This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json) Hash identifier: 4+tTedIFHygZzR8NM7POW2eRVQBQKeUdy7y3PK2snsA= Subject key identifier: 38:B6:B6:27:A6:CA:BA:A9:F3:15:AF:31:6D:DB:29:D8:70:EC:2D:3D Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06 Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306 Certificate serial: 019B0DB74C1D7DBDAB9EC2FF976AAF38C2FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft Manifest number: 172D Signing time: Thu 11 Dec 2025 14:01:14 +0000 Manifest this update: Thu 11 Dec 2025 14:01:14 +0000 Manifest next update: Fri 12 Dec 2025 14:01:14 +0000 Files and hashes: 1: Hq4qtu3Hmw7ihPLhHJm0o3HW0ME.roa (hash: cBO4YeU2VYitDB5gOiHBAGdFdmypsOGShw+oH/O7hOQ=) 2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: h2l0JntZSmpjZCZcR+BloF/Mg4z+mklV9zA9KbSkwRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:4c:1d:7d:bd:ab:9e:c2:ff:97:6a:af:38:c2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306 Validity Not Before: Dec 11 14:01:14 2025 GMT Not After : Dec 12 14:01:14 2025 GMT Subject: CN=38b6b627a6cabaa9f315af316ddb29d870ec2d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:21:08:e7:c9:f4:08:a9:0a:ee:ca:77:4a: 9d:6f:b8:46:30:43:57:15:3f:0d:16:6e:10:a0:60: 80:76:7b:78:aa:d3:45:36:34:bb:71:01:f0:8e:60: 15:ec:2d:00:b3:06:c9:02:ad:7d:61:7c:cb:e9:b7: 67:cf:f2:60:b7:de:a2:ae:5d:90:bd:09:ad:ff:3c: cb:3a:18:10:ca:4c:0f:07:aa:83:43:dc:71:fa:57: 9e:9a:fb:29:d0:59:d4:e7:75:07:09:f9:2a:e8:9b: f9:5a:6c:66:92:4d:c8:bf:29:5e:41:ff:03:20:24: d9:78:6b:6e:af:c8:1b:90:75:45:24:00:16:27:f0: 1f:ff:b0:9b:e5:12:3e:6f:11:d4:7a:bc:13:40:cd: ad:a7:21:55:20:11:54:62:31:de:22:a6:43:f4:67: bd:9b:2e:d5:16:54:63:3c:a3:d9:12:dc:86:45:e7: 28:12:7c:c6:a7:bb:07:14:b5:ed:c0:8a:7d:02:34: c2:de:94:68:79:be:e8:0a:79:b5:3a:85:f6:55:ea: 24:ec:1b:d5:2f:01:4b:d6:6b:e2:aa:95:27:fd:86: 20:d1:aa:d6:9e:b6:53:f5:81:22:de:12:45:4d:40: 1d:7e:d7:24:07:a8:f3:86:93:d3:e7:ff:9b:e2:5d: f8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B6:B6:27:A6:CA:BA:A9:F3:15:AF:31:6D:DB:29:D8:70:EC:2D:3D X509v3 Authority Key Identifier: keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:7b:33:06:c1:f6:68:f4:d4:55:da:c3:13:1b:aa:af:09:88: 80:56:76:81:e1:e9:80:18:8c:95:6b:96:c7:b8:9d:60:b7:09: a9:bd:4c:cf:27:f4:2d:ea:23:08:7d:a3:5f:08:e3:c6:11:c6: e4:1e:02:ad:d8:c5:6a:77:a8:30:cc:ec:30:77:b8:4b:8e:4e: 83:24:72:db:23:c3:6b:5d:15:5e:75:f3:52:0d:9e:66:fc:2a: 6c:6c:60:7b:ef:f2:15:cf:fa:6f:7c:40:78:4b:79:60:f7:94: 37:55:47:e7:9e:28:10:e3:fc:55:71:a6:02:db:31:14:c6:d8: 67:a3:e6:f7:ac:c9:8a:1a:3d:ac:ca:eb:b3:69:97:b6:83:99: 78:10:1d:ef:24:46:18:2a:90:cb:9e:98:75:53:6f:6e:7f:5a: 8d:5f:4f:f5:74:69:4c:42:fa:fb:0b:b2:47:d7:b1:11:1f:2b: 05:e4:34:be:6f:b0:23:af:b0:5f:a0:8e:d9:78:d3:d0:a0:4b: 43:74:c3:1a:13:25:72:a9:29:6b:c9:88:a3:ab:cf:5a:da:bf: fb:a0:0c:5e:4f:1c:4f:b5:d9:40:98:0c:6b:53:95:43:ae:e8: 5c:b0:27:2c:6c:fd:6a:5f:4f:be:f5:02:0c:17:91:1b:d8:0a: 2f:19:71:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNt0wdfb2rnsL/l2qvOML7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzM2NmFmNmNlMGIxYTlmNjAxNzNiMTRiNWZkZGQ3ZTBi OTYzMDYwHhcNMjUxMjExMTQwMTE0WhcNMjUxMjEyMTQwMTE0WjAzMTEwLwYDVQQD EygzOGI2YjYyN2E2Y2FiYWE5ZjMxNWFmMzE2ZGRiMjlkODcwZWMyZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHohCOfJ9AipCu7Kd0qdb7hGMENX FT8NFm4QoGCAdnt4qtNFNjS7cQHwjmAV7C0AswbJAq19YXzL6bdnz/Jgt96irl2Q vQmt/zzLOhgQykwPB6qDQ9xx+leemvsp0FnU53UHCfkq6Jv5Wmxmkk3IvyleQf8D ICTZeGtur8gbkHVFJAAWJ/Af/7Cb5RI+bxHUerwTQM2tpyFVIBFUYjHeIqZD9Ge9 my7VFlRjPKPZEtyGRecoEnzGp7sHFLXtwIp9AjTC3pRoeb7oCnm1OoX2Veok7BvV LwFL1mviqpUn/YYg0arWnrZT9YEi3hJFTUAdftckB6jzhpPT5/+b4l34uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDi2tiemyrqp8xWvMW3bKdhw7C09MB8GA1UdIwQY MBaAFJ3DZq9s4LGp9gFzsUtf3dfguWMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgt ODJmNDc2YjVjZmRiLzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgtODJmNDc2YjVjZmRi LzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXszBsH2 aPTUVdrDExuqrwmIgFZ2geHpgBiMlWuWx7idYLcJqb1Mzyf0LeojCH2jXwjjxhHG 5B4CrdjFaneoMMzsMHe4S45OgyRy2yPDa10VXnXzUg2eZvwqbGxge+/yFc/6b3xA eEt5YPeUN1VH554oEOP8VXGmAtsxFMbYZ6Pm96zJiho9rMrrs2mXtoOZeBAd7yRG GCqQy56YdVNvbn9ajV9P9XRpTEL6+wuyR9exER8rBeQ0vm+wI6+wX6CO2XjT0KBL Q3TDGhMlcqkpa8mIo6vPWtq/+6AMXk8cT7XZQJgMa1OVQ67oXLAnLGz9al9PvvUC DBeRG9gKLxlxrQ== -----END CERTIFICATE-----Generated at Thu Dec 11 19:07:50 2025 by rpki-client