This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft File: NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json) Hash identifier: Js+smq5+G89QZKbTufWtrS4BrHPjyXuN2Hk0XsuuV8Q= Subject key identifier: D3:24:B6:05:5D:44:13:E9:E6:60:93:1A:B2:D7:07:C9:3D:2E:08:92 Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9 Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9 Certificate serial: 019B3D5A3A030DE704554FE4EEE62310AED9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 20:01:21 +0000 Manifest this update: Sat 20 Dec 2025 20:01:21 +0000 Manifest next update: Sun 21 Dec 2025 20:01:21 +0000 Files and hashes: 1: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: 80ukwfRLdwdmoxzGJ8e0BjB6WftpcW2lYsqKLt91psQ=) 2: qWxHxzkwFGcxa5jSluitx-sE42Y.roa (hash: 3aDiNAN4onF/Cdaq+yTsD+jmRJ2OmMmFOaHRV5Fmhp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:3a:03:0d:e7:04:55:4f:e4:ee:e6:23:10:ae:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9 Validity Not Before: Dec 20 20:01:21 2025 GMT Not After : Dec 21 20:01:21 2025 GMT Subject: CN=d324b6055d4413e9e660931ab2d707c93d2e0892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:17:7b:61:4e:7e:7c:ef:5a:cb:9c:eb:48: 35:43:dc:12:1e:f3:82:cd:e6:e2:38:44:76:ba:fc: 47:c8:c8:f0:b4:7b:4f:9c:ca:d2:7e:77:e1:be:78: a4:37:46:3a:45:00:c1:a1:c5:5b:57:86:7d:95:21: 70:2e:b3:44:2e:3e:50:7e:d9:62:c8:58:2c:39:89: 6d:6c:ed:0b:18:b1:52:64:34:6d:03:ed:f4:8a:7a: d5:1a:18:53:7f:ca:1d:98:b3:46:55:9b:37:84:58: 83:e4:74:30:9e:21:ac:77:99:ba:51:3a:18:51:8d: 8e:c8:81:d7:09:3a:16:12:df:7c:4a:8b:87:aa:90: 41:40:35:f5:58:4d:2e:da:09:5c:c1:b3:12:c6:fa: b7:a2:ca:de:4c:48:8b:14:0a:30:72:fc:28:8d:f0: 35:91:d5:d8:73:40:56:f0:11:b2:8c:8b:87:d9:d3: 6a:98:88:8f:4b:d1:ad:13:7c:b7:8e:78:d8:80:f5: a4:37:4c:db:9f:e9:d4:6e:55:1a:8b:7a:3e:75:bf: d5:56:a0:80:8a:e5:28:1d:99:cc:ac:1d:26:0c:aa: c2:1d:5f:ce:fd:aa:a2:39:2e:64:5c:7e:23:94:5c: ad:af:39:b4:13:f4:5c:05:69:a4:c5:6b:51:b3:23: 9a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:24:B6:05:5D:44:13:E9:E6:60:93:1A:B2:D7:07:C9:3D:2E:08:92 X509v3 Authority Key Identifier: keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:05:8d:2c:4c:83:93:1c:b2:d6:cd:42:de:c7:82:37:37:79: 53:49:4a:b0:fd:8f:38:32:52:99:7a:9f:a8:5b:bc:12:28:ef: eb:22:43:50:e8:07:38:5c:6c:2a:88:f7:99:ed:fd:f8:b2:81: 6a:0a:68:3d:ca:60:49:3e:54:74:94:a6:db:a5:cb:5c:df:03: 11:71:59:17:22:bc:de:ba:08:3b:3f:a3:ab:6d:b0:06:bd:80: 0e:af:98:66:91:57:0a:b9:e1:8a:e0:5d:fa:5c:83:a9:8c:e2: 9e:64:30:29:37:f8:ea:83:22:7d:7b:7a:60:b5:19:7c:27:84: 5b:a0:de:07:25:41:ec:f8:ba:e1:1f:09:1e:a0:1f:d5:fa:2a: 77:89:3d:0e:be:f7:d1:1d:69:60:2d:ab:b3:fe:da:db:8f:f4: 93:a2:56:d1:52:6d:98:93:b4:6e:d0:96:bb:fb:df:f4:78:a4: 61:dc:57:f8:5b:2e:43:b7:14:61:91:ad:b8:e8:74:9a:f9:cc: 90:c4:e6:a3:63:ce:aa:62:c6:09:c5:f1:35:dc:3e:0b:c1:88: a8:00:49:01:d9:1b:16:8d:da:62:30:73:93:da:f7:dc:3e:7b: 7f:fc:38:95:bf:72:09:5a:a6:12:f0:6e:df:ac:c8:31:88:e4: 15:a0:cf:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WjoDDecEVU/k7uYjEK7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NmNhYjU5NGJiZGE5YjQ0MGZkYTdkMzk3NGNiZDQ0MWM5 OGU1YzkwHhcNMjUxMjIwMjAwMTIxWhcNMjUxMjIxMjAwMTIxWjAzMTEwLwYDVQQD EyhkMzI0YjYwNTVkNDQxM2U5ZTY2MDkzMWFiMmQ3MDdjOTNkMmUwODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ8Xe2FOfnzvWsuc60g1Q9wSHvOC zebiOER2uvxHyMjwtHtPnMrSfnfhvnikN0Y6RQDBocVbV4Z9lSFwLrNELj5Qftli yFgsOYltbO0LGLFSZDRtA+30inrVGhhTf8odmLNGVZs3hFiD5HQwniGsd5m6UToY UY2OyIHXCToWEt98SouHqpBBQDX1WE0u2glcwbMSxvq3osreTEiLFAowcvwojfA1 kdXYc0BW8BGyjIuH2dNqmIiPS9GtE3y3jnjYgPWkN0zbn+nUblUai3o+db/VVqCA iuUoHZnMrB0mDKrCHV/O/aqiOS5kXH4jlFytrzm0E/RcBWmkxWtRsyOaDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMktgVdRBPp5mCTGrLXB8k9LgiSMB8GA1UdIwQY MBaAFDRsq1lLvam0QP2n05dMvUQcmOXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85ZWY2NmQtMmQ1Zi00OWQ4LTkwNGMt N2ExM2E1ZWZhZjVlLzEvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy85ZWY2NmQtMmQ1Zi00OWQ4LTkwNGMtN2ExM2E1ZWZhZjVl LzEvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgWNLEyD kxyy1s1C3seCNzd5U0lKsP2PODJSmXqfqFu8Eijv6yJDUOgHOFxsKoj3me39+LKB agpoPcpgST5UdJSm26XLXN8DEXFZFyK83roIOz+jq22wBr2ADq+YZpFXCrnhiuBd +lyDqYzinmQwKTf46oMifXt6YLUZfCeEW6DeByVB7Pi64R8JHqAf1foqd4k9Dr73 0R1pYC2rs/7a24/0k6JW0VJtmJO0btCWu/vf9HikYdxX+FsuQ7cUYZGtuOh0mvnM kMTmo2POqmLGCcXxNdw+C8GIqABJAdkbFo3aYjBzk9r33D57f/w4lb9yCVqmEvBu 36zIMYjkFaDPWw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:43:55 2025 by rpki-client