This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft File: nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json) Hash identifier: y1UwNJEEwQQpmOa2eLHH3Qj7A84ZrOr6eqaJqO6/bnI= Subject key identifier: 16:03:47:34:D1:DA:48:C1:45:AC:A4:9E:79:1E:41:91:39:B9:B1:C8 Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa Certificate serial: 019B19F27811B4BE8ECE6A351A8603D75CAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft Manifest number: 14E2 Signing time: Sat 13 Dec 2025 23:01:19 +0000 Manifest this update: Sat 13 Dec 2025 23:01:19 +0000 Manifest next update: Sun 14 Dec 2025 23:01:19 +0000 Files and hashes: 1: 6mwpgZ5jMyOU3uGB0qn2Rbl29vU.roa (hash: zgnUk23gS2UF4J68R+bIiwgYj0q0EdWy/Z/fr9n8soc=) 2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: zOyHHZwBojFWQCQFyyOr1CEDLfc8OeJf7DwHyrNToBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:78:11:b4:be:8e:ce:6a:35:1a:86:03:d7:5c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa Validity Not Before: Dec 13 23:01:19 2025 GMT Not After : Dec 14 23:01:19 2025 GMT Subject: CN=16034734d1da48c145aca49e791e419139b9b1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ac:37:ed:a5:b9:6c:52:b0:64:68:9f:fa:c4: 5c:3e:ab:7b:df:ad:29:a9:ae:23:ae:7b:ff:a6:dc: 4a:db:60:33:2b:1d:5f:87:e5:19:9c:8d:75:35:7f: 73:99:11:a3:2e:50:43:7d:2a:75:a4:9e:76:4b:91: c3:15:3d:23:4c:b5:e3:03:1b:98:78:7c:1c:3b:96: 25:97:49:05:19:8f:c1:5a:eb:4c:e2:be:6f:53:09: 63:b8:12:cc:fc:de:22:15:e1:36:7b:26:4b:1f:ff: a6:72:65:f4:b1:4b:05:1b:4c:90:86:73:78:d8:a9: 5f:d0:55:b0:d1:ac:56:88:3f:0b:c7:e6:f8:46:94: 72:e5:8d:d5:70:e2:d5:31:26:b2:d1:e7:1b:a4:68: a6:95:c4:79:65:98:a5:ab:23:33:d8:2e:06:90:e3: 3b:8a:a0:72:88:71:fb:d1:5b:a2:62:bf:b4:9e:34: ef:13:26:f5:29:a8:a0:ef:41:83:e8:01:25:68:ea: 4e:51:b3:02:2a:0d:a5:8a:bd:a1:24:f8:19:8e:fa: a4:f6:9c:6d:6c:45:27:f8:7f:9f:00:c9:2c:24:24: 8d:e0:3a:d9:9a:5c:2e:51:8c:01:7a:52:3c:6b:2f: 98:35:d9:ed:95:46:0c:51:80:d7:18:a8:8c:86:ad: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:03:47:34:D1:DA:48:C1:45:AC:A4:9E:79:1E:41:91:39:B9:B1:C8 X509v3 Authority Key Identifier: keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:99:75:3a:41:52:30:91:ff:8f:87:0a:2e:ac:04:c2:e8:ed: 4c:96:71:d2:69:1e:f8:46:1c:44:7d:2e:6f:52:bd:e7:5f:9d: 25:08:f7:7e:fc:a9:d3:28:38:ab:04:f0:a3:e3:ff:6c:ff:3d: b6:3c:87:1d:a7:49:dd:30:3c:19:56:1e:22:ed:14:75:61:0e: 2f:60:04:2d:a9:c8:9d:b2:54:18:d4:d1:9a:99:d9:6b:84:cf: cd:70:1d:5c:ae:8c:7b:b7:a7:22:50:f5:3c:ff:b8:3b:ec:54: 20:75:c1:28:34:ac:fe:44:02:12:63:d3:10:9f:e9:5b:ba:15: 2b:44:b4:44:92:5a:1a:48:58:8c:22:88:f9:f9:3e:17:5c:4d: 81:58:35:74:2b:62:6a:83:d3:90:57:ce:19:51:9d:3a:c5:48: a3:4f:f2:ee:db:26:f6:8a:a2:f3:02:ba:92:e2:be:e8:ca:1f: 5a:c4:5a:f9:e5:22:58:f2:89:c3:ed:5b:67:ce:0d:22:9d:0c: 32:b5:ca:29:96:b6:b3:03:62:e0:93:24:35:d5:de:68:5d:c9: 04:c8:0c:38:b2:c9:65:91:9d:8e:12:25:a7:e5:3c:71:9c:50: 34:9a:61:77:4a:7f:b7:9f:50:4e:c6:91:db:1b:7d:b0:a9:e6: 39:b8:05:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8ngRtL6Ozmo1GoYD11yuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkY2Y1ZWRjNGU2YWVkYzhkZjQyNDVhNjJmYTM3ZmEyMmE2 MjBlYWEwHhcNMjUxMjEzMjMwMTE5WhcNMjUxMjE0MjMwMTE5WjAzMTEwLwYDVQQD EygxNjAzNDczNGQxZGE0OGMxNDVhY2E0OWU3OTFlNDE5MTM5YjliMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aw37aW5bFKwZGif+sRcPqt7360p qa4jrnv/ptxK22AzKx1fh+UZnI11NX9zmRGjLlBDfSp1pJ52S5HDFT0jTLXjAxuY eHwcO5Yll0kFGY/BWutM4r5vUwljuBLM/N4iFeE2eyZLH/+mcmX0sUsFG0yQhnN4 2Klf0FWw0axWiD8Lx+b4RpRy5Y3VcOLVMSay0ecbpGimlcR5ZZilqyMz2C4GkOM7 iqByiHH70VuiYr+0njTvEyb1Kaig70GD6AElaOpOUbMCKg2lir2hJPgZjvqk9pxt bEUn+H+fAMksJCSN4DrZmlwuUYwBelI8ay+YNdntlUYMUYDXGKiMhq3f0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYDRzTR2kjBRayknnkeQZE5ubHIMB8GA1UdIwQY MBaAFJ3PXtxOau3I30JFpi+jf6IqYg6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xZDFiNDUtODZlOS00NmVlLTk5MWMt MGVkZGViNDhlM2FlLzEvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xZDFiNDUtODZlOS00NmVlLTk5MWMtMGVkZGViNDhlM2Fl LzEvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5l1OkFS MJH/j4cKLqwEwujtTJZx0mke+EYcRH0ub1K951+dJQj3fvyp0yg4qwTwo+P/bP89 tjyHHadJ3TA8GVYeIu0UdWEOL2AELanInbJUGNTRmpnZa4TPzXAdXK6Me7enIlD1 PP+4O+xUIHXBKDSs/kQCEmPTEJ/pW7oVK0S0RJJaGkhYjCKI+fk+F1xNgVg1dCti aoPTkFfOGVGdOsVIo0/y7tsm9oqi8wK6kuK+6MofWsRa+eUiWPKJw+1bZ84NIp0M MrXKKZa2swNi4JMkNdXeaF3JBMgMOLLJZZGdjhIlp+U8cZxQNJphd0p/t59QTsaR 2xt9sKnmObgFpA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:50:55 2025 by rpki-client