This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: lEoVxbynGpe4mNjZUyti1Q0Gn2MsBL/QgLknbwFDlbQ= Subject key identifier: 82:AC:EE:EF:3D:70:BC:90:BA:C8:FB:2D:B5:84:9C:46:68:C3:DD:58 Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019AF3892F393F05F04DEE4EC8614E35DE99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 108C Signing time: Sat 06 Dec 2025 12:00:45 +0000 Manifest this update: Sat 06 Dec 2025 12:00:45 +0000 Manifest next update: Sun 07 Dec 2025 12:00:45 +0000 Files and hashes: 1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=) 2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=) 3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=) 4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=) 5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=) 6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=) 7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=) 8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=) 9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: UqAXat7L8Rkx95Qp78m/3Y9qzIJnX0z66RxdMU1y/OU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:2f:39:3f:05:f0:4d:ee:4e:c8:61:4e:35:de:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Dec 6 12:00:45 2025 GMT Not After : Dec 7 12:00:45 2025 GMT Subject: CN=82aceeef3d70bc90bac8fb2db5849c4668c3dd58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:d8:9e:d8:74:df:c6:8e:8a:38:4b:c6:7b: 06:43:17:72:a1:fb:38:a7:ad:8d:99:a5:50:ed:b1: 71:1c:85:bf:82:b5:4f:81:c2:47:0b:93:72:af:ad: c4:63:23:c2:9b:06:17:c9:fd:ca:b3:05:75:f0:cb: bd:33:31:e0:f9:f0:e5:78:7c:f5:f5:ae:3a:41:07: 63:93:69:ba:81:fa:18:3e:5e:bc:ae:aa:4c:70:3f: f3:c6:3a:f9:c5:27:ca:64:d5:41:5f:06:f0:84:7f: 22:f8:bb:0a:ec:f9:33:40:c7:9f:ca:67:76:7b:e7: 13:fa:9e:0f:2a:74:f3:6e:0b:1c:d2:13:1a:80:8b: 27:56:7e:2b:7a:f2:35:89:ce:a5:7f:10:0d:ee:a1: 3f:69:da:7d:08:bf:9e:90:19:5b:e1:4e:ca:41:5c: 3e:50:82:a4:cf:6a:62:28:52:00:62:66:d7:dc:be: 81:94:c7:8a:65:69:2e:9b:9a:cd:22:c4:78:76:f6: e5:b5:e1:d1:0a:f0:71:ff:f2:02:59:c5:f8:57:ef: 59:09:4c:ab:da:87:c4:f3:0f:01:0b:18:b8:f4:db: bb:27:8b:d6:90:3d:df:c5:e5:41:73:83:8b:e7:96: d0:e3:86:70:56:dd:20:94:03:03:a4:9d:ab:ee:cf: 28:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AC:EE:EF:3D:70:BC:90:BA:C8:FB:2D:B5:84:9C:46:68:C3:DD:58 X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:23:c7:93:f1:59:ed:94:46:7d:9d:85:5a:7e:eb:ea:df:ca: 48:a6:db:32:f6:52:34:d2:08:6f:a9:f3:b2:4c:a9:8b:b3:4b: f2:b8:e6:89:13:53:27:44:51:a7:45:e2:28:87:99:28:ff:e3: e6:4c:56:0a:33:97:37:9b:62:e3:bb:68:8e:90:21:a7:58:cb: 91:95:e2:8f:08:c2:5e:08:96:cd:0d:16:21:a3:e9:2e:fb:a7: 24:a1:ca:e2:8b:be:27:b3:06:7b:1d:7d:d2:4b:e7:e1:16:12: 27:32:14:c1:27:51:bb:26:d8:e2:7a:a1:58:c3:eb:90:b5:a3: 83:ed:e5:d8:67:40:d2:ed:8a:a0:fb:1e:67:20:4e:9e:3b:b8: 36:00:3c:a1:d7:e8:6c:a1:d9:b2:06:21:ee:af:23:eb:e6:f4: ec:d4:4c:59:fe:b2:ae:93:af:a8:f6:70:92:16:fc:1f:26:fa: 37:5a:1c:09:1f:fd:61:4f:94:74:c8:25:ac:54:75:c2:e5:cd: 3a:a1:b1:5b:51:16:be:0e:dd:ba:3b:ff:78:1e:56:95:08:8d: c7:b5:f6:87:16:fb:03:87:4b:dc:df:b5:c4:ef:08:41:e8:fa: a5:6b:db:fe:4c:cd:8b:a5:07:70:2d:ff:69:35:e2:4f:45:9e: 41:36:fb:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziS85PwXwTe5OyGFONd6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjUxMjA2MTIwMDQ1WhcNMjUxMjA3MTIwMDQ1WjAzMTEwLwYDVQQD Eyg4MmFjZWVlZjNkNzBiYzkwYmFjOGZiMmRiNTg0OWM0NjY4YzNkZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu3Ynth038aOijhLxnsGQxdyofs4 p62NmaVQ7bFxHIW/grVPgcJHC5Nyr63EYyPCmwYXyf3KswV18Mu9MzHg+fDleHz1 9a46QQdjk2m6gfoYPl68rqpMcD/zxjr5xSfKZNVBXwbwhH8i+LsK7PkzQMefymd2 e+cT+p4PKnTzbgsc0hMagIsnVn4revI1ic6lfxAN7qE/adp9CL+ekBlb4U7KQVw+ UIKkz2piKFIAYmbX3L6BlMeKZWkum5rNIsR4dvblteHRCvBx//ICWcX4V+9ZCUyr 2ofE8w8BCxi49Nu7J4vWkD3fxeVBc4OL55bQ44ZwVt0glAMDpJ2r7s8o6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKs7u89cLyQusj7LbWEnEZow91YMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCPHk/FZ 7ZRGfZ2FWn7r6t/KSKbbMvZSNNIIb6nzskypi7NL8rjmiRNTJ0RRp0XiKIeZKP/j 5kxWCjOXN5ti47tojpAhp1jLkZXijwjCXgiWzQ0WIaPpLvunJKHK4ou+J7MGex19 0kvn4RYSJzIUwSdRuybY4nqhWMPrkLWjg+3l2GdA0u2KoPseZyBOnju4NgA8odfo bKHZsgYh7q8j6+b07NRMWf6yrpOvqPZwkhb8Hyb6N1ocCR/9YU+UdMglrFR1wuXN OqGxW1EWvg7dujv/eB5WlQiNx7X2hxb7A4dL3N+1xO8IQej6pWvb/kzNi6UHcC3/ aTXiT0WeQTb7Wg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:27:29 2025 by rpki-client