This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: rf/wAx4fOVHDCyI4tb35fZPCFKWo7lYXnWnd5YlbhZQ= Subject key identifier: 0E:56:56:D3:71:1B:3E:43:23:22:EA:09:37:B3:C9:69:D4:56:39:CA Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019B372077AA7097BCA8395A6A4C33320E2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 10AF Signing time: Fri 19 Dec 2025 15:00:33 +0000 Manifest this update: Fri 19 Dec 2025 15:00:33 +0000 Manifest next update: Sat 20 Dec 2025 15:00:33 +0000 Files and hashes: 1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=) 2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=) 3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=) 4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=) 5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=) 6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=) 7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=) 8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=) 9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: 48F6twVxBHxDku2A6WbIdiVfvMCPJUQu6+zl1GCjCeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:77:aa:70:97:bc:a8:39:5a:6a:4c:33:32:0e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Dec 19 15:00:33 2025 GMT Not After : Dec 20 15:00:33 2025 GMT Subject: CN=0e5656d3711b3e432322ea0937b3c969d45639ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:42:97:f4:01:b6:7c:b1:5a:1d:ad:2c:13: f7:81:d6:03:f3:7f:27:4e:c4:c0:20:a2:bb:e2:6c: 16:8f:66:37:23:7b:f0:47:8a:ac:43:2c:6d:fd:0e: e0:5b:b1:96:9d:cd:21:31:79:6d:0a:db:b5:52:55: 25:2d:09:ce:6d:40:11:4b:5a:d1:74:8f:e4:b4:14: 3f:e2:68:bc:ec:32:f7:97:df:42:69:b8:54:37:84: c7:f0:1d:dc:a3:9c:38:34:6f:cd:20:78:ca:70:9b: 8a:78:b5:b7:da:f6:71:0e:0b:e2:49:fb:37:d5:ef: 85:bd:0d:54:63:ac:ee:66:92:00:1d:d5:4a:50:4c: 18:a9:a4:64:cb:fc:2a:89:e3:0b:d3:af:f2:fa:69: 03:cc:fb:ad:51:81:91:01:56:ee:78:84:66:88:59: 62:9d:93:6b:47:43:53:48:de:86:2a:0a:48:f2:98: 08:ae:9d:34:ff:94:41:7d:87:90:e2:26:f4:a1:d8: 13:ab:5c:d4:df:6d:76:e8:3d:4d:0e:dd:de:f5:c2: d7:49:1a:c9:9f:61:8b:48:52:0e:4e:55:29:d0:f5: 06:86:2a:0f:59:dc:4b:68:8a:44:95:fd:46:bd:26: 29:97:51:58:6a:cf:5b:ac:f2:4e:a0:b6:72:44:75: 18:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:56:56:D3:71:1B:3E:43:23:22:EA:09:37:B3:C9:69:D4:56:39:CA X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ba:e7:97:dc:53:e2:96:a6:96:70:9e:78:61:f6:7c:24:cb: d3:0c:c5:8d:29:a5:23:65:59:ed:14:5b:92:d2:44:a8:5f:7f: 87:ac:3c:24:37:3c:d6:47:96:10:24:87:fe:49:b6:28:6a:47: 03:21:41:88:8d:05:ca:07:eb:d4:4c:89:bb:6a:29:db:10:44: 4e:9b:1b:78:8b:98:ff:61:ac:dc:f6:68:42:be:49:2a:36:c8: be:c7:2e:12:26:3c:3b:48:b4:a9:90:41:3a:90:ff:09:57:4d: 45:66:8e:24:0b:91:d6:e1:4a:e6:2a:98:6d:20:8a:d8:02:aa: 8b:f4:f4:9b:ea:97:62:81:0f:2a:a5:9a:b3:dc:aa:e8:70:e2: 09:72:77:cf:a4:5e:7e:d0:c4:e9:85:d3:8e:65:2d:fa:df:2d: 9e:56:2e:55:d3:eb:06:e4:7c:c7:c8:03:10:15:04:33:8f:21: 85:f0:86:36:50:ef:a8:78:20:0b:0d:73:ee:cf:18:db:09:ff: cf:f6:f7:54:ab:56:51:9f:f4:aa:7f:98:8b:05:37:d2:26:3e: 7c:aa:26:f8:94:2e:ba:9b:40:06:0c:2e:15:e5:98:e8:94:19: 7e:5b:a1:2c:01:76:8b:32:c3:e8:4c:14:74:05:5a:c0:e3:f8: ae:91:ac:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IHeqcJe8qDlaakwzMg4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjUxMjE5MTUwMDMzWhcNMjUxMjIwMTUwMDMzWjAzMTEwLwYDVQQD EygwZTU2NTZkMzcxMWIzZTQzMjMyMmVhMDkzN2IzYzk2OWQ0NTYzOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEZCl/QBtnyxWh2tLBP3gdYD838n TsTAIKK74mwWj2Y3I3vwR4qsQyxt/Q7gW7GWnc0hMXltCtu1UlUlLQnObUARS1rR dI/ktBQ/4mi87DL3l99CabhUN4TH8B3co5w4NG/NIHjKcJuKeLW32vZxDgviSfs3 1e+FvQ1UY6zuZpIAHdVKUEwYqaRky/wqieML06/y+mkDzPutUYGRAVbueIRmiFli nZNrR0NTSN6GKgpI8pgIrp00/5RBfYeQ4ib0odgTq1zU32126D1NDt3e9cLXSRrJ n2GLSFIOTlUp0PUGhioPWdxLaIpElf1GvSYpl1FYas9brPJOoLZyRHUYPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5WVtNxGz5DIyLqCTezyWnUVjnKMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirrnl9xT 4pamlnCeeGH2fCTL0wzFjSmlI2VZ7RRbktJEqF9/h6w8JDc81keWECSH/km2KGpH AyFBiI0Fygfr1EyJu2op2xBETpsbeIuY/2Gs3PZoQr5JKjbIvscuEiY8O0i0qZBB OpD/CVdNRWaOJAuR1uFK5iqYbSCK2AKqi/T0m+qXYoEPKqWas9yq6HDiCXJ3z6Re ftDE6YXTjmUt+t8tnlYuVdPrBuR8x8gDEBUEM48hhfCGNlDvqHggCw1z7s8Y2wn/ z/b3VKtWUZ/0qn+YiwU30iY+fKom+JQuuptABgwuFeWY6JQZfluhLAF2izLD6EwU dAVawOP4rpGsjg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:53:48 2025 by rpki-client