This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json) Hash identifier: 1ywZwDaQholJBZej6dqxoR5Sd0TVYFXkAsotext1gyQ= Subject key identifier: 9E:FE:98:EC:16:87:61:9E:91:F5:4D:AA:28:DC:78:CF:12:DC:A6:56 Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06 Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306 Certificate serial: 019B3C102AC33BC2956E63DB60CD6329C370 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft Manifest number: 1745 Signing time: Sat 20 Dec 2025 14:00:50 +0000 Manifest this update: Sat 20 Dec 2025 14:00:50 +0000 Manifest next update: Sun 21 Dec 2025 14:00:50 +0000 Files and hashes: 1: Hq4qtu3Hmw7ihPLhHJm0o3HW0ME.roa (hash: cBO4YeU2VYitDB5gOiHBAGdFdmypsOGShw+oH/O7hOQ=) 2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: yVkiYHsAwGuxcRCuWKoBgrym9DA9DbJydf+3pQ9+fXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:2a:c3:3b:c2:95:6e:63:db:60:cd:63:29:c3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306 Validity Not Before: Dec 20 14:00:50 2025 GMT Not After : Dec 21 14:00:50 2025 GMT Subject: CN=9efe98ec1687619e91f54daa28dc78cf12dca656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e1:80:39:e9:3b:ec:b5:8e:07:5d:c7:7a:5e: db:22:8f:14:fa:f7:45:77:9b:74:62:68:d1:d4:7c: 34:f1:7a:fd:b0:5d:59:7d:7f:86:22:79:dc:7d:44: bc:db:bb:ac:9e:12:aa:bc:db:86:0c:9f:99:30:e6: db:11:fa:34:55:0a:0a:7f:d7:98:43:55:86:60:4e: a1:dc:e4:de:48:42:7c:dd:3e:59:92:ef:c6:d5:00: 5b:f5:d8:19:05:00:ed:a0:20:39:00:fd:9d:43:ca: f3:3c:16:5c:ff:8e:59:07:3b:05:c1:88:90:42:c5: b6:3f:a2:48:0e:5b:ff:a1:3c:e5:19:f9:cd:0e:09: 3e:81:b9:df:32:ba:a9:f2:4f:3b:da:5b:ab:71:52: 37:7f:21:9a:1c:82:7c:dd:0e:fb:88:95:a2:0d:b5: 9b:97:14:7c:d3:bf:c6:b9:33:01:f9:79:ee:43:f1: 8e:77:33:eb:f4:9f:fd:90:ef:44:07:6c:eb:41:1b: eb:f8:3d:ee:98:b0:3b:d1:72:2c:ff:4a:a8:de:27: 11:33:fc:bb:b7:12:2a:30:7e:ca:18:44:54:72:3c: 02:ee:27:b6:f1:d5:1d:a9:be:81:b5:7c:30:74:3e: fd:90:70:ba:06:a6:88:49:7b:af:1b:f7:e5:4d:9e: 13:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FE:98:EC:16:87:61:9E:91:F5:4D:AA:28:DC:78:CF:12:DC:A6:56 X509v3 Authority Key Identifier: keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:18:71:3e:df:f1:0b:af:3b:83:9a:68:9a:d4:9d:b3:9e:70: 9f:82:68:7d:a4:f1:68:2c:6f:11:2b:8f:9e:8f:74:44:1a:18: 9b:66:6d:e3:6e:14:a6:2e:77:94:de:28:23:8f:19:ca:cc:58: 1a:4b:64:6b:d5:2e:d6:ba:ca:31:b6:25:a6:c1:35:24:ff:8e: e3:f5:4d:08:f5:97:48:5a:ea:7e:d5:bf:c4:1e:5e:9c:d4:e4: 78:d5:c2:ca:0a:f5:83:08:b8:8b:19:c7:ab:7e:d6:6f:85:bb: eb:17:60:c2:e8:39:86:b1:79:82:d8:d0:68:6d:47:21:08:0b: 8e:d4:93:5d:af:48:6b:8f:98:cc:42:59:76:43:6a:cd:89:dd: 2a:29:de:bb:a3:05:50:55:f3:38:6a:af:95:34:df:25:cf:df: 87:ee:b3:70:6e:da:c1:8c:60:31:fa:d9:bc:c6:2c:08:d3:88: 47:fb:9e:15:dc:13:de:f8:71:82:bc:bc:56:4d:1e:be:50:69: f3:8b:ac:b7:f3:54:a5:81:55:a5:f2:8f:67:54:ef:9a:b9:0b: b6:6d:56:e3:83:ac:9d:9b:ae:b4:9e:54:62:a7:88:8e:96:14: ed:d5:ad:70:b8:14:3c:fa:ff:a8:05:c7:c9:4a:99:de:1c:80: 69:44:8f:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ECrDO8KVbmPbYM1jKcNwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzM2NmFmNmNlMGIxYTlmNjAxNzNiMTRiNWZkZGQ3ZTBi OTYzMDYwHhcNMjUxMjIwMTQwMDUwWhcNMjUxMjIxMTQwMDUwWjAzMTEwLwYDVQQD Eyg5ZWZlOThlYzE2ODc2MTllOTFmNTRkYWEyOGRjNzhjZjEyZGNhNjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+GAOek77LWOB13Hel7bIo8U+vdF d5t0YmjR1Hw08Xr9sF1ZfX+GInncfUS827usnhKqvNuGDJ+ZMObbEfo0VQoKf9eY Q1WGYE6h3OTeSEJ83T5Zku/G1QBb9dgZBQDtoCA5AP2dQ8rzPBZc/45ZBzsFwYiQ QsW2P6JIDlv/oTzlGfnNDgk+gbnfMrqp8k872lurcVI3fyGaHIJ83Q77iJWiDbWb lxR807/GuTMB+XnuQ/GOdzPr9J/9kO9EB2zrQRvr+D3umLA70XIs/0qo3icRM/y7 txIqMH7KGERUcjwC7ie28dUdqb6BtXwwdD79kHC6BqaISXuvG/flTZ4TPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7+mOwWh2GekfVNqijceM8S3KZWMB8GA1UdIwQY MBaAFJ3DZq9s4LGp9gFzsUtf3dfguWMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgt ODJmNDc2YjVjZmRiLzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgtODJmNDc2YjVjZmRi LzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxhxPt/x C687g5pomtSds55wn4JofaTxaCxvESuPno90RBoYm2Zt424Upi53lN4oI48ZysxY Gktka9Uu1rrKMbYlpsE1JP+O4/VNCPWXSFrqftW/xB5enNTkeNXCygr1gwi4ixnH q37Wb4W76xdgwug5hrF5gtjQaG1HIQgLjtSTXa9Ia4+YzEJZdkNqzYndKineu6MF UFXzOGqvlTTfJc/fh+6zcG7awYxgMfrZvMYsCNOIR/ueFdwT3vhxgry8Vk0evlBp 84ust/NUpYFVpfKPZ1TvmrkLtm1W44OsnZuutJ5UYqeIjpYU7dWtcLgUPPr/qAXH yUqZ3hyAaUSPeg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:36:14 2025 by rpki-client