This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json) Hash identifier: x75Npa8VRajsk16V9JEDdFtZqy7PXkcEQ8iON/k7E2k= Subject key identifier: 99:AA:88:1E:27:78:40:F2:8C:04:12:F9:51:0B:90:AF:9E:7E:6D:8C Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a Certificate serial: 019AF12D642F0595D86D8BB34D3E4F8AF60D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft Manifest number: 0827 Signing time: Sat 06 Dec 2025 01:01:14 +0000 Manifest this update: Sat 06 Dec 2025 01:01:14 +0000 Manifest next update: Sun 07 Dec 2025 01:01:14 +0000 Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: HPTvLf6KC1Vx+kHlmvMmpK4rssgw7V4TlfufWPUB2qM=) 2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:64:2f:05:95:d8:6d:8b:b3:4d:3e:4f:8a:f6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a Validity Not Before: Dec 6 01:01:14 2025 GMT Not After : Dec 7 01:01:14 2025 GMT Subject: CN=99aa881e277840f28c0412f9510b90af9e7e6d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:ca:07:fd:e3:22:44:61:5c:3a:6b:ff:5e: 95:5d:37:a6:0b:51:64:3f:06:df:af:0e:dd:a5:3e: ff:0b:e1:48:dc:1c:90:00:98:f5:fa:d9:de:ff:da: 39:7c:23:d8:88:80:29:a2:24:f9:8b:60:22:fc:12: 84:e3:79:85:36:6c:3a:d3:e3:86:bc:fa:ba:61:d4: f8:a0:00:8c:b5:90:af:33:24:49:6d:98:ba:a2:f8: f1:d7:9c:5c:e8:5c:94:07:c2:d5:83:7b:0d:61:0c: 02:7a:c1:55:81:8e:5c:24:20:01:4c:88:80:5f:6f: 8b:0a:f1:4f:b1:24:c3:1e:b0:fe:72:d3:bb:c6:7e: 7e:8d:a4:05:3d:7e:85:a4:2e:ab:21:73:79:6e:4a: 69:16:2b:59:35:aa:5c:15:72:fb:19:c3:95:92:42: 9a:19:49:42:36:34:16:42:6a:d1:35:80:49:5e:77: b2:1b:d3:91:41:09:82:f5:3b:b9:69:f9:02:ca:06: 83:5f:c3:33:f0:5b:a6:47:86:d2:4b:b8:6e:69:f0: 57:d9:0d:e0:92:38:da:65:2a:82:ab:81:0a:5b:ba: 28:97:5a:42:59:07:1a:ed:0b:d6:bf:e4:b9:40:e0: de:1f:0d:c1:60:42:f8:85:24:05:74:2f:4c:09:c9: 1c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AA:88:1E:27:78:40:F2:8C:04:12:F9:51:0B:90:AF:9E:7E:6D:8C X509v3 Authority Key Identifier: keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:53:dd:7d:0c:f3:a3:b0:17:30:6d:6c:57:27:7c:10:b0:c2: 4d:77:4d:7e:51:d7:8b:6e:f3:23:21:b2:bf:bc:e0:15:d2:c4: bc:ed:af:74:93:eb:ec:c2:3d:bd:56:0f:24:eb:03:87:d2:3d: 0a:d2:dd:c2:94:9d:dd:fa:54:6e:bd:86:89:a4:af:08:cf:ff: 0f:13:1b:d8:41:77:57:2e:45:02:74:46:55:c3:1c:a9:09:50: ef:11:af:66:ec:a0:52:4a:5c:9b:cb:a3:d3:8e:c7:03:f2:e8: 1d:59:a0:47:d3:c1:92:7f:51:dc:a4:3a:fa:82:13:a0:94:c5: 62:79:76:a9:21:73:f6:98:c5:e7:56:7e:02:8e:5a:b8:9b:e8: 06:91:1f:f5:49:06:3d:8b:bd:c7:53:ea:21:c4:2c:f0:4f:47: 68:e2:c0:34:8b:c8:fb:e9:29:21:5c:f2:ae:61:2d:80:69:dc: 04:79:34:76:84:0a:25:47:63:ae:55:35:73:52:ea:d6:e9:ea: ce:90:a8:8a:c7:9b:ae:a4:65:67:ff:c3:3d:d0:57:f2:33:cb: a9:84:5b:71:9d:09:b4:62:64:b7:d6:c8:db:51:7a:71:55:56: 08:45:1b:a9:75:19:b5:f1:61:92:36:10:1d:63:ed:ec:e0:fc: a0:70:ea:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWQvBZXYbYuzTT5PivYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNjIwZjMxYjQ5OTdjNzM0NWJjNjZiNDZiNDNkNjg2YmYw MDkzMWEwHhcNMjUxMjA2MDEwMTE0WhcNMjUxMjA3MDEwMTE0WjAzMTEwLwYDVQQD Eyg5OWFhODgxZTI3Nzg0MGYyOGMwNDEyZjk1MTBiOTBhZjllN2U2ZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLvKB/3jIkRhXDpr/16VXTemC1Fk Pwbfrw7dpT7/C+FI3ByQAJj1+tne/9o5fCPYiIApoiT5i2Ai/BKE43mFNmw60+OG vPq6YdT4oACMtZCvMyRJbZi6ovjx15xc6FyUB8LVg3sNYQwCesFVgY5cJCABTIiA X2+LCvFPsSTDHrD+ctO7xn5+jaQFPX6FpC6rIXN5bkppFitZNapcFXL7GcOVkkKa GUlCNjQWQmrRNYBJXneyG9ORQQmC9Tu5afkCygaDX8Mz8FumR4bSS7huafBX2Q3g kjjaZSqCq4EKW7ool1pCWQca7QvWv+S5QODeHw3BYEL4hSQFdC9MCckc3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmqiB4neEDyjAQS+VELkK+efm2MMB8GA1UdIwQY MBaAFJxiDzG0mXxzRbxmtGtD1oa/AJMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2Qt NGI4NzkzZGI3NDYwLzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2QtNGI4NzkzZGI3NDYw LzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlPdfQzz o7AXMG1sVyd8ELDCTXdNflHXi27zIyGyv7zgFdLEvO2vdJPr7MI9vVYPJOsDh9I9 CtLdwpSd3fpUbr2GiaSvCM//DxMb2EF3Vy5FAnRGVcMcqQlQ7xGvZuygUkpcm8uj 047HA/LoHVmgR9PBkn9R3KQ6+oIToJTFYnl2qSFz9pjF51Z+Ao5auJvoBpEf9UkG PYu9x1PqIcQs8E9HaOLANIvI++kpIVzyrmEtgGncBHk0doQKJUdjrlU1c1Lq1unq zpCoisebrqRlZ//DPdBX8jPLqYRbcZ0JtGJkt9bI21F6cVVWCEUbqXUZtfFhkjYQ HWPt7OD8oHDqPA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:25 2025 by rpki-client