This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json) Hash identifier: pFm/YecCGZHtjezWAp66m7Ty9hDtOCJiYAczaSZJufs= Subject key identifier: 3E:40:10:1C:8E:A4:D3:2A:18:E1:D6:0B:8B:EE:A8:1C:B2:BA:1F:CF Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a Certificate serial: 019B631EA37956693AFD3E5FFFEB46EF7B4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft Manifest number: 0862 Signing time: Sun 28 Dec 2025 04:01:50 +0000 Manifest this update: Sun 28 Dec 2025 04:01:50 +0000 Manifest next update: Mon 29 Dec 2025 04:01:50 +0000 Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: niKQpX0Jwyfb4zG5Wo/lxF/1DKwDs6v4O1RIqMmSGQM=) 2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:a3:79:56:69:3a:fd:3e:5f:ff:eb:46:ef:7b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a Validity Not Before: Dec 28 04:01:50 2025 GMT Not After : Dec 29 04:01:50 2025 GMT Subject: CN=3e40101c8ea4d32a18e1d60b8beea81cb2ba1fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:cc:87:e6:4e:60:10:03:64:fc:48:b5:75: 41:ab:be:f4:fd:34:a6:55:8a:21:49:b6:49:90:8d: bc:af:63:5d:6e:68:ca:ab:e8:4d:c0:3b:79:03:cb: 91:e3:bd:71:de:13:21:3a:83:63:a3:9f:95:0a:64: 03:fa:f9:a5:e9:4e:b6:1b:d8:47:cc:6f:00:07:9c: 83:be:18:23:06:69:62:cf:82:ad:20:74:93:ff:11: ac:3f:d9:0b:0e:ed:15:2b:b3:37:9f:48:81:c8:5b: 3d:de:77:f0:82:c5:39:d0:81:67:0e:64:3f:f1:6b: e7:6c:14:3a:ed:89:35:9e:d9:c2:e4:1e:cd:72:20: 8d:36:0f:5e:a8:c4:78:6b:c0:a7:04:d2:7d:29:b4: 22:81:20:fb:34:b7:66:35:33:c6:b7:e8:90:cb:5e: 84:de:89:4f:b9:6c:13:54:37:4c:20:23:9f:8b:ef: 09:b6:f1:6c:23:9f:f1:db:d5:7b:2f:a0:31:27:6b: 23:5b:a5:04:26:79:7f:52:9a:86:1a:ed:ef:12:a0: 1c:07:80:e9:fd:1c:ae:b0:d5:7f:b6:17:c4:38:f9: f0:cf:ac:9e:40:59:c6:da:e2:a9:ff:b8:9a:89:99: 45:4c:29:f6:73:10:64:97:7d:76:c5:76:78:82:0d: 10:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:40:10:1C:8E:A4:D3:2A:18:E1:D6:0B:8B:EE:A8:1C:B2:BA:1F:CF X509v3 Authority Key Identifier: keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:64:c5:93:fb:c8:47:48:88:df:33:c0:9c:09:a8:b4:ff:3b: 6b:0e:7e:6b:75:e0:9b:64:c7:f1:44:d5:d8:6e:02:3f:c5:11: 12:9c:4e:7f:3a:43:71:62:bc:81:96:1f:3e:64:30:ca:2e:09: 61:ff:4c:6c:22:a0:d6:6d:0a:0a:b6:2c:fc:de:68:6a:12:dd: f3:1b:1c:fe:c8:ce:90:38:9f:c4:ce:b4:fd:4b:84:b7:7e:9d: 35:23:80:89:03:ef:e9:42:a4:db:5a:f4:99:00:73:a6:c8:1c: d0:bc:08:3d:df:ca:42:f6:9a:55:17:5e:3b:d8:43:92:d5:2f: 50:50:cb:6b:98:0e:85:f8:49:f1:64:fa:43:65:c0:14:6a:cf: 7e:2a:2d:40:f3:c1:27:2b:dc:bb:15:b1:a5:db:d2:fb:e0:a2: 26:fc:5a:25:ca:b4:64:f8:73:f8:a8:91:60:7c:f9:30:3b:4c: 53:27:4e:4e:94:ef:12:1b:13:fc:48:ea:31:22:b9:80:7e:92: 92:a1:83:d6:e2:69:95:8b:49:6c:9d:9b:93:2e:2b:a6:f5:f9: 7e:0b:30:aa:7c:aa:a1:77:48:bf:78:9b:4d:01:c9:1a:28:b6: 8b:8a:77:f6:d6:c7:2e:2b:95:62:01:93:70:1e:25:1b:c1:90: 94:93:07:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHqN5Vmk6/T5f/+tG73tLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNjIwZjMxYjQ5OTdjNzM0NWJjNjZiNDZiNDNkNjg2YmYw MDkzMWEwHhcNMjUxMjI4MDQwMTUwWhcNMjUxMjI5MDQwMTUwWjAzMTEwLwYDVQQD EygzZTQwMTAxYzhlYTRkMzJhMThlMWQ2MGI4YmVlYTgxY2IyYmExZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI7Mh+ZOYBADZPxItXVBq770/TSm VYohSbZJkI28r2NdbmjKq+hNwDt5A8uR471x3hMhOoNjo5+VCmQD+vml6U62G9hH zG8AB5yDvhgjBmliz4KtIHST/xGsP9kLDu0VK7M3n0iByFs93nfwgsU50IFnDmQ/ 8WvnbBQ67Yk1ntnC5B7NciCNNg9eqMR4a8CnBNJ9KbQigSD7NLdmNTPGt+iQy16E 3olPuWwTVDdMICOfi+8JtvFsI5/x29V7L6AxJ2sjW6UEJnl/UpqGGu3vEqAcB4Dp /RyusNV/thfEOPnwz6yeQFnG2uKp/7iaiZlFTCn2cxBkl312xXZ4gg0QPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5AEByOpNMqGOHWC4vuqByyuh/PMB8GA1UdIwQY MBaAFJxiDzG0mXxzRbxmtGtD1oa/AJMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2Qt NGI4NzkzZGI3NDYwLzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2QtNGI4NzkzZGI3NDYw LzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGTFk/vI R0iI3zPAnAmotP87aw5+a3Xgm2TH8UTV2G4CP8UREpxOfzpDcWK8gZYfPmQwyi4J Yf9MbCKg1m0KCrYs/N5oahLd8xsc/sjOkDifxM60/UuEt36dNSOAiQPv6UKk21r0 mQBzpsgc0LwIPd/KQvaaVRdeO9hDktUvUFDLa5gOhfhJ8WT6Q2XAFGrPfiotQPPB JyvcuxWxpdvS++CiJvxaJcq0ZPhz+KiRYHz5MDtMUydOTpTvEhsT/EjqMSK5gH6S kqGD1uJplYtJbJ2bky4rpvX5fgswqnyqoXdIv3ibTQHJGii2i4p39tbHLiuVYgGT cB4lG8GQlJMHTg== -----END CERTIFICATE-----Generated at Sun Dec 28 06:22:07 2025 by rpki-client