This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft File: NGbkl-i6koMIR7TYtnEDJdI72oU.mft (raw, json) Hash identifier: Em4PjJBR9F9qXBbFrPMwtqoEbOs2RtCpnYUdbG7YTVY= Subject key identifier: 55:6E:2A:99:4F:59:AF:E7:2A:18:8C:0E:DB:E0:05:FE:EA:00:E5:1A Authority key identifier: 34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85 Certificate issuer: /CN=3466e497e8ba92830847b4d8b6710325d23bda85 Certificate serial: 019AF1D1C0E48ECEEE44AEB25EBD1788490B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft Manifest number: 07C0 Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: NGbkl-i6koMIR7TYtnEDJdI72oU.crl (hash: UOg0b9X7UQayLKYO5TGc02+RahkNCTG/AwaifAMiaRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c0:e4:8e:ce:ee:44:ae:b2:5e:bd:17:88:49:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3466e497e8ba92830847b4d8b6710325d23bda85 Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=556e2a994f59afe72a188c0edbe005feea00e51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:b5:da:44:27:28:a8:b0:95:2c:1b:2d:31: 69:6e:f8:5b:e4:73:49:97:c4:89:18:e2:8f:19:f6: 54:cf:0a:92:23:e4:3d:aa:4e:ad:5d:ff:49:34:97: 42:0a:de:67:72:90:e8:43:f1:57:6f:df:93:4b:27: af:a3:05:ed:3f:cf:b5:ff:46:47:24:a4:ae:0f:62: 61:12:a1:72:4b:0e:8d:e5:84:a8:f0:4e:f6:1f:d4: 86:19:93:cd:1f:bc:27:86:7e:c7:b4:c2:18:fa:83: 1e:f1:c5:7b:54:f3:56:bd:7c:58:72:58:9f:46:ca: 51:1d:25:e7:51:51:7d:32:45:da:31:26:a3:6a:fe: 2f:8d:60:00:ad:3a:1c:72:8c:32:70:4f:5f:30:4c: 5c:fd:a4:7e:8d:74:45:a0:f6:50:23:32:1f:68:06: c4:02:00:6d:3a:93:0d:c1:9f:5b:3b:5e:62:70:2a: c3:44:5a:e9:1e:6b:67:bf:7f:b6:cf:89:23:73:c4: 1e:ac:cf:48:40:a2:f9:5b:95:a3:16:f6:f2:a5:30: 3d:70:05:67:70:44:c8:cb:1f:00:8f:5e:1a:df:8d: 7a:a6:03:49:c9:69:69:27:21:5c:bc:80:02:ef:2b: 62:1c:d3:0e:8b:2a:d4:f9:25:4c:68:91:84:b8:0a: 43:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6E:2A:99:4F:59:AF:E7:2A:18:8C:0E:DB:E0:05:FE:EA:00:E5:1A X509v3 Authority Key Identifier: keyid:34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:3c:53:3f:1c:93:8f:14:99:b7:43:3d:c1:67:2d:1d:a4:60: 16:72:bf:3c:9c:a7:85:c4:7b:22:fe:ac:39:df:62:00:f2:72: c3:27:79:73:5d:0b:c6:7f:65:ae:72:d8:d2:69:b7:75:a4:e9: 7a:1d:17:d4:8e:e7:a1:b3:28:14:37:4b:b6:d6:78:f4:cb:44: 8c:e5:c7:00:2f:fc:98:a8:4d:65:d8:26:7b:a4:19:33:7a:be: 8b:bb:73:f3:49:ed:a6:ac:60:24:83:54:b3:bb:79:0b:62:d9: ce:77:29:c4:30:54:2b:4c:1f:fb:3e:7c:9f:32:71:ea:bb:d7: d3:13:c9:e1:c1:ba:aa:2e:7b:b8:34:a7:c5:03:ca:04:d4:53: 3d:99:07:e2:f5:2b:78:bd:f3:73:01:d6:f3:1d:fd:f3:ea:a1: 2b:cf:bd:eb:57:05:99:22:ae:60:8b:7c:c8:22:9a:f0:d8:0a: d7:10:93:28:19:5a:25:3d:22:7e:6c:cc:4e:b9:46:f9:3f:82: 7c:6c:bd:ca:d7:8c:91:73:82:51:94:bd:fa:4e:2b:e6:26:c0: b1:ea:c9:da:61:9b:03:67:f4:c6:16:13:90:37:07:b2:30:0e: ef:37:72:b9:92:65:28:e7:25:a9:6c:95:f2:32:84:c4:7a:4e: a9:55:f4:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cDkjs7uRK6yXr0XiEkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NjZlNDk3ZThiYTkyODMwODQ3YjRkOGI2NzEwMzI1ZDIz YmRhODUwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD Eyg1NTZlMmE5OTRmNTlhZmU3MmExODhjMGVkYmUwMDVmZWVhMDBlNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutC12kQnKKiwlSwbLTFpbvhb5HNJ l8SJGOKPGfZUzwqSI+Q9qk6tXf9JNJdCCt5ncpDoQ/FXb9+TSyevowXtP8+1/0ZH JKSuD2JhEqFySw6N5YSo8E72H9SGGZPNH7wnhn7HtMIY+oMe8cV7VPNWvXxYclif RspRHSXnUVF9MkXaMSajav4vjWAArToccowycE9fMExc/aR+jXRFoPZQIzIfaAbE AgBtOpMNwZ9bO15icCrDRFrpHmtnv3+2z4kjc8QerM9IQKL5W5WjFvbypTA9cAVn cETIyx8Aj14a3416pgNJyWlpJyFcvIAC7ytiHNMOiyrU+SVMaJGEuApD4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVuKplPWa/nKhiMDtvgBf7qAOUaMB8GA1UdIwQY MBaAFDRm5JfoupKDCEe02LZxAyXSO9qFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80NDg0NmQtNTVkMC00YTIwLWJkMTEt ZGNhZDA4ZjJmMjNmLzEvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80NDg0NmQtNTVkMC00YTIwLWJkMTEtZGNhZDA4ZjJmMjNm LzEvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDxTPxyT jxSZt0M9wWctHaRgFnK/PJynhcR7Iv6sOd9iAPJywyd5c10Lxn9lrnLY0mm3daTp eh0X1I7nobMoFDdLttZ49MtEjOXHAC/8mKhNZdgme6QZM3q+i7tz80ntpqxgJINU s7t5C2LZzncpxDBUK0wf+z58nzJx6rvX0xPJ4cG6qi57uDSnxQPKBNRTPZkH4vUr eL3zcwHW8x398+qhK8+961cFmSKuYIt8yCKa8NgK1xCTKBlaJT0ifmzMTrlG+T+C fGy9yteMkXOCUZS9+k4r5ibAserJ2mGbA2f0xhYTkDcHsjAO7zdyuZJlKOclqWyV 8jKExHpOqVX0RQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:18 2025 by rpki-client