This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft File: NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json) Hash identifier: 6TE3lLX2bpEsqht1i5Yj8AgGo9SXYzbLVMsXK6LiL5c= Subject key identifier: 6B:DC:55:C7:1E:BA:16:A7:A1:7A:EE:43:E8:00:98:7F:C7:70:95:05 Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9 Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9 Certificate serial: 019AF7D4AA98D0417CB87F6F72A8A74225A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft Manifest number: 1760 Signing time: Sun 07 Dec 2025 08:01:40 +0000 Manifest this update: Sun 07 Dec 2025 08:01:40 +0000 Manifest next update: Mon 08 Dec 2025 08:01:40 +0000 Files and hashes: 1: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: yqpCKMq34/1H03drPLY+d6bzH7usKrrKseMh7Q6iwuM=) 2: qWxHxzkwFGcxa5jSluitx-sE42Y.roa (hash: 3aDiNAN4onF/Cdaq+yTsD+jmRJ2OmMmFOaHRV5Fmhp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:aa:98:d0:41:7c:b8:7f:6f:72:a8:a7:42:25:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9 Validity Not Before: Dec 7 08:01:40 2025 GMT Not After : Dec 8 08:01:40 2025 GMT Subject: CN=6bdc55c71eba16a7a17aee43e800987fc7709505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:b5:1c:6b:2e:dc:71:ee:5b:d6:c9:b8:5d: 00:e1:22:0d:aa:fe:2d:1e:8f:48:d9:88:59:95:67: 48:18:8b:8a:1e:4f:50:72:da:74:9b:90:54:36:a1: 1e:b9:08:60:fa:cb:d0:6e:71:75:1c:4c:f9:8a:da: c5:81:22:af:98:28:e6:80:f2:5d:28:dc:1c:63:48: 10:b4:1a:f5:07:7f:5d:1b:54:80:83:6b:24:05:ac: 8c:09:1f:0b:61:22:55:8b:17:a4:fb:43:a6:8a:ee: 28:85:65:9f:a7:1e:f3:ab:6a:85:6a:92:88:52:89: 14:ea:2f:ad:17:94:be:6f:93:4b:35:31:8f:02:5c: f3:f7:ee:87:a2:04:28:fb:78:c6:f2:c4:99:c2:aa: e2:5a:d6:21:d5:1b:e3:77:f7:cc:f4:0c:f2:26:23: 1d:91:26:ff:ad:5e:0a:de:93:4a:41:82:13:b2:69: e1:28:4c:35:f3:ed:21:fd:75:9f:8b:98:90:c3:0a: 9e:ca:31:3f:c0:c6:6e:ef:39:b6:42:bf:37:eb:07: e7:e5:3a:c9:b1:09:52:dd:0a:cf:b2:bb:d0:04:11: c7:38:06:69:a9:5a:ea:60:93:a8:2a:21:67:0b:a9: 8f:79:57:1d:3a:3a:16:4a:a1:2c:64:97:da:4b:10: 12:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DC:55:C7:1E:BA:16:A7:A1:7A:EE:43:E8:00:98:7F:C7:70:95:05 X509v3 Authority Key Identifier: keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1a:26:ae:07:aa:a3:f8:69:c9:08:60:13:00:7c:09:67:9c: 5a:73:07:ca:65:d3:1d:93:9c:9c:ba:7f:47:b1:9c:d5:41:7a: 5d:fe:ae:26:92:b7:7c:ae:98:4c:c7:84:4f:68:76:d9:f5:99: ed:15:79:4e:95:56:35:88:95:80:a1:1d:72:27:e1:35:0d:b6: 85:ea:65:7c:ab:8b:b1:79:5a:b8:b6:49:e6:0a:b5:ae:28:5a: 89:88:3c:6c:83:23:81:dd:4d:d7:be:be:d4:1e:99:c8:84:58: 8b:0e:7f:e3:67:e9:ce:42:1b:eb:83:cc:d9:cc:c5:ee:9e:ab: 11:dc:95:e0:43:44:5f:52:92:28:0f:06:f7:88:da:24:62:0f: db:dd:ab:3c:e0:4d:08:0f:a2:d2:15:05:71:75:7d:a8:20:da: 04:d1:02:e4:cf:a5:d8:7d:f2:5d:2b:71:2b:6b:cd:db:4a:6e: db:d8:ba:79:5e:8d:f0:50:a5:ef:fe:28:a5:88:e2:74:7c:82: 55:46:a6:a1:60:f1:57:fe:da:fd:b6:65:9c:af:f0:03:8a:6b: 34:b0:dd:1d:01:bc:9a:60:10:fa:09:1c:23:31:3d:cd:26:8b: de:1e:3c:c0:f6:0d:61:46:53:30:21:e0:60:e6:1d:0a:61:89: 4f:86:5d:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31KqY0EF8uH9vcqinQiWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NmNhYjU5NGJiZGE5YjQ0MGZkYTdkMzk3NGNiZDQ0MWM5 OGU1YzkwHhcNMjUxMjA3MDgwMTQwWhcNMjUxMjA4MDgwMTQwWjAzMTEwLwYDVQQD Eyg2YmRjNTVjNzFlYmExNmE3YTE3YWVlNDNlODAwOTg3ZmM3NzA5NTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAC1HGsu3HHuW9bJuF0A4SINqv4t Ho9I2YhZlWdIGIuKHk9Qctp0m5BUNqEeuQhg+svQbnF1HEz5itrFgSKvmCjmgPJd KNwcY0gQtBr1B39dG1SAg2skBayMCR8LYSJVixek+0Omiu4ohWWfpx7zq2qFapKI UokU6i+tF5S+b5NLNTGPAlzz9+6HogQo+3jG8sSZwqriWtYh1Rvjd/fM9AzyJiMd kSb/rV4K3pNKQYITsmnhKEw18+0h/XWfi5iQwwqeyjE/wMZu7zm2Qr836wfn5TrJ sQlS3QrPsrvQBBHHOAZpqVrqYJOoKiFnC6mPeVcdOjoWSqEsZJfaSxAS7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvcVcceuhanoXruQ+gAmH/HcJUFMB8GA1UdIwQY MBaAFDRsq1lLvam0QP2n05dMvUQcmOXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85ZWY2NmQtMmQ1Zi00OWQ4LTkwNGMt N2ExM2E1ZWZhZjVlLzEvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy85ZWY2NmQtMmQ1Zi00OWQ4LTkwNGMtN2ExM2E1ZWZhZjVl LzEvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhomrgeq o/hpyQhgEwB8CWecWnMHymXTHZOcnLp/R7Gc1UF6Xf6uJpK3fK6YTMeET2h22fWZ 7RV5TpVWNYiVgKEdcifhNQ22heplfKuLsXlauLZJ5gq1rihaiYg8bIMjgd1N176+ 1B6ZyIRYiw5/42fpzkIb64PM2czF7p6rEdyV4ENEX1KSKA8G94jaJGIP292rPOBN CA+i0hUFcXV9qCDaBNEC5M+l2H3yXStxK2vN20pu29i6eV6N8FCl7/4opYjidHyC VUamoWDxV/7a/bZlnK/wA4prNLDdHQG8mmAQ+gkcIzE9zSaL3h48wPYNYUZTMCHg YOYdCmGJT4ZddQ== -----END CERTIFICATE-----Generated at Sun Dec 7 10:52:27 2025 by rpki-client