This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json) Hash identifier: GY4IvbsQG3iBE3an0RlJ3GwB0rpKBOy8UsZ/ylGK6FM= Subject key identifier: A9:0D:8F:CA:6A:08:C0:41:30:C7:8A:0A:EC:B6:25:F5:86:D1:B3:56 Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e Certificate serial: 019B67D6894CF8A1771534C8A8EE6E5279FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft Manifest number: 0386 Signing time: Mon 29 Dec 2025 02:01:11 +0000 Manifest this update: Mon 29 Dec 2025 02:01:11 +0000 Manifest next update: Tue 30 Dec 2025 02:01:11 +0000 Files and hashes: 1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: qYOhJ80swV4iZiqfNHRAs52SAjB3+bjfuTTHGtowITU=) 2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 02:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:d6:89:4c:f8:a1:77:15:34:c8:a8:ee:6e:52:79:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e Validity Not Before: Dec 29 02:01:11 2025 GMT Not After : Dec 30 02:01:11 2025 GMT Subject: CN=a90d8fca6a08c04130c78a0aecb625f586d1b356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:64:a3:b5:43:ee:c1:cb:ad:e1:25:5b:c2:a0: 4c:25:ca:43:b7:0c:da:3e:0b:b0:0f:3a:98:3e:6b: 59:f8:65:9a:db:5c:43:34:be:f3:cb:16:50:9f:6f: 2f:5e:da:17:ff:51:0f:26:a0:cf:0e:31:88:d2:5e: 12:a6:1c:85:c4:89:43:b7:65:21:2a:b1:d4:2d:eb: e2:1b:0e:ce:5e:2c:60:e7:d0:5e:6d:a5:61:1c:8a: 9d:db:4e:68:f8:9c:3b:0b:9d:0a:61:e9:3a:e2:00: 61:6d:ba:98:3f:ee:55:eb:25:43:b1:1e:04:b3:3c: 07:b9:35:f1:27:04:54:7c:35:66:4e:28:99:9b:53: 29:02:95:b6:d5:e5:22:4b:9f:50:01:e5:72:15:cc: 5f:89:ee:1b:5f:b3:4d:da:f2:2c:98:0c:3c:c2:20: 11:92:a5:af:18:6c:da:0c:54:05:ad:0e:6e:89:b8: 16:6e:ea:27:76:87:82:74:7a:e7:c5:d6:2e:ed:6c: d0:30:9a:7a:26:ce:0a:1f:79:3b:a5:3a:d4:9b:67: 7e:65:0a:e6:7a:e6:d7:c4:18:1a:9b:e8:be:9c:f6: 55:9b:89:de:27:69:08:e7:24:1a:ee:8f:26:9c:5b: b4:f7:bb:11:4b:96:65:d6:94:0c:e8:9d:6b:d4:b7: e2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0D:8F:CA:6A:08:C0:41:30:C7:8A:0A:EC:B6:25:F5:86:D1:B3:56 X509v3 Authority Key Identifier: keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c7:b8:56:43:51:8a:30:b4:a2:33:e1:7b:ae:eb:9d:4e:3f: a5:b5:ec:5b:86:b3:b9:45:9c:97:e4:ba:72:fe:0e:6f:75:c9: 4f:f0:61:61:24:ed:2e:54:dc:23:70:60:ea:16:94:40:97:38: 1a:2c:31:10:c8:90:17:a0:a8:a3:6e:41:8b:30:26:54:11:8e: ef:a4:2c:21:55:d5:db:cf:96:22:12:26:39:a4:9a:b3:8c:88: 07:eb:6e:47:32:bf:12:60:05:c6:db:57:84:71:41:24:5a:a3: 0c:18:35:bc:2f:7d:f9:3d:2c:81:40:67:b5:97:02:27:d1:e8: 94:06:03:cf:ce:8c:a4:cc:ac:0f:e3:e8:40:d8:82:56:75:dd: 55:51:7c:f4:77:75:03:f7:e0:24:11:10:23:4c:5f:79:5e:c2: 5e:e2:2b:6e:99:76:16:0f:28:34:f1:4e:f5:13:bd:e2:57:ef: 10:61:bd:c2:63:50:51:14:71:a5:0f:1e:0f:de:3e:96:16:15: ac:df:cc:a2:14:3d:4e:d1:e6:3f:86:d0:a6:f3:a6:b9:d1:b4: 35:92:d7:28:01:b5:87:31:6e:df:34:fd:f9:95:57:ba:64:65: 6d:0b:57:40:a0:5b:df:94:86:e0:b9:88:8f:5c:89:9c:82:3d: dd:5e:35:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtn1olM+KF3FTTIqO5uUnn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MjUyOWE2MDkwMDU4MzRkYzEwYjViODAwZmU1MzEwYzU4 Y2M0N2UwHhcNMjUxMjI5MDIwMTExWhcNMjUxMjMwMDIwMTExWjAzMTEwLwYDVQQD EyhhOTBkOGZjYTZhMDhjMDQxMzBjNzhhMGFlY2I2MjVmNTg2ZDFiMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GSjtUPuwcut4SVbwqBMJcpDtwza PguwDzqYPmtZ+GWa21xDNL7zyxZQn28vXtoX/1EPJqDPDjGI0l4SphyFxIlDt2Uh KrHULeviGw7OXixg59BebaVhHIqd205o+Jw7C50KYek64gBhbbqYP+5V6yVDsR4E szwHuTXxJwRUfDVmTiiZm1MpApW21eUiS59QAeVyFcxfie4bX7NN2vIsmAw8wiAR kqWvGGzaDFQFrQ5uibgWbuondoeCdHrnxdYu7WzQMJp6Js4KH3k7pTrUm2d+ZQrm eubXxBgam+i+nPZVm4neJ2kI5yQa7o8mnFu097sRS5Zl1pQM6J1r1LfiqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkNj8pqCMBBMMeKCuy2JfWG0bNWMB8GA1UdIwQY MBaAFDQlKaYJAFg03BC1uAD+UxDFjMR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jM2U2ZGYtMDgxNS00ZDMzLWIwOGMt Y2FlYjFjMjgwOWE4LzEvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9jM2U2ZGYtMDgxNS00ZDMzLWIwOGMtY2FlYjFjMjgwOWE4 LzEvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8e4VkNR ijC0ojPhe67rnU4/pbXsW4azuUWcl+S6cv4Ob3XJT/BhYSTtLlTcI3Bg6haUQJc4 GiwxEMiQF6Coo25BizAmVBGO76QsIVXV28+WIhImOaSas4yIB+tuRzK/EmAFxttX hHFBJFqjDBg1vC99+T0sgUBntZcCJ9HolAYDz86MpMysD+PoQNiCVnXdVVF89Hd1 A/fgJBEQI0xfeV7CXuIrbpl2Fg8oNPFO9RO94lfvEGG9wmNQURRxpQ8eD94+lhYV rN/MohQ9TtHmP4bQpvOmudG0NZLXKAG1hzFu3zT9+ZVXumRlbQtXQKBb35SG4LmI j1yJnII93V41JQ== -----END CERTIFICATE-----Generated at Mon Dec 29 10:13:13 2025 by rpki-client