This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft File: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft (raw, json) Hash identifier: zyo/FzlHwUuk0eii9Py7pf750xD5QRF1DDoEuDdfryk= Subject key identifier: 79:3A:51:57:6C:21:8D:B5:28:AB:81:18:AD:03:32:2C:2F:25:B1:9C Authority key identifier: 36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86 Certificate issuer: /CN=360c5935e51fe706c2447519d9b5f95ae363c186 Certificate serial: 019B3D231AF8912DCA06B11B93C2757431A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft Manifest number: 1335 Signing time: Sat 20 Dec 2025 19:01:09 +0000 Manifest this update: Sat 20 Dec 2025 19:01:09 +0000 Manifest next update: Sun 21 Dec 2025 19:01:09 +0000 Files and hashes: 1: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl (hash: XcmP6GeTF1I/oGwSlAdx49NhtzGdZb6hpFY9lzlgA0s=) 2: t502H2vMdpAeOhruVMNDr3Acpww.roa (hash: fOmBVqNdsH/gE4UkC59LOcZAoo+pjmsg19OUK4hM+ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:1a:f8:91:2d:ca:06:b1:1b:93:c2:75:74:31:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=360c5935e51fe706c2447519d9b5f95ae363c186 Validity Not Before: Dec 20 19:01:09 2025 GMT Not After : Dec 21 19:01:09 2025 GMT Subject: CN=793a51576c218db528ab8118ad03322c2f25b19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:bd:51:24:f8:b1:aa:af:55:85:ee:53:ce: 67:89:2c:52:43:7e:63:f0:47:ce:3a:f0:cc:a7:3d: 6c:a9:90:41:5e:6c:f9:fb:31:e8:70:79:b3:f8:7f: 85:35:53:a1:dd:eb:19:ee:61:e5:1d:57:c2:8f:e3: 7f:d8:66:15:09:36:90:93:18:4d:98:fb:49:97:58: 95:17:a5:79:05:f5:f2:a2:57:9a:16:00:7d:27:23: ef:96:d0:23:4d:d4:bc:d0:47:05:b7:53:98:21:2c: a5:6d:31:7e:11:b7:c9:63:ac:fa:bc:84:73:56:8e: 85:6d:70:72:4a:d2:1d:27:b2:d2:8d:23:a9:9f:64: 1d:1f:42:99:23:03:2c:0c:d7:10:32:a4:62:45:6d: bb:4d:00:d4:9a:bf:85:9a:7c:56:d4:93:77:4f:e2: 26:de:d9:04:f8:b8:72:cd:58:b5:94:b5:6a:c5:e0: 80:87:21:6c:86:cf:c2:74:3c:4e:66:9d:dd:fe:3e: a3:7f:a6:47:e2:00:36:d8:91:9c:e3:f6:e4:9e:96: 91:d5:b8:6d:2d:64:90:47:cb:d4:a1:1f:18:5e:c6: 28:cb:22:15:5a:7a:03:ae:e4:d2:17:a7:f2:e6:54: e5:58:6c:f7:0e:72:4d:ee:fc:cc:ee:a1:a2:cf:f4: db:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3A:51:57:6C:21:8D:B5:28:AB:81:18:AD:03:32:2C:2F:25:B1:9C X509v3 Authority Key Identifier: keyid:36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:30:0e:57:af:ae:14:a6:1e:a3:3f:0d:9c:1f:66:ca:cc:2f: de:d8:28:e7:5c:d1:39:3a:5a:e0:84:78:c6:9c:3d:c8:28:9e: 01:fe:a0:48:a6:c9:6c:ad:98:3d:cd:5e:a6:d9:0e:7c:fd:a7: 96:01:db:e7:54:91:7c:70:3b:e8:66:19:55:b2:35:d0:5d:de: e3:ed:04:48:bd:2e:a7:22:c7:f4:cc:16:1d:c4:86:65:fe:b9: ee:d8:f4:2a:40:08:5d:e2:7e:1d:64:bb:7c:2c:63:f1:a8:dc: aa:d2:60:f7:be:b1:19:71:36:3d:be:96:89:ef:f4:22:2e:46: fe:c0:b0:5f:9c:40:09:d4:b4:e2:cf:f0:5c:c8:78:3c:e9:8a: 91:a5:72:be:fe:bb:68:89:40:d6:fe:a9:51:3b:c1:16:89:a4: 03:87:d9:be:4d:fb:04:00:f3:c2:03:b3:32:97:9c:8f:69:b6: 5b:fc:3b:fb:db:2d:c7:e7:b1:4d:b2:33:b8:2a:9f:3b:f2:66: 86:47:19:15:8e:35:0f:97:3a:2b:0c:a7:6b:08:12:05:f9:01: 26:37:1f:f5:51:bf:21:86:f8:52:7e:c4:42:a1:94:f5:dc:b8: aa:95:46:96:db:a5:74:73:75:b8:d9:ef:c8:5d:79:62:1d:f4: 40:a6:57:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Ixr4kS3KBrEbk8J1dDGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MGM1OTM1ZTUxZmU3MDZjMjQ0NzUxOWQ5YjVmOTVhZTM2 M2MxODYwHhcNMjUxMjIwMTkwMTA5WhcNMjUxMjIxMTkwMTA5WjAzMTEwLwYDVQQD Eyg3OTNhNTE1NzZjMjE4ZGI1MjhhYjgxMThhZDAzMzIyYzJmMjViMTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxO9UST4saqvVYXuU85niSxSQ35j 8EfOOvDMpz1sqZBBXmz5+zHocHmz+H+FNVOh3esZ7mHlHVfCj+N/2GYVCTaQkxhN mPtJl1iVF6V5BfXyoleaFgB9JyPvltAjTdS80EcFt1OYISylbTF+EbfJY6z6vIRz Vo6FbXByStIdJ7LSjSOpn2QdH0KZIwMsDNcQMqRiRW27TQDUmr+FmnxW1JN3T+Im 3tkE+LhyzVi1lLVqxeCAhyFshs/CdDxOZp3d/j6jf6ZH4gA22JGc4/bknpaR1bht LWSQR8vUoR8YXsYoyyIVWnoDruTSF6fy5lTlWGz3DnJN7vzM7qGiz/TbxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHk6UVdsIY21KKuBGK0DMiwvJbGcMB8GA1UdIwQY MBaAFDYMWTXlH+cGwkR1Gdm1+VrjY8GGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmd4Wk5lVWY1d2JDUkhVWjJiWDVXdU5qd1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83NTgyMDMtZDUyOS00OGE3LTk4ZjQt ZTUxYTkwOTA3MjI2LzEvTmd4Wk5lVWY1d2JDUkhVWjJiWDVXdU5qd1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83NTgyMDMtZDUyOS00OGE3LTk4ZjQtZTUxYTkwOTA3MjI2 LzEvTmd4Wk5lVWY1d2JDUkhVWjJiWDVXdU5qd1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6DAOV6+u FKYeoz8NnB9myswv3tgo51zROTpa4IR4xpw9yCieAf6gSKbJbK2YPc1eptkOfP2n lgHb51SRfHA76GYZVbI10F3e4+0ESL0upyLH9MwWHcSGZf657tj0KkAIXeJ+HWS7 fCxj8ajcqtJg976xGXE2Pb6Wie/0Ii5G/sCwX5xACdS04s/wXMh4POmKkaVyvv67 aIlA1v6pUTvBFomkA4fZvk37BADzwgOzMpecj2m2W/w7+9stx+exTbIzuCqfO/Jm hkcZFY41D5c6KwynawgSBfkBJjcf9VG/IYb4Un7EQqGU9dy4qpVGltuldHN1uNnv yF15Yh30QKZX+g== -----END CERTIFICATE-----Generated at Sat Dec 20 22:04:04 2025 by rpki-client