This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json) Hash identifier: r5EfiLJowH99a1LGRv6V0/rLcNKNFPVbyEy85x3xsXw= Subject key identifier: 16:11:3F:36:91:0A:5F:65:85:A6:77:E8:65:69:0D:6E:44:89:F7:7B Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02 Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02 Certificate serial: 019AF19BA998436ECFDC1C30541A0B232938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft Manifest number: 12CF Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: 641bt9UgOxwj+W7SDaGVqSNxf961LjNEHq7x2ItIkIM=) 2: PcqW_01nYr_g65r_pcHJ33ZMGuA.roa (hash: ldAGcbaFd4WhyCTSLv1tpLkIbH81eRDfpjEnAMP8NwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a9:98:43:6e:cf:dc:1c:30:54:1a:0b:23:29:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02 Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=16113f36910a5f6585a677e865690d6e4489f77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:11:93:7e:03:e1:97:b5:0a:86:23:9f:a0:12: 58:1d:ef:bd:8c:cf:3d:96:ed:d7:d9:29:f7:e8:dd: bb:e9:82:10:84:a3:56:81:e8:4a:13:a0:4b:84:ed: b3:76:31:34:ef:f6:fd:d6:37:5c:3b:9a:95:d5:fd: 47:61:ae:69:f6:e3:1c:b3:77:61:99:1d:5e:74:a5: e5:b3:f3:1d:df:bf:4e:3c:7e:b3:6c:12:71:73:3a: 2b:2b:22:db:b9:c1:0c:a3:30:3c:2f:70:79:a0:a5: 0f:07:54:37:04:3f:90:95:75:db:a8:dc:ae:ef:c3: 03:16:bb:ba:0c:e4:4e:26:67:a0:65:84:a6:31:80: 2b:c6:86:ce:cc:d8:36:16:3d:34:8d:d7:fa:03:d4: 19:8d:14:11:f6:a8:46:c4:dc:c1:c0:b3:3e:9c:ca: 41:55:2d:37:82:c3:b9:58:09:92:24:77:df:ff:b9: ac:35:0b:d4:c7:1e:af:92:ac:24:43:cc:96:dc:4b: 63:44:67:a6:2a:15:43:3f:92:70:90:7b:00:fb:db: 25:97:ab:12:64:43:ad:ff:95:55:69:8a:50:3a:51: b3:c1:41:46:66:b0:92:16:92:1c:8d:98:2c:60:f1: 15:57:75:48:46:18:55:5d:18:be:43:32:30:04:82: c1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:11:3F:36:91:0A:5F:65:85:A6:77:E8:65:69:0D:6E:44:89:F7:7B X509v3 Authority Key Identifier: keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c7:ca:59:60:9d:00:60:64:11:dc:df:7f:2c:fc:ee:83:08: 75:f9:74:38:e9:42:4b:46:6f:ee:02:4e:50:e3:18:9c:fb:9a: bb:1c:65:bf:59:a6:79:fc:12:c2:dd:d4:6f:3e:8d:75:6c:83: cc:e1:38:10:d3:ac:af:11:7d:26:ac:e2:71:95:64:ee:86:75: 47:cf:e7:9b:33:da:2d:ab:d0:f9:6c:89:65:15:8f:cb:e7:39: 8a:75:b3:1e:93:56:0e:7b:a6:f2:03:f7:01:c7:8f:db:0f:1f: 5b:aa:2f:f0:d0:5e:77:90:5d:0c:5e:44:c4:42:48:23:24:14: 96:9a:16:b1:b3:ec:eb:8f:41:4b:b2:53:f3:a6:9e:3c:85:ca: 38:15:f9:ee:47:0f:ba:43:94:97:12:5c:ad:20:88:f6:05:52: 26:0d:e1:24:1b:99:5e:79:22:20:c0:c1:c4:48:c0:ab:e9:fd: 41:e7:e9:27:17:da:2d:a0:e7:47:50:63:d1:ad:53:f4:ed:08: c2:5c:ca:fd:89:52:b0:5e:36:cc:70:50:0f:3d:f3:38:e1:20: c4:ec:6e:0b:fa:50:98:4d:bd:d2:3d:39:d0:6a:df:74:43:c8: 8e:12:1e:9e:aa:3d:5b:20:fa:52:f1:1c:b2:d8:f1:35:6a:22: 57:d3:76:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6mYQ27P3BwwVBoLIyk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MDAwZWJlZWQyNDJiOTU2NGFkYzk1NDg1MzIzYjk2YmQ2 ZjVjMDIwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD EygxNjExM2YzNjkxMGE1ZjY1ODVhNjc3ZTg2NTY5MGQ2ZTQ0ODlmNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhGTfgPhl7UKhiOfoBJYHe+9jM89 lu3X2Sn36N276YIQhKNWgehKE6BLhO2zdjE07/b91jdcO5qV1f1HYa5p9uMcs3dh mR1edKXls/Md379OPH6zbBJxczorKyLbucEMozA8L3B5oKUPB1Q3BD+QlXXbqNyu 78MDFru6DOROJmegZYSmMYArxobOzNg2Fj00jdf6A9QZjRQR9qhGxNzBwLM+nMpB VS03gsO5WAmSJHff/7msNQvUxx6vkqwkQ8yW3EtjRGemKhVDP5JwkHsA+9sll6sS ZEOt/5VVaYpQOlGzwUFGZrCSFpIcjZgsYPEVV3VIRhhVXRi+QzIwBILBxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYRPzaRCl9lhaZ36GVpDW5Eifd7MB8GA1UdIwQY MBaAFDYADr7tJCuVZK3JVIUyO5a9b1wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmdBT3Z1MGtLNVZrcmNsVWhUSTdscjF2WEFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNzdlMWEtNjYzYS00NDViLThlNjEt MzcwMTUwYjY2OWU0LzEvTmdBT3Z1MGtLNVZrcmNsVWhUSTdscjF2WEFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iNzdlMWEtNjYzYS00NDViLThlNjEtMzcwMTUwYjY2OWU0 LzEvTmdBT3Z1MGtLNVZrcmNsVWhUSTdscjF2WEFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMfKWWCd AGBkEdzffyz87oMIdfl0OOlCS0Zv7gJOUOMYnPuauxxlv1mmefwSwt3Ubz6NdWyD zOE4ENOsrxF9JqzicZVk7oZ1R8/nmzPaLavQ+WyJZRWPy+c5inWzHpNWDnum8gP3 AceP2w8fW6ov8NBed5BdDF5ExEJIIyQUlpoWsbPs649BS7JT86aePIXKOBX57kcP ukOUlxJcrSCI9gVSJg3hJBuZXnkiIMDBxEjAq+n9QefpJxfaLaDnR1Bj0a1T9O0I wlzK/YlSsF42zHBQDz3zOOEgxOxuC/pQmE290j050GrfdEPIjhIenqo9WyD6UvEc stjxNWoiV9N2FA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:56 2025 by rpki-client