This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json) Hash identifier: OUjHHEEfZLhNUhjVYuQt0TjV8EgrtcJLEPgkTVAQGV0= Subject key identifier: DB:75:17:81:22:94:A0:24:E8:5F:77:DF:87:79:15:6C:B4:19:A8:3A Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70 Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270 Certificate serial: 019B5F09F165212F249409EAD554C57BAF28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft Manifest number: 0680 Signing time: Sat 27 Dec 2025 09:00:45 +0000 Manifest this update: Sat 27 Dec 2025 09:00:45 +0000 Manifest next update: Sun 28 Dec 2025 09:00:45 +0000 Files and hashes: 1: Apq4Tu4C58xcWMKMM4IqdYmdkdM.roa (hash: QAVqy0VawV5+3T0dTssniGX3DyrARSWBrdF9GLAoezA=) 2: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: J/F/pnkua3CgxgKc2FbKVjhBemsCiIOlcT0lpHRnBqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:09:f1:65:21:2f:24:94:09:ea:d5:54:c5:7b:af:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270 Validity Not Before: Dec 27 09:00:45 2025 GMT Not After : Dec 28 09:00:45 2025 GMT Subject: CN=db7517812294a024e85f77df8779156cb419a83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:09:19:1e:57:e9:83:d7:d0:a1:6b:90:68: 0d:78:ec:10:74:d0:be:15:c9:93:54:8f:31:0f:a8: 48:1f:72:0e:df:36:e2:19:2e:e0:9f:38:50:cb:89: 31:dc:61:0f:cf:f2:16:a7:4a:62:e1:e1:c5:f4:4b: 8e:bb:c9:07:e3:f4:c3:4a:38:f4:04:3d:5d:3b:a4: 8d:8d:13:9f:1a:94:f8:3a:1d:79:fe:27:be:ea:30: 34:a1:4a:cd:69:87:07:fb:54:97:8b:a2:4a:e0:09: 74:42:b2:ab:67:48:5e:cf:db:6c:23:60:05:7c:50: e5:b9:c2:fc:e7:af:93:e9:17:d4:c1:f3:c1:e8:e1: e5:d2:c6:7a:f4:22:34:71:a0:ef:1a:26:6c:7c:25: ff:5b:64:ca:e3:16:86:3d:6b:d1:1a:f2:61:59:3f: 7e:da:33:42:35:29:f6:52:91:02:4a:59:61:91:31: 93:56:4e:c1:d1:01:07:d6:87:75:4f:d7:44:5b:b2: ee:57:29:cf:e2:fe:d2:aa:11:52:ee:c4:f8:7a:27: ed:01:c7:85:89:cc:41:da:e7:7e:32:b5:87:0f:76: 25:37:3d:a3:87:5e:6d:23:c4:43:cf:9c:23:7d:92: 2f:59:55:ba:5f:a9:ae:47:2c:34:a5:0b:01:c9:57: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:75:17:81:22:94:A0:24:E8:5F:77:DF:87:79:15:6C:B4:19:A8:3A X509v3 Authority Key Identifier: keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:65:71:73:d1:ea:30:62:39:21:3b:9b:4d:c7:5b:ef:a3:3e: 6b:b8:88:8b:d1:f1:4b:04:4a:d9:2c:71:70:ce:1b:32:22:fa: 91:5a:7b:85:8e:6f:b9:9e:65:d6:54:76:29:a0:8c:71:1b:d2: ee:61:ac:87:b1:92:68:85:3c:ba:34:74:c5:cd:80:8a:e3:80: d2:e9:d4:98:60:1e:cd:d9:41:c6:14:21:e8:30:5c:ef:42:7f: 30:1b:f4:10:0c:e8:a9:3f:10:4e:d3:98:7a:ff:d0:d0:6f:6c: cb:01:f0:d2:3c:37:f6:8b:e1:93:9e:1c:09:69:b6:79:db:87: 20:9b:01:b2:62:a4:bb:d9:08:7d:0d:8d:96:b5:95:25:e7:76: 9f:30:cd:f7:c8:24:e8:c4:ad:d2:f5:4b:58:97:91:fa:71:d0: bc:45:13:8c:0a:26:fc:7e:af:c8:7c:93:48:68:47:fb:d2:49: 52:76:15:fc:f8:73:8f:38:ee:c4:df:3e:a5:22:04:fa:d2:3d: a1:d1:dd:0d:95:84:61:ec:47:c3:32:56:2c:ce:bd:23:b4:a0: 21:58:45:1d:3a:60:b3:4c:3d:b2:29:5d:08:9c:0e:1e:19:01: 18:86:2c:a4:3e:c6:fc:7f:e5:77:37:28:31:39:72:d9:f2:62: 0c:49:bd:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfCfFlIS8klAnq1VTFe68oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NjQ3NGEzM2MwNTFkMTcxNTJiMjEzMjJjY2Y0ZmYzODA4 YjQyNzAwHhcNMjUxMjI3MDkwMDQ1WhcNMjUxMjI4MDkwMDQ1WjAzMTEwLwYDVQQD EyhkYjc1MTc4MTIyOTRhMDI0ZTg1Zjc3ZGY4Nzc5MTU2Y2I0MTlhODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtEJGR5X6YPX0KFrkGgNeOwQdNC+ FcmTVI8xD6hIH3IO3zbiGS7gnzhQy4kx3GEPz/IWp0pi4eHF9EuOu8kH4/TDSjj0 BD1dO6SNjROfGpT4Oh15/ie+6jA0oUrNaYcH+1SXi6JK4Al0QrKrZ0hez9tsI2AF fFDlucL856+T6RfUwfPB6OHl0sZ69CI0caDvGiZsfCX/W2TK4xaGPWvRGvJhWT9+ 2jNCNSn2UpECSllhkTGTVk7B0QEH1od1T9dEW7LuVynP4v7SqhFS7sT4eiftAceF icxB2ud+MrWHD3YlNz2jh15tI8RDz5wjfZIvWVW6X6muRyw0pQsByVfz2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNt1F4EilKAk6F9334d5FWy0Gag6MB8GA1UdIwQY MBaAFDRkdKM8BR0XFSshMizPT/OAi0JwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkdSMG96d0ZIUmNWS3lFeUxNOVA4NENMUW5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8yYjlhNzItNjE4Ni00MTU0LWFlM2It MDE1MjFlNjU4ZTk5LzEvTkdSMG96d0ZIUmNWS3lFeUxNOVA4NENMUW5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8yYjlhNzItNjE4Ni00MTU0LWFlM2ItMDE1MjFlNjU4ZTk5 LzEvTkdSMG96d0ZIUmNWS3lFeUxNOVA4NENMUW5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2Vxc9Hq MGI5ITubTcdb76M+a7iIi9HxSwRK2SxxcM4bMiL6kVp7hY5vuZ5l1lR2KaCMcRvS 7mGsh7GSaIU8ujR0xc2AiuOA0unUmGAezdlBxhQh6DBc70J/MBv0EAzoqT8QTtOY ev/Q0G9sywHw0jw39ovhk54cCWm2eduHIJsBsmKku9kIfQ2NlrWVJed2nzDN98gk 6MSt0vVLWJeR+nHQvEUTjAom/H6vyHyTSGhH+9JJUnYV/PhzjzjuxN8+pSIE+tI9 odHdDZWEYexHwzJWLM69I7SgIVhFHTpgs0w9sildCJwOHhkBGIYspD7G/H/ldzco MTly2fJiDEm9qA== -----END CERTIFICATE-----Generated at Sat Dec 27 17:46:09 2025 by rpki-client