This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json) Hash identifier: zaUUpk0909+dRaavf8u4x/YnoSj3suz5J5W3YC4zeow= Subject key identifier: BE:88:4A:21:3B:B1:AC:C8:59:07:80:49:C2:5E:20:89:DA:3B:55:F0 Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe Certificate serial: 019B3C7F689E3E87383D7142F7F9D92D6405 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft Manifest number: 0481 Signing time: Sat 20 Dec 2025 16:02:21 +0000 Manifest this update: Sat 20 Dec 2025 16:02:21 +0000 Manifest next update: Sun 21 Dec 2025 16:02:21 +0000 Files and hashes: 1: 2jDUXaVY2J9zU8vKhzB_PzOO_6U.roa (hash: uI6QS/R6IbgUMuCYc5sOFyWJ4AyLIYf/PSbRWwbYsP0=) 2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: ciKgw/GcwYFfjRIf2BjDlS9yidreyECOhmcjN8a3NUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:68:9e:3e:87:38:3d:71:42:f7:f9:d9:2d:64:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe Validity Not Before: Dec 20 16:02:21 2025 GMT Not After : Dec 21 16:02:21 2025 GMT Subject: CN=be884a213bb1acc859078049c25e2089da3b55f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d4:92:d8:67:04:de:3a:a8:20:91:f0:76:0f: 6f:22:ab:ab:0b:c0:10:d5:d5:1a:a1:b0:a0:08:83: 35:03:5f:53:77:ce:12:6b:8e:ed:b3:12:54:e8:60: 1c:9a:bf:cb:0b:6a:65:80:8f:96:84:27:bd:c5:05: 56:66:d3:61:3d:be:78:6b:49:cb:96:c4:76:fc:6b: 97:08:12:5f:0d:fc:7e:d5:01:bf:66:a3:88:01:f4: 82:68:88:55:30:2b:27:55:f7:d1:92:dc:b0:b3:69: 03:f1:ee:48:41:7b:40:ad:10:c1:81:43:5e:6e:e7: cf:c2:53:ff:e7:d7:f9:af:93:3f:19:0d:0f:96:c2: 22:6a:9d:80:bf:b4:95:7b:11:b0:d5:fd:a4:7d:a7: 7d:3d:2b:ce:34:3f:ee:7c:a8:96:b2:6d:af:4f:23: 1c:b5:86:5c:d5:1a:60:5c:6e:69:29:7d:cb:66:57: 82:28:02:44:42:d0:14:e3:9a:7c:53:5d:b1:ad:19: 8c:74:62:5e:0d:40:7f:9c:f1:21:e4:ec:04:6c:49: c2:1b:30:9d:bf:04:bd:e6:fb:38:97:00:68:f9:10: 9f:d1:03:aa:82:83:5e:21:e1:09:40:ff:33:9d:50: a1:fc:76:2b:11:93:4b:14:f9:7d:86:3e:c1:e8:64: 15:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:88:4A:21:3B:B1:AC:C8:59:07:80:49:C2:5E:20:89:DA:3B:55:F0 X509v3 Authority Key Identifier: keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:2e:3a:55:60:61:47:05:98:a4:2f:81:00:93:f8:b5:77:11: d1:0e:e7:c8:d2:c2:52:02:86:bb:09:d3:6a:86:82:25:ba:12: 83:18:4e:64:c1:85:b7:37:93:37:3b:31:7d:4c:fa:db:65:65: 8b:d2:e2:86:31:cc:64:4d:e9:8b:76:91:fa:99:40:ef:9b:58: a0:1c:35:d1:0d:35:dd:e8:3c:1d:c5:3a:00:7d:73:4d:cb:5d: 1b:f2:c8:47:5c:ae:12:fb:6b:7f:fb:74:7d:b9:6b:34:60:59: a6:cf:ac:99:e3:b2:94:95:6b:35:6e:8e:be:0c:7d:0a:26:0d: 29:5c:87:30:34:ce:10:78:ab:94:ff:4b:f0:96:30:ad:8e:b7: d0:fd:9d:4e:98:ff:89:fd:1e:f3:8a:aa:4e:b1:24:80:f2:67: d0:97:25:d8:a4:c4:d0:8c:08:6b:c8:9d:17:29:49:61:fa:1d: c8:fd:be:e9:67:00:1f:a9:38:1a:6f:e3:8c:2d:da:87:60:ca: b6:99:be:a6:e6:03:ec:71:eb:b6:be:da:e1:cd:9f:d1:af:4a: 6f:91:ca:18:ed:26:d1:11:76:b8:fd:71:31:5b:d6:d9:74:4a: 22:cd:d8:46:0a:05:32:5b:a4:75:f1:cb:a0:9f:4b:75:62:91: 53:a5:d5:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f2iePoc4PXFC9/nZLWQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NjAzNDA2Y2YwZTFkN2RjNGE4Nzg0YTE4OGE2MjM4ZTNj MTNhYmUwHhcNMjUxMjIwMTYwMjIxWhcNMjUxMjIxMTYwMjIxWjAzMTEwLwYDVQQD EyhiZTg4NGEyMTNiYjFhY2M4NTkwNzgwNDljMjVlMjA4OWRhM2I1NWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9SS2GcE3jqoIJHwdg9vIqurC8AQ 1dUaobCgCIM1A19Td84Sa47tsxJU6GAcmr/LC2plgI+WhCe9xQVWZtNhPb54a0nL lsR2/GuXCBJfDfx+1QG/ZqOIAfSCaIhVMCsnVffRktyws2kD8e5IQXtArRDBgUNe bufPwlP/59f5r5M/GQ0PlsIiap2Av7SVexGw1f2kfad9PSvOND/ufKiWsm2vTyMc tYZc1RpgXG5pKX3LZleCKAJEQtAU45p8U12xrRmMdGJeDUB/nPEh5OwEbEnCGzCd vwS95vs4lwBo+RCf0QOqgoNeIeEJQP8znVCh/HYrEZNLFPl9hj7B6GQVZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6ISiE7sazIWQeAScJeIInaO1XwMB8GA1UdIwQY MBaAFDRgNAbPDh19xKh4ShiKYjjjwTq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80NWE1MzktNGExZS00OTRiLWJlOTQt MWVlNTZjNWNmYmY1LzEvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80NWE1MzktNGExZS00OTRiLWJlOTQtMWVlNTZjNWNmYmY1 LzEvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdC46VWBh RwWYpC+BAJP4tXcR0Q7nyNLCUgKGuwnTaoaCJboSgxhOZMGFtzeTNzsxfUz622Vl i9LihjHMZE3pi3aR+plA75tYoBw10Q013eg8HcU6AH1zTctdG/LIR1yuEvtrf/t0 fblrNGBZps+smeOylJVrNW6Ovgx9CiYNKVyHMDTOEHirlP9L8JYwrY630P2dTpj/ if0e84qqTrEkgPJn0Jcl2KTE0IwIa8idFylJYfodyP2+6WcAH6k4Gm/jjC3ah2DK tpm+puYD7HHrtr7a4c2f0a9Kb5HKGO0m0RF2uP1xMVvW2XRKIs3YRgoFMlukdfHL oJ9LdWKRU6XV/w== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:50 2025 by rpki-client