This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json) Hash identifier: GOJF2n6j5FdXU0v9H6PYznD/qwZc4pzvJAbiPKBMcbg= Subject key identifier: 03:FB:BB:63:E2:59:76:A1:1B:35:F4:09:3F:4D:9E:FF:33:EB:52:B3 Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef Certificate serial: 019AF5E576E64B5367BA03035DFADC293A81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft Manifest number: 0A96 Signing time: Sat 06 Dec 2025 23:00:47 +0000 Manifest this update: Sat 06 Dec 2025 23:00:47 +0000 Manifest next update: Sun 07 Dec 2025 23:00:47 +0000 Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=) 2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: 1R/O+ja1eAtrkbJLus7m04RYtbRv1OQvNV/AKGEUhUA=) 3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:76:e6:4b:53:67:ba:03:03:5d:fa:dc:29:3a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef Validity Not Before: Dec 6 23:00:47 2025 GMT Not After : Dec 7 23:00:47 2025 GMT Subject: CN=03fbbb63e25976a11b35f4093f4d9eff33eb52b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2a:2d:0f:ca:3c:46:8b:0e:8b:8d:06:2a:d0: 26:32:4a:3c:e1:72:2f:0b:82:b3:ee:6e:97:eb:7b: 0c:61:c9:16:39:b7:40:b4:d0:92:46:ce:d0:a8:9b: 72:50:9f:a8:77:1d:c0:f6:00:a2:da:43:29:16:d1: c0:4a:4c:8c:8a:7f:c3:1c:42:cb:ab:af:3e:5c:40: f8:61:d3:38:0a:15:80:bd:e5:7c:f3:32:42:3e:04: d9:84:2a:f7:1d:d4:3a:6f:80:6a:62:64:7a:5f:40: f4:ce:fb:fb:4a:ea:7b:7a:e5:2d:67:8f:f2:f7:cd: 1b:2c:88:78:b2:4e:37:f7:ab:73:52:0b:ca:d2:d2: 76:37:c7:3c:b9:8c:0c:4a:09:9e:92:45:3d:74:5b: f1:f4:8b:8c:e7:f9:ef:f8:2d:eb:e9:cc:e1:d6:4e: 8b:96:21:6c:25:e7:ee:8e:1a:33:59:3f:ab:25:02: 89:f8:17:9d:3f:49:c7:08:ad:65:d3:e6:d3:e8:ad: 25:47:ac:37:e6:a9:91:ff:57:09:25:4b:f1:53:cf: af:cc:0d:89:0c:bc:b7:50:39:b2:8c:a2:b7:0e:bb: c3:13:1d:ed:1f:bd:9a:9d:0c:fa:41:a9:27:9d:a5: a2:33:b9:5c:89:12:06:0b:64:c7:23:18:93:7c:ab: f8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FB:BB:63:E2:59:76:A1:1B:35:F4:09:3F:4D:9E:FF:33:EB:52:B3 X509v3 Authority Key Identifier: keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:2f:3a:52:82:76:42:b8:89:50:56:87:f1:98:52:5d:7a:b1: 7a:48:4b:2f:c1:9b:dc:42:74:25:e8:1a:c6:53:e1:37:46:79: 9c:88:8f:6d:ad:d5:a1:14:08:a3:3e:de:32:79:31:c0:36:63: 63:5e:c3:58:95:8d:c2:4c:7e:60:c9:21:16:55:9a:8f:6f:85: b7:50:47:a5:63:eb:02:a4:38:51:c6:2b:aa:ae:72:f3:3f:b2: 60:4f:f8:8b:6a:29:04:a9:d5:e9:c0:1e:80:12:a1:9e:3b:f6: d4:31:99:60:e7:c7:e1:61:8c:fd:6f:c3:d0:c0:a7:33:fe:21: 25:ab:3a:74:6d:ba:c1:d7:16:2f:0f:9e:d7:21:8d:3e:a2:dc: 84:48:3b:b1:67:d5:a1:85:cd:26:85:e9:8d:34:9c:ae:78:ac: 05:30:2f:73:ae:f1:63:86:60:47:11:e1:dc:b2:08:4c:24:ab: f3:80:2f:f1:17:ef:c4:e5:11:cc:e4:29:92:80:ef:22:86:6a: 36:7c:cd:d3:6e:7a:5c:8d:5a:02:65:70:70:29:7f:29:16:f2: f5:fc:71:e4:7a:88:2e:67:bb:d3:b3:64:00:32:e7:f5:1e:a1: 82:47:ab:d2:6d:fd:bc:62:e1:f6:d9:e4:11:25:ac:e4:95:c8: 25:20:4c:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15XbmS1NnugMDXfrcKTqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMjFhNWU0Y2Y2ZTllMmU3MDMzOGFlZWJmYTBkMTU4OGQ3 M2I2ZWYwHhcNMjUxMjA2MjMwMDQ3WhcNMjUxMjA3MjMwMDQ3WjAzMTEwLwYDVQQD EygwM2ZiYmI2M2UyNTk3NmExMWIzNWY0MDkzZjRkOWVmZjMzZWI1MmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSotD8o8RosOi40GKtAmMko84XIv C4Kz7m6X63sMYckWObdAtNCSRs7QqJtyUJ+odx3A9gCi2kMpFtHASkyMin/DHELL q68+XED4YdM4ChWAveV88zJCPgTZhCr3HdQ6b4BqYmR6X0D0zvv7Sup7euUtZ4/y 980bLIh4sk4396tzUgvK0tJ2N8c8uYwMSgmekkU9dFvx9IuM5/nv+C3r6czh1k6L liFsJefujhozWT+rJQKJ+BedP0nHCK1l0+bT6K0lR6w35qmR/1cJJUvxU8+vzA2J DLy3UDmyjKK3DrvDEx3tH72anQz6QaknnaWiM7lciRIGC2THIxiTfKv4PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAP7u2PiWXahGzX0CT9Nnv8z61KzMB8GA1UdIwQY MBaAFJwhpeTPbp4ucDOK7r+g0ViNc7bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDIt NTI4ZWZmNTJmZWJkLzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDItNTI4ZWZmNTJmZWJk LzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAS86UoJ2 QriJUFaH8ZhSXXqxekhLL8Gb3EJ0JegaxlPhN0Z5nIiPba3VoRQIoz7eMnkxwDZj Y17DWJWNwkx+YMkhFlWaj2+Ft1BHpWPrAqQ4UcYrqq5y8z+yYE/4i2opBKnV6cAe gBKhnjv21DGZYOfH4WGM/W/D0MCnM/4hJas6dG26wdcWLw+e1yGNPqLchEg7sWfV oYXNJoXpjTScrnisBTAvc67xY4ZgRxHh3LIITCSr84Av8RfvxOURzOQpkoDvIoZq NnzN0256XI1aAmVwcCl/KRby9fxx5HqILme707NkADLn9R6hgker0m39vGLh9tnk ESWs5JXIJSBMmw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:17:46 2025 by rpki-client