This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json) Hash identifier: J2HLh730+dBE6uKY3d3bciTz1+NW+AMqE8menpiFZAU= Subject key identifier: 85:D2:8D:B6:89:51:9E:6C:53:63:3A:9D:97:C3:F0:7C:15:B7:E2:E4 Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Certificate serial: 019B3532EBCD65DC922F423299B166B4F1E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft Manifest number: 178E Signing time: Fri 19 Dec 2025 06:01:28 +0000 Manifest this update: Fri 19 Dec 2025 06:01:28 +0000 Manifest next update: Sat 20 Dec 2025 06:01:28 +0000 Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: EIPhYDhBX3jOX22yU75EsqDdmf+HYadQ3rrgZA9s0/g=) 2: 8wuUCHDoiO-u5k-EpvGe48eFVvY.roa (hash: 8liREnCtlx6CxZif/A697CMWzrfTg26yY6bw/0u19Kc=) 3: dwzGjClilGgqBa83jIlDLO6MhiY.roa (hash: ax5/1FqZ7LpfpWHSsIMG4PE6ZnxsmjJK2plIEm/o0h8=) 4: hNWwx7OL-9adb1_PVQj7dLugRbE.roa (hash: a5RZCNYvOxtuFY3pREa+RhVOW1R7dmnnmbvgTvDFgik=) 5: v_OC8AL3Mq1xajaIUc5DePm85DI.roa (hash: a977IGySg5+WWPVlDhFXuD0DqZ/XdGVdujbzn7Y6iiQ=) 6: wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa (hash: PzO0Fj4BmxOXd+Sy5Mgniwv5ZA+rTUEwL2xB1sXxHvE=) 7: xDz2yFNogKXgNdjcw-9O61_cLr0.roa (hash: xZbD/0bkTbFPWIFZs2iZleXxCUBZQXF3vUVmN0PJ3a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:eb:cd:65:dc:92:2f:42:32:99:b1:66:b4:f1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Validity Not Before: Dec 19 06:01:28 2025 GMT Not After : Dec 20 06:01:28 2025 GMT Subject: CN=85d28db689519e6c53633a9d97c3f07c15b7e2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a4:42:73:e4:3b:ea:09:21:20:d1:e6:3e:fe: 5b:34:bf:9d:21:89:fb:bd:98:d2:13:5f:8d:dc:84: e2:b3:43:65:bc:e1:f1:b9:b1:07:9e:1f:3e:fa:18: e8:f6:93:1c:77:85:79:e0:d5:2a:6d:89:5f:7f:72: 77:d5:ed:84:de:51:46:3f:7e:0a:b8:ef:3c:38:d6: 6f:65:4d:68:19:99:6c:8b:df:dd:81:9f:e8:22:42: 83:2b:19:b9:45:3c:77:54:0a:9a:95:30:bc:87:3f: 80:a8:01:33:18:fd:c5:16:43:dc:ad:47:71:58:d1: dc:50:98:5a:c8:ff:8b:0c:e3:b8:7b:1c:53:ca:45: e0:87:70:cc:69:18:12:8d:e0:28:f1:a6:99:01:0a: 77:5d:44:3a:d1:aa:6d:87:54:a2:80:55:fb:06:1a: 03:61:45:11:41:42:35:27:7c:fd:a7:78:ee:d2:2c: 0b:85:ac:5b:e3:be:c9:5d:35:11:c8:b3:55:fe:74: 2b:61:e8:42:81:85:d3:a0:25:1a:62:35:dd:7a:05: ea:36:2f:3d:06:0a:a8:4e:1d:eb:5f:69:9c:1e:7b: 2e:eb:a4:56:c3:d9:08:40:f6:51:65:0e:d2:2d:8e: 6f:af:80:be:4c:4e:fa:f0:dc:24:68:72:1d:5f:a5: 82:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D2:8D:B6:89:51:9E:6C:53:63:3A:9D:97:C3:F0:7C:15:B7:E2:E4 X509v3 Authority Key Identifier: keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:56:ed:f8:95:68:9a:96:a9:c3:51:eb:be:13:e9:f4:99:d5: 8e:3c:aa:3e:78:ad:44:2f:f3:15:7d:cd:de:81:90:92:b6:95: 4b:bf:82:38:c8:7c:5d:30:4f:84:8b:40:26:b2:e5:fa:52:7b: 75:e9:63:f5:84:e4:c7:ca:14:1f:5a:d7:55:fa:3e:bc:2d:a1: dd:c1:5e:00:df:cc:45:cf:b5:73:a0:f6:bb:88:f5:c8:b6:a4: 6a:e8:39:13:6c:43:ed:9f:05:66:3c:7c:2e:d1:2f:23:71:43: e0:19:d2:1a:3c:5f:6e:c9:be:83:c8:ac:8c:65:28:98:6c:85: 16:70:dd:2e:39:89:c0:b7:89:ba:c2:5c:68:eb:3b:ba:4d:76: ef:e7:c9:5a:59:60:ee:9c:15:db:90:52:73:91:82:88:28:9c: 82:ad:a6:11:cf:5b:bd:36:a1:b0:a4:8c:98:3b:d1:ca:6f:95: ae:b8:a0:89:1d:ca:a3:4c:0c:13:bc:07:69:b1:17:76:d2:0d: d1:bb:80:78:cb:96:4f:c2:50:07:54:b9:40:02:41:4e:a7:09: 9d:70:8e:76:3e:66:61:c6:47:f6:28:ae:60:80:9e:79:f1:40: 43:06:d2:b5:cf:87:96:b7:47:40:66:07:4b:ab:4a:00:e8:a5: 77:23:ff:bd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs1MuvNZdySL0IymbFmtPHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YzllMDMwNWNmZWQ1Nzk0NDQ4NzMyYThiMGJkODQyNzQ1 MGQ4MTMwHhcNMjUxMjE5MDYwMTI4WhcNMjUxMjIwMDYwMTI4WjAzMTEwLwYDVQQD Eyg4NWQyOGRiNjg5NTE5ZTZjNTM2MzNhOWQ5N2MzZjA3YzE1YjdlMmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKRCc+Q76gkhINHmPv5bNL+dIYn7 vZjSE1+N3ITis0NlvOHxubEHnh8++hjo9pMcd4V54NUqbYlff3J31e2E3lFGP34K uO88ONZvZU1oGZlsi9/dgZ/oIkKDKxm5RTx3VAqalTC8hz+AqAEzGP3FFkPcrUdx WNHcUJhayP+LDOO4exxTykXgh3DMaRgSjeAo8aaZAQp3XUQ60apth1SigFX7BhoD YUURQUI1J3z9p3ju0iwLhaxb477JXTURyLNV/nQrYehCgYXToCUaYjXdegXqNi89 BgqoTh3rX2mcHnsu66RWw9kIQPZRZQ7SLY5vr4C+TE768NwkaHIdX6WCaQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIXSjbaJUZ5sU2M6nZfD8HwVt+LkMB8GA1UdIwQY MBaAFPnJ4DBc/tV5REhzKosL2EJ0UNgTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jbmdNRnotMVhsRVNITXFpd3ZZUW5SUTJCTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0 LTJmYmIyMDhhZDE4Mi8xLzEtY25nTUZ6LTFYbEVTSE1xaXd2WVFuUlEyQk0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzM3LzM2MTkwZC0xYzZjLTQ4YzYtYTQxNC0yZmJiMjA4YWQx ODIvMS8xLWNuZ01Gei0xWGxFU0hNcWl3dllRblJRMkJNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVbt +JVompapw1HrvhPp9JnVjjyqPnitRC/zFX3N3oGQkraVS7+COMh8XTBPhItAJrLl +lJ7delj9YTkx8oUH1rXVfo+vC2h3cFeAN/MRc+1c6D2u4j1yLakaug5E2xD7Z8F Zjx8LtEvI3FD4BnSGjxfbsm+g8isjGUomGyFFnDdLjmJwLeJusJcaOs7uk127+fJ Wllg7pwV25BSc5GCiCicgq2mEc9bvTahsKSMmDvRym+VrrigiR3Ko0wME7wHabEX dtIN0buAeMuWT8JQB1S5QAJBTqcJnXCOdj5mYcZH9iiuYICeefFAQwbStc+HlrdH QGYHS6tKAOildyP/vQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:13 2025 by rpki-client