This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft File: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft (raw, json) Hash identifier: KE7oBz/WQia/7nT1KJ8WeZAyNKVyKl/GFDo2A8jNJDA= Subject key identifier: 2D:08:99:BD:0B:66:1C:77:DF:26:ED:FA:16:30:C6:8D:91:48:E1:58 Authority key identifier: 36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86 Certificate issuer: /CN=360c5935e51fe706c2447519d9b5f95ae363c186 Certificate serial: 019B318C9DFD3885584DC293484185907F8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft Manifest number: 132F Signing time: Thu 18 Dec 2025 13:00:57 +0000 Manifest this update: Thu 18 Dec 2025 13:00:57 +0000 Manifest next update: Fri 19 Dec 2025 13:00:57 +0000 Files and hashes: 1: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl (hash: MiQi50pyCi0IgYA97S2cS6r028IcvuJEzndDX84HObE=) 2: t502H2vMdpAeOhruVMNDr3Acpww.roa (hash: fOmBVqNdsH/gE4UkC59LOcZAoo+pjmsg19OUK4hM+ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:9d:fd:38:85:58:4d:c2:93:48:41:85:90:7f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=360c5935e51fe706c2447519d9b5f95ae363c186 Validity Not Before: Dec 18 13:00:57 2025 GMT Not After : Dec 19 13:00:57 2025 GMT Subject: CN=2d0899bd0b661c77df26edfa1630c68d9148e158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9f:d2:55:35:15:82:8b:54:0b:3a:82:57:c0: 2e:9d:90:ad:b4:cd:c7:3c:06:6b:3e:cb:5c:ee:ce: 14:58:fd:6a:9f:b8:e8:9b:1b:50:87:b0:7a:0e:e3: 7b:15:58:7b:b3:fa:ed:ec:7b:bc:5e:db:68:60:72: 1e:70:3b:55:16:d8:b0:ad:0f:03:8b:63:c5:91:a0: 40:de:cc:3b:e7:20:fb:ec:cb:58:b1:b5:55:00:26: 2b:e4:f7:5a:5d:ee:f0:b0:26:75:90:d4:89:5b:ea: 4a:48:0e:f5:8a:e8:17:4c:ed:46:53:8c:7c:63:a8: 29:27:7a:45:e8:f3:5f:5b:48:7f:aa:8e:ed:5d:1a: ea:a4:f0:8f:30:b6:b7:e0:35:ee:7f:7c:35:d2:5d: 49:85:fd:3a:5b:b2:36:71:73:4d:29:c0:e6:2f:64: 04:09:60:c5:75:41:45:09:d1:96:c5:75:e0:b3:95: 54:9b:a9:60:91:e3:81:67:cc:cc:61:b8:28:3a:2f: 90:39:07:82:53:4a:f5:23:0b:3d:71:bd:6b:5e:df: 98:1d:bd:85:22:dd:0c:3f:de:90:20:d9:53:e3:18: 80:d3:f7:92:31:67:81:6e:9d:60:8f:d8:91:6a:bc: 9a:fb:88:19:3d:51:c3:24:79:08:02:1d:9d:6f:db: 5b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:08:99:BD:0B:66:1C:77:DF:26:ED:FA:16:30:C6:8D:91:48:E1:58 X509v3 Authority Key Identifier: keyid:36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:6b:16:8d:a8:32:1e:ea:ef:fd:82:cc:45:0e:9d:55:24:77: dc:98:66:f6:f7:31:5a:73:e7:78:8e:bc:a3:ef:1e:79:48:51: 07:e9:4c:7e:0f:b9:4a:54:12:46:75:0b:ff:9a:7b:5a:51:0d: dd:63:1c:67:2d:cb:8a:6b:22:65:b2:3c:1c:14:0c:4a:ee:94: d8:1f:dc:5d:b9:c9:04:3d:f9:31:04:d3:fb:78:e0:6d:d8:8f: 9f:62:10:7b:c6:f1:f4:19:66:5f:c9:77:ce:ce:85:35:6a:dc: 5a:b7:de:a4:11:0c:2e:cd:c2:40:48:ca:c1:c7:20:94:24:8d: f6:e0:b6:72:8e:b1:5e:50:fd:5f:08:c2:c2:ee:27:01:fd:00: 21:b4:46:e4:6a:5f:67:0f:d2:56:5f:54:b8:c1:e6:c5:f9:d1: 63:c5:43:7a:46:31:76:0a:42:53:89:d7:fe:5a:e0:58:27:61: d7:ea:83:9b:bc:e9:42:81:a5:09:23:bc:87:23:ea:7d:b9:a9: 95:94:bc:68:f2:7d:56:b0:34:77:f2:f0:66:36:0a:b8:9a:44: 4d:cb:3f:9b:a1:e8:78:33:93:7c:d2:fa:a7:e5:88:61:c9:30: 1e:9f:4e:78:98:50:61:85:a3:0b:02:14:5d:e1:67:e0:58:4e: 90:c4:2c:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjJ39OIVYTcKTSEGFkH+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MGM1OTM1ZTUxZmU3MDZjMjQ0NzUxOWQ5YjVmOTVhZTM2 M2MxODYwHhcNMjUxMjE4MTMwMDU3WhcNMjUxMjE5MTMwMDU3WjAzMTEwLwYDVQQD EygyZDA4OTliZDBiNjYxYzc3ZGYyNmVkZmExNjMwYzY4ZDkxNDhlMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ/SVTUVgotUCzqCV8AunZCttM3H PAZrPstc7s4UWP1qn7jomxtQh7B6DuN7FVh7s/rt7Hu8XttoYHIecDtVFtiwrQ8D i2PFkaBA3sw75yD77MtYsbVVACYr5PdaXe7wsCZ1kNSJW+pKSA71iugXTO1GU4x8 Y6gpJ3pF6PNfW0h/qo7tXRrqpPCPMLa34DXuf3w10l1Jhf06W7I2cXNNKcDmL2QE CWDFdUFFCdGWxXXgs5VUm6lgkeOBZ8zMYbgoOi+QOQeCU0r1Iws9cb1rXt+YHb2F It0MP96QINlT4xiA0/eSMWeBbp1gj9iRarya+4gZPVHDJHkIAh2db9tbCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0Imb0LZhx33ybt+hYwxo2RSOFYMB8GA1UdIwQY MBaAFDYMWTXlH+cGwkR1Gdm1+VrjY8GGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmd4Wk5lVWY1d2JDUkhVWjJiWDVXdU5qd1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83NTgyMDMtZDUyOS00OGE3LTk4ZjQt ZTUxYTkwOTA3MjI2LzEvTmd4Wk5lVWY1d2JDUkhVWjJiWDVXdU5qd1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83NTgyMDMtZDUyOS00OGE3LTk4ZjQtZTUxYTkwOTA3MjI2 LzEvTmd4Wk5lVWY1d2JDUkhVWjJiWDVXdU5qd1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2msWjagy Hurv/YLMRQ6dVSR33Jhm9vcxWnPneI68o+8eeUhRB+lMfg+5SlQSRnUL/5p7WlEN 3WMcZy3LimsiZbI8HBQMSu6U2B/cXbnJBD35MQTT+3jgbdiPn2IQe8bx9BlmX8l3 zs6FNWrcWrfepBEMLs3CQEjKwccglCSN9uC2co6xXlD9XwjCwu4nAf0AIbRG5Gpf Zw/SVl9UuMHmxfnRY8VDekYxdgpCU4nX/lrgWCdh1+qDm7zpQoGlCSO8hyPqfbmp lZS8aPJ9VrA0d/LwZjYKuJpETcs/m6HoeDOTfNL6p+WIYckwHp9OeJhQYYWjCwIU XeFn4FhOkMQsyQ== -----END CERTIFICATE-----Generated at Thu Dec 18 20:38:07 2025 by rpki-client