This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: WvFkMBrRTakolJ+uNxjMHTyu+o2iiV7tJJ9ccKYtnLg= Subject key identifier: 63:8B:46:F9:77:DB:65:C7:15:F6:DA:1D:3C:58:10:AD:25:A8:1C:C0 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019B56AB6CC1074237671DB39C14A575F1DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 1495 Signing time: Thu 25 Dec 2025 18:00:33 +0000 Manifest this update: Thu 25 Dec 2025 18:00:33 +0000 Manifest next update: Fri 26 Dec 2025 18:00:33 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 3C4bE5EhpxTD8ntAfMb031Q4N7U.roa (hash: mQejtPkSk7qOy5LIWKfdWmidqPBID43pSZaY4/inuG0=) 3: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 4: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 5: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 6: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: /NrwgAb1q4Q6BWl8JPqRHtuI72b8QHUK/MJJxG9jFGI=) 7: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 8: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 9: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 10: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 11: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 12: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 13: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 14: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 15: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:ab:6c:c1:07:42:37:67:1d:b3:9c:14:a5:75:f1:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Dec 25 18:00:33 2025 GMT Not After : Dec 26 18:00:33 2025 GMT Subject: CN=638b46f977db65c715f6da1d3c5810ad25a81cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:ac:88:2e:b4:a7:44:ce:e4:53:95:44:77: 12:fd:de:bc:f1:f5:0e:e9:f4:26:a5:bb:cf:70:1b: e7:30:d1:b1:23:d7:eb:a4:05:85:5c:88:ef:7e:39: d5:68:65:ce:b8:77:96:23:99:bc:75:74:f9:56:30: ae:dd:05:55:0c:cd:e6:c8:41:29:10:cd:7b:a3:c0: 9e:a7:d3:4b:96:85:50:ba:d4:cf:2e:e2:3a:4e:3d: ac:c1:5f:40:73:18:36:58:af:67:88:b8:30:db:4a: 51:e6:54:e7:cd:62:22:37:da:24:98:f2:b0:03:37: 6e:70:5f:3d:3f:83:bf:37:1d:99:cf:1b:da:e3:cc: 10:33:f7:3a:da:3f:b0:55:5c:41:e4:ec:41:4c:7b: 64:3b:27:d6:8c:c2:dc:fc:d8:8b:98:2a:11:43:61: 6b:46:c8:56:be:23:d8:2a:71:de:63:78:6e:5b:cd: a7:c6:9a:dd:2c:b9:d1:da:ea:59:44:38:c7:7e:3d: 05:de:12:c8:0b:6e:8f:c1:b0:58:68:a6:ab:06:ba: 2f:37:25:42:bd:04:0f:aa:2d:52:59:76:28:51:d4: 21:9d:a9:d9:de:70:7b:b9:70:fa:0b:a8:a1:fb:b5: cd:9f:91:df:4f:c6:ab:5d:9c:58:97:e6:1c:6c:a0: 36:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8B:46:F9:77:DB:65:C7:15:F6:DA:1D:3C:58:10:AD:25:A8:1C:C0 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ee:e1:de:d2:6e:f8:26:b1:2b:fb:e5:91:12:71:72:34:1c: 54:f3:57:fb:0d:78:47:d1:6b:e1:3a:66:69:4c:f4:d3:2c:32: 41:cc:4b:e6:f3:2f:23:2d:46:2b:ef:c6:bd:79:83:7f:68:65: 9f:69:a4:8d:e7:59:2e:8a:ee:8f:73:58:86:45:bf:69:8d:10: db:8c:e9:d0:78:37:8b:97:df:13:50:e7:de:15:58:82:83:75: 34:30:7a:b1:a4:0b:c3:93:ec:9a:c7:06:c5:4c:23:2a:e2:51: 88:da:c0:cb:38:91:69:13:b1:0f:45:23:72:98:98:84:ee:fa: 15:90:03:7a:3b:79:bf:fc:7f:14:73:d9:74:7b:24:47:b9:dc: 76:b6:e1:32:88:42:9a:61:e0:fc:34:59:69:aa:fd:02:69:1d: 4f:85:e0:b9:99:aa:0e:69:4a:50:eb:ca:30:77:d5:ff:cf:77: 12:37:3d:6c:a1:e2:a5:dc:dc:08:48:17:db:a3:09:db:a7:b0: d6:b8:ff:78:30:7d:e5:32:96:8e:37:a8:e5:be:85:b5:0f:25: 9e:7e:a4:a2:2e:f5:04:ad:59:60:8d:90:99:b1:2b:66:75:23: 57:61:74:a8:01:78:b5:ca:66:79:a5:03:75:b6:b4:9f:90:0e: 7f:21:06:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWq2zBB0I3Zx2znBSldfHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUxMjI1MTgwMDMzWhcNMjUxMjI2MTgwMDMzWjAzMTEwLwYDVQQD Eyg2MzhiNDZmOTc3ZGI2NWM3MTVmNmRhMWQzYzU4MTBhZDI1YTgxY2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp06siC60p0TO5FOVRHcS/d688fUO 6fQmpbvPcBvnMNGxI9frpAWFXIjvfjnVaGXOuHeWI5m8dXT5VjCu3QVVDM3myEEp EM17o8Cep9NLloVQutTPLuI6Tj2swV9Acxg2WK9niLgw20pR5lTnzWIiN9okmPKw AzducF89P4O/Nx2Zzxva48wQM/c62j+wVVxB5OxBTHtkOyfWjMLc/NiLmCoRQ2Fr RshWviPYKnHeY3huW82nxprdLLnR2upZRDjHfj0F3hLIC26PwbBYaKarBrovNyVC vQQPqi1SWXYoUdQhnanZ3nB7uXD6C6ih+7XNn5HfT8arXZxYl+YcbKA2DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOLRvl322XHFfbaHTxYEK0lqBzAMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAle7h3tJu +CaxK/vlkRJxcjQcVPNX+w14R9Fr4TpmaUz00ywyQcxL5vMvIy1GK+/GvXmDf2hl n2mkjedZLoruj3NYhkW/aY0Q24zp0Hg3i5ffE1Dn3hVYgoN1NDB6saQLw5PsmscG xUwjKuJRiNrAyziRaROxD0UjcpiYhO76FZADejt5v/x/FHPZdHskR7ncdrbhMohC mmHg/DRZaar9AmkdT4XguZmqDmlKUOvKMHfV/893Ejc9bKHipdzcCEgX26MJ26ew 1rj/eDB95TKWjjeo5b6FtQ8lnn6koi71BK1ZYI2QmbErZnUjV2F0qAF4tcpmeaUD dba0n5AOfyEG5Q== -----END CERTIFICATE-----Generated at Thu Dec 25 22:29:26 2025 by rpki-client