This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json) Hash identifier: 7euhQgKPP/NeuSJoOq0B/+NEbSjfcEbDgm7JaB2G2ts= Subject key identifier: A8:AF:5E:ED:AF:A9:30:29:02:A5:BC:5C:67:F0:46:87:68:5D:CF:FA Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70 Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270 Certificate serial: 019AF0F5CCBACB2EBE3491123821ADB34961 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft Manifest number: 0647 Signing time: Sat 06 Dec 2025 00:00:31 +0000 Manifest this update: Sat 06 Dec 2025 00:00:31 +0000 Manifest next update: Sun 07 Dec 2025 00:00:31 +0000 Files and hashes: 1: Apq4Tu4C58xcWMKMM4IqdYmdkdM.roa (hash: QAVqy0VawV5+3T0dTssniGX3DyrARSWBrdF9GLAoezA=) 2: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: 0tc13cHLf7G/veTQygoJgmoF+nDjT2yclu1Vh3diwkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:cc:ba:cb:2e:be:34:91:12:38:21:ad:b3:49:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270 Validity Not Before: Dec 6 00:00:31 2025 GMT Not After : Dec 7 00:00:31 2025 GMT Subject: CN=a8af5eedafa9302902a5bc5c67f04687685dcffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:85:08:f6:1e:52:51:6f:05:31:3c:ff:0a:1b: 97:31:9c:e6:9b:b2:b0:49:21:a8:28:60:ab:43:d1: f3:ea:72:af:a3:c0:e9:19:b1:c8:37:e4:25:b5:75: 5b:d1:a3:5d:75:f0:7c:fa:3a:98:7f:17:07:3a:8f: 39:ba:15:e5:90:84:72:22:c1:20:7e:d3:49:7e:3f: db:85:e2:3e:dd:4d:9c:a0:21:b5:f5:d5:2e:b9:66: d8:cb:0b:f1:b0:ad:bb:26:22:00:d2:f8:c8:61:3b: 25:ff:ff:50:3d:b7:d9:e3:ef:52:59:f2:8d:98:8e: 70:ea:86:f2:79:a4:06:80:ac:35:18:eb:66:41:a6: c0:15:19:71:a7:25:7a:ab:78:2e:ac:28:a4:87:a4: 2a:11:b6:0c:4e:2d:bd:28:30:fb:8f:a5:24:71:b8: eb:6e:35:2a:a9:6b:fc:01:2f:0c:4e:50:2d:19:db: 34:50:b5:7d:d0:12:48:a0:75:a6:58:31:f4:81:f0: a8:d4:d4:1c:3b:45:98:48:e8:74:6b:25:5b:95:3a: 8e:7a:21:d9:73:d6:9f:fc:91:0e:0f:25:da:33:dd: 37:57:1c:eb:03:8f:81:4f:e2:34:a8:7f:39:c2:1f: 97:96:e7:ed:dc:86:f9:12:fc:4d:d0:c2:a0:29:37: 2b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AF:5E:ED:AF:A9:30:29:02:A5:BC:5C:67:F0:46:87:68:5D:CF:FA X509v3 Authority Key Identifier: keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:70:7a:1e:16:eb:61:f6:ae:96:5d:a6:85:cd:0f:a9:2e:30: 8d:4b:a5:a4:97:bc:d2:76:c6:42:83:a8:6b:96:7a:70:9c:8c: 5d:ff:75:dc:f0:37:a9:59:49:f2:80:98:f4:7f:a0:78:65:bc: 09:1b:f7:c8:4d:e5:2d:ef:43:0b:72:8c:40:5f:a8:64:a6:b5: bf:08:b8:aa:a9:9f:ed:21:13:c7:70:73:6e:71:0b:e9:a1:f4: f8:83:74:09:76:09:21:7d:9c:48:b2:1b:c4:d0:52:41:7f:22: 9d:d7:54:f9:ea:b4:1d:0d:1f:ed:bb:7c:f3:8f:4f:68:e6:95: 7e:30:b0:22:57:2b:b3:dc:ce:cf:1b:22:cf:39:6f:02:1a:da: e9:10:13:50:48:a2:81:81:b8:60:3f:de:d1:2b:b0:38:ac:96: ce:4a:4d:c1:c6:97:28:f4:e1:8f:61:78:9c:23:b0:e8:ef:9e: f1:e5:98:e7:dc:a0:55:e4:a1:f6:cd:56:42:f9:aa:a9:15:57: d2:cf:2a:ec:58:d6:83:39:47:27:c9:64:f5:49:a0:ce:be:30: 13:40:ac:f9:fe:93:83:00:e0:42:b2:19:4c:f9:ce:3c:6f:ed: 22:47:1d:af:6e:cb:e5:5b:e0:db:6e:e8:03:0d:a6:95:7d:aa: 17:9e:b9:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cy6yy6+NJESOCGts0lhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NjQ3NGEzM2MwNTFkMTcxNTJiMjEzMjJjY2Y0ZmYzODA4 YjQyNzAwHhcNMjUxMjA2MDAwMDMxWhcNMjUxMjA3MDAwMDMxWjAzMTEwLwYDVQQD EyhhOGFmNWVlZGFmYTkzMDI5MDJhNWJjNWM2N2YwNDY4NzY4NWRjZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4UI9h5SUW8FMTz/ChuXMZzmm7Kw SSGoKGCrQ9Hz6nKvo8DpGbHIN+QltXVb0aNddfB8+jqYfxcHOo85uhXlkIRyIsEg ftNJfj/bheI+3U2coCG19dUuuWbYywvxsK27JiIA0vjIYTsl//9QPbfZ4+9SWfKN mI5w6obyeaQGgKw1GOtmQabAFRlxpyV6q3gurCikh6QqEbYMTi29KDD7j6Ukcbjr bjUqqWv8AS8MTlAtGds0ULV90BJIoHWmWDH0gfCo1NQcO0WYSOh0ayVblTqOeiHZ c9af/JEODyXaM903VxzrA4+BT+I0qH85wh+Xluft3Ib5EvxN0MKgKTcrlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKivXu2vqTApAqW8XGfwRodoXc/6MB8GA1UdIwQY MBaAFDRkdKM8BR0XFSshMizPT/OAi0JwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkdSMG96d0ZIUmNWS3lFeUxNOVA4NENMUW5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8yYjlhNzItNjE4Ni00MTU0LWFlM2It MDE1MjFlNjU4ZTk5LzEvTkdSMG96d0ZIUmNWS3lFeUxNOVA4NENMUW5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8yYjlhNzItNjE4Ni00MTU0LWFlM2ItMDE1MjFlNjU4ZTk5 LzEvTkdSMG96d0ZIUmNWS3lFeUxNOVA4NENMUW5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXB6Hhbr Yfaull2mhc0PqS4wjUulpJe80nbGQoOoa5Z6cJyMXf913PA3qVlJ8oCY9H+geGW8 CRv3yE3lLe9DC3KMQF+oZKa1vwi4qqmf7SETx3BzbnEL6aH0+IN0CXYJIX2cSLIb xNBSQX8inddU+eq0HQ0f7bt8849PaOaVfjCwIlcrs9zOzxsizzlvAhra6RATUEii gYG4YD/e0SuwOKyWzkpNwcaXKPThj2F4nCOw6O+e8eWY59ygVeSh9s1WQvmqqRVX 0s8q7FjWgzlHJ8lk9Umgzr4wE0Cs+f6TgwDgQrIZTPnOPG/tIkcdr27L5Vvg227o Aw2mlX2qF5655g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:24 2025 by rpki-client