This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json) Hash identifier: qWV1r9Hl+SpUW+Ri/UoMzVwHXETWdZxSqsTw5+LQ88M= Subject key identifier: 7C:C0:BC:12:45:94:5C:B3:85:3B:E3:56:9F:5D:66:E5:6C:B3:55:BA Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a Certificate serial: 019B34C4DFFA3EDD605F6637547C2C5F84D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft Manifest number: 084A Signing time: Fri 19 Dec 2025 04:01:16 +0000 Manifest this update: Fri 19 Dec 2025 04:01:16 +0000 Manifest next update: Sat 20 Dec 2025 04:01:16 +0000 Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: /vxnyz5TV4oveUgKbOjnhocI3jmYYuLSD4kCwnXcJ24=) 2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:df:fa:3e:dd:60:5f:66:37:54:7c:2c:5f:84:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a Validity Not Before: Dec 19 04:01:16 2025 GMT Not After : Dec 20 04:01:16 2025 GMT Subject: CN=7cc0bc1245945cb3853be3569f5d66e56cb355ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:4b:82:2b:e8:93:de:00:ea:05:c6:18:84: 30:eb:d7:b0:e7:38:a2:9d:3f:0b:5c:8f:e5:c4:36: 69:1c:7f:85:c2:d4:44:a0:07:d1:84:5e:ae:ea:8c: 61:38:fe:b8:b3:e0:47:79:ef:fb:fc:5d:7a:c4:4a: cb:f6:b6:b7:ae:db:fe:02:4d:1a:7e:68:3a:58:21: e9:5e:6f:d1:af:b6:93:0d:2d:fc:72:89:28:42:ba: cf:b8:54:09:cb:11:75:01:04:61:b3:2f:42:42:54: f4:b8:7f:06:68:ff:b1:bc:94:bc:33:97:d0:84:bb: d1:6a:31:ad:ea:de:31:f9:92:78:7f:01:bb:88:ec: 48:b2:6a:09:c2:64:7c:d4:76:ed:86:cd:42:12:79: 17:61:0f:7e:2c:5e:09:41:52:0b:18:1e:08:b4:ef: e1:4f:af:e4:93:2d:21:ca:df:c9:f1:0f:52:22:62: 30:89:b3:83:02:85:83:51:84:19:68:31:eb:f2:d3: 4f:7f:88:c9:cd:78:33:4e:ca:d9:85:c5:45:b7:76: 34:50:47:45:8a:63:58:96:04:b9:75:ba:53:52:5f: 9d:f0:8b:d7:e8:4b:e9:a8:f3:4a:f0:10:76:09:07: 6b:3a:70:0a:3a:6a:58:3e:aa:dd:3b:bc:74:d2:5e: ce:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C0:BC:12:45:94:5C:B3:85:3B:E3:56:9F:5D:66:E5:6C:B3:55:BA X509v3 Authority Key Identifier: keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6a:54:05:9d:f3:4f:8e:8d:60:27:d3:fa:e7:a5:9f:50:8a: bc:4d:32:1a:06:3c:e6:ea:9d:ff:90:b7:3e:92:6a:b8:55:c6: bc:3b:58:80:70:87:63:9f:06:55:ad:f5:0a:3f:b5:3e:24:55: 68:c0:76:c4:8c:ce:34:2e:7a:d9:15:45:0c:de:85:fe:51:fd: bc:d1:a9:e0:94:f3:24:45:b8:1d:51:fb:b6:cd:b3:45:08:89: ba:51:10:39:b4:90:09:9d:b2:b6:70:78:9f:9a:c1:d6:fb:b6: 08:d5:cb:95:0e:f2:27:2f:d1:ca:18:7a:e1:17:4a:0e:ff:79: 97:e2:74:7c:18:13:f5:d3:dc:48:87:23:a9:d8:52:4e:ec:37: 75:d1:34:18:30:ee:9e:8b:93:48:b1:22:ad:fe:96:43:bf:12: d6:55:a8:f3:e7:32:04:01:4e:e2:5b:f5:2b:79:be:48:82:a5: ce:59:e9:a2:e2:bf:fb:e8:a3:8c:9f:02:9d:91:fe:c7:d1:b0: 62:a9:ec:55:74:79:28:15:76:fa:f7:68:ac:4d:31:71:fc:d5: 36:31:de:ed:18:5f:63:60:64:01:35:8a:25:59:02:29:5a:bf: e5:64:16:22:0c:56:97:be:c5:fa:e7:41:94:78:88:96:99:58: dd:c7:6d:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xN/6Pt1gX2Y3VHwsX4TXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNjIwZjMxYjQ5OTdjNzM0NWJjNjZiNDZiNDNkNjg2YmYw MDkzMWEwHhcNMjUxMjE5MDQwMTE2WhcNMjUxMjIwMDQwMTE2WjAzMTEwLwYDVQQD Eyg3Y2MwYmMxMjQ1OTQ1Y2IzODUzYmUzNTY5ZjVkNjZlNTZjYjM1NWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngZLgivok94A6gXGGIQw69ew5zii nT8LXI/lxDZpHH+FwtREoAfRhF6u6oxhOP64s+BHee/7/F16xErL9ra3rtv+Ak0a fmg6WCHpXm/Rr7aTDS38cokoQrrPuFQJyxF1AQRhsy9CQlT0uH8GaP+xvJS8M5fQ hLvRajGt6t4x+ZJ4fwG7iOxIsmoJwmR81Hbths1CEnkXYQ9+LF4JQVILGB4ItO/h T6/kky0hyt/J8Q9SImIwibODAoWDUYQZaDHr8tNPf4jJzXgzTsrZhcVFt3Y0UEdF imNYlgS5dbpTUl+d8IvX6EvpqPNK8BB2CQdrOnAKOmpYPqrdO7x00l7OJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzAvBJFlFyzhTvjVp9dZuVss1W6MB8GA1UdIwQY MBaAFJxiDzG0mXxzRbxmtGtD1oa/AJMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2Qt NGI4NzkzZGI3NDYwLzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2QtNGI4NzkzZGI3NDYw LzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWpUBZ3z T46NYCfT+ueln1CKvE0yGgY85uqd/5C3PpJquFXGvDtYgHCHY58GVa31Cj+1PiRV aMB2xIzONC562RVFDN6F/lH9vNGp4JTzJEW4HVH7ts2zRQiJulEQObSQCZ2ytnB4 n5rB1vu2CNXLlQ7yJy/Ryhh64RdKDv95l+J0fBgT9dPcSIcjqdhSTuw3ddE0GDDu nouTSLEirf6WQ78S1lWo8+cyBAFO4lv1K3m+SIKlzlnpouK/++ijjJ8CnZH+x9Gw YqnsVXR5KBV2+vdorE0xcfzVNjHe7RhfY2BkATWKJVkCKVq/5WQWIgxWl77F+udB lHiIlplY3cdtlg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:25:42 2025 by rpki-client