This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json) Hash identifier: 9vAKJ9JZgvGPJuOr24fK9tRkh4dSH1aL0HnpBRDsphg= Subject key identifier: 27:0A:E8:C7:1B:3D:85:FE:6E:37:10:F6:D3:20:A9:30:7B:99:17:3D Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9 Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9 Certificate serial: 019B1FF3CDEF9C1176EA1352B20794ED7059 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft Manifest number: 1419 Signing time: Mon 15 Dec 2025 03:00:30 +0000 Manifest this update: Mon 15 Dec 2025 03:00:30 +0000 Manifest next update: Tue 16 Dec 2025 03:00:30 +0000 Files and hashes: 1: b9QaepP0oxMTo3a9H8MxgSOF6ZM.roa (hash: 1vtB6IOZEJek+700nGKVkQQxvbkoR7RDVA9c6BbAbEM=) 2: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: 6OmRT4f6gTWyigHqSxkKJE2EfbrHznPPGYGtaE04X2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f3:cd:ef:9c:11:76:ea:13:52:b2:07:94:ed:70:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9 Validity Not Before: Dec 15 03:00:30 2025 GMT Not After : Dec 16 03:00:30 2025 GMT Subject: CN=270ae8c71b3d85fe6e3710f6d320a9307b99173d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6f:e0:89:44:66:95:38:f7:6c:41:85:8b:96: ed:da:d7:47:ed:e1:69:96:5a:62:b2:11:3a:8f:d4: 16:3e:0c:b7:2c:c0:cb:69:84:68:d0:e2:fa:89:bb: 1d:35:b5:24:4d:35:a3:36:4d:98:6b:61:67:c5:f8: 65:dc:d0:ad:09:64:78:00:15:19:1d:ee:35:6b:56: ed:1a:88:13:6c:69:70:15:eb:52:c1:bc:30:8f:45: 25:8a:a0:5e:22:6b:2c:aa:c3:20:3c:90:ab:ec:4a: 3d:8f:05:c8:8c:dd:15:40:b7:84:58:86:38:56:5c: 7c:ea:b2:34:f0:20:31:c5:9f:39:4a:ce:73:c6:64: da:da:cd:63:e5:b4:4a:7b:80:e7:8f:1f:4c:6c:92: f5:7a:d5:5a:24:db:29:5f:e1:9c:78:94:03:74:4a: bd:56:04:78:26:90:62:22:93:08:cb:6d:20:1e:6d: 42:f2:5b:3f:51:b7:10:4d:b6:21:c6:7d:37:f9:7d: 1a:2a:71:af:66:2c:95:65:ed:ee:a6:fd:b8:7e:7b: 4d:b2:de:02:f6:a6:a5:db:0a:9e:16:97:a7:0b:a3: 09:71:f2:b9:f3:16:ba:3e:cb:f6:8c:69:17:9d:92: 6e:71:bd:f1:a3:67:4d:bb:18:17:4e:55:0c:2b:c8: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0A:E8:C7:1B:3D:85:FE:6E:37:10:F6:D3:20:A9:30:7B:99:17:3D X509v3 Authority Key Identifier: keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:12:4d:90:65:8b:eb:cf:25:52:de:e7:07:1b:c1:64:e5:67: a3:9a:27:b7:e2:e8:d5:01:9b:cd:be:32:7a:11:e8:de:99:d9: c9:7b:c1:db:f9:1d:fb:7e:1b:be:27:69:c0:8c:fc:76:d6:9b: d6:de:4a:86:24:09:a3:65:99:8a:af:5e:c3:02:16:d8:0b:a8: 00:2e:bd:59:3f:e8:10:2a:e6:31:0b:58:12:ba:9c:ef:8d:58: 21:9f:aa:b7:d1:58:6a:60:8e:f0:6a:5a:fb:d4:8b:c5:6e:20: b9:ee:5b:f4:a1:20:f0:77:03:d8:3d:8f:fd:ba:81:8b:03:1d: ed:02:e8:57:82:74:f9:9d:25:db:3c:34:ce:dd:58:7b:40:82: cf:24:37:83:d6:26:06:c1:bf:c5:d9:75:28:2d:52:e7:77:1b: 7c:8a:92:33:b0:23:bd:4f:0b:35:0a:7b:4f:41:38:1c:3b:3b: 14:c3:5b:52:a0:65:97:f4:d0:bc:1c:c2:b0:79:62:e1:c4:a8: aa:8f:89:71:1b:be:b1:f3:96:a5:e7:b9:dd:c0:e7:a4:73:d7: b1:6c:f1:17:59:a7:03:de:ee:84:19:d0:3c:46:11:ee:82:13: 0c:d7:f0:04:73:e8:65:83:a0:91:c0:ac:24:a1:93:47:1d:55: 05:9c:1d:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf883vnBF26hNSsgeU7XBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMDJlMDY0Yzk4YjMyMzFjM2YyMTQ4YTFjM2Q5YzM4N2Q0 ODllZTkwHhcNMjUxMjE1MDMwMDMwWhcNMjUxMjE2MDMwMDMwWjAzMTEwLwYDVQQD EygyNzBhZThjNzFiM2Q4NWZlNmUzNzEwZjZkMzIwYTkzMDdiOTkxNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2/giURmlTj3bEGFi5bt2tdH7eFp llpishE6j9QWPgy3LMDLaYRo0OL6ibsdNbUkTTWjNk2Ya2Fnxfhl3NCtCWR4ABUZ He41a1btGogTbGlwFetSwbwwj0UliqBeImssqsMgPJCr7Eo9jwXIjN0VQLeEWIY4 Vlx86rI08CAxxZ85Ss5zxmTa2s1j5bRKe4Dnjx9MbJL1etVaJNspX+GceJQDdEq9 VgR4JpBiIpMIy20gHm1C8ls/UbcQTbYhxn03+X0aKnGvZiyVZe3upv24fntNst4C 9qal2wqeFpenC6MJcfK58xa6Psv2jGkXnZJucb3xo2dNuxgXTlUMK8j6HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcK6McbPYX+bjcQ9tMgqTB7mRc9MB8GA1UdIwQY MBaAFJ4C4GTJizIxw/IUihw9nDh9SJ7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYt NzUyNTE2ODkwZDNkLzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYtNzUyNTE2ODkwZDNk LzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBJNkGWL 688lUt7nBxvBZOVno5ont+Lo1QGbzb4yehHo3pnZyXvB2/kd+34bvidpwIz8dtab 1t5KhiQJo2WZiq9ewwIW2AuoAC69WT/oECrmMQtYErqc741YIZ+qt9FYamCO8Gpa +9SLxW4gue5b9KEg8HcD2D2P/bqBiwMd7QLoV4J0+Z0l2zw0zt1Ye0CCzyQ3g9Ym BsG/xdl1KC1S53cbfIqSM7AjvU8LNQp7T0E4HDs7FMNbUqBll/TQvBzCsHli4cSo qo+JcRu+sfOWpee53cDnpHPXsWzxF1mnA97uhBnQPEYR7oITDNfwBHPoZYOgkcCs JKGTRx1VBZwdBQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:17:02 2025 by rpki-client