This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft File: NCI-DaktapXA5eKy-ajamVinTzY.mft (raw, json) Hash identifier: 4OybUy71VcVy/8ogmr0pc/ICXp7DL4SABklMOEyGg1s= Subject key identifier: E7:BB:03:C9:65:89:82:CE:08:99:C7:D1:65:BF:FC:AD:1D:0E:E7:5A Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36 Certificate issuer: /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36 Certificate serial: 019AF276D89D864283AD6119727F7FA9868A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft Manifest number: 02A7 Signing time: Sat 06 Dec 2025 07:01:06 +0000 Manifest this update: Sat 06 Dec 2025 07:01:06 +0000 Manifest next update: Sun 07 Dec 2025 07:01:06 +0000 Files and hashes: 1: NCI-DaktapXA5eKy-ajamVinTzY.crl (hash: akLfKNXsTbehOqXHWhCAzb9Pv/RtdQEKhe1TUc53nEU=) 2: TRwuVLW4klZRmD-yk2-fscrFudk.roa (hash: 4oIJHQETV5zvQ/SAaoMsWRc5+etxaluBpp2HxMv8sfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d8:9d:86:42:83:ad:61:19:72:7f:7f:a9:86:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36 Validity Not Before: Dec 6 07:01:06 2025 GMT Not After : Dec 7 07:01:06 2025 GMT Subject: CN=e7bb03c9658982ce0899c7d165bffcad1d0ee75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:de:18:af:cb:59:d3:da:f2:26:de:27:0b:00: 43:26:f4:66:81:a1:ec:0c:6a:2a:b6:81:7a:ed:ff: 15:bb:78:a7:53:a5:a6:92:6e:1f:d7:78:74:8a:57: 1c:bc:87:0c:34:dd:00:08:6e:b0:5a:24:fa:9f:1e: 82:21:38:9f:0e:df:af:3c:71:be:2c:a5:42:da:41: 66:91:72:c3:75:bb:0c:6c:ec:ca:78:30:d5:48:26: a6:5a:12:4d:9b:33:64:2a:de:91:ca:5c:eb:42:e0: f3:a6:e1:90:03:97:43:63:e0:98:6b:90:46:18:d5: b4:81:65:a9:33:21:77:9e:23:61:48:b0:c1:b9:b5: 1d:46:95:ad:65:4b:43:06:e7:a4:47:a5:9b:c5:a3: 4a:99:c2:0f:ad:5c:7f:7e:a9:67:7e:3b:65:9a:66: 69:10:98:f1:b1:70:e4:f3:fb:f2:9c:b3:27:89:41: 41:88:d2:c9:5b:b9:03:4c:3e:fd:ee:8e:1e:8f:95: 62:3a:c2:83:35:37:b4:89:e7:ff:69:cf:fd:ca:8a: d7:5b:b5:9e:ba:3e:7e:6c:0c:c2:12:07:78:89:87: f8:ae:d6:5f:aa:78:f6:66:d0:a2:59:4d:b6:93:bb: 8e:69:de:b5:6e:99:94:94:5f:10:8c:53:e8:7b:24: f5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BB:03:C9:65:89:82:CE:08:99:C7:D1:65:BF:FC:AD:1D:0E:E7:5A X509v3 Authority Key Identifier: keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:bd:ec:a2:97:5a:f3:a7:ce:09:17:db:49:ea:07:98:08:7c: 6b:9f:35:0e:ae:91:6d:64:51:26:f3:ff:51:5f:74:55:31:2a: dd:4c:79:11:f3:d3:8c:88:9d:de:71:d6:d0:fd:55:e4:2c:b9: 4d:8b:09:f7:5d:ac:14:87:6a:6e:bc:4d:60:38:4f:45:c1:b6: 19:7d:c0:e4:e1:60:bc:7a:f2:0f:3e:c4:2b:be:42:a0:fd:e9: 98:b8:b3:2e:4a:ae:6b:43:0b:be:94:d3:fa:74:57:93:54:1d: 99:15:30:c2:9f:ac:8e:1a:82:3b:80:1b:6d:20:4f:75:cf:13: 0f:33:b1:dd:a7:ce:fe:2c:55:84:17:d3:f6:82:0b:5e:72:68: a6:76:e4:08:6e:35:a0:1a:fe:40:03:42:bd:df:bd:de:67:78: 14:36:a6:04:93:7f:04:a8:aa:e4:c6:21:78:94:1a:da:5b:58: f5:f4:55:45:bc:56:c9:37:35:82:27:64:5b:48:35:c6:9f:e4: f5:8f:f5:e0:c4:69:36:24:e6:f6:3c:d0:29:b9:e8:17:90:09: 29:da:18:b4:3e:54:72:5b:21:44:b6:7b:9d:da:ed:30:83:92: ce:a0:69:43:e8:23:3a:54:38:65:f9:88:16:77:c2:b8:4e:05: fe:ad:e3:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtidhkKDrWEZcn9/qYaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MjIzZTBkYTkyZDZhOTVjMGU1ZTJiMmY5YThkYTk5NThh NzRmMzYwHhcNMjUxMjA2MDcwMTA2WhcNMjUxMjA3MDcwMTA2WjAzMTEwLwYDVQQD EyhlN2JiMDNjOTY1ODk4MmNlMDg5OWM3ZDE2NWJmZmNhZDFkMGVlNzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot4Yr8tZ09ryJt4nCwBDJvRmgaHs DGoqtoF67f8Vu3inU6Wmkm4f13h0ilccvIcMNN0ACG6wWiT6nx6CITifDt+vPHG+ LKVC2kFmkXLDdbsMbOzKeDDVSCamWhJNmzNkKt6RylzrQuDzpuGQA5dDY+CYa5BG GNW0gWWpMyF3niNhSLDBubUdRpWtZUtDBuekR6WbxaNKmcIPrVx/fqlnfjtlmmZp EJjxsXDk8/vynLMniUFBiNLJW7kDTD797o4ej5ViOsKDNTe0ief/ac/9yorXW7We uj5+bAzCEgd4iYf4rtZfqnj2ZtCiWU22k7uOad61bpmUlF8QjFPoeyT1wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOe7A8lliYLOCJnH0WW//K0dDudaMB8GA1UdIwQY MBaAFDQiPg2pLWqVwOXisvmo2plYp082MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQt NmI1MjM5Nzc5ZDhhLzEvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQtNmI1MjM5Nzc5ZDhh LzEvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIr3sopda 86fOCRfbSeoHmAh8a581Dq6RbWRRJvP/UV90VTEq3Ux5EfPTjIid3nHW0P1V5Cy5 TYsJ912sFIdqbrxNYDhPRcG2GX3A5OFgvHryDz7EK75CoP3pmLizLkqua0MLvpTT +nRXk1QdmRUwwp+sjhqCO4AbbSBPdc8TDzOx3afO/ixVhBfT9oILXnJopnbkCG41 oBr+QANCvd+93md4FDamBJN/BKiq5MYheJQa2ltY9fRVRbxWyTc1gidkW0g1xp/k 9Y/14MRpNiTm9jzQKbnoF5AJKdoYtD5UclshRLZ7ndrtMIOSzqBpQ+gjOlQ4ZfmI FnfCuE4F/q3joQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:45 2025 by rpki-client