This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json) Hash identifier: f5I3yywMKAs9ZoC4BgEScIdQ0gY7LFc55AeRV0Pi8Vc= Subject key identifier: 4F:9B:14:4D:E3:89:5B:2F:12:D1:57:8F:79:B6:C4:17:D0:AB:43:A3 Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Certificate serial: 019AF19B04B43EF89B4373B88A27A77F4EFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 03:00:59 +0000 Manifest this update: Sat 06 Dec 2025 03:00:59 +0000 Manifest next update: Sun 07 Dec 2025 03:00:59 +0000 Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: cYDQ9rbmLY0HbLwW4qMMuWazWGIBS8QCUZ08bV3Z7fI=) 2: 8wuUCHDoiO-u5k-EpvGe48eFVvY.roa (hash: 8liREnCtlx6CxZif/A697CMWzrfTg26yY6bw/0u19Kc=) 3: dwzGjClilGgqBa83jIlDLO6MhiY.roa (hash: ax5/1FqZ7LpfpWHSsIMG4PE6ZnxsmjJK2plIEm/o0h8=) 4: hNWwx7OL-9adb1_PVQj7dLugRbE.roa (hash: a5RZCNYvOxtuFY3pREa+RhVOW1R7dmnnmbvgTvDFgik=) 5: v_OC8AL3Mq1xajaIUc5DePm85DI.roa (hash: a977IGySg5+WWPVlDhFXuD0DqZ/XdGVdujbzn7Y6iiQ=) 6: wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa (hash: PzO0Fj4BmxOXd+Sy5Mgniwv5ZA+rTUEwL2xB1sXxHvE=) 7: xDz2yFNogKXgNdjcw-9O61_cLr0.roa (hash: xZbD/0bkTbFPWIFZs2iZleXxCUBZQXF3vUVmN0PJ3a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:04:b4:3e:f8:9b:43:73:b8:8a:27:a7:7f:4e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Validity Not Before: Dec 6 03:00:59 2025 GMT Not After : Dec 7 03:00:59 2025 GMT Subject: CN=4f9b144de3895b2f12d1578f79b6c417d0ab43a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:1d:7d:d6:93:4a:a3:2a:d8:2f:f0:bd:7e: 27:8c:e7:83:11:e5:f4:a3:3a:36:04:de:d7:58:78: 70:29:e0:99:32:c7:1c:5f:33:9d:37:d0:41:7b:dc: b8:1e:76:07:8f:7b:8b:26:d9:9a:26:c1:95:7e:f2: 08:5b:2d:33:6e:03:f9:85:e4:7d:21:3a:e5:73:9c: 15:b8:05:62:4d:55:60:0b:af:35:5c:26:77:df:df: 85:a7:44:ea:29:3f:a5:9f:ed:8b:1b:ff:24:9d:d8: 7b:f3:76:fc:2c:2f:14:7a:a8:9a:04:30:b6:c4:82: 16:3d:3d:57:69:b3:ed:95:91:65:29:58:b1:b1:39: ba:d7:60:0e:f5:b0:50:45:a1:cd:8d:86:91:6a:91: 93:e3:b9:43:25:72:ec:cc:fc:ae:bb:d3:ee:38:9c: 17:5b:f1:a5:1d:8e:a7:0a:43:5d:81:18:7c:87:d1: c8:10:45:b7:ec:ff:5f:19:c7:89:f2:6c:27:8a:bb: b1:0a:ba:98:29:ff:29:70:ed:c6:e4:c1:09:93:30: 9d:ba:74:d7:f6:3e:8c:b3:05:33:fb:51:d1:12:74: c8:bb:5d:69:6c:42:b8:9f:9b:d2:b2:84:9b:9b:a3: 81:d5:1a:76:c9:9e:26:bd:2a:3a:05:a7:57:7f:5b: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9B:14:4D:E3:89:5B:2F:12:D1:57:8F:79:B6:C4:17:D0:AB:43:A3 X509v3 Authority Key Identifier: keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:40:1a:91:b1:2a:be:ba:00:87:c9:43:98:da:60:3a:e1:5c: e5:40:bc:e1:cb:d1:5b:45:c2:72:a0:cd:e5:7a:99:f7:0a:7b: 34:f3:0c:00:0d:3e:07:eb:8b:10:f0:4c:5d:98:a9:c4:74:9f: c0:73:fd:df:2d:8d:24:a2:59:24:54:30:a3:ea:77:53:77:b1: 4d:ab:98:2f:af:be:06:61:32:17:d8:2a:ba:8b:9c:c2:0e:64: 95:22:be:de:6b:a0:b3:75:3d:50:8f:00:48:36:e2:68:66:ba: 89:ad:30:35:82:5c:ff:e2:ca:c7:29:33:b3:d9:29:3a:1a:56: e5:c2:19:d5:28:02:21:9a:97:8e:77:99:0e:66:36:bb:9b:34: 80:1f:bd:a0:d0:64:31:7b:9b:3b:4c:f2:98:7a:c8:2a:4a:f2: 6b:d2:5f:7f:a7:82:09:25:ae:f0:f3:f1:a6:8a:f4:f8:18:cc: a6:23:63:9b:b3:f9:02:8a:c6:98:5f:4e:d8:47:3b:b6:a0:27: 36:fb:28:87:84:c0:e0:be:73:e8:01:d6:17:b7:1d:2b:b9:54: 02:36:7a:75:3b:d4:2a:db:59:ba:18:e4:1d:75:f0:4b:ca:2e: 8b:e1:a9:ac:cc:e0:4d:85:59:e1:67:bd:a2:30:45:63:5f:21: dd:18:57:e2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxmwS0PvibQ3O4iienf079MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YzllMDMwNWNmZWQ1Nzk0NDQ4NzMyYThiMGJkODQyNzQ1 MGQ4MTMwHhcNMjUxMjA2MDMwMDU5WhcNMjUxMjA3MDMwMDU5WjAzMTEwLwYDVQQD Eyg0ZjliMTQ0ZGUzODk1YjJmMTJkMTU3OGY3OWI2YzQxN2QwYWI0M2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/YdfdaTSqMq2C/wvX4njOeDEeX0 ozo2BN7XWHhwKeCZMsccXzOdN9BBe9y4HnYHj3uLJtmaJsGVfvIIWy0zbgP5heR9 ITrlc5wVuAViTVVgC681XCZ339+Fp0TqKT+ln+2LG/8kndh783b8LC8UeqiaBDC2 xIIWPT1XabPtlZFlKVixsTm612AO9bBQRaHNjYaRapGT47lDJXLszPyuu9PuOJwX W/GlHY6nCkNdgRh8h9HIEEW37P9fGceJ8mwniruxCrqYKf8pcO3G5MEJkzCdunTX 9j6MswUz+1HREnTIu11pbEK4n5vSsoSbm6OB1Rp2yZ4mvSo6BadXf1tBrQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE+bFE3jiVsvEtFXj3m2xBfQq0OjMB8GA1UdIwQY MBaAFPnJ4DBc/tV5REhzKosL2EJ0UNgTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jbmdNRnotMVhsRVNITXFpd3ZZUW5SUTJCTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0 LTJmYmIyMDhhZDE4Mi8xLzEtY25nTUZ6LTFYbEVTSE1xaXd2WVFuUlEyQk0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzM3LzM2MTkwZC0xYzZjLTQ4YzYtYTQxNC0yZmJiMjA4YWQx ODIvMS8xLWNuZ01Gei0xWGxFU0hNcWl3dllRblJRMkJNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEAa kbEqvroAh8lDmNpgOuFc5UC84cvRW0XCcqDN5XqZ9wp7NPMMAA0+B+uLEPBMXZip xHSfwHP93y2NJKJZJFQwo+p3U3exTauYL6++BmEyF9gquoucwg5klSK+3mugs3U9 UI8ASDbiaGa6ia0wNYJc/+LKxykzs9kpOhpW5cIZ1SgCIZqXjneZDmY2u5s0gB+9 oNBkMXubO0zymHrIKkrya9Jff6eCCSWu8PPxpor0+BjMpiNjm7P5AorGmF9O2Ec7 tqAnNvsoh4TA4L5z6AHWF7cdK7lUAjZ6dTvUKttZuhjkHXXwS8oui+GprMzgTYVZ 4We9ojBFY18h3RhX4g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:31 2025 by rpki-client