This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft File: nCy3-coO_XK-JYpKCTWIBjdLRmI.mft (raw, json) Hash identifier: ARHKpG4Z10J+azRytTV/qEdqBj1EVFxxkVaaGs5uQ9Y= Subject key identifier: 40:FD:D1:83:29:FF:47:B6:75:07:EE:3E:E9:B2:D8:14:8D:9B:2D:51 Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62 Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662 Certificate serial: 019B3A220D51AD160545B35738601EBFAFDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft Manifest number: 0DDA Signing time: Sat 20 Dec 2025 05:01:08 +0000 Manifest this update: Sat 20 Dec 2025 05:01:08 +0000 Manifest next update: Sun 21 Dec 2025 05:01:08 +0000 Files and hashes: 1: Dotq45i-CIL8miP4blqY3J6J13s.roa (hash: AeEyJtBFVLSGPDiSeedlZidCthzwYAlppOftvZd9mwo=) 2: nCy3-coO_XK-JYpKCTWIBjdLRmI.crl (hash: kxBVszVsNqC73XFZINRAi1axar5d4/F0+gZPWvE1iEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:0d:51:ad:16:05:45:b3:57:38:60:1e:bf:af:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662 Validity Not Before: Dec 20 05:01:08 2025 GMT Not After : Dec 21 05:01:08 2025 GMT Subject: CN=40fdd18329ff47b67507ee3ee9b2d8148d9b2d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:58:90:f1:99:de:b7:e3:26:3b:0f:3a:88: f4:00:c9:37:d9:50:ac:a3:6d:21:a6:50:94:cf:b5: 3a:4f:32:ba:20:f2:07:74:a4:a8:59:6e:5e:2b:1c: 0b:23:98:06:af:66:35:83:58:0e:60:bb:a3:47:9f: 8c:05:7f:31:6c:c6:54:c0:f2:31:e3:9d:32:5b:b0: aa:09:dd:15:cf:0a:f2:68:81:73:91:ad:bf:e8:6b: a4:c0:d4:69:08:60:18:b5:1f:13:a9:0a:a9:d3:3e: 72:ab:4f:c0:9a:e1:c2:de:19:35:89:61:01:1c:82: c7:db:88:b4:d1:ae:62:0d:1b:21:74:53:51:09:ac: cc:d3:9b:92:22:17:54:60:21:21:7a:fb:99:82:b6: 64:c8:3a:2d:1d:f3:92:19:a8:f7:91:0d:c8:26:44: 11:f1:dd:5c:33:75:a9:42:28:89:c3:8b:49:88:c2: ad:ff:2d:ef:a0:48:41:40:9f:cf:3c:93:b1:b7:68: 18:bf:2f:97:4d:4a:c6:55:fd:58:1e:24:fb:53:82: e9:65:d3:97:45:e6:fc:18:00:0d:5e:da:9f:12:10: 33:69:77:d5:19:04:d9:7f:2e:0b:a8:3f:6c:4f:ed: 26:c1:28:db:d6:8d:2b:f5:2c:69:7b:6b:54:f3:10: 18:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FD:D1:83:29:FF:47:B6:75:07:EE:3E:E9:B2:D8:14:8D:9B:2D:51 X509v3 Authority Key Identifier: keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:45:c7:27:1e:9f:bf:b3:68:90:4a:ca:22:0c:81:35:d7:28: ed:58:62:d4:02:1d:79:66:e3:95:16:f9:6b:1b:9f:2e:15:72: ab:1d:80:d2:1e:3f:a8:61:d9:5c:53:ef:e7:23:02:fb:1e:d5: f8:dc:d1:45:97:52:81:7b:78:4e:b5:ec:ff:15:d7:e7:82:26: 02:14:f9:20:89:76:51:8c:8c:58:e3:b3:d7:7e:4f:09:b4:1e: c0:f2:db:89:f4:66:ce:ba:09:ce:f3:27:63:a6:8f:1e:33:83: c4:cf:2b:53:b0:b9:80:5b:89:c7:b2:3b:13:6e:b9:fa:c3:1a: 2c:86:26:41:0e:ac:44:96:83:12:e6:d5:46:b4:1e:d3:10:01: e8:aa:c2:e1:8c:b6:81:5c:9d:0d:07:65:b4:cd:7e:fd:68:ff: 43:38:11:df:34:2a:c4:c4:34:03:23:6f:ec:32:5b:84:8b:a9: 65:4f:98:d6:89:c4:37:8d:1c:fd:de:b1:37:d1:02:c0:3c:5e: 41:a0:13:6d:7a:99:9b:c8:fe:dd:cf:96:56:1d:11:3f:0d:83: ae:a3:20:b7:85:65:d0:c6:cd:13:ca:e6:36:14:dd:ef:f7:87: 5b:78:3d:d3:f7:9f:da:f1:70:ca:db:69:a0:ba:c2:50:4d:32: 5e:36:87:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ig1RrRYFRbNXOGAev6/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMmNiN2Y5Y2EwZWZkNzJiZTI1OGE0YTA5MzU4ODA2Mzc0 YjQ2NjIwHhcNMjUxMjIwMDUwMTA4WhcNMjUxMjIxMDUwMTA4WjAzMTEwLwYDVQQD Eyg0MGZkZDE4MzI5ZmY0N2I2NzUwN2VlM2VlOWIyZDgxNDhkOWIyZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsBYkPGZ3rfjJjsPOoj0AMk32VCs o20hplCUz7U6TzK6IPIHdKSoWW5eKxwLI5gGr2Y1g1gOYLujR5+MBX8xbMZUwPIx 450yW7CqCd0VzwryaIFzka2/6GukwNRpCGAYtR8TqQqp0z5yq0/AmuHC3hk1iWEB HILH24i00a5iDRshdFNRCazM05uSIhdUYCEhevuZgrZkyDotHfOSGaj3kQ3IJkQR 8d1cM3WpQiiJw4tJiMKt/y3voEhBQJ/PPJOxt2gYvy+XTUrGVf1YHiT7U4LpZdOX Reb8GAANXtqfEhAzaXfVGQTZfy4LqD9sT+0mwSjb1o0r9Sxpe2tU8xAYkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFED90YMp/0e2dQfuPumy2BSNmy1RMB8GA1UdIwQY MBaAFJwst/nKDv1yviWKSgk1iAY3S0ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84NmE0MjYtNTZlZS00NmRkLTk0MjUt N2Y5MmMzNGViMDdjLzEvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84NmE0MjYtNTZlZS00NmRkLTk0MjUtN2Y5MmMzNGViMDdj LzEvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEXHJx6f v7NokErKIgyBNdco7Vhi1AIdeWbjlRb5axufLhVyqx2A0h4/qGHZXFPv5yMC+x7V +NzRRZdSgXt4TrXs/xXX54ImAhT5IIl2UYyMWOOz135PCbQewPLbifRmzroJzvMn Y6aPHjODxM8rU7C5gFuJx7I7E265+sMaLIYmQQ6sRJaDEubVRrQe0xAB6KrC4Yy2 gVydDQdltM1+/Wj/QzgR3zQqxMQ0AyNv7DJbhIupZU+Y1onEN40c/d6xN9ECwDxe QaATbXqZm8j+3c+WVh0RPw2DrqMgt4Vl0MbNE8rmNhTd7/eHW3g90/ef2vFwyttp oLrCUE0yXjaH+Q== -----END CERTIFICATE-----Generated at Sat Dec 20 13:15:58 2025 by rpki-client