This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json) Hash identifier: AZEn6ODfYXX4NRS4i3M7CGrqLL4h0evkR+tZtaCJLUY= Subject key identifier: 5E:CF:03:62:1D:45:C8:D0:6F:EA:C0:32:25:6B:A9:7B:9A:D0:02:45 Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef Certificate serial: 019B3F47E6F8388A17DE3239247BEC0EEC47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft Manifest number: 0ABC Signing time: Sun 21 Dec 2025 05:00:35 +0000 Manifest this update: Sun 21 Dec 2025 05:00:35 +0000 Manifest next update: Mon 22 Dec 2025 05:00:35 +0000 Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=) 2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: hnL7aNDqweGcOxLc5rr2LzOa2Ogo7GMiMd5IOLxiCak=) 3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:e6:f8:38:8a:17:de:32:39:24:7b:ec:0e:ec:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef Validity Not Before: Dec 21 05:00:35 2025 GMT Not After : Dec 22 05:00:35 2025 GMT Subject: CN=5ecf03621d45c8d06feac032256ba97b9ad00245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dc:56:89:82:32:04:9c:00:8e:16:d1:62:28: ef:16:33:4e:90:b0:30:b8:93:97:ea:e0:86:dc:f1: bd:4d:9a:47:5a:69:18:6c:be:8c:31:28:99:c2:d5: 72:d5:21:88:90:7f:21:3e:ff:f0:f0:dc:48:dd:4d: 69:7a:23:42:e9:66:37:9a:d9:5b:5e:77:a8:e1:f9: b4:f9:45:ac:cd:e7:0a:ac:0b:66:8a:c5:45:85:73: b4:3e:4f:9f:f6:55:07:50:c9:c3:88:6a:73:22:63: 57:3f:58:5e:7d:c5:32:d8:a5:39:d9:b0:dd:01:81: 99:65:9c:94:1f:a8:e4:3a:87:ec:ce:9e:52:6d:af: da:92:08:d2:67:15:07:39:62:1e:92:69:52:1c:c6: bd:79:13:08:c3:90:4f:b5:31:db:d5:9a:fc:65:e0: f9:a3:26:6d:39:d6:43:33:25:9f:99:6a:0c:09:6e: b4:5b:36:d9:e7:68:0b:b0:7c:3e:d7:3f:85:58:20: 58:7b:a3:aa:4a:eb:d5:9f:e8:6b:77:f1:3d:2d:ed: fc:cc:a6:b4:13:2b:8c:02:01:ec:2d:1e:ff:f7:b3: a2:75:0a:63:d1:1d:ca:79:38:15:ac:5f:4c:fd:63: 3c:c4:66:5c:4a:55:0d:69:0e:6a:7a:00:f9:b5:2b: 5a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CF:03:62:1D:45:C8:D0:6F:EA:C0:32:25:6B:A9:7B:9A:D0:02:45 X509v3 Authority Key Identifier: keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:2e:56:f8:08:1c:cc:b0:9d:a0:84:6c:a7:56:65:30:6a:f5: 26:e7:03:d4:6e:8e:a1:48:c0:90:48:e1:48:68:dc:0a:84:70: 8a:74:dc:a4:2e:88:a5:e0:35:68:ff:a8:a0:95:b1:ff:af:00: 45:43:11:77:9d:67:0c:ab:59:12:07:0e:58:b4:57:e3:c6:b5: 6d:67:a7:c3:16:06:a5:af:c8:d7:4e:e1:2b:5e:b3:e9:b7:9b: 54:cf:71:4f:88:e2:93:5a:7b:0d:ce:cc:d9:a8:99:b5:e3:71: c2:19:31:ee:14:bc:ed:ed:65:38:c5:5a:ad:62:e7:f7:24:c0: 25:cf:37:51:ef:7f:21:b8:e2:88:0d:2a:1e:fa:6a:03:0f:08: bc:c1:94:c9:50:a2:16:e1:41:b7:50:77:19:b8:7e:cb:88:fb: 48:e0:ea:11:3f:c2:20:b2:35:c0:ce:68:81:ee:70:c3:fc:ca: fa:c2:1a:d1:74:2f:e8:99:60:80:db:bf:d9:ae:25:7a:c3:d5: 08:9e:14:30:e7:bd:3e:6e:59:5d:a0:a3:0e:74:76:03:3e:77: c9:86:f7:68:c3:f0:69:cc:94:6a:7b:63:f6:18:72:fb:a1:dd: 3b:f6:00:fc:a1:c6:13:bc:69:f3:0c:bc:bf:95:4a:ed:be:a5: 28:1c:5c:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R+b4OIoX3jI5JHvsDuxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMjFhNWU0Y2Y2ZTllMmU3MDMzOGFlZWJmYTBkMTU4OGQ3 M2I2ZWYwHhcNMjUxMjIxMDUwMDM1WhcNMjUxMjIyMDUwMDM1WjAzMTEwLwYDVQQD Eyg1ZWNmMDM2MjFkNDVjOGQwNmZlYWMwMzIyNTZiYTk3YjlhZDAwMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NxWiYIyBJwAjhbRYijvFjNOkLAw uJOX6uCG3PG9TZpHWmkYbL6MMSiZwtVy1SGIkH8hPv/w8NxI3U1peiNC6WY3mtlb Xneo4fm0+UWszecKrAtmisVFhXO0Pk+f9lUHUMnDiGpzImNXP1hefcUy2KU52bDd AYGZZZyUH6jkOofszp5Sba/akgjSZxUHOWIekmlSHMa9eRMIw5BPtTHb1Zr8ZeD5 oyZtOdZDMyWfmWoMCW60WzbZ52gLsHw+1z+FWCBYe6OqSuvVn+hrd/E9Le38zKa0 EyuMAgHsLR7/97OidQpj0R3KeTgVrF9M/WM8xGZcSlUNaQ5qegD5tStaYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7PA2IdRcjQb+rAMiVrqXua0AJFMB8GA1UdIwQY MBaAFJwhpeTPbp4ucDOK7r+g0ViNc7bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDIt NTI4ZWZmNTJmZWJkLzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDItNTI4ZWZmNTJmZWJk LzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgC5W+Agc zLCdoIRsp1ZlMGr1JucD1G6OoUjAkEjhSGjcCoRwinTcpC6IpeA1aP+ooJWx/68A RUMRd51nDKtZEgcOWLRX48a1bWenwxYGpa/I107hK16z6bebVM9xT4jik1p7Dc7M 2aiZteNxwhkx7hS87e1lOMVarWLn9yTAJc83Ue9/IbjiiA0qHvpqAw8IvMGUyVCi FuFBt1B3Gbh+y4j7SODqET/CILI1wM5oge5ww/zK+sIa0XQv6JlggNu/2a4lesPV CJ4UMOe9Pm5ZXaCjDnR2Az53yYb3aMPwacyUantj9hhy+6HdO/YA/KHGE7xp8wy8 v5VK7b6lKBxcmA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:13:32 2025 by rpki-client