This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json) Hash identifier: V9eZxbAZIXYz3uf/WfVwDd3LxkA27ywcLrUDmxh29rw= Subject key identifier: 82:4D:A4:38:A2:E4:CC:C8:A0:69:31:15:1C:96:3F:01:4B:59:D4:2D Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a Certificate serial: 019B5976B33FB0A0B1D786DF97314CE00C3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft Manifest number: 085D Signing time: Fri 26 Dec 2025 07:01:49 +0000 Manifest this update: Fri 26 Dec 2025 07:01:49 +0000 Manifest next update: Sat 27 Dec 2025 07:01:49 +0000 Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: MthEN0q0XEVCNpjfvTXvHPqcjn1KkDfw7W2XFs9ToeA=) 2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:b3:3f:b0:a0:b1:d7:86:df:97:31:4c:e0:0c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a Validity Not Before: Dec 26 07:01:49 2025 GMT Not After : Dec 27 07:01:49 2025 GMT Subject: CN=824da438a2e4ccc8a06931151c963f014b59d42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b6:e1:19:54:fe:94:4e:c5:3e:48:d3:aa:bf: 02:6e:12:c3:34:e9:c9:36:ec:ca:c0:a4:13:75:82: 19:54:8c:89:b1:52:df:76:cd:cf:2c:df:fa:7f:c8: 16:55:ad:39:be:d9:20:a2:9e:d1:20:6d:41:80:5d: c7:47:c6:c4:3c:6d:99:13:ae:54:cb:7a:02:8f:82: 29:a7:db:1e:84:48:a5:8e:03:08:53:9f:3d:bd:9d: 7c:58:29:66:a5:c8:03:4d:7e:f5:a2:a6:c8:a1:f6: f6:a2:89:fe:af:76:3e:8b:49:bf:92:34:e2:a3:b5: a4:df:41:e5:1e:b2:8e:e5:5b:81:28:c3:49:a3:66: f9:3e:5b:78:d3:45:da:55:72:93:dd:85:e0:a1:75: e7:f0:81:b1:80:a1:19:8a:8a:91:1c:e0:93:29:38: ab:a4:5f:ca:5a:85:2c:ca:4f:93:d6:4b:44:4b:3a: 7b:df:0a:d7:42:72:d1:36:a3:08:03:52:8d:e3:46: 9f:60:1b:ec:52:ea:fc:81:d3:d2:85:85:a9:89:81: bc:91:35:f6:2c:42:a2:1b:7f:dd:64:ef:93:6a:27: 66:2e:fc:9c:6f:cd:23:92:9b:ca:ab:d7:7e:9b:17: 38:f1:c6:54:29:a3:a5:30:a6:66:b1:29:1c:c2:df: 33:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4D:A4:38:A2:E4:CC:C8:A0:69:31:15:1C:96:3F:01:4B:59:D4:2D X509v3 Authority Key Identifier: keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:fa:44:2c:8f:50:40:0e:71:66:54:84:c0:fe:22:41:54:17: 6c:ee:c3:00:5c:e4:4d:12:cc:48:15:80:f6:9d:2f:d2:4a:83: 12:34:07:90:77:6f:64:b0:12:f8:c7:fc:8b:62:1c:c4:15:48: f5:da:09:a8:76:37:36:f2:b5:74:48:b2:dc:29:b9:47:1c:1e: c8:c7:a1:a9:6d:59:1d:fc:56:53:ac:8e:1f:70:a2:bf:29:06: f3:29:7a:83:41:6a:77:54:c7:cf:cf:6e:fe:f2:da:c8:84:dc: f2:ae:c7:d5:12:9c:63:26:92:42:bc:51:1f:3e:22:05:b6:8b: 1a:cc:6a:38:f3:41:94:34:90:e1:ca:f6:98:e0:83:58:62:a1: 02:dc:40:d0:29:a7:b9:34:e4:ed:6b:30:20:a0:df:1f:33:46: 8e:ea:d3:ac:66:95:67:0b:7d:f5:e5:9a:2e:71:0c:94:a5:5f: 03:10:4a:24:16:30:53:12:2e:83:9d:ac:35:a1:20:64:c2:fa: d5:6c:0c:f3:2f:90:10:63:2f:dd:ae:0d:ad:06:65:7b:7b:fe: 58:75:5f:b0:75:50:f4:5e:81:86:ba:cd:31:f3:16:dc:da:78: d9:f9:b2:b3:d4:02:30:2c:1d:cf:48:06:00:69:92:5c:b3:ea: d5:8c:73:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdrM/sKCx14bflzFM4Aw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNjIwZjMxYjQ5OTdjNzM0NWJjNjZiNDZiNDNkNjg2YmYw MDkzMWEwHhcNMjUxMjI2MDcwMTQ5WhcNMjUxMjI3MDcwMTQ5WjAzMTEwLwYDVQQD Eyg4MjRkYTQzOGEyZTRjY2M4YTA2OTMxMTUxYzk2M2YwMTRiNTlkNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57bhGVT+lE7FPkjTqr8CbhLDNOnJ NuzKwKQTdYIZVIyJsVLfds3PLN/6f8gWVa05vtkgop7RIG1BgF3HR8bEPG2ZE65U y3oCj4Ipp9sehEiljgMIU589vZ18WClmpcgDTX71oqbIofb2oon+r3Y+i0m/kjTi o7Wk30HlHrKO5VuBKMNJo2b5Plt400XaVXKT3YXgoXXn8IGxgKEZioqRHOCTKTir pF/KWoUsyk+T1ktESzp73wrXQnLRNqMIA1KN40afYBvsUur8gdPShYWpiYG8kTX2 LEKiG3/dZO+TaidmLvycb80jkpvKq9d+mxc48cZUKaOlMKZmsSkcwt8zNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJNpDii5MzIoGkxFRyWPwFLWdQtMB8GA1UdIwQY MBaAFJxiDzG0mXxzRbxmtGtD1oa/AJMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2Qt NGI4NzkzZGI3NDYwLzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2QtNGI4NzkzZGI3NDYw LzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/pELI9Q QA5xZlSEwP4iQVQXbO7DAFzkTRLMSBWA9p0v0kqDEjQHkHdvZLAS+Mf8i2IcxBVI 9doJqHY3NvK1dEiy3Cm5RxweyMehqW1ZHfxWU6yOH3CivykG8yl6g0Fqd1THz89u /vLayITc8q7H1RKcYyaSQrxRHz4iBbaLGsxqOPNBlDSQ4cr2mOCDWGKhAtxA0Cmn uTTk7WswIKDfHzNGjurTrGaVZwt99eWaLnEMlKVfAxBKJBYwUxIug52sNaEgZML6 1WwM8y+QEGMv3a4NrQZle3v+WHVfsHVQ9F6BhrrNMfMW3Np42fmys9QCMCwdz0gG AGmSXLPq1YxzgA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:23 2025 by rpki-client