This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft File: NgqWAeAvgSjvZG9VlTNuCleRfK8.mft (raw, json) Hash identifier: cDr3eNvjfUaJ42V2QOO8aH9Tin0EpTgJwvh1FFwefQo= Subject key identifier: 25:CD:76:7C:8A:81:95:77:D3:84:DC:8D:95:F1:9B:A1:50:D7:A4:0D Authority key identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF Certificate issuer: /CN=360a9601e02f8128ef646f5595336e0a57917caf Certificate serial: 019AF389ADDCA8473AFB09F06887AEE468D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft Manifest number: 021C Signing time: Sat 06 Dec 2025 12:01:17 +0000 Manifest this update: Sat 06 Dec 2025 12:01:17 +0000 Manifest next update: Sun 07 Dec 2025 12:01:17 +0000 Files and hashes: 1: NgqWAeAvgSjvZG9VlTNuCleRfK8.crl (hash: 1W/WUzxuj8P2vQi+OoqVvc+gWjXfJqA/0jqxTUW03Yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ad:dc:a8:47:3a:fb:09:f0:68:87:ae:e4:68:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=360a9601e02f8128ef646f5595336e0a57917caf Validity Not Before: Dec 6 12:01:17 2025 GMT Not After : Dec 7 12:01:17 2025 GMT Subject: CN=25cd767c8a819577d384dc8d95f19ba150d7a40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:3e:5a:b5:7f:e0:21:27:6a:6b:36:bf:8b: f6:06:04:a5:d4:11:c1:b7:f1:11:8a:5c:42:b6:b6: 04:ac:39:cc:26:ff:0f:25:48:ab:51:1e:42:e7:d3: a5:13:91:8b:76:c6:fe:7b:4c:f7:da:16:9e:8a:ae: 88:55:d0:9e:b8:7e:05:6e:02:fc:44:ba:66:9c:c0: fe:f8:40:5b:c1:14:10:30:f9:67:57:95:6e:e7:62: b9:5c:0a:c1:a7:9f:fc:42:32:9e:89:66:a8:ed:04: 95:cb:8d:1e:1f:7b:7f:27:a5:f6:fc:8a:4f:fe:63: b4:fb:44:72:d8:ae:94:1c:be:9c:11:bc:7c:91:5d: c9:0f:e0:7f:9c:d5:a2:dc:c0:d4:25:99:b6:e0:66: 67:c6:31:41:89:fa:3a:26:fd:f4:be:5f:10:52:ce: 62:6e:e3:07:01:b4:51:28:d3:79:23:93:16:12:cc: 63:d9:d7:c3:b6:47:26:22:ba:37:1d:19:93:4d:21: 34:dc:97:ef:7f:b1:b1:9b:be:1c:b6:72:f7:df:00: 51:ce:b2:6e:3a:b0:dd:d9:fc:de:81:a1:96:6e:5a: 0c:01:60:09:65:10:86:a1:89:07:35:12:33:cf:8e: 45:aa:b4:0a:59:dd:7d:f1:5c:2b:72:5f:04:c6:c4: d8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CD:76:7C:8A:81:95:77:D3:84:DC:8D:95:F1:9B:A1:50:D7:A4:0D X509v3 Authority Key Identifier: keyid:36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fe:43:08:70:8b:04:2b:3c:da:19:b4:2f:b6:1e:22:89:3e: 50:42:3b:28:20:8a:3c:e6:46:01:8b:4a:2f:f2:5b:65:e3:44: 0a:91:57:b4:f2:44:c1:70:38:69:b7:8a:05:0a:1d:d0:e1:98: 1e:be:c0:d3:a3:69:27:51:9d:cc:f1:5c:70:70:30:99:8e:2d: 41:c4:61:1a:6c:e2:1e:ce:4a:ae:a4:5f:39:df:61:0f:44:58: 00:17:fb:9e:97:ec:94:39:c4:14:32:16:20:d1:f4:96:13:e0: 3f:2c:c0:f1:8f:0b:84:04:8a:dd:5e:33:40:b6:04:41:aa:2b: 9a:93:02:77:48:92:6b:4d:b8:78:81:46:27:06:12:43:a1:f7: 2b:21:67:cd:18:8d:c4:96:32:7e:e5:1f:e2:67:8f:01:42:23: 30:38:d6:36:eb:8f:73:e8:9a:37:e2:c8:9a:a7:56:6a:d9:c1: c8:c8:91:11:16:a8:55:5e:f9:f3:21:6e:fd:00:7a:1d:a3:9d: 7a:17:62:f0:a3:82:c6:de:4d:87:23:1a:e9:17:fe:cd:87:e0: 5a:f1:1a:8f:85:71:25:da:74:22:f5:1e:72:0b:a5:d7:ed:d6: 77:4b:bf:6c:60:37:92:04:47:f2:47:61:29:67:90:eb:84:3e: f0:02:a2:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzia3cqEc6+wnwaIeu5GjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MGE5NjAxZTAyZjgxMjhlZjY0NmY1NTk1MzM2ZTBhNTc5 MTdjYWYwHhcNMjUxMjA2MTIwMTE3WhcNMjUxMjA3MTIwMTE3WjAzMTEwLwYDVQQD EygyNWNkNzY3YzhhODE5NTc3ZDM4NGRjOGQ5NWYxOWJhMTUwZDdhNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ0+WrV/4CEnams2v4v2BgSl1BHB t/ERilxCtrYErDnMJv8PJUirUR5C59OlE5GLdsb+e0z32haeiq6IVdCeuH4FbgL8 RLpmnMD++EBbwRQQMPlnV5Vu52K5XArBp5/8QjKeiWao7QSVy40eH3t/J6X2/IpP /mO0+0Ry2K6UHL6cEbx8kV3JD+B/nNWi3MDUJZm24GZnxjFBifo6Jv30vl8QUs5i buMHAbRRKNN5I5MWEsxj2dfDtkcmIro3HRmTTSE03Jfvf7Gxm74ctnL33wBRzrJu OrDd2fzegaGWbloMAWAJZRCGoYkHNRIzz45FqrQKWd198Vwrcl8ExsTYiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXNdnyKgZV304TcjZXxm6FQ16QNMB8GA1UdIwQY MBaAFDYKlgHgL4Eo72RvVZUzbgpXkXyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jM2NhODYtM2U3Ni00OGM0LTk4YWMt YzJkMDAzNDIyMzVjLzEvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9jM2NhODYtM2U3Ni00OGM0LTk4YWMtYzJkMDAzNDIyMzVj LzEvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/5DCHCL BCs82hm0L7YeIok+UEI7KCCKPOZGAYtKL/JbZeNECpFXtPJEwXA4abeKBQod0OGY Hr7A06NpJ1GdzPFccHAwmY4tQcRhGmziHs5KrqRfOd9hD0RYABf7npfslDnEFDIW INH0lhPgPyzA8Y8LhASK3V4zQLYEQaormpMCd0iSa024eIFGJwYSQ6H3KyFnzRiN xJYyfuUf4mePAUIjMDjWNuuPc+iaN+LImqdWatnByMiRERaoVV758yFu/QB6HaOd ehdi8KOCxt5NhyMa6Rf+zYfgWvEaj4VxJdp0IvUecgul1+3Wd0u/bGA3kgRH8kdh KWeQ64Q+8AKiUA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:33:53 2025 by rpki-client