This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft File: R1Ng86GS3KodPRlNtkwCVMN0vUY.mft (raw, json) Hash identifier: wxLwUs+vEROjerAufAnrlvkXVCoN9LkfD/6t4/l7yII= Subject key identifier: DC:9A:9B:C9:88:8A:17:E0:30:6A:44:10:89:7A:DC:99:B2:35:85:5F Authority key identifier: 47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46 Certificate issuer: /CN=475360f3a192dcaa1d3d194db64c0254c374bd46 Certificate serial: 019B3E355602D73F7CE0772E97D03E135684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft Manifest number: 0159 Signing time: Sun 21 Dec 2025 00:00:41 +0000 Manifest this update: Sun 21 Dec 2025 00:00:41 +0000 Manifest next update: Mon 22 Dec 2025 00:00:41 +0000 Files and hashes: 1: LkJWDbjbslz0nNAtvCL992PnNAo.roa (hash: RL1MW6ZhRKLWTzPdhCcY/dLPWGU6pPW/YpPEx5flQPg=) 2: R1Ng86GS3KodPRlNtkwCVMN0vUY.crl (hash: H/kSMmMAOUZumealMp1WcOp2fQzXWTgXZRvTKkQCJTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:56:02:d7:3f:7c:e0:77:2e:97:d0:3e:13:56:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475360f3a192dcaa1d3d194db64c0254c374bd46 Validity Not Before: Dec 21 00:00:41 2025 GMT Not After : Dec 22 00:00:41 2025 GMT Subject: CN=dc9a9bc9888a17e0306a4410897adc99b235855f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ef:00:de:41:72:7c:42:cd:7f:8a:4b:01:6c: ee:2a:c5:57:2b:8d:24:1d:0b:ca:45:a2:dc:42:27: 1d:a0:7a:5c:77:cb:5b:71:05:0d:0f:bf:d3:d7:9d: 5e:4d:30:c2:56:79:4a:d0:a9:e9:f9:31:65:7f:1b: e0:79:b7:b6:b3:b4:33:c3:ca:5f:99:9a:49:7e:ee: bc:27:54:dd:14:f6:c7:88:50:91:f9:a4:0c:cb:eb: 25:c1:f4:dc:56:d1:da:29:27:03:f7:74:ee:2c:ba: 65:db:dd:85:d2:44:db:97:d2:be:a4:ad:ac:f3:1a: b9:a1:ce:9a:ff:8e:eb:00:bf:c9:36:65:6f:3d:53: 8e:a4:6c:10:91:55:bf:c6:f2:e0:d3:a0:5a:26:58: 53:74:fd:07:d9:55:ba:1b:a7:35:9f:92:a1:bb:49: c5:49:1d:02:33:32:47:17:ea:17:4c:9d:9d:9f:6a: 6d:7b:e0:cc:18:03:13:c0:fe:1c:a2:37:39:2b:4d: c8:c8:22:4c:a0:6f:e4:e7:d4:f7:94:07:ad:6e:0e: 30:6d:9e:f5:f9:79:ee:9a:18:31:52:6e:91:68:14: 0b:cd:9e:30:6f:03:d7:c8:9e:10:8a:46:9d:b9:58: 06:a1:f6:3a:c5:03:15:69:2a:63:4b:8f:47:06:61: f6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9A:9B:C9:88:8A:17:E0:30:6A:44:10:89:7A:DC:99:B2:35:85:5F X509v3 Authority Key Identifier: keyid:47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:08:f6:73:c1:98:c5:e3:29:e5:b1:50:24:91:9e:1f:61:3c: 18:4e:9e:f2:53:31:80:26:88:f2:bc:30:d6:32:1e:52:2c:0d: 34:47:68:17:22:a4:0f:2b:41:55:27:d3:df:a7:21:41:8b:39: 16:e2:de:c5:af:06:cd:8b:f1:79:f5:62:2c:92:5c:a1:fd:80: 3a:88:0f:2b:b7:84:92:3e:22:1f:6e:12:88:c2:ce:9b:aa:a4: d8:91:0d:17:89:c5:77:77:e3:fc:4b:e2:d8:68:6f:07:f0:be: e6:37:19:10:a1:d9:12:df:24:01:ac:35:5e:22:81:5a:cb:e5: e6:9a:25:4b:e2:ab:66:f1:fc:1a:d4:e2:73:03:4f:06:45:8a: 07:54:d8:69:0e:b7:dd:df:cc:7f:46:f8:fc:d8:77:aa:30:1b: 6c:16:3a:fb:23:6e:7d:3c:cb:87:0f:82:ce:6e:68:33:81:5c: 7c:94:c6:fd:01:e1:6b:02:7d:eb:27:cf:ef:99:07:fe:a4:65: df:8e:56:84:46:70:1c:9d:ff:c5:8c:ef:80:0a:bc:95:90:41: 75:8a:e6:cb:db:22:d1:11:38:c8:35:35:1d:e8:7e:ac:24:b7: 0a:ad:a8:4e:19:70:b8:a6:4f:3d:3c:25:85:c1:46:d2:ab:00: 3d:1f:d1:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NVYC1z984Hcul9A+E1aEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NTM2MGYzYTE5MmRjYWExZDNkMTk0ZGI2NGMwMjU0YzM3 NGJkNDYwHhcNMjUxMjIxMDAwMDQxWhcNMjUxMjIyMDAwMDQxWjAzMTEwLwYDVQQD EyhkYzlhOWJjOTg4OGExN2UwMzA2YTQ0MTA4OTdhZGM5OWIyMzU4NTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO8A3kFyfELNf4pLAWzuKsVXK40k HQvKRaLcQicdoHpcd8tbcQUND7/T151eTTDCVnlK0Knp+TFlfxvgebe2s7Qzw8pf mZpJfu68J1TdFPbHiFCR+aQMy+slwfTcVtHaKScD93TuLLpl292F0kTbl9K+pK2s 8xq5oc6a/47rAL/JNmVvPVOOpGwQkVW/xvLg06BaJlhTdP0H2VW6G6c1n5Khu0nF SR0CMzJHF+oXTJ2dn2pte+DMGAMTwP4cojc5K03IyCJMoG/k59T3lAetbg4wbZ71 +XnumhgxUm6RaBQLzZ4wbwPXyJ4QikaduVgGofY6xQMVaSpjS49HBmH2OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyam8mIihfgMGpEEIl63JmyNYVfMB8GA1UdIwQY MBaAFEdTYPOhktyqHT0ZTbZMAlTDdL1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjFOZzg2R1MzS29kUFJsTnRrd0NWTU4wdlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC82MjQ0OTctNTA5MS00MDJiLTkxMjkt YjAzYmE0YWIwYzU0LzEvUjFOZzg2R1MzS29kUFJsTnRrd0NWTU4wdlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC82MjQ0OTctNTA5MS00MDJiLTkxMjktYjAzYmE0YWIwYzU0 LzEvUjFOZzg2R1MzS29kUFJsTnRrd0NWTU4wdlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgj2c8GY xeMp5bFQJJGeH2E8GE6e8lMxgCaI8rww1jIeUiwNNEdoFyKkDytBVSfT36chQYs5 FuLexa8GzYvxefViLJJcof2AOogPK7eEkj4iH24SiMLOm6qk2JENF4nFd3fj/Evi 2GhvB/C+5jcZEKHZEt8kAaw1XiKBWsvl5polS+KrZvH8GtTicwNPBkWKB1TYaQ63 3d/Mf0b4/Nh3qjAbbBY6+yNufTzLhw+Czm5oM4FcfJTG/QHhawJ96yfP75kH/qRl 345WhEZwHJ3/xYzvgAq8lZBBdYrmy9si0RE4yDU1Heh+rCS3Cq2oThlwuKZPPTwl hcFG0qsAPR/Rfw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:58:40 2025 by rpki-client