This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft File: ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json) Hash identifier: 6+GpnLQj4wmQUEHWvLr37nVXpVXhWAuTCaGBsPOQSBk= Subject key identifier: 02:8C:E2:A4:BD:4D:18:10:2E:6B:90:31:A1:62:FE:09:FC:09:D5:C6 Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE Certificate issuer: /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe Certificate serial: 019B3E6C6E959AAADED0E8D666A6F37FF6B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft Manifest number: 13CF Signing time: Sun 21 Dec 2025 01:00:52 +0000 Manifest this update: Sun 21 Dec 2025 01:00:52 +0000 Manifest next update: Mon 22 Dec 2025 01:00:52 +0000 Files and hashes: 1: 96ceGnLozFWN_QTriAA9ffT0NZo.roa (hash: xYD9mhJQTnDUO7IrqsbDyJlQ0+k0aFVeTHj0N17MtSI=) 2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: AMEyUmz1kwy+hJdVtsGOt9YOTZN6DuTZtM/psSeDT+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:6e:95:9a:aa:de:d0:e8:d6:66:a6:f3:7f:f6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe Validity Not Before: Dec 21 01:00:52 2025 GMT Not After : Dec 22 01:00:52 2025 GMT Subject: CN=028ce2a4bd4d18102e6b9031a162fe09fc09d5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a7:31:a4:37:ee:1c:d0:e2:c3:d7:c8:24:a8: fd:5f:3a:15:ca:1f:c8:d2:1b:27:b7:ef:3f:49:8c: a8:f8:40:db:a0:bd:fa:9e:1b:a9:f8:a8:94:65:a6: 44:f0:01:c7:f1:0c:ad:e4:e8:6d:14:fe:2f:27:bb: c9:80:a3:f1:21:53:3c:34:11:26:ba:3d:ac:88:83: 9d:2c:3f:61:27:4e:d7:47:f4:ee:5d:19:2e:6b:ab: df:00:f8:59:0b:73:9c:fe:8e:e7:0d:0b:94:31:6e: 61:dd:20:72:c0:bb:74:3b:d7:9b:0f:b4:27:4f:66: 10:06:8e:59:31:f8:5b:31:45:d4:e5:5c:1f:2d:ab: 81:0e:1e:07:a6:ed:6c:dc:25:10:52:7f:6e:d0:61: 65:1b:82:29:b4:60:f0:04:73:eb:41:32:e8:c2:ae: 6d:4e:ce:a0:3e:e3:32:a5:4d:6f:cb:f2:f5:6c:15: d6:7e:7e:bf:6a:2a:f9:97:88:fc:c3:dc:27:3d:9a: 90:5c:61:42:f7:d2:fb:fe:9b:5a:31:5f:41:66:93: ad:b8:af:97:60:e2:b8:54:12:40:0c:69:95:a9:b7: 9c:60:91:48:75:ea:d5:1b:ed:6d:2a:37:56:06:6c: f1:c1:ba:9f:7a:3b:ef:85:a0:3e:b3:83:2f:7b:e4: 66:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8C:E2:A4:BD:4D:18:10:2E:6B:90:31:A1:62:FE:09:FC:09:D5:C6 X509v3 Authority Key Identifier: keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:43:30:b1:e6:ef:e5:37:d8:8b:69:95:4a:e4:b2:3e:72:9c: 3d:13:cd:c4:29:8a:55:d6:2f:73:71:92:dd:4b:c8:76:76:5f: ec:27:08:ea:30:f2:2d:24:4c:82:02:73:95:c3:91:14:59:45: 9c:ba:ef:22:26:74:f7:ee:d8:40:d7:4e:0a:f1:c9:eb:17:06: 15:41:19:fb:96:85:f6:76:e5:5e:f8:7e:9f:12:1d:37:b5:35: 5e:d3:18:45:26:36:40:95:75:4c:d3:8d:99:6e:b5:bb:ee:d5: 2c:3c:d7:ed:b9:e9:c7:6f:27:f9:32:0f:c6:49:3e:30:75:13: 5f:b8:60:ac:99:7b:59:3f:83:86:b4:42:fb:0b:be:d0:f9:4f: d9:3b:fd:2d:db:97:79:30:54:e1:98:be:4a:41:46:c2:c3:f5: 0e:fc:1f:80:f3:e7:05:a5:52:c7:84:f0:6b:d4:a0:41:39:53: 67:cc:7e:28:82:85:d9:8f:8e:63:c2:32:02:8d:98:a6:39:cd: 88:be:0f:47:d1:0f:e5:e1:12:c2:07:7d:4c:c6:01:92:da:67: 6e:1c:dd:af:27:a0:77:39:e0:b6:f6:03:10:0a:11:63:20:8c: 6d:fa:9e:b6:0a:b0:33:7d:35:d7:cf:92:c3:89:90:ea:6c:8e: 9a:5f:dd:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bG6Vmqre0OjWZqbzf/a1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMGE1MmZlZTIyODBkNmYyMzFiYjZhMjYyMjZlNjUzNTE3 MGYxZmUwHhcNMjUxMjIxMDEwMDUyWhcNMjUxMjIyMDEwMDUyWjAzMTEwLwYDVQQD EygwMjhjZTJhNGJkNGQxODEwMmU2YjkwMzFhMTYyZmUwOWZjMDlkNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqcxpDfuHNDiw9fIJKj9XzoVyh/I 0hsnt+8/SYyo+EDboL36nhup+KiUZaZE8AHH8Qyt5OhtFP4vJ7vJgKPxIVM8NBEm uj2siIOdLD9hJ07XR/TuXRkua6vfAPhZC3Oc/o7nDQuUMW5h3SBywLt0O9ebD7Qn T2YQBo5ZMfhbMUXU5VwfLauBDh4Hpu1s3CUQUn9u0GFlG4IptGDwBHPrQTLowq5t Ts6gPuMypU1vy/L1bBXWfn6/air5l4j8w9wnPZqQXGFC99L7/ptaMV9BZpOtuK+X YOK4VBJADGmVqbecYJFIderVG+1tKjdWBmzxwbqfejvvhaA+s4Mve+Rm3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKM4qS9TRgQLmuQMaFi/gn8CdXGMB8GA1UdIwQY MBaAFJ4KUv7iKA1vIxu2omIm5lNRcPH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdwU191SW9EVzhqRzdhaVlpYm1VMUZ3OGY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80N2QyMWMtNjA0Yi00N2Q4LWEzMzMt NzA4YjY4Yzg1NmNmLzEvbmdwU191SW9EVzhqRzdhaVlpYm1VMUZ3OGY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80N2QyMWMtNjA0Yi00N2Q4LWEzMzMtNzA4YjY4Yzg1NmNm LzEvbmdwU191SW9EVzhqRzdhaVlpYm1VMUZ3OGY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEMwsebv 5TfYi2mVSuSyPnKcPRPNxCmKVdYvc3GS3UvIdnZf7CcI6jDyLSRMggJzlcORFFlF nLrvIiZ09+7YQNdOCvHJ6xcGFUEZ+5aF9nblXvh+nxIdN7U1XtMYRSY2QJV1TNON mW61u+7VLDzX7bnpx28n+TIPxkk+MHUTX7hgrJl7WT+DhrRC+wu+0PlP2Tv9LduX eTBU4Zi+SkFGwsP1DvwfgPPnBaVSx4Twa9SgQTlTZ8x+KIKF2Y+OY8IyAo2YpjnN iL4PR9EP5eESwgd9TMYBktpnbhzdryegdzngtvYDEAoRYyCMbfqetgqwM30118+S w4mQ6myOml/dFA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:49:26 2025 by rpki-client