This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft File: ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json) Hash identifier: soswMKXMRKOmeJ0NyZZD/3sqh4xLicyFbCiVRu0JaE4= Subject key identifier: BE:42:F4:50:84:30:4F:D6:C6:0A:43:B8:67:F0:E6:2B:45:4D:08:92 Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE Certificate issuer: /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe Certificate serial: 019AF31B37977BD15C57AEAACDB24988F481 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft Manifest number: 13A8 Signing time: Sat 06 Dec 2025 10:00:38 +0000 Manifest this update: Sat 06 Dec 2025 10:00:38 +0000 Manifest next update: Sun 07 Dec 2025 10:00:38 +0000 Files and hashes: 1: 96ceGnLozFWN_QTriAA9ffT0NZo.roa (hash: xYD9mhJQTnDUO7IrqsbDyJlQ0+k0aFVeTHj0N17MtSI=) 2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: cyz7zOJiiz0oMExqfP4s1XWlU1pVYLKs+lmCGj+45lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:37:97:7b:d1:5c:57:ae:aa:cd:b2:49:88:f4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe Validity Not Before: Dec 6 10:00:38 2025 GMT Not After : Dec 7 10:00:38 2025 GMT Subject: CN=be42f45084304fd6c60a43b867f0e62b454d0892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:30:66:3a:5e:14:29:15:01:d5:1f:9d:3f:6d: f9:28:e2:16:20:f5:58:a9:b0:0b:8d:b3:77:ca:b3: fb:3f:39:f3:d0:75:26:74:4e:f0:ed:6d:52:bf:81: ee:91:99:fd:3b:f0:b8:fc:ff:ee:1d:0f:72:37:b4: 85:ec:60:de:78:9f:cc:4b:8a:3f:4b:38:5d:ff:d8: b7:50:aa:a5:f7:e3:d1:91:6d:f7:3f:54:3a:45:46: 26:f0:3c:75:51:f8:96:df:a0:20:a1:aa:e0:f2:fd: 0e:97:c0:02:a8:b5:3a:d0:ae:66:ae:aa:e8:55:1d: 01:4c:50:b3:6f:64:3c:70:b0:51:5b:08:54:4d:18: bc:0c:54:da:1b:97:b6:b4:30:35:6e:9a:79:8e:d8: 63:96:6e:d8:1a:2c:d3:06:0f:f8:dd:12:e3:eb:8c: d5:a6:a6:d9:47:6a:c0:e1:f2:d8:14:c7:9c:6b:cb: 38:59:4a:1a:4d:30:d2:d3:cf:ce:d2:19:da:84:a3: 34:7e:9e:69:75:de:3f:45:32:73:af:a6:98:74:c4: 09:31:b1:cb:f0:45:57:39:a8:d1:ac:4e:42:22:d2: 76:29:35:e4:2a:7d:74:a8:b2:0a:ee:22:49:6c:29: 64:0b:0d:2a:b1:cb:b7:11:01:e6:b5:c9:20:c1:c7: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:42:F4:50:84:30:4F:D6:C6:0A:43:B8:67:F0:E6:2B:45:4D:08:92 X509v3 Authority Key Identifier: keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b6:b7:29:66:66:3d:f2:e8:51:28:e9:7d:b8:0e:94:7d:ea: ad:3e:ac:1e:b0:75:ff:4c:98:71:97:c4:5f:e2:19:82:39:4b: 58:ec:79:e2:6a:1b:39:d5:da:23:44:f9:83:40:88:86:00:09: 34:6b:7d:13:07:b1:d4:7a:c2:2f:e2:a5:48:65:84:7e:ae:dd: 9c:f4:64:58:d2:ed:c3:f5:14:80:92:ad:a4:14:36:0c:c7:6d: 76:6f:9d:22:08:df:86:df:5d:7b:73:8a:9d:c8:d2:dd:cf:93: 88:a7:2d:91:b3:1b:57:28:c4:01:35:a4:07:67:2d:a3:94:f3: 94:f3:46:6a:85:95:d6:c0:b8:08:3c:05:eb:17:ba:5d:6a:15: d6:ce:ad:c4:a2:81:b7:c9:87:56:38:28:59:5f:ca:a8:46:7f: 7e:52:26:35:c1:e2:0b:96:de:17:ba:9b:18:c5:48:bb:b9:f0: b3:e4:bb:43:d2:32:d2:37:76:26:26:48:a5:1a:1b:74:c1:c2: 52:a8:56:05:9c:70:15:e9:81:ed:54:b3:2b:e7:9a:21:9f:f5: ec:38:7e:6b:e2:37:47:a3:e8:d0:16:ce:c4:38:d8:27:25:9a: b4:8d:50:7a:c6:23:70:33:13:b5:34:74:d6:99:95:86:f1:70: dc:28:25:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzeXe9FcV66qzbJJiPSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMGE1MmZlZTIyODBkNmYyMzFiYjZhMjYyMjZlNjUzNTE3 MGYxZmUwHhcNMjUxMjA2MTAwMDM4WhcNMjUxMjA3MTAwMDM4WjAzMTEwLwYDVQQD EyhiZTQyZjQ1MDg0MzA0ZmQ2YzYwYTQzYjg2N2YwZTYyYjQ1NGQwODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DBmOl4UKRUB1R+dP235KOIWIPVY qbALjbN3yrP7Pznz0HUmdE7w7W1Sv4HukZn9O/C4/P/uHQ9yN7SF7GDeeJ/MS4o/ Szhd/9i3UKql9+PRkW33P1Q6RUYm8Dx1UfiW36Agoarg8v0Ol8ACqLU60K5mrqro VR0BTFCzb2Q8cLBRWwhUTRi8DFTaG5e2tDA1bpp5jthjlm7YGizTBg/43RLj64zV pqbZR2rA4fLYFMeca8s4WUoaTTDS08/O0hnahKM0fp5pdd4/RTJzr6aYdMQJMbHL 8EVXOajRrE5CItJ2KTXkKn10qLIK7iJJbClkCw0qscu3EQHmtckgwcca8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5C9FCEME/WxgpDuGfw5itFTQiSMB8GA1UdIwQY MBaAFJ4KUv7iKA1vIxu2omIm5lNRcPH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdwU191SW9EVzhqRzdhaVlpYm1VMUZ3OGY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80N2QyMWMtNjA0Yi00N2Q4LWEzMzMt NzA4YjY4Yzg1NmNmLzEvbmdwU191SW9EVzhqRzdhaVlpYm1VMUZ3OGY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80N2QyMWMtNjA0Yi00N2Q4LWEzMzMtNzA4YjY4Yzg1NmNm LzEvbmdwU191SW9EVzhqRzdhaVlpYm1VMUZ3OGY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdba3KWZm PfLoUSjpfbgOlH3qrT6sHrB1/0yYcZfEX+IZgjlLWOx54mobOdXaI0T5g0CIhgAJ NGt9Ewex1HrCL+KlSGWEfq7dnPRkWNLtw/UUgJKtpBQ2DMdtdm+dIgjfht9de3OK ncjS3c+TiKctkbMbVyjEATWkB2cto5TzlPNGaoWV1sC4CDwF6xe6XWoV1s6txKKB t8mHVjgoWV/KqEZ/flImNcHiC5beF7qbGMVIu7nws+S7Q9Iy0jd2JiZIpRobdMHC UqhWBZxwFemB7VSzK+eaIZ/17Dh+a+I3R6Po0BbOxDjYJyWatI1QesYjcDMTtTR0 1pmVhvFw3Cglqw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:15 2025 by rpki-client