This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json) Hash identifier: Clu2TNVxqCXkoVEwkErU69rZwo8Mjd4Bz+ureYcbbWc= Subject key identifier: F7:AB:0F:9F:FB:77:1F:8D:76:BC:47:98:B7:EE:54:9B:16:AC:44:68 Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4 Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4 Certificate serial: 019B3EDADE76055FEB06D09DAB78BB62B9F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft Manifest number: 0C42 Signing time: Sun 21 Dec 2025 03:01:29 +0000 Manifest this update: Sun 21 Dec 2025 03:01:29 +0000 Manifest next update: Mon 22 Dec 2025 03:01:29 +0000 Files and hashes: 1: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: WbcCC7Gs3uiOJEiYIhBP+xn0T2Y74eKUc1dQQk3G3jk=) 2: vOtFwLdGF7PMmv2kt6Y0Mhv9xgc.roa (hash: 37qkO8fAeK5+9nWdH5nkM409M5On3UG7sBmDzTvbUVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:de:76:05:5f:eb:06:d0:9d:ab:78:bb:62:b9:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4 Validity Not Before: Dec 21 03:01:29 2025 GMT Not After : Dec 22 03:01:29 2025 GMT Subject: CN=f7ab0f9ffb771f8d76bc4798b7ee549b16ac4468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:6b:1a:8a:c4:78:be:33:00:2f:c2:0f:02: 12:60:52:13:12:6a:56:87:b8:1c:ae:a5:a8:ac:0e: bf:52:90:9d:09:8a:d6:72:51:8a:7c:1e:41:5b:52: c6:1b:1f:f2:af:e8:25:5e:8c:2d:34:65:8b:93:c1: c2:57:5a:02:3b:64:46:d6:e0:3b:0b:ff:65:04:3b: b0:d4:b5:cf:07:de:b5:dc:ac:4a:08:99:08:8a:db: 64:d7:2e:31:c9:50:ba:8c:61:d4:80:89:95:c7:41: fc:dc:1a:dc:6b:28:44:82:7b:c0:29:90:fc:bc:67: 25:b0:da:4f:e2:a0:b5:6a:f7:59:86:ac:ba:58:9a: 98:ce:21:0f:79:47:d3:6f:03:7b:4b:88:51:fa:28: e6:72:6f:a9:7c:44:5f:8b:ce:16:aa:5a:f3:a0:e1: 4d:67:82:b9:4d:45:c9:40:8d:3b:18:e6:e1:28:af: 35:e6:08:02:34:fc:81:78:11:3c:f4:46:a9:7f:75: bb:14:a5:a2:bb:e4:d7:b1:47:d2:ce:b3:7e:d0:90: ab:de:29:64:78:21:1e:b4:a6:1e:eb:34:8d:9f:d0: ef:80:9b:d2:d3:18:19:40:ea:c7:79:e5:a2:d3:7f: 8f:43:2f:c7:bc:af:4d:f4:28:86:a9:8e:57:06:45: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AB:0F:9F:FB:77:1F:8D:76:BC:47:98:B7:EE:54:9B:16:AC:44:68 X509v3 Authority Key Identifier: keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:59:a3:ba:74:18:08:d1:e3:25:b9:d7:e9:d4:29:51:4f:83: 2d:8a:09:fa:4b:02:c5:b1:9d:b2:07:56:bb:8d:26:a2:51:23: 97:64:01:fc:c5:f6:11:a9:76:bd:c6:43:02:d9:1a:97:d9:e7: b5:9a:5c:44:68:df:5f:94:2e:bf:ff:a0:f4:1a:fa:38:2f:6e: e6:93:27:3f:b1:17:4f:48:39:76:6b:56:b1:47:dd:e5:58:4a: 93:66:02:80:e2:ef:81:e0:7c:0e:45:44:37:77:34:f2:dd:15: 57:5a:ba:f4:0c:c8:a9:0a:62:da:06:f7:88:7a:09:86:4f:1e: 6f:7c:d2:3a:99:a8:26:a6:d7:4e:86:1d:5a:18:1f:50:48:71: 2c:1c:43:12:67:f3:42:c1:0c:9f:f8:64:17:52:54:ce:b5:aa: 79:ac:8b:ca:01:00:c6:a5:97:f7:63:84:45:e4:00:08:75:4c: 49:b4:cf:d1:78:c1:6d:e3:7f:a5:a8:44:a1:56:d4:06:4e:3b: df:98:dc:28:80:c0:0c:39:aa:4c:cf:84:85:7c:70:f1:b9:de: a8:f9:3b:2d:44:e9:db:ed:42:0a:ac:6d:1e:1c:df:8c:39:37: 29:34:8b:63:a1:b5:d7:c9:7a:e0:73:6d:bf:b8:63:44:b2:48: 33:8c:2d:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2t52BV/rBtCdq3i7Yrn3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMGExMWE2YjFkMTg5NjU3YzdmYjk2ZWMxNDU4YmFmY2Ex ODY0ZjQwHhcNMjUxMjIxMDMwMTI5WhcNMjUxMjIyMDMwMTI5WjAzMTEwLwYDVQQD EyhmN2FiMGY5ZmZiNzcxZjhkNzZiYzQ3OThiN2VlNTQ5YjE2YWM0NDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdRrGorEeL4zAC/CDwISYFITEmpW h7gcrqWorA6/UpCdCYrWclGKfB5BW1LGGx/yr+glXowtNGWLk8HCV1oCO2RG1uA7 C/9lBDuw1LXPB9613KxKCJkIittk1y4xyVC6jGHUgImVx0H83BrcayhEgnvAKZD8 vGclsNpP4qC1avdZhqy6WJqYziEPeUfTbwN7S4hR+ijmcm+pfERfi84WqlrzoOFN Z4K5TUXJQI07GObhKK815ggCNPyBeBE89Eapf3W7FKWiu+TXsUfSzrN+0JCr3ilk eCEetKYe6zSNn9DvgJvS0xgZQOrHeeWi03+PQy/HvK9N9CiGqY5XBkW+bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPerD5/7dx+NdrxHmLfuVJsWrERoMB8GA1UdIwQY MBaAFJ4KEaax0YllfH+5bsFFi6/KGGT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xY2RhY2UtNGUwMC00NjlhLThjNTAt NThjYjgzMDg3NWY1LzEvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8xY2RhY2UtNGUwMC00NjlhLThjNTAtNThjYjgzMDg3NWY1 LzEvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVmjunQY CNHjJbnX6dQpUU+DLYoJ+ksCxbGdsgdWu40molEjl2QB/MX2Eal2vcZDAtkal9nn tZpcRGjfX5Quv/+g9Br6OC9u5pMnP7EXT0g5dmtWsUfd5VhKk2YCgOLvgeB8DkVE N3c08t0VV1q69AzIqQpi2gb3iHoJhk8eb3zSOpmoJqbXToYdWhgfUEhxLBxDEmfz QsEMn/hkF1JUzrWqeayLygEAxqWX92OEReQACHVMSbTP0XjBbeN/pahEoVbUBk47 35jcKIDADDmqTM+EhXxw8bneqPk7LUTp2+1CCqxtHhzfjDk3KTSLY6G118l64HNt v7hjRLJIM4wtjA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:42:10 2025 by rpki-client