This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json) Hash identifier: bn1sfaymN0t7q7IMpwOPodCbxjlLFbN+PRjRX23aRSA= Subject key identifier: F5:FC:D2:09:55:52:08:50:20:92:47:48:BA:03:78:B7:0A:16:97:DF Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e Certificate serial: 019B1A9782CE7D44347CB20EC9A5CF5CE577 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft Manifest number: 035E Signing time: Sun 14 Dec 2025 02:01:35 +0000 Manifest this update: Sun 14 Dec 2025 02:01:35 +0000 Manifest next update: Mon 15 Dec 2025 02:01:35 +0000 Files and hashes: 1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: RU/qK7hdrDpyVM4732j/35l+dEqjfrHzTDddlce6wao=) 2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:82:ce:7d:44:34:7c:b2:0e:c9:a5:cf:5c:e5:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e Validity Not Before: Dec 14 02:01:35 2025 GMT Not After : Dec 15 02:01:35 2025 GMT Subject: CN=f5fcd2095552085020924748ba0378b70a1697df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:a1:42:54:9d:69:51:5c:69:6f:de:00:91: f8:a6:5d:1b:91:de:c9:1c:91:b3:a8:ad:4e:fa:cb: c4:b0:62:1e:20:fa:77:a3:0b:af:ef:3e:5e:a7:2a: 93:ec:02:b6:00:df:35:de:7f:48:22:6a:c6:ff:bf: 76:b0:ae:e0:37:6a:2f:ac:7c:38:b9:5b:12:52:71: 09:42:08:a8:c0:64:63:e0:90:39:6b:4f:79:0b:07: 02:2d:90:da:df:48:08:98:b0:07:bd:6b:93:47:1c: 93:76:ca:50:a3:a4:cc:49:7f:ed:f2:ec:6a:9d:78: ed:44:04:a8:f4:c8:c2:f1:e5:43:71:f4:82:83:a5: f8:7e:87:d5:c4:fd:05:4c:85:17:e1:4d:18:c0:da: 73:c8:50:7a:c4:f9:1d:b6:ac:d0:e6:ef:9c:c1:c8: df:a3:22:1f:c4:6e:13:37:66:9f:c5:72:9a:24:cc: a3:3e:93:dc:5a:a4:cf:87:6d:25:ab:6f:55:41:a2: e0:69:26:27:14:ac:36:68:86:f9:34:6b:4c:81:af: 2a:f5:3e:a3:32:39:66:62:48:e2:9d:5b:f6:34:e1: b6:4c:c8:3e:e9:5b:71:6c:8c:07:bb:3c:b6:e8:19: 48:4c:d7:c6:9e:b4:73:dc:d8:c6:13:0d:17:8d:15: 23:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FC:D2:09:55:52:08:50:20:92:47:48:BA:03:78:B7:0A:16:97:DF X509v3 Authority Key Identifier: keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:16:47:3d:3e:e5:06:d2:ea:c4:0e:d1:f5:9e:88:59:21:91: a0:0d:0f:9e:a0:15:dc:77:99:c9:df:d8:31:dc:cb:41:60:40: 25:a2:75:9a:e6:b9:d4:65:fc:59:3c:01:e8:90:7c:a6:22:b6: b8:48:07:5a:51:3d:b2:64:7e:8f:55:78:76:c6:47:37:17:82: ed:99:f0:3d:97:9c:a6:a2:3b:ed:06:7d:57:5a:76:ba:7c:1b: f2:d3:50:a7:cb:84:95:ef:85:f4:9e:f8:72:47:c3:2c:fb:1b: f7:a1:29:87:d1:fe:1c:10:a4:13:3e:6f:a0:d4:17:46:5c:d1: bd:dc:b8:70:fa:f8:54:5a:35:20:d4:6e:10:cf:ed:8c:58:38: 79:13:12:80:67:9e:49:f2:f6:71:a7:86:87:bd:05:22:1e:02: 65:0b:9b:eb:a8:fe:ea:c6:6f:1d:9e:04:51:12:87:14:17:f1: e0:43:e6:1a:66:ce:02:88:3a:c1:8b:99:44:46:fe:4d:02:8f: ad:65:a4:81:30:fc:34:8e:ed:bf:94:af:01:41:81:68:98:8b: 03:c9:7e:13:0e:d9:ca:92:9a:ad:d9:49:c4:4a:27:7b:70:38: c5:8a:fe:65:1d:49:97:23:ec:d0:ed:b3:ff:eb:ed:81:bf:a5: 34:56:d5:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal4LOfUQ0fLIOyaXPXOV3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MjUyOWE2MDkwMDU4MzRkYzEwYjViODAwZmU1MzEwYzU4 Y2M0N2UwHhcNMjUxMjE0MDIwMTM1WhcNMjUxMjE1MDIwMTM1WjAzMTEwLwYDVQQD EyhmNWZjZDIwOTU1NTIwODUwMjA5MjQ3NDhiYTAzNzhiNzBhMTY5N2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh+hQlSdaVFcaW/eAJH4pl0bkd7J HJGzqK1O+svEsGIeIPp3owuv7z5epyqT7AK2AN813n9IImrG/792sK7gN2ovrHw4 uVsSUnEJQgiowGRj4JA5a095CwcCLZDa30gImLAHvWuTRxyTdspQo6TMSX/t8uxq nXjtRASo9MjC8eVDcfSCg6X4fofVxP0FTIUX4U0YwNpzyFB6xPkdtqzQ5u+cwcjf oyIfxG4TN2afxXKaJMyjPpPcWqTPh20lq29VQaLgaSYnFKw2aIb5NGtMga8q9T6j MjlmYkjinVv2NOG2TMg+6VtxbIwHuzy26BlITNfGnrRz3NjGEw0XjRUjfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPX80glVUghQIJJHSLoDeLcKFpffMB8GA1UdIwQY MBaAFDQlKaYJAFg03BC1uAD+UxDFjMR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jM2U2ZGYtMDgxNS00ZDMzLWIwOGMt Y2FlYjFjMjgwOWE4LzEvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9jM2U2ZGYtMDgxNS00ZDMzLWIwOGMtY2FlYjFjMjgwOWE4 LzEvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBZHPT7l BtLqxA7R9Z6IWSGRoA0PnqAV3HeZyd/YMdzLQWBAJaJ1mua51GX8WTwB6JB8piK2 uEgHWlE9smR+j1V4dsZHNxeC7ZnwPZecpqI77QZ9V1p2unwb8tNQp8uEle+F9J74 ckfDLPsb96Eph9H+HBCkEz5voNQXRlzRvdy4cPr4VFo1INRuEM/tjFg4eRMSgGee SfL2caeGh70FIh4CZQub66j+6sZvHZ4EURKHFBfx4EPmGmbOAog6wYuZREb+TQKP rWWkgTD8NI7tv5SvAUGBaJiLA8l+Ew7ZypKardlJxEone3A4xYr+ZR1JlyPs0O2z /+vtgb+lNFbV+Q== -----END CERTIFICATE-----Generated at Sun Dec 14 07:44:05 2025 by rpki-client