This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft File: nGCyJ8t1doofV4Vuw1M8loSCYZw.mft (raw, json) Hash identifier: ivLfNWeqtnbIupxpRbvHMvZvrwpDI8b4qiVzYu/wSx0= Subject key identifier: 52:76:C3:B9:23:C2:96:9A:D4:DF:22:75:A0:4E:53:36:D4:95:15:AB Authority key identifier: 9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C Certificate issuer: /CN=9c60b227cb75768a1f57856ec3533c968482619c Certificate serial: 019B3CEBA544895992CCA138FC3BC605FEF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft Manifest number: 163A Signing time: Sat 20 Dec 2025 18:00:34 +0000 Manifest this update: Sat 20 Dec 2025 18:00:34 +0000 Manifest next update: Sun 21 Dec 2025 18:00:34 +0000 Files and hashes: 1: nGCyJ8t1doofV4Vuw1M8loSCYZw.crl (hash: 607u9+Sb91aUgpBKxr3Oj6K06/bwQ0GYDw2eKJaWnao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:a5:44:89:59:92:cc:a1:38:fc:3b:c6:05:fe:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c60b227cb75768a1f57856ec3533c968482619c Validity Not Before: Dec 20 18:00:34 2025 GMT Not After : Dec 21 18:00:34 2025 GMT Subject: CN=5276c3b923c2969ad4df2275a04e5336d49515ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:cc:b6:2b:d7:ee:4c:1d:f3:29:dc:ca:56: 08:d2:da:32:53:38:5f:71:8e:0f:45:7a:15:65:24: 56:fa:9d:2b:a9:77:fc:b8:34:79:80:dc:d0:82:92: 4d:83:e5:6d:05:9f:4c:ab:7d:8a:2e:54:85:66:7f: 37:57:d2:e8:15:e4:f3:2b:78:79:c6:fe:da:66:98: b8:48:6f:89:3e:75:4e:99:5b:d8:f1:d4:dd:fa:9a: 1a:4a:bd:74:af:85:9c:0e:0e:24:a0:5a:96:98:23: 33:56:c2:68:7e:8e:1a:11:5d:2e:7e:15:51:39:ea: bc:09:98:1c:24:fe:a4:27:8d:cc:ca:f9:e7:31:60: 4a:5a:de:f6:59:c7:c1:2a:c2:cc:51:af:49:70:21: b2:0c:aa:dd:f9:03:81:4a:8a:23:60:21:e5:28:3e: a4:d0:e5:16:db:3b:4d:ad:76:3e:ab:c1:d7:56:40: 8f:33:6d:4c:3b:08:bb:6d:ff:97:c9:a7:b1:fc:2d: 2f:cc:63:bb:31:f1:18:b9:04:1a:ee:c2:df:e4:c6: ff:07:bf:7a:be:cb:a7:db:b8:26:a2:ab:62:b5:b4: 06:7a:e9:0e:e8:1d:66:15:e4:5a:73:9e:c9:4d:80: 74:ef:48:dc:77:99:1e:7e:a9:e2:cf:48:b2:f1:fe: a9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:76:C3:B9:23:C2:96:9A:D4:DF:22:75:A0:4E:53:36:D4:95:15:AB X509v3 Authority Key Identifier: keyid:9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:01:2f:50:12:a4:68:63:c9:d3:6f:d0:ee:7f:4c:b4:6c:26: b8:ee:89:6e:95:29:ed:8f:ab:34:49:fc:4d:d1:cb:72:51:2b: 22:f9:ba:8d:49:d8:63:12:cc:d0:2e:a6:95:16:44:4d:55:3e: 66:97:c5:71:1b:bc:81:43:4e:f8:aa:c4:60:da:59:c1:e0:27: c1:09:05:aa:e2:4c:b2:ad:19:fb:76:ba:b3:41:15:2b:79:2a: 0a:fe:cb:d4:a4:c7:f3:2f:82:df:9b:92:ec:a5:1a:5a:0b:89: 66:30:02:37:44:29:16:39:ef:80:77:3a:85:37:04:3e:53:c5: e8:0f:5b:02:74:a2:1d:c9:04:ec:27:db:c1:fc:b1:fa:fd:6a: f0:03:d6:de:4e:08:a9:16:a2:17:33:a4:9d:1f:d3:a4:63:7f: be:a1:3c:d2:cb:06:48:a7:11:e0:13:79:d2:57:52:4d:87:f6: 1a:3e:23:33:a4:35:ff:45:60:5c:f7:1d:55:79:20:26:c5:f8: f5:2b:ee:c1:0c:ca:4b:7f:66:c1:ef:40:b1:68:d8:6b:d7:4c: 6f:1a:35:9f:02:b1:29:7b:6f:8d:88:d3:29:21:3d:5c:c5:7a: 63:53:f5:64:eb:f5:c9:99:14:e5:de:02:5b:7e:41:45:f9:41: 8b:d1:57:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs866VEiVmSzKE4/DvGBf72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNjBiMjI3Y2I3NTc2OGExZjU3ODU2ZWMzNTMzYzk2ODQ4 MjYxOWMwHhcNMjUxMjIwMTgwMDM0WhcNMjUxMjIxMTgwMDM0WjAzMTEwLwYDVQQD Eyg1Mjc2YzNiOTIzYzI5NjlhZDRkZjIyNzVhMDRlNTMzNmQ0OTUxNWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR3MtivX7kwd8yncylYI0toyUzhf cY4PRXoVZSRW+p0rqXf8uDR5gNzQgpJNg+VtBZ9Mq32KLlSFZn83V9LoFeTzK3h5 xv7aZpi4SG+JPnVOmVvY8dTd+poaSr10r4WcDg4koFqWmCMzVsJofo4aEV0ufhVR Oeq8CZgcJP6kJ43MyvnnMWBKWt72WcfBKsLMUa9JcCGyDKrd+QOBSoojYCHlKD6k 0OUW2ztNrXY+q8HXVkCPM21MOwi7bf+Xyaex/C0vzGO7MfEYuQQa7sLf5Mb/B796 vsun27gmoqtitbQGeukO6B1mFeRac57JTYB070jcd5kefqniz0iy8f6pbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJ2w7kjwpaa1N8idaBOUzbUlRWrMB8GA1UdIwQY MBaAFJxgsifLdXaKH1eFbsNTPJaEgmGcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkdDeUo4dDFkb29mVjRWdXcxTThsb1NDWVp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xMWM5OWYtNGZkNS00NTIyLTg1YzQt ODkxOGEyOGM0ZjdjLzEvbkdDeUo4dDFkb29mVjRWdXcxTThsb1NDWVp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xMWM5OWYtNGZkNS00NTIyLTg1YzQtODkxOGEyOGM0Zjdj LzEvbkdDeUo4dDFkb29mVjRWdXcxTThsb1NDWVp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAEvUBKk aGPJ02/Q7n9MtGwmuO6JbpUp7Y+rNEn8TdHLclErIvm6jUnYYxLM0C6mlRZETVU+ ZpfFcRu8gUNO+KrEYNpZweAnwQkFquJMsq0Z+3a6s0EVK3kqCv7L1KTH8y+C35uS 7KUaWguJZjACN0QpFjnvgHc6hTcEPlPF6A9bAnSiHckE7Cfbwfyx+v1q8APW3k4I qRaiFzOknR/TpGN/vqE80ssGSKcR4BN50ldSTYf2Gj4jM6Q1/0VgXPcdVXkgJsX4 9SvuwQzKS39mwe9AsWjYa9dMbxo1nwKxKXtvjYjTKSE9XMV6Y1P1ZOv1yZkU5d4C W35BRflBi9FXQA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:47:30 2025 by rpki-client