This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: TBXzk4f8d5jzogwUT6T5HlhTi73zfyD6ierVW+e0D1A= Subject key identifier: B1:0B:C9:58:B0:D5:A8:B5:C5:F9:8E:2D:A9:72:23:97:97:F6:97:B8 Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019B2F671309DE6DC52E1ABE49EFD1F11643 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 10AB Signing time: Thu 18 Dec 2025 03:00:42 +0000 Manifest this update: Thu 18 Dec 2025 03:00:42 +0000 Manifest next update: Fri 19 Dec 2025 03:00:42 +0000 Files and hashes: 1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=) 2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=) 3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=) 4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=) 5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=) 6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=) 7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=) 8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=) 9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: 2btfLvvyhMakWRMfHxOzEPVbuGY9a7L7ftJR2uQUn9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:13:09:de:6d:c5:2e:1a:be:49:ef:d1:f1:16:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Dec 18 03:00:42 2025 GMT Not After : Dec 19 03:00:42 2025 GMT Subject: CN=b10bc958b0d5a8b5c5f98e2da972239797f697b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:16:57:8f:a0:f8:76:63:69:ea:e9:87:0d: b3:f8:d3:a5:d9:28:b3:4d:b7:cd:4b:b7:ae:e2:fe: 7c:29:07:94:04:5b:25:3d:5f:e4:9e:9b:40:05:2d: 8a:3a:df:92:7d:e7:be:28:b7:1e:41:bd:28:7a:6e: 30:3e:8a:3d:93:b5:57:eb:eb:7c:b2:17:f6:7d:07: 5d:eb:e8:dc:1c:cf:18:bb:e1:76:b9:ef:cf:8f:23: 38:4b:a1:ad:73:c6:5c:36:f4:f8:aa:e0:e7:07:02: 94:f4:b8:6e:fa:62:d3:5b:eb:3a:b6:e2:4b:aa:d5: 6a:47:2c:65:35:96:16:47:ea:81:88:bb:91:44:b9: 5d:ab:de:b8:2e:0d:12:d6:cb:ea:0f:57:a0:0f:b9: 92:fe:3c:02:35:9a:23:d6:a0:2b:88:13:a6:32:5e: 62:4e:a5:e7:34:31:8a:f3:14:38:71:6a:66:9a:81: a8:28:76:d1:e8:1a:b3:71:24:39:d4:ba:16:a0:9c: b2:3d:cf:ff:5d:5a:e2:f3:14:15:7c:d1:d7:30:30: a4:b1:a1:d6:7c:49:3d:b0:f0:ad:90:cd:5e:06:05: 19:45:02:81:9f:89:d6:de:cb:19:e4:aa:9c:9c:50: 26:65:26:1a:7f:25:aa:86:2a:c1:bb:c1:4a:93:30: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0B:C9:58:B0:D5:A8:B5:C5:F9:8E:2D:A9:72:23:97:97:F6:97:B8 X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e7:ce:ff:1d:0e:b6:83:c5:2d:77:5b:f6:4f:7b:36:4a:76: f7:13:89:c2:a5:c0:a1:78:e7:ed:41:81:26:2f:5e:1c:db:3e: ec:eb:ea:7e:6c:74:63:59:4d:86:a8:27:3c:e8:c9:4e:41:5f: d2:00:1b:e0:f5:86:c5:4a:5a:1e:8c:69:b3:c8:fd:dd:b1:aa: a5:6c:5d:73:9e:e0:c0:b0:b8:e5:a9:00:6c:9b:47:eb:8a:85: 0c:45:0f:05:a6:65:c3:a9:6e:12:9f:26:15:da:2e:45:8f:d8: 3c:32:20:48:c5:be:2a:ed:b1:e2:8b:ed:20:6a:a8:6c:19:a4: 61:37:44:e4:38:ff:1f:cf:ea:f7:69:95:cd:5a:79:6b:c3:71: 83:4a:80:99:aa:e9:99:1d:06:73:0d:4b:3f:8e:42:ca:13:85: fc:71:8f:b4:96:78:ae:02:d4:f0:3c:46:3a:95:b5:31:31:fc: ab:33:75:ca:a7:16:9a:8f:0f:ce:64:8c:72:70:56:64:ad:1c: c9:cc:4e:77:6f:36:64:0e:a0:3d:2b:2b:23:d9:9d:b6:fe:72: 3f:44:26:71:a9:91:0a:f9:e7:37:cd:3b:13:42:e1:a4:4e:4f: 89:54:be:ce:c3:f9:08:a7:33:ea:24:8b:dd:d8:2b:4f:d9:10: 3c:05:07:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZxMJ3m3FLhq+Se/R8RZDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjUxMjE4MDMwMDQyWhcNMjUxMjE5MDMwMDQyWjAzMTEwLwYDVQQD EyhiMTBiYzk1OGIwZDVhOGI1YzVmOThlMmRhOTcyMjM5Nzk3ZjY5N2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFwWV4+g+HZjaerphw2z+NOl2Siz TbfNS7eu4v58KQeUBFslPV/knptABS2KOt+Sfee+KLceQb0oem4wPoo9k7VX6+t8 shf2fQdd6+jcHM8Yu+F2ue/PjyM4S6Gtc8ZcNvT4quDnBwKU9Lhu+mLTW+s6tuJL qtVqRyxlNZYWR+qBiLuRRLldq964Lg0S1svqD1egD7mS/jwCNZoj1qAriBOmMl5i TqXnNDGK8xQ4cWpmmoGoKHbR6BqzcSQ51LoWoJyyPc//XVri8xQVfNHXMDCksaHW fEk9sPCtkM1eBgUZRQKBn4nW3ssZ5KqcnFAmZSYafyWqhirBu8FKkzApfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLELyViw1ai1xfmOLalyI5eX9pe4MB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALufO/x0O toPFLXdb9k97Nkp29xOJwqXAoXjn7UGBJi9eHNs+7Ovqfmx0Y1lNhqgnPOjJTkFf 0gAb4PWGxUpaHoxps8j93bGqpWxdc57gwLC45akAbJtH64qFDEUPBaZlw6luEp8m FdouRY/YPDIgSMW+Ku2x4ovtIGqobBmkYTdE5Dj/H8/q92mVzVp5a8Nxg0qAmarp mR0Gcw1LP45CyhOF/HGPtJZ4rgLU8DxGOpW1MTH8qzN1yqcWmo8PzmSMcnBWZK0c ycxOd282ZA6gPSsrI9mdtv5yP0QmcamRCvnnN807E0LhpE5PiVS+zsP5CKcz6iSL 3dgrT9kQPAUHtg== -----END CERTIFICATE-----Generated at Thu Dec 18 08:02:24 2025 by rpki-client