This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft File: nc28ow8_5XpR57bAt_MgOvFnKiI.mft (raw, json) Hash identifier: btS4dwxdRF27uQlw33S4Blt/oSYcR0ror8FjcIRIm+U= Subject key identifier: 7D:B7:6F:A8:4D:30:D6:F2:A6:2B:A1:17:D3:53:12:27:4B:70:50:16 Authority key identifier: 9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22 Certificate issuer: /CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22 Certificate serial: 019B72908E2999FC026EBD8B4CA16B642BF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft Manifest number: 179E Signing time: Wed 31 Dec 2025 04:00:34 +0000 Manifest this update: Wed 31 Dec 2025 04:00:34 +0000 Manifest next update: Thu 01 Jan 2026 04:00:34 +0000 Files and hashes: 1: nc28ow8_5XpR57bAt_MgOvFnKiI.crl (hash: setu9vv/6jGuJpEmYSE1L7ffkHG6di5tMnyCaIM3jyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:90:8e:29:99:fc:02:6e:bd:8b:4c:a1:6b:64:2b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22 Validity Not Before: Dec 31 04:00:34 2025 GMT Not After : Jan 1 04:00:34 2026 GMT Subject: CN=7db76fa84d30d6f2a62ba117d35312274b705016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7e:d6:7d:5c:18:b7:a3:10:65:0b:6d:e5:39: 5e:04:ee:46:9f:da:95:85:c6:97:e4:ef:9c:ca:95: 3b:07:cc:85:f7:ee:26:39:7c:82:62:9c:fa:e1:44: ad:c8:60:d6:3c:6f:a0:21:b0:6f:c5:a9:60:da:52: 63:9e:03:9d:ab:c8:4d:bf:51:f9:b6:d8:7a:77:47: 33:d8:88:f8:dc:e1:1a:26:37:f8:b8:61:ea:3e:d4: 6e:1d:2d:a8:d1:aa:bb:58:0b:09:8d:8a:13:b0:82: 81:db:52:30:a3:22:37:b7:d5:5a:26:47:17:3e:13: b4:cc:af:27:5f:20:d4:78:a8:75:ec:9c:df:93:00: 3e:2e:44:8e:b5:78:5f:49:4d:67:b6:94:48:16:2a: 18:1a:0c:b7:81:0f:da:62:64:02:e5:4f:69:30:e1: 19:1a:ea:3f:7f:40:c3:3b:a6:60:98:b6:82:df:23: 35:72:a6:df:0b:1e:8d:91:f7:e4:43:51:4f:f5:75: 97:64:05:77:55:f2:74:da:87:67:c7:17:51:43:5d: 80:fd:e8:04:c1:a8:ae:5c:25:f0:be:b2:0e:b1:e2: e4:34:2a:3e:9c:a8:bf:a7:07:e6:48:bc:94:58:f3: 5d:a6:2f:8c:ce:53:ab:c1:31:df:e9:8d:f2:d3:8c: 61:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B7:6F:A8:4D:30:D6:F2:A6:2B:A1:17:D3:53:12:27:4B:70:50:16 X509v3 Authority Key Identifier: keyid:9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:7e:1c:4e:29:4c:dc:9c:c9:50:15:f8:f6:57:2d:51:b9:c2: 5e:5d:93:01:63:6d:19:8e:da:6f:de:64:f2:9d:9f:07:19:1b: 7f:df:76:c5:1b:e1:23:bf:8f:f5:56:67:5c:00:bc:4f:5c:f8: fb:6d:14:4a:ae:2c:4b:be:6e:a3:44:4c:d8:ca:ad:cf:5e:06: 7a:ab:d8:86:82:47:aa:e8:10:0a:d3:2a:6c:1d:ee:03:cf:ee: 52:e2:74:38:72:54:0b:7a:f6:22:0b:c9:72:06:ef:76:58:78: a4:a9:1e:be:c6:9f:fa:3e:17:03:c4:cb:77:2f:a7:69:db:43: 3e:19:6e:74:ac:02:77:c7:6c:ae:b7:f4:42:0e:d3:c4:0a:df: 7a:30:37:df:e7:40:9c:38:90:1d:34:ea:0c:c3:49:57:da:ee: 31:48:39:e5:95:a8:9b:20:7d:29:a3:b3:76:f7:7c:23:bb:1c: 24:d4:bb:35:7e:20:d4:62:6c:51:03:5f:63:a3:65:b2:a2:72: ee:0e:39:e0:33:e9:e3:6b:f9:93:3d:cd:4e:c1:aa:76:18:36: 66:20:85:fa:0b:bb:85:ad:bd:b3:39:3e:08:80:61:4d:61:6f: 7e:28:1c:3c:a6:5f:40:04:2c:f6:3c:29:2c:56:68:d5:25:0a: bb:ce:7c:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykI4pmfwCbr2LTKFrZCv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkY2RiY2EzMGYzZmU1N2E1MWU3YjZjMGI3ZjMyMDNhZjE2 NzJhMjIwHhcNMjUxMjMxMDQwMDM0WhcNMjYwMTAxMDQwMDM0WjAzMTEwLwYDVQQD Eyg3ZGI3NmZhODRkMzBkNmYyYTYyYmExMTdkMzUzMTIyNzRiNzA1MDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk37WfVwYt6MQZQtt5TleBO5Gn9qV hcaX5O+cypU7B8yF9+4mOXyCYpz64UStyGDWPG+gIbBvxalg2lJjngOdq8hNv1H5 tth6d0cz2Ij43OEaJjf4uGHqPtRuHS2o0aq7WAsJjYoTsIKB21IwoyI3t9VaJkcX PhO0zK8nXyDUeKh17JzfkwA+LkSOtXhfSU1ntpRIFioYGgy3gQ/aYmQC5U9pMOEZ Guo/f0DDO6ZgmLaC3yM1cqbfCx6NkffkQ1FP9XWXZAV3VfJ02odnxxdRQ12A/egE waiuXCXwvrIOseLkNCo+nKi/pwfmSLyUWPNdpi+MzlOrwTHf6Y3y04xhwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH23b6hNMNbypiuhF9NTEidLcFAWMB8GA1UdIwQY MBaAFJ3NvKMPP+V6Uee2wLfzIDrxZyoiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmMyOG93OF81WHBSNTdiQXRfTWdPdkZuS2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hYzcyYTYtYjgzNi00MDQzLWJkMjMt ZmEwNjBiOWEzYjQwLzEvbmMyOG93OF81WHBSNTdiQXRfTWdPdkZuS2lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hYzcyYTYtYjgzNi00MDQzLWJkMjMtZmEwNjBiOWEzYjQw LzEvbmMyOG93OF81WHBSNTdiQXRfTWdPdkZuS2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABn4cTilM 3JzJUBX49lctUbnCXl2TAWNtGY7ab95k8p2fBxkbf992xRvhI7+P9VZnXAC8T1z4 +20USq4sS75uo0RM2Mqtz14GeqvYhoJHqugQCtMqbB3uA8/uUuJ0OHJUC3r2IgvJ cgbvdlh4pKkevsaf+j4XA8TLdy+nadtDPhludKwCd8dsrrf0Qg7TxArfejA33+dA nDiQHTTqDMNJV9ruMUg55ZWomyB9KaOzdvd8I7scJNS7NX4g1GJsUQNfY6NlsqJy 7g454DPp42v5kz3NTsGqdhg2ZiCF+gu7ha29szk+CIBhTWFvfigcPKZfQAQs9jwp LFZo1SUKu8584Q== -----END CERTIFICATE-----Generated at Wed Dec 31 09:10:46 2025 by rpki-client