This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4d194b-fbfe-4400-a475-5309335a3622/1/nscEvg6b7zQJT-8mSVnj9-HPais.mft File: nscEvg6b7zQJT-8mSVnj9-HPais.mft (raw, json) Hash identifier: ehiJdVpH3zbbsMvARSRB2ZVdYRzgNvFGooPkn2wDsb4= Subject key identifier: C5:BF:BF:60:3C:F7:2D:26:10:A5:A5:2D:D4:EE:39:B9:84:1B:1B:E6 Authority key identifier: 9E:C7:04:BE:0E:9B:EF:34:09:4F:EF:26:49:59:E3:F7:E1:CF:6A:2B Certificate issuer: /CN=9ec704be0e9bef34094fef264959e3f7e1cf6a2b Certificate serial: 019B785BB8A8D1C70860E410A477304D6D2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nscEvg6b7zQJT-8mSVnj9-HPais.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4d194b-fbfe-4400-a475-5309335a3622/1/nscEvg6b7zQJT-8mSVnj9-HPais.mft Manifest number: 025B Signing time: Thu 01 Jan 2026 07:00:35 +0000 Manifest this update: Thu 01 Jan 2026 07:00:35 +0000 Manifest next update: Fri 02 Jan 2026 07:00:35 +0000 Files and hashes: 1: nscEvg6b7zQJT-8mSVnj9-HPais.crl (hash: ILBoyxcOGWSXmYHiiqfcRSe7xbTcJ49RVlaB1MH4lYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4d194b-fbfe-4400-a475-5309335a3622/1/nscEvg6b7zQJT-8mSVnj9-HPais.crl rsync://rpki.ripe.net/repository/DEFAULT/43/4d194b-fbfe-4400-a475-5309335a3622/1/nscEvg6b7zQJT-8mSVnj9-HPais.mft rsync://rpki.ripe.net/repository/DEFAULT/nscEvg6b7zQJT-8mSVnj9-HPais.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5b:b8:a8:d1:c7:08:60:e4:10:a4:77:30:4d:6d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ec704be0e9bef34094fef264959e3f7e1cf6a2b Validity Not Before: Jan 1 07:00:35 2026 GMT Not After : Jan 2 07:00:35 2026 GMT Subject: CN=c5bfbf603cf72d2610a5a52dd4ee39b9841b1be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:85:db:fa:9a:db:ef:54:9f:34:c6:cd:79: 2e:4c:6c:ba:6d:76:a1:ad:e0:d0:5f:87:2c:bd:89: 02:c2:d3:87:46:d3:f5:a4:13:85:0e:d6:4a:01:58: b0:f3:8d:03:84:48:b3:f1:f2:7a:c5:f9:7a:ae:c0: 8b:1f:1b:0e:8f:ec:ac:08:45:ce:16:9d:df:d0:13: cd:c2:18:c0:c4:2e:28:30:d4:d6:c8:e4:2c:c3:02: 33:e3:c6:5f:6d:a8:f7:66:cf:58:f7:e4:d3:76:54: 79:44:fd:45:16:0a:57:58:86:52:16:36:aa:02:1d: df:62:5d:ce:b9:eb:0b:70:0d:c9:9a:59:c8:3b:fe: 55:55:59:dc:46:a9:9c:65:c9:ef:e2:82:13:a8:c6: c4:00:50:22:80:1f:e7:0e:38:a7:ab:63:19:86:d8: 89:d4:b0:de:f4:7c:05:a4:ed:15:12:0c:7f:1b:2b: a5:ba:2a:70:71:8a:87:2b:c0:ec:6f:55:b1:19:37: d9:e0:82:17:fb:d4:b9:2e:27:04:ea:8c:ec:7b:e7: be:f1:e4:4c:18:8e:6a:08:e9:e1:a7:1d:92:1c:47: e5:8f:4e:e5:65:af:61:f0:c0:e6:15:4a:4b:3c:2a: e0:64:b3:92:6b:a0:90:95:c2:f0:6d:ff:e9:42:4b: 1e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BF:BF:60:3C:F7:2D:26:10:A5:A5:2D:D4:EE:39:B9:84:1B:1B:E6 X509v3 Authority Key Identifier: keyid:9E:C7:04:BE:0E:9B:EF:34:09:4F:EF:26:49:59:E3:F7:E1:CF:6A:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nscEvg6b7zQJT-8mSVnj9-HPais.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4d194b-fbfe-4400-a475-5309335a3622/1/nscEvg6b7zQJT-8mSVnj9-HPais.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4d194b-fbfe-4400-a475-5309335a3622/1/nscEvg6b7zQJT-8mSVnj9-HPais.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:4b:44:82:81:bb:1e:fa:1a:25:9b:e0:c0:bf:17:f7:a4:78: ab:f7:9b:5d:7b:4b:88:d6:9e:47:14:cd:eb:74:e7:5c:a8:34: b6:8d:f1:99:9d:ee:b4:4b:71:65:c5:0c:4a:c1:6d:da:ed:6e: c1:2a:94:9e:90:43:d2:a4:b2:ae:2c:16:d5:9e:81:fd:70:e2: 54:c5:f1:87:51:9b:af:b2:db:8b:ce:02:9b:cc:47:05:8f:f3: 67:43:c6:9f:31:2e:da:65:6f:81:6a:c7:6c:4f:17:05:fe:95: 71:55:4a:c6:e3:5c:d2:7b:de:11:17:af:63:f3:68:30:45:db: ba:71:c4:1c:7f:0e:ad:ba:50:6c:6d:1a:21:6e:4b:af:4b:55: 12:e3:34:3e:80:38:c7:0d:de:60:0d:1b:ce:a3:ad:be:dd:92: f9:84:ca:fa:63:32:ce:78:d1:e0:8b:a1:8f:72:8a:6d:7f:ee: d9:aa:98:79:3e:0d:03:1b:1e:9a:f1:9b:f8:22:66:f1:ab:b0: d9:fc:12:ac:7b:66:ee:c7:30:f8:0d:4a:fb:31:6f:52:8e:e1: 6e:b6:0a:75:93:8a:c9:8f:f2:4f:2a:12:38:16:6a:bf:6f:93: ed:45:70:0e:42:e8:59:b7:95:22:dd:0c:15:0d:df:3f:a5:f2: 56:17:92:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4W7io0ccIYOQQpHcwTW0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYzcwNGJlMGU5YmVmMzQwOTRmZWYyNjQ5NTllM2Y3ZTFj ZjZhMmIwHhcNMjYwMTAxMDcwMDM1WhcNMjYwMTAyMDcwMDM1WjAzMTEwLwYDVQQD EyhjNWJmYmY2MDNjZjcyZDI2MTBhNWE1MmRkNGVlMzliOTg0MWIxYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxqF2/qa2+9UnzTGzXkuTGy6bXah reDQX4csvYkCwtOHRtP1pBOFDtZKAViw840DhEiz8fJ6xfl6rsCLHxsOj+ysCEXO Fp3f0BPNwhjAxC4oMNTWyOQswwIz48Zfbaj3Zs9Y9+TTdlR5RP1FFgpXWIZSFjaq Ah3fYl3OuesLcA3JmlnIO/5VVVncRqmcZcnv4oITqMbEAFAigB/nDjinq2MZhtiJ 1LDe9HwFpO0VEgx/GyuluipwcYqHK8Dsb1WxGTfZ4IIX+9S5LicE6ozse+e+8eRM GI5qCOnhpx2SHEflj07lZa9h8MDmFUpLPCrgZLOSa6CQlcLwbf/pQksevQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMW/v2A89y0mEKWlLdTuObmEGxvmMB8GA1UdIwQY MBaAFJ7HBL4Om+80CU/vJklZ4/fhz2orMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnNjRXZnNmI3elFKVC04bVNWbmo5LUhQYWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80ZDE5NGItZmJmZS00NDAwLWE0NzUt NTMwOTMzNWEzNjIyLzEvbnNjRXZnNmI3elFKVC04bVNWbmo5LUhQYWlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80ZDE5NGItZmJmZS00NDAwLWE0NzUtNTMwOTMzNWEzNjIy LzEvbnNjRXZnNmI3elFKVC04bVNWbmo5LUhQYWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALktEgoG7 HvoaJZvgwL8X96R4q/ebXXtLiNaeRxTN63TnXKg0to3xmZ3utEtxZcUMSsFt2u1u wSqUnpBD0qSyriwW1Z6B/XDiVMXxh1Gbr7Lbi84Cm8xHBY/zZ0PGnzEu2mVvgWrH bE8XBf6VcVVKxuNc0nveERevY/NoMEXbunHEHH8OrbpQbG0aIW5Lr0tVEuM0PoA4 xw3eYA0bzqOtvt2S+YTK+mMyznjR4Iuhj3KKbX/u2aqYeT4NAxsemvGb+CJm8auw 2fwSrHtm7scw+A1K+zFvUo7hbrYKdZOKyY/yTyoSOBZqv2+T7UVwDkLoWbeVIt0M FQ3fP6XyVheSew== -----END CERTIFICATE-----Generated at Thu Jan 1 15:58:17 2026 by rpki-client