This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json) Hash identifier: FYRdpjTGinNfpD7Q5jlenYOO2dYayZ86L9Tpyu4JiFM= Subject key identifier: 90:8B:5B:50:7F:60:AE:D5:94:41:35:36:41:18:CF:75:69:97:E9:52 Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Certificate serial: 019B12704AE3ABC907512E3E1E3A9A46AF18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft Manifest number: 177C Signing time: Fri 12 Dec 2025 12:01:47 +0000 Manifest this update: Fri 12 Dec 2025 12:01:47 +0000 Manifest next update: Sat 13 Dec 2025 12:01:47 +0000 Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: f7pqlPgY0KrQW4IEgWsawgqXw6natTxkj89mOhLubOM=) 2: 8wuUCHDoiO-u5k-EpvGe48eFVvY.roa (hash: 8liREnCtlx6CxZif/A697CMWzrfTg26yY6bw/0u19Kc=) 3: dwzGjClilGgqBa83jIlDLO6MhiY.roa (hash: ax5/1FqZ7LpfpWHSsIMG4PE6ZnxsmjJK2plIEm/o0h8=) 4: hNWwx7OL-9adb1_PVQj7dLugRbE.roa (hash: a5RZCNYvOxtuFY3pREa+RhVOW1R7dmnnmbvgTvDFgik=) 5: v_OC8AL3Mq1xajaIUc5DePm85DI.roa (hash: a977IGySg5+WWPVlDhFXuD0DqZ/XdGVdujbzn7Y6iiQ=) 6: wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa (hash: PzO0Fj4BmxOXd+Sy5Mgniwv5ZA+rTUEwL2xB1sXxHvE=) 7: xDz2yFNogKXgNdjcw-9O61_cLr0.roa (hash: xZbD/0bkTbFPWIFZs2iZleXxCUBZQXF3vUVmN0PJ3a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:70:4a:e3:ab:c9:07:51:2e:3e:1e:3a:9a:46:af:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Validity Not Before: Dec 12 12:01:47 2025 GMT Not After : Dec 13 12:01:47 2025 GMT Subject: CN=908b5b507f60aed5944135364118cf756997e952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:92:bc:3b:ae:a8:e9:e5:d3:42:b5:ff:bb:63: b5:b6:1b:b7:b4:d4:bf:4c:66:0c:33:26:64:eb:db: a0:90:f2:58:b2:2d:be:09:2e:da:4e:e7:ec:e9:9d: 7c:8f:72:b5:7a:e6:1b:b7:77:45:6a:f5:48:1e:74: 47:44:b7:49:80:13:15:c9:ed:b8:3d:f3:82:fd:e3: 23:a0:a2:2b:10:61:0a:82:e6:6a:bb:2c:dc:11:cb: f5:6d:3d:df:bb:b0:50:e1:2c:97:c2:88:84:a2:25: 68:c5:65:1a:1a:2c:c9:d5:64:b9:9d:59:d8:a4:ad: 07:ec:b9:f8:cf:10:b4:cf:2e:de:d6:eb:0e:e4:f2: b8:8e:65:05:c9:a9:43:e7:fd:7e:ca:6b:41:ed:fc: fa:a6:53:50:0d:57:22:eb:a1:fd:9d:ce:cb:fc:3c: 02:f5:80:14:68:7b:7b:16:52:19:94:12:4b:00:7c: 53:68:0a:83:9d:73:c0:4b:d0:81:0c:d4:93:48:89: 82:89:4d:29:8c:e4:7d:41:7a:b4:dd:16:59:d4:76: 9e:97:45:12:2a:3e:ee:5b:22:e9:a5:0f:8c:8b:aa: f0:5a:c2:e7:63:f6:16:dc:a7:1a:2d:d1:a0:d7:51: ed:59:03:42:be:b9:ca:93:c1:86:5e:b8:a4:09:b4: 6d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8B:5B:50:7F:60:AE:D5:94:41:35:36:41:18:CF:75:69:97:E9:52 X509v3 Authority Key Identifier: keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:6d:ab:de:63:2a:35:1c:84:c2:9f:ee:35:df:89:41:72:c3: 6a:00:9b:f8:7a:3c:c8:f7:1b:3a:bd:59:a2:62:64:aa:19:97: da:85:ae:80:27:02:45:70:f8:c0:da:42:e3:6a:77:c3:fd:81: e5:56:66:db:f5:1b:79:4b:02:9d:57:db:f1:94:db:bb:72:71: da:72:73:8c:d8:f3:53:69:e4:72:33:18:30:22:dd:24:98:a1: ab:5f:ea:88:f4:53:25:06:5c:60:67:27:54:d4:d2:6e:97:08: 59:60:b6:55:a0:2f:44:1e:cf:27:00:a1:36:cf:54:b5:ea:24: cb:f8:69:12:ac:2d:9a:57:71:a2:07:6a:fa:6f:84:e2:c2:f3: 87:a3:68:73:29:50:ab:38:cf:0b:57:fd:a5:6f:d2:8f:66:64: 56:fe:cc:32:b6:4a:fe:3c:63:88:f3:83:91:81:f1:c9:d3:ff: a8:d8:c5:79:ae:37:4c:08:c5:ef:9a:93:a5:58:34:27:00:49: 00:eb:37:a2:77:f6:c7:15:15:57:25:ef:a2:fe:ea:a1:bc:ee: a4:08:7e:1b:04:6e:a5:4f:88:02:f2:f2:af:d8:27:0c:f2:8c: a3:c5:1c:97:f3:24:f7:e7:be:2a:aa:9d:6e:9a:a8:ad:51:47: b9:29:53:38 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsScErjq8kHUS4+HjqaRq8YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YzllMDMwNWNmZWQ1Nzk0NDQ4NzMyYThiMGJkODQyNzQ1 MGQ4MTMwHhcNMjUxMjEyMTIwMTQ3WhcNMjUxMjEzMTIwMTQ3WjAzMTEwLwYDVQQD Eyg5MDhiNWI1MDdmNjBhZWQ1OTQ0MTM1MzY0MTE4Y2Y3NTY5OTdlOTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpK8O66o6eXTQrX/u2O1thu3tNS/ TGYMMyZk69ugkPJYsi2+CS7aTufs6Z18j3K1euYbt3dFavVIHnRHRLdJgBMVye24 PfOC/eMjoKIrEGEKguZquyzcEcv1bT3fu7BQ4SyXwoiEoiVoxWUaGizJ1WS5nVnY pK0H7Ln4zxC0zy7e1usO5PK4jmUFyalD5/1+ymtB7fz6plNQDVci66H9nc7L/DwC 9YAUaHt7FlIZlBJLAHxTaAqDnXPAS9CBDNSTSImCiU0pjOR9QXq03RZZ1Hael0US Kj7uWyLppQ+Mi6rwWsLnY/YW3KcaLdGg11HtWQNCvrnKk8GGXrikCbRtgwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJCLW1B/YK7VlEE1NkEYz3Vpl+lSMB8GA1UdIwQY MBaAFPnJ4DBc/tV5REhzKosL2EJ0UNgTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jbmdNRnotMVhsRVNITXFpd3ZZUW5SUTJCTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0 LTJmYmIyMDhhZDE4Mi8xLzEtY25nTUZ6LTFYbEVTSE1xaXd2WVFuUlEyQk0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzM3LzM2MTkwZC0xYzZjLTQ4YzYtYTQxNC0yZmJiMjA4YWQx ODIvMS8xLWNuZ01Gei0xWGxFU0hNcWl3dllRblJRMkJNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ22r 3mMqNRyEwp/uNd+JQXLDagCb+Ho8yPcbOr1ZomJkqhmX2oWugCcCRXD4wNpC42p3 w/2B5VZm2/UbeUsCnVfb8ZTbu3Jx2nJzjNjzU2nkcjMYMCLdJJihq1/qiPRTJQZc YGcnVNTSbpcIWWC2VaAvRB7PJwChNs9Uteoky/hpEqwtmldxogdq+m+E4sLzh6No cylQqzjPC1f9pW/Sj2ZkVv7MMrZK/jxjiPODkYHxydP/qNjFea43TAjF75qTpVg0 JwBJAOs3onf2xxUVVyXvov7qobzupAh+GwRupU+IAvLyr9gnDPKMo8Ucl/Mk9+e+ KqqdbpqorVFHuSlTOA== -----END CERTIFICATE-----Generated at Fri Dec 12 14:21:40 2025 by rpki-client