This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json) Hash identifier: GdniHJNoZRFAyhTYAQ8ofJjWjt015koBj97YesgT8jA= Subject key identifier: 0C:34:23:4E:7A:68:30:68:D2:12:C9:54:DB:8D:25:1E:49:CC:CC:37 Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9 Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9 Certificate serial: 019B0E928F2A2C1D7495CC47BAC9D7A18A6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft Manifest number: 1410 Signing time: Thu 11 Dec 2025 18:00:44 +0000 Manifest this update: Thu 11 Dec 2025 18:00:44 +0000 Manifest next update: Fri 12 Dec 2025 18:00:44 +0000 Files and hashes: 1: b9QaepP0oxMTo3a9H8MxgSOF6ZM.roa (hash: 1vtB6IOZEJek+700nGKVkQQxvbkoR7RDVA9c6BbAbEM=) 2: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: SgDVqY9HmVF+INqRY3vOvPucI5AcPVcOLaDCRA9naTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:8f:2a:2c:1d:74:95:cc:47:ba:c9:d7:a1:8a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9 Validity Not Before: Dec 11 18:00:44 2025 GMT Not After : Dec 12 18:00:44 2025 GMT Subject: CN=0c34234e7a683068d212c954db8d251e49cccc37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:c7:a8:ca:2e:01:e2:dd:bc:3c:89:51:3c: 7a:34:97:2e:4b:07:17:8d:d6:dc:0d:15:45:a4:9b: 87:0c:3c:84:41:7b:5e:59:e1:66:de:fd:c8:62:15: c1:a7:8d:dc:50:57:22:9c:27:bb:bb:45:91:ed:7c: bd:a7:4c:8c:25:0f:4e:5f:20:aa:94:57:c5:87:50: 03:2f:cb:a2:64:95:b9:27:5f:ca:85:d5:2b:af:3d: f7:fa:3c:1a:5b:98:7a:f4:87:d6:6b:51:28:e4:c6: b6:f4:50:6c:50:2c:fc:bf:b5:40:a0:04:af:6e:81: 8c:d7:b3:6f:ef:ac:99:6b:52:0f:51:91:08:cf:3d: 16:3f:3e:28:6a:8c:f8:77:9b:22:a3:d9:cd:11:68: 82:78:87:4e:b5:e0:43:8b:ba:50:88:21:d6:88:dd: 23:99:50:7f:01:1a:be:dc:96:b0:04:2d:15:ed:20: 7c:a5:be:ee:35:19:a6:79:cc:da:b1:b1:f7:09:f2: 97:66:4f:57:dd:e8:2f:c9:1d:ef:22:5c:b1:1e:3f: 8f:2e:ad:32:5e:b9:92:c0:45:36:c7:52:c4:d8:1c: b5:70:c1:2f:ab:61:45:cf:48:c6:0b:08:83:a3:64: 63:fd:39:37:05:10:0b:c4:ed:b8:4e:ff:70:ba:5d: 78:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:34:23:4E:7A:68:30:68:D2:12:C9:54:DB:8D:25:1E:49:CC:CC:37 X509v3 Authority Key Identifier: keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:31:14:00:d6:17:03:bc:94:42:64:e4:75:e5:4a:ec:21:c5: d6:e5:cf:6d:f4:5a:cc:92:b5:bd:11:da:a8:68:a3:bb:3d:cb: 28:4a:85:8a:c5:42:e4:33:a7:12:71:04:68:90:08:58:ec:b1: bf:28:6d:91:e6:65:d3:b6:00:34:e2:b1:37:d2:d7:d4:32:90: 01:a9:1d:ee:8a:c0:35:24:ff:ce:54:65:e3:88:0f:d7:55:d3: 29:c9:e1:e8:8a:70:d6:06:16:36:c2:50:37:a5:ff:b5:22:e7: ae:63:6a:89:f9:5b:db:7a:8e:e6:e5:cd:27:ef:0c:c5:c1:f5: 16:81:1d:c8:0f:ac:0f:b3:48:e5:d9:ac:43:8f:67:99:d0:e4: b8:08:b4:a9:2c:48:10:3c:59:ca:bc:93:a8:5f:31:df:de:fc: e7:cb:7e:9e:49:6d:99:18:4d:6a:96:5f:e0:7b:53:cd:11:45: d5:a6:65:8f:5a:8a:3e:02:85:ea:f1:24:46:9c:07:79:65:ca: 3c:e3:1d:7f:97:ca:90:01:29:49:84:a8:5e:68:75:03:4c:b1: e2:c3:3c:4f:c0:d4:09:fc:93:0a:dc:93:16:81:ca:d2:e4:0a: b7:2a:8c:24:7e:16:05:9f:7f:84:40:64:7d:19:e5:a7:36:d2: f1:4d:f5:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOko8qLB10lcxHusnXoYprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMDJlMDY0Yzk4YjMyMzFjM2YyMTQ4YTFjM2Q5YzM4N2Q0 ODllZTkwHhcNMjUxMjExMTgwMDQ0WhcNMjUxMjEyMTgwMDQ0WjAzMTEwLwYDVQQD EygwYzM0MjM0ZTdhNjgzMDY4ZDIxMmM5NTRkYjhkMjUxZTQ5Y2NjYzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZHHqMouAeLdvDyJUTx6NJcuSwcX jdbcDRVFpJuHDDyEQXteWeFm3v3IYhXBp43cUFcinCe7u0WR7Xy9p0yMJQ9OXyCq lFfFh1ADL8uiZJW5J1/KhdUrrz33+jwaW5h69IfWa1Eo5Ma29FBsUCz8v7VAoASv boGM17Nv76yZa1IPUZEIzz0WPz4oaoz4d5sio9nNEWiCeIdOteBDi7pQiCHWiN0j mVB/ARq+3JawBC0V7SB8pb7uNRmmeczasbH3CfKXZk9X3egvyR3vIlyxHj+PLq0y XrmSwEU2x1LE2By1cMEvq2FFz0jGCwiDo2Rj/Tk3BRALxO24Tv9wul14zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAw0I056aDBo0hLJVNuNJR5JzMw3MB8GA1UdIwQY MBaAFJ4C4GTJizIxw/IUihw9nDh9SJ7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYt NzUyNTE2ODkwZDNkLzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYtNzUyNTE2ODkwZDNk LzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDEUANYX A7yUQmTkdeVK7CHF1uXPbfRazJK1vRHaqGijuz3LKEqFisVC5DOnEnEEaJAIWOyx vyhtkeZl07YANOKxN9LX1DKQAakd7orANST/zlRl44gP11XTKcnh6Ipw1gYWNsJQ N6X/tSLnrmNqiflb23qO5uXNJ+8MxcH1FoEdyA+sD7NI5dmsQ49nmdDkuAi0qSxI EDxZyryTqF8x397858t+nkltmRhNapZf4HtTzRFF1aZlj1qKPgKF6vEkRpwHeWXK POMdf5fKkAEpSYSoXmh1A0yx4sM8T8DUCfyTCtyTFoHK0uQKtyqMJH4WBZ9/hEBk fRnlpzbS8U31cQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:33:34 2025 by rpki-client