This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft File: nGCyJ8t1doofV4Vuw1M8loSCYZw.mft (raw, json) Hash identifier: UHWIevXrV6iF6LSceWKddn0CsaFrPMyuucYDOgoQCv0= Subject key identifier: 11:D2:F4:3E:3B:89:F8:97:25:0E:88:63:24:2A:6F:BF:BD:E4:16:9F Authority key identifier: 9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C Certificate issuer: /CN=9c60b227cb75768a1f57856ec3533c968482619c Certificate serial: 019B42B6CC1F256C1996B40016BFAB416219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft Manifest number: 163D Signing time: Sun 21 Dec 2025 21:00:34 +0000 Manifest this update: Sun 21 Dec 2025 21:00:34 +0000 Manifest next update: Mon 22 Dec 2025 21:00:34 +0000 Files and hashes: 1: nGCyJ8t1doofV4Vuw1M8loSCYZw.crl (hash: +NzkIH3bDjgnWIhDi9hH9fxwu+W4bZ33x+85Pr+pWac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:cc:1f:25:6c:19:96:b4:00:16:bf:ab:41:62:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c60b227cb75768a1f57856ec3533c968482619c Validity Not Before: Dec 21 21:00:34 2025 GMT Not After : Dec 22 21:00:34 2025 GMT Subject: CN=11d2f43e3b89f897250e8863242a6fbfbde4169f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:26:05:f6:af:72:02:f4:55:b7:b9:7a:73: 08:57:d5:e6:9d:cb:ec:9a:e7:e7:7d:ec:3c:86:0f: b9:82:33:17:6d:00:1d:d8:52:ed:45:db:cb:ac:51: a0:28:27:2a:a2:09:ee:04:70:82:c3:b0:16:69:b4: 57:a7:1f:a1:f8:ee:b4:76:09:96:be:ff:e2:ef:9e: 0b:01:d8:fa:61:d1:8c:fa:68:30:71:e4:fa:48:e9: 47:34:4a:b5:1a:18:71:3f:b9:7e:fe:17:d3:0a:21: 7e:7c:e9:ed:da:0f:b0:a5:0d:2f:82:e8:7b:0e:6f: 64:43:23:dd:ba:cd:25:3c:a3:e8:f7:60:17:a1:ab: b4:e1:63:7f:8f:5d:66:ae:0c:7a:2a:94:d4:38:f1: b1:c6:90:19:f1:8c:8f:af:28:4b:60:d4:f9:42:a1: a5:f0:c2:be:21:b5:f6:34:3f:0e:b4:fc:ef:7d:24: 71:ad:a6:a6:49:4b:33:87:5f:80:43:eb:c0:2a:cf: d1:97:94:e1:38:d6:90:44:20:f5:fd:f4:3b:21:69: 98:a8:23:e8:8f:d6:92:4e:4a:cb:31:83:f9:39:fa: 5a:39:ba:c3:2a:02:71:d5:d3:22:05:c8:33:bd:b8: 8b:17:35:fd:4d:55:46:2b:63:0e:52:a0:a5:3b:78: 52:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D2:F4:3E:3B:89:F8:97:25:0E:88:63:24:2A:6F:BF:BD:E4:16:9F X509v3 Authority Key Identifier: keyid:9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b2:8a:f0:de:a6:b5:e2:38:64:9a:e0:4d:8d:19:5d:03:3f: 5c:ab:b0:cd:af:40:00:f8:e9:0f:33:65:39:d3:ad:02:9d:ab: 6b:6e:bf:e9:d8:a6:12:26:61:68:a5:a8:65:1a:64:c0:de:f3: 40:e9:17:4e:d8:43:d0:db:4c:31:94:87:16:88:12:b0:2a:c0: 45:13:57:77:cc:6e:ee:b3:b4:7b:85:6f:5b:d6:53:0c:8e:d1: f2:15:c2:65:19:ed:c7:cc:e8:cf:70:e5:d7:62:d1:b7:4f:b5: de:ba:bf:47:62:d9:a8:66:cc:2d:9d:dc:83:d2:58:01:fa:8b: c7:f5:1a:29:27:08:8b:51:f9:81:f8:c1:27:55:59:17:2c:2c: dd:77:5d:14:e6:0a:3e:e9:7f:f8:21:f8:07:5f:6e:54:0c:3e: 78:bb:8e:a5:12:91:7e:ba:ca:a7:24:e2:ae:8b:bd:67:7f:0f: 20:29:98:f8:f8:d0:d6:17:c5:c0:2d:10:6c:46:59:79:71:ac: 1e:90:f8:48:97:5e:b2:cb:5a:e0:b9:45:00:7b:61:ed:7e:1d: 4d:a2:61:ae:b5:ae:14:37:b1:12:f8:54:34:5f:b6:d5:0c:16: 14:d9:97:27:57:3e:c7:d4:d2:2e:86:0d:c8:51:92:e4:f0:c0: f2:8a:31:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtswfJWwZlrQAFr+rQWIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNjBiMjI3Y2I3NTc2OGExZjU3ODU2ZWMzNTMzYzk2ODQ4 MjYxOWMwHhcNMjUxMjIxMjEwMDM0WhcNMjUxMjIyMjEwMDM0WjAzMTEwLwYDVQQD EygxMWQyZjQzZTNiODlmODk3MjUwZTg4NjMyNDJhNmZiZmJkZTQxNjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ0mBfavcgL0Vbe5enMIV9Xmncvs mufnfew8hg+5gjMXbQAd2FLtRdvLrFGgKCcqognuBHCCw7AWabRXpx+h+O60dgmW vv/i754LAdj6YdGM+mgwceT6SOlHNEq1GhhxP7l+/hfTCiF+fOnt2g+wpQ0vguh7 Dm9kQyPdus0lPKPo92AXoau04WN/j11mrgx6KpTUOPGxxpAZ8YyPryhLYNT5QqGl 8MK+IbX2ND8OtPzvfSRxraamSUszh1+AQ+vAKs/Rl5ThONaQRCD1/fQ7IWmYqCPo j9aSTkrLMYP5OfpaObrDKgJx1dMiBcgzvbiLFzX9TVVGK2MOUqClO3hSYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHS9D47ifiXJQ6IYyQqb7+95BafMB8GA1UdIwQY MBaAFJxgsifLdXaKH1eFbsNTPJaEgmGcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkdDeUo4dDFkb29mVjRWdXcxTThsb1NDWVp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xMWM5OWYtNGZkNS00NTIyLTg1YzQt ODkxOGEyOGM0ZjdjLzEvbkdDeUo4dDFkb29mVjRWdXcxTThsb1NDWVp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xMWM5OWYtNGZkNS00NTIyLTg1YzQtODkxOGEyOGM0Zjdj LzEvbkdDeUo4dDFkb29mVjRWdXcxTThsb1NDWVp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7KK8N6m teI4ZJrgTY0ZXQM/XKuwza9AAPjpDzNlOdOtAp2ra26/6dimEiZhaKWoZRpkwN7z QOkXTthD0NtMMZSHFogSsCrARRNXd8xu7rO0e4VvW9ZTDI7R8hXCZRntx8zoz3Dl 12LRt0+13rq/R2LZqGbMLZ3cg9JYAfqLx/UaKScIi1H5gfjBJ1VZFyws3XddFOYK Pul/+CH4B19uVAw+eLuOpRKRfrrKpyTirou9Z38PICmY+PjQ1hfFwC0QbEZZeXGs HpD4SJdessta4LlFAHth7X4dTaJhrrWuFDexEvhUNF+21QwWFNmXJ1c+x9TSLoYN yFGS5PDA8oox9g== -----END CERTIFICATE-----Generated at Mon Dec 22 00:10:22 2025 by rpki-client