This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json) Hash identifier: h9z+tieQO2KDufnfy1hXRn1U8fiK2ssUcUMDqKxxGvI= Subject key identifier: 55:18:CD:AD:C4:30:E3:51:63:83:D1:85:17:20:CA:47:0A:DA:96:3B Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36 Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36 Certificate serial: 019B360DF452395B7EA0C6250DE2F6C31733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft Manifest number: 02CA Signing time: Fri 19 Dec 2025 10:00:42 +0000 Manifest this update: Fri 19 Dec 2025 10:00:42 +0000 Manifest next update: Sat 20 Dec 2025 10:00:42 +0000 Files and hashes: 1: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: P4eqdHLds14JnZ9qlsWIXiNe6fe8q2G2wA4hlwhk9LQ=) 2: TRwuVLW4klZRmD-yk2-fscrFudk.roa (hash: 4oIJHQETV5zvQ/SAaoMsWRc5+etxaluBpp2HxMv8sfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0d:f4:52:39:5b:7e:a0:c6:25:0d:e2:f6:c3:17:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36 Validity Not Before: Dec 19 10:00:42 2025 GMT Not After : Dec 20 10:00:42 2025 GMT Subject: CN=5518cdadc430e3516383d1851720ca470ada963b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:32:a5:d6:62:d9:84:61:cd:99:0d:7e:1a: 28:3a:44:b3:f8:22:08:1e:8c:72:67:e3:33:3b:ba: b3:38:8e:21:2e:a9:15:a8:2b:b3:ef:18:f0:b3:3b: 9c:4c:54:9e:a4:25:31:07:18:58:fb:14:b4:f5:6d: 03:1f:c6:3b:01:90:97:8d:1c:97:e2:7b:5c:98:0d: a9:94:da:7f:75:67:93:8f:9c:64:5b:8f:6a:96:7d: 7f:11:d5:dd:95:80:57:24:4c:72:fc:5f:83:5a:79: 93:b5:55:0e:d6:3d:e3:49:c1:42:13:05:e6:2b:02: bc:dd:b5:ab:f8:ce:ed:8e:86:d6:1a:cc:16:2a:9a: 35:ee:1b:61:3a:9c:ba:4f:c8:cb:13:66:20:ac:3e: b5:d5:35:3d:a7:e6:c3:2a:e3:e8:ad:13:0c:9d:cd: b3:50:6c:35:a9:a9:82:06:4b:75:53:d7:84:34:07: 36:ee:f5:45:9c:16:90:55:8c:f6:72:f8:fa:08:e6: c8:57:cb:76:97:ab:c8:c7:eb:af:a4:34:b3:3e:b1: 98:99:9f:69:f5:0c:a7:d4:3e:27:bb:0a:5d:3c:3e: 2c:b3:8f:fe:d6:42:c7:17:c4:9f:9f:ed:18:03:e4: 7a:ec:38:6c:5b:75:79:0b:0b:4c:e2:c0:c4:0b:3f: 4f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:18:CD:AD:C4:30:E3:51:63:83:D1:85:17:20:CA:47:0A:DA:96:3B X509v3 Authority Key Identifier: keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ef:56:c3:be:66:5b:f8:a3:03:9e:eb:02:6d:2a:18:a6:ae: e4:74:dd:f4:05:c2:63:12:05:cd:42:e7:8e:4b:5d:a5:15:70: c9:fe:b9:d9:f5:09:11:3c:68:54:46:6c:17:b7:0a:3d:9d:df: 9c:49:b9:5b:98:4b:84:b7:f2:5b:2f:37:1f:4b:58:51:e8:27: 5b:a8:ad:ec:16:b4:da:75:ed:87:bd:2b:32:4e:8c:d4:fe:74: 46:34:4e:79:e8:ec:1e:53:e2:50:57:94:9c:6c:e6:39:91:8f: 47:c0:fe:f0:22:fe:72:6a:c5:50:cf:bd:05:d9:59:69:3a:92: ac:02:4a:55:a3:c3:8d:8b:2d:37:b8:15:7c:86:24:ef:06:53: c8:9d:6a:72:f9:e7:e8:e2:b9:9e:08:20:82:19:05:70:5d:87: 4c:91:4d:b4:1b:91:06:72:7c:b5:5c:2f:6d:03:c6:ba:22:d6: 2a:b2:5b:47:7a:81:ab:5e:49:ab:74:27:3b:a8:f0:1f:a8:14: d3:c1:f0:0d:01:c9:0d:51:3a:d6:2f:30:38:32:f7:2d:e6:17: f7:8b:26:20:64:b9:46:27:42:35:fd:ba:3e:e5:94:07:b9:fe: a2:57:f7:b5:13:8b:52:51:14:61:0b:4d:9e:de:ca:b8:4c:85: 0f:6f:5f:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DfRSOVt+oMYlDeL2wxczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MjIzZTBkYTkyZDZhOTVjMGU1ZTJiMmY5YThkYTk5NThh NzRmMzYwHhcNMjUxMjE5MTAwMDQyWhcNMjUxMjIwMTAwMDQyWjAzMTEwLwYDVQQD Eyg1NTE4Y2RhZGM0MzBlMzUxNjM4M2QxODUxNzIwY2E0NzBhZGE5NjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjAypdZi2YRhzZkNfhooOkSz+CII HoxyZ+MzO7qzOI4hLqkVqCuz7xjwszucTFSepCUxBxhY+xS09W0DH8Y7AZCXjRyX 4ntcmA2plNp/dWeTj5xkW49qln1/EdXdlYBXJExy/F+DWnmTtVUO1j3jScFCEwXm KwK83bWr+M7tjobWGswWKpo17hthOpy6T8jLE2YgrD611TU9p+bDKuPorRMMnc2z UGw1qamCBkt1U9eENAc27vVFnBaQVYz2cvj6CObIV8t2l6vIx+uvpDSzPrGYmZ9p 9Qyn1D4nuwpdPD4ss4/+1kLHF8Sfn+0YA+R67DhsW3V5CwtM4sDECz9PZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUYza3EMONRY4PRhRcgykcK2pY7MB8GA1UdIwQY MBaAFDQiPg2pLWqVwOXisvmo2plYp082MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQt NmI1MjM5Nzc5ZDhhLzEvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQtNmI1MjM5Nzc5ZDhh LzEvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOO9Ww75m W/ijA57rAm0qGKau5HTd9AXCYxIFzULnjktdpRVwyf652fUJETxoVEZsF7cKPZ3f nEm5W5hLhLfyWy83H0tYUegnW6it7Ba02nXth70rMk6M1P50RjROeejsHlPiUFeU nGzmOZGPR8D+8CL+cmrFUM+9BdlZaTqSrAJKVaPDjYstN7gVfIYk7wZTyJ1qcvnn 6OK5ngggghkFcF2HTJFNtBuRBnJ8tVwvbQPGuiLWKrJbR3qBq15Jq3QnO6jwH6gU 08HwDQHJDVE61i8wODL3LeYX94smIGS5RidCNf26PuWUB7n+olf3tROLUlEUYQtN nt7KuEyFD29fnw== -----END CERTIFICATE-----Generated at Fri Dec 19 17:38:57 2025 by rpki-client