This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: 8VAzwYgfFrApF19Gw5FrJ/7QrzjniMKCni/bExIyi8E= Subject key identifier: 1B:3B:72:D3:10:24:82:DF:CF:94:E7:FF:C0:31:18:46:34:1B:6A:E6 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019B077DB6517A66991A33699598C38A8A32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 146C Signing time: Wed 10 Dec 2025 09:00:37 +0000 Manifest this update: Wed 10 Dec 2025 09:00:37 +0000 Manifest next update: Thu 11 Dec 2025 09:00:37 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 3C4bE5EhpxTD8ntAfMb031Q4N7U.roa (hash: mQejtPkSk7qOy5LIWKfdWmidqPBID43pSZaY4/inuG0=) 3: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 4: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 5: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 6: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: uINRUdcZBinCwbWdXs7zRJOSUI4RVQY0m6Ln7Tfh0F4=) 7: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 8: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 9: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 10: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 11: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 12: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 13: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 14: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 15: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7d:b6:51:7a:66:99:1a:33:69:95:98:c3:8a:8a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Dec 10 09:00:37 2025 GMT Not After : Dec 11 09:00:37 2025 GMT Subject: CN=1b3b72d3102482dfcf94e7ffc0311846341b6ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5c:4d:8b:9a:23:0e:bf:5b:73:5e:52:9a:92: 62:61:22:63:c2:19:bc:a6:2d:92:40:93:ca:27:91: b6:ae:2f:ef:b7:ca:18:19:54:b7:49:f4:7a:59:9f: 5b:1d:68:05:f1:f7:40:38:bd:27:c4:3f:be:20:55: 80:64:3d:97:df:2b:a3:d9:08:fa:69:7c:b7:0d:06: e8:f6:81:83:b1:23:03:97:78:1f:60:b9:f9:34:9a: b8:8e:b5:46:85:7c:e7:74:4f:df:57:f4:1a:30:f5: e8:a0:18:6b:4a:00:55:de:f1:5f:dd:ef:f0:4a:fb: 35:c6:82:11:f1:fe:39:ed:34:59:7e:85:ce:ff:b6: 1d:8a:e7:37:c7:2a:a2:18:74:3e:64:c5:95:f6:ba: 9f:95:b3:69:20:82:bf:49:d8:b4:4a:40:3a:2b:9c: cc:bd:c5:b8:b6:09:11:63:08:32:8e:28:73:03:ab: 94:dd:aa:67:20:71:a0:c3:c2:89:10:05:5a:67:c5: 6a:33:0c:74:7d:a2:98:e5:cc:04:d0:01:af:2b:b1: 76:f8:d3:fe:0c:0b:08:3c:52:0d:47:82:31:b7:0c: a6:92:92:e4:cd:47:17:ab:a5:7c:d7:d9:a0:cc:e0: d0:4f:2a:69:36:aa:ba:a5:6a:8c:11:af:b4:19:eb: 02:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3B:72:D3:10:24:82:DF:CF:94:E7:FF:C0:31:18:46:34:1B:6A:E6 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6e:87:2d:0f:c1:48:45:bb:95:e1:1e:c2:90:37:2f:20:27: 7a:f7:6d:b9:e0:9c:a8:28:83:22:db:5e:4e:1f:12:d3:1f:5e: 17:1d:67:9c:03:50:3f:2f:9a:a1:fb:45:6e:a0:09:b1:46:f9: 94:b1:ae:63:aa:db:bd:ca:68:ad:ac:21:2b:63:9b:8b:2d:7b: a6:4f:23:1d:ac:8b:0e:15:58:bd:d3:18:a3:88:87:7d:a1:49: ec:72:58:9e:a4:f7:92:06:f8:4f:6c:42:d4:f2:a8:b2:f4:64: c8:4a:22:ea:c1:77:47:f0:5f:7d:27:bd:bf:d7:51:60:b2:62: 80:be:cd:f6:d5:b0:0f:58:39:25:a5:93:37:75:7f:e4:fc:6b: 8e:b0:23:40:f3:0e:31:e0:15:d8:90:4a:b7:64:21:bc:25:1a: 0f:f3:52:fc:5a:f7:ce:db:6e:91:f1:df:21:03:89:3d:64:d1: 85:3c:6f:c7:9f:71:58:03:48:d3:31:d0:f8:99:3e:11:ad:f7: cc:8b:eb:bb:c1:58:ee:7d:2d:6b:64:9d:9e:68:3d:14:18:3c: 14:5c:48:a4:44:be:a0:69:2f:38:2b:4e:30:c8:c5:1e:7d:16: c7:aa:f0:43:10:8e:7b:13:a0:31:94:02:bb:8b:dc:04:85:5f: 2d:5a:4c:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfbZRemaZGjNplZjDiooyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUxMjEwMDkwMDM3WhcNMjUxMjExMDkwMDM3WjAzMTEwLwYDVQQD EygxYjNiNzJkMzEwMjQ4MmRmY2Y5NGU3ZmZjMDMxMTg0NjM0MWI2YWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVxNi5ojDr9bc15SmpJiYSJjwhm8 pi2SQJPKJ5G2ri/vt8oYGVS3SfR6WZ9bHWgF8fdAOL0nxD++IFWAZD2X3yuj2Qj6 aXy3DQbo9oGDsSMDl3gfYLn5NJq4jrVGhXzndE/fV/QaMPXooBhrSgBV3vFf3e/w Svs1xoIR8f457TRZfoXO/7Ydiuc3xyqiGHQ+ZMWV9rqflbNpIIK/Sdi0SkA6K5zM vcW4tgkRYwgyjihzA6uU3apnIHGgw8KJEAVaZ8VqMwx0faKY5cwE0AGvK7F2+NP+ DAsIPFINR4IxtwymkpLkzUcXq6V819mgzODQTyppNqq6pWqMEa+0GesC9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBs7ctMQJILfz5Tn/8AxGEY0G2rmMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjW6HLQ/B SEW7leEewpA3LyAnevdtueCcqCiDItteTh8S0x9eFx1nnANQPy+aoftFbqAJsUb5 lLGuY6rbvcporawhK2Obiy17pk8jHayLDhVYvdMYo4iHfaFJ7HJYnqT3kgb4T2xC 1PKosvRkyEoi6sF3R/BffSe9v9dRYLJigL7N9tWwD1g5JaWTN3V/5PxrjrAjQPMO MeAV2JBKt2QhvCUaD/NS/Fr3zttukfHfIQOJPWTRhTxvx59xWANI0zHQ+Jk+Ea33 zIvru8FY7n0ta2Sdnmg9FBg8FFxIpES+oGkvOCtOMMjFHn0Wx6rwQxCOexOgMZQC u4vcBIVfLVpMPQ== -----END CERTIFICATE-----Generated at Wed Dec 10 11:40:49 2025 by rpki-client