This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft File: NgqdJtuz6l36roO2GQit2Pxt028.mft (raw, json) Hash identifier: JlRkaOceAR2fQyjmT3UESxTUqua87OKgA8SqvhunOFQ= Subject key identifier: C4:A6:03:DF:53:77:62:E9:42:2E:11:4D:AF:65:A4:A5:50:25:C8:AA Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F Certificate issuer: /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f Certificate serial: 019B69C4C1C909149A799608DE864762DA35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft Manifest number: 17A2 Signing time: Mon 29 Dec 2025 11:01:00 +0000 Manifest this update: Mon 29 Dec 2025 11:01:00 +0000 Manifest next update: Tue 30 Dec 2025 11:01:00 +0000 Files and hashes: 1: 8O6-gKb80MguFWMDjHISxDIUjOY.roa (hash: 3o+8tVrWRw5md2p0yBC1m89E5Wym1EPSdJ/KhkZ5Zfw=) 2: NgqdJtuz6l36roO2GQit2Pxt028.crl (hash: php4x+ZkP64c/QO+MB6Ej3msHvzrZ/Tthm5p3X/2NcM=) 3: Zi0j7h9kKDeUNaeEMFA--W7qxgc.roa (hash: X3ti0Mbq81jS2GwcXcG3SUj5PuFqGydxb+zfC6HvRS8=) 4: ng125dUOqVaBw3danc1rOaXrcqk.roa (hash: E63qId+nBBFGXNOzGBHEt5a6wlCWGVhiMwoeA9BRjGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c4:c1:c9:09:14:9a:79:96:08:de:86:47:62:da:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f Validity Not Before: Dec 29 11:01:00 2025 GMT Not After : Dec 30 11:01:00 2025 GMT Subject: CN=c4a603df537762e9422e114daf65a4a55025c8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:56:b2:49:27:24:f0:e4:5c:f2:02:72:14: dd:dc:51:cf:44:ec:ab:54:52:94:a5:4d:a3:99:8f: 39:e9:8e:b7:1d:ce:6a:4e:d1:d2:44:e6:35:fd:37: b5:e2:73:50:11:2c:ed:31:99:31:10:9b:86:74:65: 75:3d:8b:a2:66:38:32:2c:f7:91:f0:7e:87:ba:ba: 8b:dc:4e:54:18:4e:2b:5b:f5:c1:00:f9:99:5d:03: 35:54:b9:63:2e:f9:cf:b6:ce:a9:a0:12:cd:0b:47: 7b:9b:2c:9d:97:12:3c:64:31:ec:1e:ab:1f:e9:e8: 75:76:77:dc:fa:27:40:d8:b6:45:e7:0b:c1:c0:a1: 7d:b4:75:3c:17:e6:b6:da:61:78:14:2e:7d:a8:85: 22:d3:7c:95:08:8f:51:b7:b2:0b:96:21:11:2d:d9: 58:36:4e:bc:b5:1c:0c:49:16:3f:69:ea:b6:3d:ad: cd:d1:3a:c4:8a:ba:a3:bf:7d:56:76:96:9e:fb:06: 96:e4:12:77:03:16:7a:1e:e5:f6:f0:6e:5a:83:84: 53:76:39:25:bb:31:e9:36:b7:6c:00:3a:d7:af:52: 98:89:33:2b:47:1f:10:52:36:a2:ca:0e:bf:c3:9a: 74:ba:b6:bd:59:9b:55:bf:dd:8f:bb:62:07:d0:8f: 8d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A6:03:DF:53:77:62:E9:42:2E:11:4D:AF:65:A4:A5:50:25:C8:AA X509v3 Authority Key Identifier: keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:bc:33:42:b8:25:77:9c:63:16:77:a1:38:d2:55:6b:f4:c3: 0c:83:55:89:ff:a4:9a:d5:8d:ec:30:e9:45:a4:c9:e4:21:72: ab:d3:a1:cd:91:cb:16:dc:88:6d:65:81:35:e7:85:90:cf:41: dc:11:52:ca:49:6b:f2:02:19:b2:d5:29:28:c5:24:cb:5e:86: fe:cb:bd:91:9e:b7:4e:1a:cb:33:ed:73:41:cc:af:43:5b:87: b8:e0:f3:69:1a:61:c2:c8:ac:7b:3e:42:02:51:c9:4e:6f:01: 9d:53:e1:b7:d1:65:bf:f5:b4:76:6e:79:ae:18:c1:33:47:c7: e6:d9:ff:b1:ab:d6:b2:d7:03:a3:c2:de:60:6e:dd:5a:c5:44: b8:46:4f:8b:53:27:31:e0:ed:57:8b:be:c0:3d:20:14:c9:fa: ac:f9:d2:66:2d:9b:73:6d:4c:60:91:33:63:04:15:92:72:cb: 52:28:c4:28:73:b3:9f:86:fb:94:2a:bc:90:17:a3:b9:a5:03: e3:df:5b:f8:c5:9d:4e:f2:1e:07:04:d6:3f:49:be:66:c0:06: df:5c:2c:53:a0:de:03:f7:50:0c:5a:3d:06:0b:1a:d0:0e:ff: 5d:65:62:07:bf:64:0c:a9:bc:2e:d4:13:3b:9c:4f:dc:37:b2: fc:4c:f4:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxMHJCRSaeZYI3oZHYto1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MGE5ZDI2ZGJiM2VhNWRmYWFlODNiNjE5MDhhZGQ4ZmM2 ZGQzNmYwHhcNMjUxMjI5MTEwMTAwWhcNMjUxMjMwMTEwMTAwWjAzMTEwLwYDVQQD EyhjNGE2MDNkZjUzNzc2MmU5NDIyZTExNGRhZjY1YTRhNTUwMjVjOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGFWskknJPDkXPICchTd3FHPROyr VFKUpU2jmY856Y63Hc5qTtHSROY1/Te14nNQESztMZkxEJuGdGV1PYuiZjgyLPeR 8H6HurqL3E5UGE4rW/XBAPmZXQM1VLljLvnPts6poBLNC0d7myydlxI8ZDHsHqsf 6eh1dnfc+idA2LZF5wvBwKF9tHU8F+a22mF4FC59qIUi03yVCI9Rt7ILliERLdlY Nk68tRwMSRY/aeq2Pa3N0TrEirqjv31Wdpae+waW5BJ3AxZ6HuX28G5ag4RTdjkl uzHpNrdsADrXr1KYiTMrRx8QUjaiyg6/w5p0ura9WZtVv92Pu2IH0I+NEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSmA99Td2LpQi4RTa9lpKVQJciqMB8GA1UdIwQY MBaAFDYKnSbbs+pd+q6DthkIrdj8bdNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmdxZEp0dXo2bDM2cm9PMkdRaXQyUHh0MDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yN2UyOWUtYzg5NC00ZDM5LWFjMjMt MTJlOTZiYTIzNWQ4LzEvTmdxZEp0dXo2bDM2cm9PMkdRaXQyUHh0MDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8yN2UyOWUtYzg5NC00ZDM5LWFjMjMtMTJlOTZiYTIzNWQ4 LzEvTmdxZEp0dXo2bDM2cm9PMkdRaXQyUHh0MDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7wzQrgl d5xjFnehONJVa/TDDINVif+kmtWN7DDpRaTJ5CFyq9OhzZHLFtyIbWWBNeeFkM9B 3BFSyklr8gIZstUpKMUky16G/su9kZ63ThrLM+1zQcyvQ1uHuODzaRphwsisez5C AlHJTm8BnVPht9Flv/W0dm55rhjBM0fH5tn/savWstcDo8LeYG7dWsVEuEZPi1Mn MeDtV4u+wD0gFMn6rPnSZi2bc21MYJEzYwQVknLLUijEKHOzn4b7lCq8kBejuaUD 499b+MWdTvIeBwTWP0m+ZsAG31wsU6DeA/dQDFo9Bgsa0A7/XWViB79kDKm8LtQT O5xP3Dey/Ez0EA== -----END CERTIFICATE-----Generated at Mon Dec 29 19:37:24 2025 by rpki-client