This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json) Hash identifier: FEG8vOhYztpR8ZiMPEYGANoysazN8C82B9ND/Rx45Pw= Subject key identifier: 1C:EA:15:9A:28:5D:22:54:55:F9:B8:9D:8B:20:D2:15:59:57:82:33 Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9 Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9 Certificate serial: 019AF19B25031D060BA14556BFF4961242CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft Manifest number: 1401 Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: b9QaepP0oxMTo3a9H8MxgSOF6ZM.roa (hash: 1vtB6IOZEJek+700nGKVkQQxvbkoR7RDVA9c6BbAbEM=) 2: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: uzRKUuxlpgU9CKwgopoF1CNG0RmzS/s78BuxHiaxbjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:25:03:1d:06:0b:a1:45:56:bf:f4:96:12:42:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=1cea159a285d225455f9b89d8b20d21559578233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:df:2f:14:a5:d2:21:c1:78:8b:46:75:a7: 6a:a0:05:56:73:8a:05:6e:04:ea:80:a0:29:67:70: 96:03:33:d2:bb:07:48:89:32:8b:49:71:61:18:db: f8:3f:8b:13:d3:2b:57:b9:f0:28:e1:17:96:66:ae: 3c:f8:49:f5:74:e3:d4:08:ef:4d:e5:c4:62:de:e8: 5f:e9:2e:16:f4:11:ad:ce:04:40:5b:b9:0a:aa:b8: 15:23:6e:c3:5a:ee:22:99:0d:5e:52:ed:a5:ee:ae: cf:f9:d4:76:e4:a1:f8:06:d6:10:44:bf:80:7e:88: 64:e1:9d:50:40:61:f8:5a:58:95:45:12:27:e6:08: 69:72:3b:96:50:9a:e0:c1:ef:d2:f1:fa:ea:af:89: aa:15:9d:7b:05:fe:92:18:3b:a7:c7:cd:69:19:d6: 04:0f:18:7a:23:5a:22:e8:7d:2c:cb:99:4c:6a:97: 20:e7:b7:48:24:d3:1d:c9:14:30:5e:98:b8:8d:2a: 57:65:28:fa:9c:9f:f2:f1:dc:d5:4f:93:96:dc:bb: 3a:01:40:7f:22:5a:f1:1d:68:99:50:1e:e4:99:19: 28:e4:e9:11:f4:9c:08:7e:27:1d:ea:6a:dc:7a:39: f7:dc:a8:77:ca:91:eb:0d:2a:d1:c1:62:96:b7:de: a5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EA:15:9A:28:5D:22:54:55:F9:B8:9D:8B:20:D2:15:59:57:82:33 X509v3 Authority Key Identifier: keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:87:c2:f1:48:af:f8:f9:98:f3:49:a4:bc:9e:8f:f9:68:ab: 83:8c:dc:af:c1:bb:e1:91:7b:e4:89:23:78:76:98:d3:24:91: 86:33:89:e1:62:51:6e:eb:b6:72:94:29:a3:4d:73:6e:22:78: 2c:38:e7:92:97:79:be:0f:36:d4:0d:b7:1b:79:40:7e:d1:ec: 4d:0f:70:07:76:46:0e:11:aa:0e:15:73:fc:40:20:6f:9d:3b: 08:c7:cf:62:a5:7a:2a:a4:a0:e2:a7:96:ae:75:55:4d:c5:24: 4e:b9:09:50:17:6f:8d:c8:2d:55:61:1b:01:19:34:72:d7:18: ac:5d:1b:fc:25:ae:a4:27:3c:c6:27:d4:4c:7b:85:cb:35:d9: 21:f5:04:25:78:37:1d:f6:a4:de:82:0a:f1:9c:89:b5:7f:ad: 3a:8b:84:87:e3:4c:62:7c:73:4a:23:1d:41:06:7e:e7:0a:66: b5:f6:5a:f8:53:b0:f9:40:6c:fa:9b:ca:0c:61:38:ff:45:9a: 5f:a5:ec:e6:9f:04:62:1a:1b:fc:bb:aa:89:da:7d:ef:18:02: 65:ac:b3:a1:bf:f4:0c:f0:da:36:2c:ea:53:35:41:0f:ec:d7: 73:48:7f:c0:58:5a:04:4d:25:8a:af:33:8f:1f:a9:3d:0e:3a: 3d:5c:30:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyUDHQYLoUVWv/SWEkLLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMDJlMDY0Yzk4YjMyMzFjM2YyMTQ4YTFjM2Q5YzM4N2Q0 ODllZTkwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD EygxY2VhMTU5YTI4NWQyMjU0NTVmOWI4OWQ4YjIwZDIxNTU5NTc4MjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqXfLxSl0iHBeItGdadqoAVWc4oF bgTqgKApZ3CWAzPSuwdIiTKLSXFhGNv4P4sT0ytXufAo4ReWZq48+En1dOPUCO9N 5cRi3uhf6S4W9BGtzgRAW7kKqrgVI27DWu4imQ1eUu2l7q7P+dR25KH4BtYQRL+A fohk4Z1QQGH4WliVRRIn5ghpcjuWUJrgwe/S8frqr4mqFZ17Bf6SGDunx81pGdYE Dxh6I1oi6H0sy5lMapcg57dIJNMdyRQwXpi4jSpXZSj6nJ/y8dzVT5OW3Ls6AUB/ IlrxHWiZUB7kmRko5OkR9JwIficd6mrcejn33Kh3ypHrDSrRwWKWt96l8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzqFZooXSJUVfm4nYsg0hVZV4IzMB8GA1UdIwQY MBaAFJ4C4GTJizIxw/IUihw9nDh9SJ7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYt NzUyNTE2ODkwZDNkLzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYtNzUyNTE2ODkwZDNk LzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4fC8Uiv +PmY80mkvJ6P+Wirg4zcr8G74ZF75IkjeHaY0ySRhjOJ4WJRbuu2cpQpo01zbiJ4 LDjnkpd5vg821A23G3lAftHsTQ9wB3ZGDhGqDhVz/EAgb507CMfPYqV6KqSg4qeW rnVVTcUkTrkJUBdvjcgtVWEbARk0ctcYrF0b/CWupCc8xifUTHuFyzXZIfUEJXg3 Hfak3oIK8ZyJtX+tOouEh+NMYnxzSiMdQQZ+5wpmtfZa+FOw+UBs+pvKDGE4/0Wa X6Xs5p8EYhob/Luqidp97xgCZayzob/0DPDaNizqUzVBD+zXc0h/wFhaBE0liq8z jx+pPQ46PVwwXA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:58 2025 by rpki-client