This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft File: nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json) Hash identifier: Pbh07weDHrwMyryNhwbcsD9uFfEqmAKw84Wb8U7luBc= Subject key identifier: 2F:7A:FF:13:30:AC:58:6A:4C:C1:45:7B:54:69:91:6A:CA:78:96:E4 Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa Certificate serial: 019B2776F65A5E494ACF08DC8072A7EE3347 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft Manifest number: 14E9 Signing time: Tue 16 Dec 2025 14:01:06 +0000 Manifest this update: Tue 16 Dec 2025 14:01:06 +0000 Manifest next update: Wed 17 Dec 2025 14:01:06 +0000 Files and hashes: 1: 6mwpgZ5jMyOU3uGB0qn2Rbl29vU.roa (hash: zgnUk23gS2UF4J68R+bIiwgYj0q0EdWy/Z/fr9n8soc=) 2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: RWNGFbPwSFJgWHBGi0PBXjRAgxXiAHOgMxMURL1nfWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:76:f6:5a:5e:49:4a:cf:08:dc:80:72:a7:ee:33:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa Validity Not Before: Dec 16 14:01:06 2025 GMT Not After : Dec 17 14:01:06 2025 GMT Subject: CN=2f7aff1330ac586a4cc1457b5469916aca7896e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:10:32:f9:9d:c1:10:3a:38:72:b2:51:51:d5: a1:71:f7:80:b1:83:81:97:12:ef:c2:d1:6c:de:4a: 21:12:01:71:a6:70:e9:15:20:9f:a2:df:cb:3a:4f: 92:9f:09:5e:4e:d7:7e:04:91:52:1e:8a:fb:8e:be: 4d:e4:1e:44:1b:71:95:59:4b:27:87:de:99:49:44: 8d:0b:3a:66:b8:38:71:bb:99:12:bf:e1:00:6c:9d: ac:1d:7c:29:c3:4e:f6:28:b3:60:db:dc:dc:eb:79: cf:b0:da:26:2e:da:54:05:6f:7c:e4:d8:d1:b1:1e: c5:24:1d:0c:02:38:16:2e:a3:30:c6:bb:75:5d:a4: bc:53:2a:ec:d4:aa:2b:20:da:cb:2a:cb:81:d4:ed: 49:5a:3b:e7:d5:c7:77:0c:b1:01:db:c1:d5:ef:94: 28:cd:6d:80:ca:22:e0:0f:81:1f:18:c5:d8:56:40: d3:66:6d:d5:91:5b:4a:d0:59:d3:22:8c:61:a1:40: dd:56:8e:77:ab:b1:77:e7:ea:c0:7e:d6:67:10:c2: 5d:06:21:06:a5:37:76:57:79:97:1e:ab:83:7c:ef: f5:06:c1:0d:ef:d4:c9:7a:82:e1:46:b7:b4:cd:fe: c0:d7:9c:9f:2d:c2:ee:7a:28:de:72:0e:5b:9d:c9: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7A:FF:13:30:AC:58:6A:4C:C1:45:7B:54:69:91:6A:CA:78:96:E4 X509v3 Authority Key Identifier: keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:5a:d1:de:3e:53:52:09:e8:c7:da:f7:3b:28:ad:07:5c:d5: 68:37:d5:10:50:f4:66:96:33:7e:ab:4b:8b:db:a8:05:e3:83: 1a:c7:44:1e:04:e9:aa:67:3a:17:ca:d6:44:fc:e4:84:d8:fd: e4:2f:9d:ed:ba:be:01:b8:8c:33:80:08:00:f3:cc:d7:1e:d2: 45:ee:d6:33:e8:a5:de:a3:b6:81:65:94:f4:0d:c7:b9:b5:34: 78:6e:21:08:78:64:e5:b7:fb:e8:4a:41:47:93:17:b1:e4:48: 08:81:dc:1b:d7:d0:d4:b4:30:b9:0c:c3:0d:83:11:d2:2b:ae: ec:90:ed:bf:74:e3:59:3f:88:2c:d1:2e:22:29:7b:43:79:3c: 24:f0:8b:9d:40:c4:79:5e:1c:2e:25:0c:60:64:09:e7:bd:95: a3:e6:4e:37:d6:96:1b:65:82:34:20:62:b2:b8:3e:ac:64:29: 3b:ef:f6:d7:b2:33:a9:42:3a:31:5d:54:4c:f2:ea:2d:46:a0: d7:94:c4:fb:4a:0c:46:45:c0:2d:04:b4:fe:bb:7f:70:fa:c7: ec:1a:77:47:af:1e:7b:7b:20:a7:10:ff:a7:21:77:37:cd:ad: a5:aa:f4:e7:e1:e7:7d:08:b4:fa:93:d0:d0:cf:4e:2d:6a:ed: 6d:44:d1:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsndvZaXklKzwjcgHKn7jNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkY2Y1ZWRjNGU2YWVkYzhkZjQyNDVhNjJmYTM3ZmEyMmE2 MjBlYWEwHhcNMjUxMjE2MTQwMTA2WhcNMjUxMjE3MTQwMTA2WjAzMTEwLwYDVQQD EygyZjdhZmYxMzMwYWM1ODZhNGNjMTQ1N2I1NDY5OTE2YWNhNzg5NmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhAy+Z3BEDo4crJRUdWhcfeAsYOB lxLvwtFs3kohEgFxpnDpFSCfot/LOk+SnwleTtd+BJFSHor7jr5N5B5EG3GVWUsn h96ZSUSNCzpmuDhxu5kSv+EAbJ2sHXwpw072KLNg29zc63nPsNomLtpUBW985NjR sR7FJB0MAjgWLqMwxrt1XaS8Uyrs1KorINrLKsuB1O1JWjvn1cd3DLEB28HV75Qo zW2AyiLgD4EfGMXYVkDTZm3VkVtK0FnTIoxhoUDdVo53q7F35+rAftZnEMJdBiEG pTd2V3mXHquDfO/1BsEN79TJeoLhRre0zf7A15yfLcLueijecg5bnclVQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC96/xMwrFhqTMFFe1RpkWrKeJbkMB8GA1UdIwQY MBaAFJ3PXtxOau3I30JFpi+jf6IqYg6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xZDFiNDUtODZlOS00NmVlLTk5MWMt MGVkZGViNDhlM2FlLzEvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xZDFiNDUtODZlOS00NmVlLTk5MWMtMGVkZGViNDhlM2Fl LzEvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlrR3j5T Ugnox9r3OyitB1zVaDfVEFD0ZpYzfqtLi9uoBeODGsdEHgTpqmc6F8rWRPzkhNj9 5C+d7bq+AbiMM4AIAPPM1x7SRe7WM+il3qO2gWWU9A3HubU0eG4hCHhk5bf76EpB R5MXseRICIHcG9fQ1LQwuQzDDYMR0iuu7JDtv3TjWT+ILNEuIil7Q3k8JPCLnUDE eV4cLiUMYGQJ572Vo+ZON9aWG2WCNCBisrg+rGQpO+/217IzqUI6MV1UTPLqLUag 15TE+0oMRkXALQS0/rt/cPrH7Bp3R68ee3sgpxD/pyF3N82tpar05+HnfQi0+pPQ 0M9OLWrtbUTR5Q== -----END CERTIFICATE-----Generated at Wed Dec 17 00:25:35 2025 by rpki-client