This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft File: NGbkl-i6koMIR7TYtnEDJdI72oU.mft (raw, json) Hash identifier: EamLA5/UJJGVgJO5NvSn98oCHzWtgd+TihWIxHXgrM4= Subject key identifier: 69:7D:FD:47:F4:06:51:5E:79:1E:D5:C4:7F:B8:C2:64:8D:3A:BE:36 Authority key identifier: 34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85 Certificate issuer: /CN=3466e497e8ba92830847b4d8b6710325d23bda85 Certificate serial: 019B18717749652C0BFF0A16440AA42EA7B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft Manifest number: 07D4 Signing time: Sat 13 Dec 2025 16:00:47 +0000 Manifest this update: Sat 13 Dec 2025 16:00:47 +0000 Manifest next update: Sun 14 Dec 2025 16:00:47 +0000 Files and hashes: 1: NGbkl-i6koMIR7TYtnEDJdI72oU.crl (hash: vDYJTQDa0XyircpQzA6l1U/jfenGdubn8GDumbhanKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:77:49:65:2c:0b:ff:0a:16:44:0a:a4:2e:a7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3466e497e8ba92830847b4d8b6710325d23bda85 Validity Not Before: Dec 13 16:00:47 2025 GMT Not After : Dec 14 16:00:47 2025 GMT Subject: CN=697dfd47f406515e791ed5c47fb8c2648d3abe36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:3d:74:27:7d:a0:6a:9c:cb:05:c8:57:42: 5d:7b:11:e0:a4:57:ed:b0:da:c6:50:2f:a6:46:12: bf:19:dc:55:3e:25:4a:71:64:55:1c:b5:a7:26:a0: b7:0e:e3:3a:16:70:03:6f:cc:6c:b1:19:b4:3c:ad: 70:d0:c0:2d:af:6d:f2:bf:84:d3:bf:d5:fb:17:89: 4b:00:18:2d:dc:af:a3:46:ee:33:50:fd:5a:cc:02: b4:06:7d:d6:01:58:8d:cf:31:62:49:49:5d:e5:2e: 6c:9a:75:64:32:52:bf:97:4d:07:59:78:fe:58:ce: cb:eb:84:87:48:64:5c:3c:23:4e:93:d1:7d:31:b5: df:7a:b9:1a:39:81:25:f6:64:41:b6:32:0d:7a:c9: cf:11:e5:da:15:bc:8e:83:da:53:50:fe:a0:c9:a7: 6d:85:cf:ac:10:fa:a1:13:f7:e9:ab:01:63:ea:95: da:35:28:b6:f5:e2:81:65:e2:df:5e:b0:e6:81:62: f7:ec:4c:14:30:8c:10:3f:b1:0a:7f:2e:d4:ee:13: 31:db:32:f0:c3:1d:43:96:cb:36:64:bb:f4:cb:10: 0e:fa:da:bb:ba:e0:b9:71:b1:be:c8:95:4b:45:af: 3c:02:d7:80:c7:c8:b1:8d:86:1c:5c:11:51:1a:3b: 08:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7D:FD:47:F4:06:51:5E:79:1E:D5:C4:7F:B8:C2:64:8D:3A:BE:36 X509v3 Authority Key Identifier: keyid:34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6c:03:42:e7:61:9f:64:ca:80:70:26:92:b7:6f:ac:5c:3e: 7f:eb:f5:a8:7e:b3:c7:e6:c9:b9:9b:7e:fa:d6:98:74:4e:c1: 60:7e:db:ae:d1:94:99:fc:4e:fc:cc:71:8a:b8:15:92:95:84: ac:2b:c4:cc:58:ed:61:e1:c3:1d:35:63:ef:44:b9:f2:1c:87: e4:32:f9:c1:72:07:60:1a:ed:12:f7:b6:e0:23:5b:0c:7f:b7: 53:51:3e:7d:9d:27:86:7c:8e:00:c3:30:ec:ad:ff:f1:4f:e7: 1b:39:40:c4:1a:b0:28:b7:be:20:95:31:4d:bc:3e:c4:4f:c3: 08:d7:b3:7e:c0:cc:a0:dc:32:90:dd:ea:9b:39:bf:f5:e8:dc: 1e:19:d4:22:99:9f:c9:0b:e1:08:8d:bf:8a:15:19:3b:15:13: 35:73:29:5d:03:48:6a:67:25:48:10:f4:62:3c:6c:b8:0d:57: 98:74:84:e0:6d:96:b5:3b:5d:62:9c:98:53:0e:5e:13:2d:bc: b2:3e:c4:bc:6e:7c:8a:b7:0f:8e:f9:35:4e:63:16:de:90:2b: 57:84:80:a0:54:e5:0c:44:de:23:b9:f1:0f:cf:64:f0:e9:37: 86:00:6f:87:85:38:19:e0:65:6f:33:68:8b:e4:90:40:2e:d2: df:93:69:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcXdJZSwL/woWRAqkLqe2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NjZlNDk3ZThiYTkyODMwODQ3YjRkOGI2NzEwMzI1ZDIz YmRhODUwHhcNMjUxMjEzMTYwMDQ3WhcNMjUxMjE0MTYwMDQ3WjAzMTEwLwYDVQQD Eyg2OTdkZmQ0N2Y0MDY1MTVlNzkxZWQ1YzQ3ZmI4YzI2NDhkM2FiZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvso9dCd9oGqcywXIV0JdexHgpFft sNrGUC+mRhK/GdxVPiVKcWRVHLWnJqC3DuM6FnADb8xssRm0PK1w0MAtr23yv4TT v9X7F4lLABgt3K+jRu4zUP1azAK0Bn3WAViNzzFiSUld5S5smnVkMlK/l00HWXj+ WM7L64SHSGRcPCNOk9F9MbXferkaOYEl9mRBtjINesnPEeXaFbyOg9pTUP6gyadt hc+sEPqhE/fpqwFj6pXaNSi29eKBZeLfXrDmgWL37EwUMIwQP7EKfy7U7hMx2zLw wx1Dlss2ZLv0yxAO+tq7uuC5cbG+yJVLRa88AteAx8ixjYYcXBFRGjsIrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGl9/Uf0BlFeeR7VxH+4wmSNOr42MB8GA1UdIwQY MBaAFDRm5JfoupKDCEe02LZxAyXSO9qFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80NDg0NmQtNTVkMC00YTIwLWJkMTEt ZGNhZDA4ZjJmMjNmLzEvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80NDg0NmQtNTVkMC00YTIwLWJkMTEtZGNhZDA4ZjJmMjNm LzEvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGwDQudh n2TKgHAmkrdvrFw+f+v1qH6zx+bJuZt++taYdE7BYH7brtGUmfxO/MxxirgVkpWE rCvEzFjtYeHDHTVj70S58hyH5DL5wXIHYBrtEve24CNbDH+3U1E+fZ0nhnyOAMMw 7K3/8U/nGzlAxBqwKLe+IJUxTbw+xE/DCNezfsDMoNwykN3qmzm/9ejcHhnUIpmf yQvhCI2/ihUZOxUTNXMpXQNIamclSBD0YjxsuA1XmHSE4G2WtTtdYpyYUw5eEy28 sj7EvG58ircPjvk1TmMW3pArV4SAoFTlDETeI7nxD89k8Ok3hgBvh4U4GeBlbzNo i+SQQC7S35Npkg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:58:49 2025 by rpki-client