This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json) Hash identifier: YdVyn7zr3CtX8/AY68oMFZBd85UqOp/NZ98YRsv68vw= Subject key identifier: 39:61:18:87:D7:A3:08:0C:46:14:87:F6:07:5B:33:99:30:EA:87:DE Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe Certificate serial: 019AF12D2B1F0881399253B1B2099D1C83CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft Manifest number: 045A Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: 2jDUXaVY2J9zU8vKhzB_PzOO_6U.roa (hash: uI6QS/R6IbgUMuCYc5sOFyWJ4AyLIYf/PSbRWwbYsP0=) 2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: 9NN4hrX/wNLtkgVwI/U5XxRSS2TN2G/2qW/DbnmH/eI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2b:1f:08:81:39:92:53:b1:b2:09:9d:1c:83:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=39611887d7a3080c461487f6075b339930ea87de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ea:36:44:4e:8b:b7:b3:0e:32:6c:01:fa:90: 90:04:da:f3:f9:89:08:b8:6b:60:99:ec:9c:d3:db: 77:97:fe:76:a0:47:32:e3:82:1a:d7:a6:92:3c:39: 53:e8:5e:70:4b:8f:1b:91:e4:96:5a:e2:76:9e:53: 55:89:33:ed:ba:58:68:04:99:49:4c:dc:f6:56:f5: 73:ff:cc:dc:54:ef:17:22:17:c9:71:a0:06:92:38: 45:97:dc:d2:1e:d8:ae:d2:f1:a9:56:83:06:26:85: 39:e2:51:1f:53:15:04:8c:ee:c6:1b:d7:d1:95:e4: 34:6e:74:1c:48:69:20:87:c5:43:a6:c6:37:64:36: fc:f4:f1:e5:bb:09:8d:e5:9c:9a:94:01:9b:29:32: e7:0f:06:ab:19:3e:1d:40:2d:97:d7:34:c2:04:c8: 49:f8:2f:92:5d:27:7a:3f:a2:09:bb:de:7c:6c:11: 35:c3:10:1e:21:17:f8:e2:fd:a1:9f:1d:af:6f:2e: 9a:07:c8:a4:8f:eb:49:60:38:5f:ac:49:2d:bb:41: 4e:70:48:30:bb:54:31:c7:bf:49:44:f0:a8:01:99: 06:7e:ae:7c:44:33:86:0f:f6:93:57:cf:e8:0d:bb: f8:38:5e:da:5b:9a:fb:07:38:d0:1b:be:9f:bb:67: 4c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:61:18:87:D7:A3:08:0C:46:14:87:F6:07:5B:33:99:30:EA:87:DE X509v3 Authority Key Identifier: keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ff:37:6b:ae:b6:60:c6:e1:fb:af:af:04:c2:e8:f3:67:3b: d7:16:a7:08:11:09:9c:92:1f:cd:79:fe:9d:09:88:7c:d4:54: a0:6a:01:07:60:b6:83:27:92:52:f9:2b:68:f3:69:4d:78:2e: d2:4d:bb:92:61:2e:38:1a:47:55:50:a6:ad:29:40:bd:38:6d: 2d:cc:09:a2:be:4b:11:31:95:d4:bc:3c:ab:be:ec:77:22:69: ab:9c:53:11:6d:99:6b:f4:83:92:2b:bf:a5:68:a3:ef:cc:03: 03:fc:a9:d3:3f:7c:d6:95:c4:b6:4a:ef:8e:5f:1d:0a:c4:0c: af:e3:f3:4e:1d:22:bf:99:39:1c:26:4a:3f:d1:c2:df:13:73: aa:3f:ac:c5:3e:8f:37:cf:e1:9d:6d:88:b7:25:85:64:aa:d2: 83:b9:73:36:32:83:49:6a:9d:ad:58:db:79:94:81:12:e9:fb: 8c:34:36:88:e6:d9:55:34:7d:b0:4f:f0:ba:68:66:bd:9b:7f: 4d:ef:4a:8b:32:a5:4f:f7:3a:69:c6:cf:b8:20:98:2c:86:14: 15:26:a2:a0:65:4c:f7:56:c8:15:9f:8a:99:15:89:f2:0f:6a: 56:56:59:ed:90:3d:a9:41:0d:35:50:58:cf:64:40:c8:6b:39: 8e:4b:22:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSsfCIE5klOxsgmdHIPNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NjAzNDA2Y2YwZTFkN2RjNGE4Nzg0YTE4OGE2MjM4ZTNj MTNhYmUwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD EygzOTYxMTg4N2Q3YTMwODBjNDYxNDg3ZjYwNzViMzM5OTMwZWE4N2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuo2RE6Lt7MOMmwB+pCQBNrz+YkI uGtgmeyc09t3l/52oEcy44Ia16aSPDlT6F5wS48bkeSWWuJ2nlNViTPtulhoBJlJ TNz2VvVz/8zcVO8XIhfJcaAGkjhFl9zSHtiu0vGpVoMGJoU54lEfUxUEjO7GG9fR leQ0bnQcSGkgh8VDpsY3ZDb89PHluwmN5ZyalAGbKTLnDwarGT4dQC2X1zTCBMhJ +C+SXSd6P6IJu958bBE1wxAeIRf44v2hnx2vby6aB8ikj+tJYDhfrEktu0FOcEgw u1Qxx79JRPCoAZkGfq58RDOGD/aTV8/oDbv4OF7aW5r7BzjQG76fu2dMQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlhGIfXowgMRhSH9gdbM5kw6ofeMB8GA1UdIwQY MBaAFDRgNAbPDh19xKh4ShiKYjjjwTq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80NWE1MzktNGExZS00OTRiLWJlOTQt MWVlNTZjNWNmYmY1LzEvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80NWE1MzktNGExZS00OTRiLWJlOTQtMWVlNTZjNWNmYmY1 LzEvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbf83a662 YMbh+6+vBMLo82c71xanCBEJnJIfzXn+nQmIfNRUoGoBB2C2gyeSUvkraPNpTXgu 0k27kmEuOBpHVVCmrSlAvThtLcwJor5LETGV1Lw8q77sdyJpq5xTEW2Za/SDkiu/ pWij78wDA/yp0z981pXEtkrvjl8dCsQMr+PzTh0iv5k5HCZKP9HC3xNzqj+sxT6P N8/hnW2ItyWFZKrSg7lzNjKDSWqdrVjbeZSBEun7jDQ2iObZVTR9sE/wumhmvZt/ Te9KizKlT/c6acbPuCCYLIYUFSaioGVM91bIFZ+KmRWJ8g9qVlZZ7ZA9qUENNVBY z2RAyGs5jksiVg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:47 2025 by rpki-client