This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json) Hash identifier: rBZZN+w3FXNk9SaEo5GUnKCh+9QHZnwFjh2/A8FQ3d0= Subject key identifier: 87:E1:67:42:2E:99:CC:76:4F:4A:60:A5:A4:7D:F6:88:74:53:C6:81 Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9 Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9 Certificate serial: 019B3AFD380D704B0B3E77A73CCBBF72FCD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft Manifest number: 1427 Signing time: Sat 20 Dec 2025 09:00:31 +0000 Manifest this update: Sat 20 Dec 2025 09:00:31 +0000 Manifest next update: Sun 21 Dec 2025 09:00:31 +0000 Files and hashes: 1: b9QaepP0oxMTo3a9H8MxgSOF6ZM.roa (hash: 1vtB6IOZEJek+700nGKVkQQxvbkoR7RDVA9c6BbAbEM=) 2: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: dvPWIDCdYDbjJd/mvVyNr5GOzPSbnzxgPh/56k0YfFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:38:0d:70:4b:0b:3e:77:a7:3c:cb:bf:72:fc:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9 Validity Not Before: Dec 20 09:00:31 2025 GMT Not After : Dec 21 09:00:31 2025 GMT Subject: CN=87e167422e99cc764f4a60a5a47df6887453c681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:1a:be:1f:45:1d:5b:99:a6:94:85:1f:73: d2:35:b4:ae:58:48:43:f3:ba:b6:8c:b2:2c:28:26: 69:39:20:43:de:fa:dc:33:af:d3:3b:22:78:e0:4c: c3:91:c9:56:60:7f:8d:a2:e7:e4:78:20:69:63:c9: f0:1e:46:33:07:58:16:f0:f7:e4:48:60:56:ec:a2: 70:16:d9:60:c5:9b:dc:fe:43:14:d5:35:16:9a:c2: 3a:a5:db:09:79:63:a9:ef:6c:a7:69:38:42:c8:79: 10:9d:50:2c:7b:04:51:7f:4a:e7:4e:be:f0:84:16: 46:87:f9:78:d1:5a:5c:54:82:5b:26:47:1c:19:a7: d3:1d:38:2b:07:80:c5:53:11:d0:82:68:6b:6b:6a: 21:ea:d0:ef:1b:dc:51:8d:2f:3d:35:c5:62:02:0e: 7e:7c:4d:5b:0b:ac:59:58:1a:bd:d9:31:19:a2:f0: 53:78:85:7e:20:d5:33:47:e8:5e:6c:fe:4e:bd:e0: 31:6a:d8:3d:2d:41:fb:d8:71:72:c1:65:da:7c:e5: d4:82:fc:8b:63:4b:8d:43:dd:f5:23:b5:b6:c7:5b: 9c:85:a3:a3:17:84:a3:2b:2d:6b:e5:c7:fb:b9:fc: 0a:32:08:41:ef:6c:aa:c2:65:6c:9a:ae:49:7c:b3: a0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E1:67:42:2E:99:CC:76:4F:4A:60:A5:A4:7D:F6:88:74:53:C6:81 X509v3 Authority Key Identifier: keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:22:57:d0:bf:8e:00:4d:54:71:56:d5:fd:5a:e1:cf:c6:98: e0:ef:54:25:2a:26:52:4e:1b:fb:02:e2:4d:b9:46:0c:61:9b: c6:77:17:43:9d:5d:eb:bc:68:a7:2a:0b:f2:1e:7e:67:f5:f8: cd:5e:2d:84:56:15:3e:ce:98:3e:78:cc:b0:62:6d:42:c5:46: b4:a8:96:9b:7c:b7:91:38:13:6b:df:22:24:b1:10:c9:86:e5: f4:54:7f:88:b1:d4:bc:84:0e:a9:a5:c2:06:74:7e:77:e5:f2: 3c:20:a6:6e:ce:3e:47:15:0c:24:bf:d0:cc:36:cb:39:e0:c0: 40:df:12:86:c0:7d:45:a0:3f:86:f1:65:5d:4e:62:13:07:e4: 80:9b:0b:7b:a4:2b:c9:8d:d6:fc:36:29:6c:7c:ce:4c:c2:3d: 7b:d6:a5:28:be:56:f4:40:52:55:f1:9e:27:94:cc:36:b5:d5: ac:63:38:ba:a7:2f:cb:78:6a:3d:13:cf:e6:33:fa:9b:7a:af: 97:68:0d:70:73:8e:5f:57:76:6e:8d:fb:b3:26:a7:39:97:72: c9:ba:e9:ac:ac:c6:0b:d6:ee:2c:a1:23:2f:fe:13:c1:11:86: 51:e5:c7:8c:d1:b5:82:ad:45:d4:ab:8b:03:72:ce:b2:e7:ce: 31:72:51:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/TgNcEsLPnenPMu/cvzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMDJlMDY0Yzk4YjMyMzFjM2YyMTQ4YTFjM2Q5YzM4N2Q0 ODllZTkwHhcNMjUxMjIwMDkwMDMxWhcNMjUxMjIxMDkwMDMxWjAzMTEwLwYDVQQD Eyg4N2UxNjc0MjJlOTljYzc2NGY0YTYwYTVhNDdkZjY4ODc0NTNjNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNgavh9FHVuZppSFH3PSNbSuWEhD 87q2jLIsKCZpOSBD3vrcM6/TOyJ44EzDkclWYH+NoufkeCBpY8nwHkYzB1gW8Pfk SGBW7KJwFtlgxZvc/kMU1TUWmsI6pdsJeWOp72ynaThCyHkQnVAsewRRf0rnTr7w hBZGh/l40VpcVIJbJkccGafTHTgrB4DFUxHQgmhra2oh6tDvG9xRjS89NcViAg5+ fE1bC6xZWBq92TEZovBTeIV+INUzR+hebP5OveAxatg9LUH72HFywWXafOXUgvyL Y0uNQ931I7W2x1uchaOjF4SjKy1r5cf7ufwKMghB72yqwmVsmq5JfLOgOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfhZ0Iumcx2T0pgpaR99oh0U8aBMB8GA1UdIwQY MBaAFJ4C4GTJizIxw/IUihw9nDh9SJ7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYt NzUyNTE2ODkwZDNkLzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYtNzUyNTE2ODkwZDNk LzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyJX0L+O AE1UcVbV/Vrhz8aY4O9UJSomUk4b+wLiTblGDGGbxncXQ51d67xopyoL8h5+Z/X4 zV4thFYVPs6YPnjMsGJtQsVGtKiWm3y3kTgTa98iJLEQyYbl9FR/iLHUvIQOqaXC BnR+d+XyPCCmbs4+RxUMJL/QzDbLOeDAQN8ShsB9RaA/hvFlXU5iEwfkgJsLe6Qr yY3W/DYpbHzOTMI9e9alKL5W9EBSVfGeJ5TMNrXVrGM4uqcvy3hqPRPP5jP6m3qv l2gNcHOOX1d2bo37syanOZdyybrprKzGC9buLKEjL/4TwRGGUeXHjNG1gq1F1KuL A3LOsufOMXJRsQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:23 2025 by rpki-client