Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4 Certificate serial: 019AF389CD83B5B285CEB22B55AE3AB4448F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft Manifest number: 0C1B Signing time: Sat 06 Dec 2025 12:01:25 +0000 Manifest this update: Sat 06 Dec 2025 12:01:25 +0000 Manifest next update: Sun 07 Dec 2025 12:01:25 +0000 Files and hashes: 1: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: hZleKK3VfwbNQ9PGHfHQL4taqk4t9IRg6THzyKlc0YQ=) 2: vOtFwLdGF7PMmv2kt6Y0Mhv9xgc.roa (hash: 37qkO8fAeK5+9nWdH5nkM409M5On3UG7sBmDzTvbUVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:cd:83:b5:b2:85:ce:b2:2b:55:ae:3a:b4:44:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4 Validity Not Before: Dec 6 12:01:25 2025 GMT Not After : Dec 7 12:01:25 2025 GMT Subject: CN=2b58264363a02eef72aa51880d7e4449eabcd717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:a9:d9:e2:1e:17:49:79:49:22:d8:73:bf: 26:fb:f6:cd:57:27:fe:c0:26:21:cb:1f:b1:95:00: 0a:d3:6e:75:90:76:06:96:b4:5b:aa:09:03:f2:4d: bc:cc:6e:d0:15:93:5c:9f:38:9d:97:a2:e3:ae:df: 0b:87:a6:ed:54:d7:0a:d9:03:fc:71:62:8a:92:21: c5:96:67:09:51:67:54:c4:e4:64:ec:c4:66:62:a0: d7:65:88:d9:2d:30:77:3a:3f:a9:bb:f5:70:bf:25: 1b:c5:b3:8d:65:19:33:88:ff:51:da:e7:1c:9e:1d: 3d:65:02:99:92:c5:65:ad:6d:c6:62:ed:5e:82:48: 3a:c5:02:7c:b6:fc:bf:da:9c:76:bf:7e:d8:90:4d: 10:7a:cf:d1:c2:88:36:fe:d4:94:2b:7d:f1:9a:b1: cc:f6:89:02:c4:27:f9:5e:9a:65:dc:06:27:f5:65: 69:14:bb:7f:68:03:98:b6:1d:0f:a1:5a:77:d6:d4: 57:d8:29:a1:24:d3:07:a7:92:98:92:16:07:fb:1a: a7:31:19:6a:90:6c:a1:fc:f4:c0:6a:28:ad:8d:e8: da:be:e0:8d:cc:75:6e:aa:64:3d:ad:f4:a7:46:3f: d8:cf:44:a8:db:35:7b:ec:df:24:5b:24:cc:e2:c1: e2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:58:26:43:63:A0:2E:EF:72:AA:51:88:0D:7E:44:49:EA:BC:D7:17 X509v3 Authority Key Identifier: keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f4:4e:3c:9b:4f:6d:a6:69:87:6d:fd:58:f0:fd:39:ce:04: 1c:96:d8:99:44:23:04:f4:52:93:65:d9:54:6e:05:9f:7b:6f: 9c:60:79:50:94:ca:fc:4c:91:7f:51:5d:d5:06:85:86:11:06: 24:4d:2f:80:59:b8:0f:1f:99:8f:6a:6d:3b:f9:5f:49:50:bf: 32:15:86:e9:18:af:25:1a:1e:2b:d3:1c:43:23:4a:d4:99:31: 07:76:dc:87:5d:60:95:be:fe:31:0e:e6:24:b4:b4:96:57:c2: 48:35:0f:3c:87:cb:86:e4:f2:cf:fe:12:9e:80:ae:19:39:d1: fc:1f:4a:99:38:0a:ad:6d:47:fc:cc:cc:01:07:54:e1:91:e4: 2b:54:7e:ae:9b:57:d7:8e:21:bd:b9:6d:a2:43:0e:37:51:e9: b3:51:c3:a7:cf:9c:39:e8:54:bb:bb:2b:d4:1b:ef:3e:df:8a: c1:b8:6a:a3:d0:93:12:96:94:f8:a5:d1:1e:02:81:2d:37:51: cf:17:22:3f:50:df:23:0e:09:71:82:87:26:f7:bf:2c:dc:35: 7b:33:ca:e3:52:d4:69:e9:18:53:8d:9d:6c:f3:30:89:06:3a: ae:9d:1f:4b:1e:b7:c5:71:38:9e:92:c0:13:1f:98:13:bd:b6: 83:e7:84:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzic2DtbKFzrIrVa46tESPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMGExMWE2YjFkMTg5NjU3YzdmYjk2ZWMxNDU4YmFmY2Ex ODY0ZjQwHhcNMjUxMjA2MTIwMTI1WhcNMjUxMjA3MTIwMTI1WjAzMTEwLwYDVQQD EygyYjU4MjY0MzYzYTAyZWVmNzJhYTUxODgwZDdlNDQ0OWVhYmNkNzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmWp2eIeF0l5SSLYc78m+/bNVyf+ wCYhyx+xlQAK0251kHYGlrRbqgkD8k28zG7QFZNcnzidl6Ljrt8Lh6btVNcK2QP8 cWKKkiHFlmcJUWdUxORk7MRmYqDXZYjZLTB3Oj+pu/VwvyUbxbONZRkziP9R2ucc nh09ZQKZksVlrW3GYu1egkg6xQJ8tvy/2px2v37YkE0Qes/Rwog2/tSUK33xmrHM 9okCxCf5Xppl3AYn9WVpFLt/aAOYth0PoVp31tRX2CmhJNMHp5KYkhYH+xqnMRlq kGyh/PTAaiitjejavuCNzHVuqmQ9rfSnRj/Yz0So2zV77N8kWyTM4sHijQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtYJkNjoC7vcqpRiA1+REnqvNcXMB8GA1UdIwQY MBaAFJ4KEaax0YllfH+5bsFFi6/KGGT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xY2RhY2UtNGUwMC00NjlhLThjNTAt NThjYjgzMDg3NWY1LzEvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8xY2RhY2UtNGUwMC00NjlhLThjNTAtNThjYjgzMDg3NWY1 LzEvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfROPJtP baZph239WPD9Oc4EHJbYmUQjBPRSk2XZVG4Fn3tvnGB5UJTK/EyRf1Fd1QaFhhEG JE0vgFm4Dx+Zj2ptO/lfSVC/MhWG6RivJRoeK9McQyNK1JkxB3bch11glb7+MQ7m JLS0llfCSDUPPIfLhuTyz/4SnoCuGTnR/B9KmTgKrW1H/MzMAQdU4ZHkK1R+rptX 144hvbltokMON1Hps1HDp8+cOehUu7sr1BvvPt+Kwbhqo9CTEpaU+KXRHgKBLTdR zxciP1DfIw4JcYKHJve/LNw1ezPK41LUaekYU42dbPMwiQY6rp0fSx63xXE4npLA Ex+YE722g+eEOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:36 2025 by rpki-client