This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json) Hash identifier: da29PvLyPtXjkIYNVzTpCAbLmDfZlI8nVSC7R2bwcJc= Subject key identifier: 8D:6F:A5:BF:55:6C:56:79:44:37:DA:CB:A0:B9:FE:DD:3C:A6:33:2A Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b Certificate serial: 019B34C4C0F12335D9FF7627A5AD3B77263D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft Manifest number: 0EFB Signing time: Fri 19 Dec 2025 04:01:08 +0000 Manifest this update: Fri 19 Dec 2025 04:01:08 +0000 Manifest next update: Sat 20 Dec 2025 04:01:08 +0000 Files and hashes: 1: DwD4MRqZCp-c4uFsMsWnYL0-SzA.roa (hash: 2tkEE6WjjJq4tK+YMGxG4bkpbYxQV0qlFZ5Ps3gC3Vo=) 2: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: Zx71yTdAUovZtP81mWn4nve8LrObePc9uUTZHkbkxxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:c0:f1:23:35:d9:ff:76:27:a5:ad:3b:77:26:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b Validity Not Before: Dec 19 04:01:08 2025 GMT Not After : Dec 20 04:01:08 2025 GMT Subject: CN=8d6fa5bf556c56794437dacba0b9fedd3ca6332a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:3b:75:6f:c7:ab:73:bd:3e:2c:9f:6e:39: 4e:8a:ae:37:36:05:99:ef:cf:f8:fe:49:2f:74:f4: 7b:32:d4:d8:97:2a:fe:85:f2:93:8e:58:aa:7d:ad: ee:58:4f:56:55:4e:7c:08:44:1d:38:da:60:0c:ed: 3d:58:d2:24:78:91:ae:4e:d9:df:b6:49:47:52:0e: a2:88:22:25:c0:9c:f0:0f:66:3c:d8:1d:eb:5f:a9: b2:2b:5b:ac:aa:cf:b3:26:b7:39:ee:66:b6:10:cf: f0:7c:92:f4:2c:13:18:bb:af:dd:05:c3:f4:42:e7: 42:ac:59:e7:31:87:bc:a8:5b:42:65:07:a2:f8:0e: 10:5a:af:61:c7:fe:f9:61:f3:1a:c7:5a:c3:45:98: a4:b2:08:6c:cc:27:ea:05:4f:7f:64:92:fd:ae:69: 63:9e:d5:cf:af:d0:d8:dc:fa:ea:b2:e6:98:9d:e5: af:e4:d4:93:86:3e:7c:77:d1:01:13:58:ad:d6:bd: 3e:41:b1:3a:36:7f:5d:6d:c8:e6:45:2b:4e:09:15: 46:4d:2c:f6:ce:05:e6:a8:05:b9:c2:26:bd:2e:e9: 16:cd:b9:7b:9c:3b:6b:aa:e1:6e:6c:17:cd:f4:c4: d6:9a:f3:a6:d0:0f:0a:47:2e:02:c8:9b:e8:e0:72: 0a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6F:A5:BF:55:6C:56:79:44:37:DA:CB:A0:B9:FE:DD:3C:A6:33:2A X509v3 Authority Key Identifier: keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:39:c0:19:a1:71:63:12:51:15:5e:ab:e6:9e:d3:fe:a2:08: fb:7a:91:d7:8c:c9:8b:3c:e3:04:4c:00:01:14:c0:d1:bd:2f: 4b:71:b9:f7:8c:dd:fb:cb:98:0d:35:dd:f3:2d:57:c4:43:e9: 3b:e7:15:b2:b6:fc:d2:df:d4:48:14:65:50:3f:7b:15:dd:83: 75:eb:83:5c:67:20:71:fd:13:91:df:57:2c:27:57:de:c6:73: 1e:12:fa:f5:a1:43:91:41:19:09:4d:7c:d6:35:07:52:14:97: 08:c5:73:2d:1c:cb:39:dc:b2:6f:af:55:ce:69:67:4a:51:f1: 4b:0e:8b:e2:e0:55:9a:ed:d5:19:1d:10:53:db:2b:fe:c2:cb: 56:70:98:f5:a2:61:b0:86:c8:72:0c:b6:14:ea:a1:73:18:8d: 90:25:b0:56:fe:fd:37:68:1f:e0:d1:91:4c:4c:20:af:35:a4: e5:85:d5:e9:e4:79:07:0d:a9:9a:bb:a6:c0:87:9c:c2:9d:a7: 15:51:c9:07:19:b4:d3:67:68:b0:e2:cc:ac:d1:85:a7:d1:60: b2:8f:ea:05:eb:f6:be:89:55:ed:05:5b:de:39:b6:eb:9b:10: 22:2f:78:9e:8f:b6:e1:85:a2:43:61:4c:33:b7:01:51:99:9e: c7:77:61:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xMDxIzXZ/3Ynpa07dyY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMjA5MTU3YmY3ODllNmJiYTM0ZTBkYmQzZWZlY2Q5YjIw ZGQwNmIwHhcNMjUxMjE5MDQwMTA4WhcNMjUxMjIwMDQwMTA4WjAzMTEwLwYDVQQD Eyg4ZDZmYTViZjU1NmM1Njc5NDQzN2RhY2JhMGI5ZmVkZDNjYTYzMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKs7dW/Hq3O9PiyfbjlOiq43NgWZ 78/4/kkvdPR7MtTYlyr+hfKTjliqfa3uWE9WVU58CEQdONpgDO09WNIkeJGuTtnf tklHUg6iiCIlwJzwD2Y82B3rX6myK1usqs+zJrc57ma2EM/wfJL0LBMYu6/dBcP0 QudCrFnnMYe8qFtCZQei+A4QWq9hx/75YfMax1rDRZiksghszCfqBU9/ZJL9rmlj ntXPr9DY3PrqsuaYneWv5NSThj58d9EBE1it1r0+QbE6Nn9dbcjmRStOCRVGTSz2 zgXmqAW5wia9LukWzbl7nDtrquFubBfN9MTWmvOm0A8KRy4CyJvo4HIK8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1vpb9VbFZ5RDfay6C5/t08pjMqMB8GA1UdIwQY MBaAFJwgkVe/eJ5rujTg29Pv7NmyDdBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81NDg5ZTYtM2UzMy00ZGYyLTkwYjgt MTE2OTA5ZTQzODI0LzEvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi81NDg5ZTYtM2UzMy00ZGYyLTkwYjgtMTE2OTA5ZTQzODI0 LzEvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTnAGaFx YxJRFV6r5p7T/qII+3qR14zJizzjBEwAARTA0b0vS3G594zd+8uYDTXd8y1XxEPp O+cVsrb80t/USBRlUD97Fd2DdeuDXGcgcf0Tkd9XLCdX3sZzHhL69aFDkUEZCU18 1jUHUhSXCMVzLRzLOdyyb69VzmlnSlHxSw6L4uBVmu3VGR0QU9sr/sLLVnCY9aJh sIbIcgy2FOqhcxiNkCWwVv79N2gf4NGRTEwgrzWk5YXV6eR5Bw2pmrumwIecwp2n FVHJBxm002dosOLMrNGFp9Fgso/qBev2volV7QVb3jm265sQIi94no+24YWiQ2FM M7cBUZmex3dhhw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:50:34 2025 by rpki-client