This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json) Hash identifier: 8fpSVJ9Sj1FvN1Eq9zmPznKzchVH80L9noakmASPlao= Subject key identifier: B4:A6:49:F9:11:E3:54:E7:BC:D0:04:FE:2E:8E:71:AF:8D:10:81:D3 Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e Certificate serial: 019AF208F734DB5E14482B34794B0B865B02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft Manifest number: 0349 Signing time: Sat 06 Dec 2025 05:01:05 +0000 Manifest this update: Sat 06 Dec 2025 05:01:05 +0000 Manifest next update: Sun 07 Dec 2025 05:01:05 +0000 Files and hashes: 1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: GjiXwk17XqHuYIh+F6b3ueiAXSQgkkVx5bwrjkf1Gg8=) 2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f7:34:db:5e:14:48:2b:34:79:4b:0b:86:5b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e Validity Not Before: Dec 6 05:01:05 2025 GMT Not After : Dec 7 05:01:05 2025 GMT Subject: CN=b4a649f911e354e7bcd004fe2e8e71af8d1081d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:26:e6:9e:95:ad:44:0f:8a:41:18:5c:46: da:24:7f:15:2f:6c:de:d2:f6:64:62:3a:c8:ee:c4: c8:a2:a7:77:15:27:06:87:ab:4d:72:87:62:e9:f5: 5f:62:1d:d1:f2:04:ff:87:42:88:ed:1d:d7:11:dd: 12:d6:ac:77:9d:8c:e9:26:71:32:0d:18:2e:9f:ff: 23:5c:f9:96:7c:00:a8:8d:32:d4:47:c2:d7:98:a6: 80:72:5f:05:42:34:1f:e3:f6:fd:aa:a6:f9:d4:e3: b3:b6:9f:ff:ed:48:69:47:55:d2:1d:e7:a3:83:c9: e8:ea:3b:9e:04:66:ea:81:a9:79:e8:de:5a:c3:9a: 0a:63:5e:e9:fb:d4:12:24:53:06:39:21:b7:6d:97: 12:e6:87:90:e1:2c:2b:1f:ec:47:d1:a0:1d:53:a6: 45:4f:23:91:43:c6:52:cb:d4:25:7d:77:23:ea:7a: ad:49:09:a1:cb:70:cf:63:d7:eb:df:e1:fd:0e:6c: 69:b5:9c:8a:8e:fe:9b:96:91:d8:61:f8:dc:b9:16: c2:41:06:ff:5d:91:cd:c7:d1:1c:49:59:7e:40:e2: 47:3e:0e:10:9f:cc:91:9a:a4:51:41:7b:35:54:42: f2:05:43:ea:39:1a:b0:ef:1a:3b:6d:9c:75:93:f5: 08:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A6:49:F9:11:E3:54:E7:BC:D0:04:FE:2E:8E:71:AF:8D:10:81:D3 X509v3 Authority Key Identifier: keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ff:ac:cd:35:28:40:e8:c2:45:30:73:94:f0:1b:28:54:b9: c6:82:c2:66:3f:0b:28:4f:74:bd:15:cd:4b:3b:88:31:f7:f6: a9:4c:84:de:29:06:a1:7a:1d:a9:9a:1f:3b:a1:ff:68:66:b2: 57:2c:e3:8c:d5:b3:bd:0f:32:7a:8f:41:e1:b3:b0:cf:e7:06: c9:74:d6:a1:b2:d7:33:79:f4:25:f0:97:78:ef:0f:e0:55:49: 4e:ee:3e:e3:96:10:3a:1b:ca:72:da:aa:e0:72:30:e6:30:9a: 79:ba:98:f6:47:e4:21:74:dc:94:12:8e:65:df:59:11:d5:03: 50:ba:9c:c4:aa:5d:40:cf:db:27:8a:92:21:72:15:61:b7:42: 7a:89:fc:0a:9d:e6:48:8a:39:9c:58:a1:d5:1e:05:cf:1f:11: 9c:ec:6c:38:13:54:8e:f5:8f:f9:f1:92:13:1a:b5:1c:d7:33: 20:93:d1:cd:89:b0:0a:32:84:4a:b3:dc:85:f3:19:92:55:53: a2:ec:68:9a:2f:fe:6b:0a:92:7e:0f:dd:7f:58:b2:7a:fa:b0: df:7d:a4:33:75:42:ab:e7:7b:9f:d5:ee:b4:de:44:72:71:82: f9:7f:d0:a0:2a:64:60:69:40:de:bd:92:f1:bd:a5:f5:bb:12: 3e:b3:b4:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPc0214USCs0eUsLhlsCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MjUyOWE2MDkwMDU4MzRkYzEwYjViODAwZmU1MzEwYzU4 Y2M0N2UwHhcNMjUxMjA2MDUwMTA1WhcNMjUxMjA3MDUwMTA1WjAzMTEwLwYDVQQD EyhiNGE2NDlmOTExZTM1NGU3YmNkMDA0ZmUyZThlNzFhZjhkMTA4MWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx28m5p6VrUQPikEYXEbaJH8VL2ze 0vZkYjrI7sTIoqd3FScGh6tNcodi6fVfYh3R8gT/h0KI7R3XEd0S1qx3nYzpJnEy DRgun/8jXPmWfACojTLUR8LXmKaAcl8FQjQf4/b9qqb51OOztp//7UhpR1XSHeej g8no6jueBGbqgal56N5aw5oKY17p+9QSJFMGOSG3bZcS5oeQ4SwrH+xH0aAdU6ZF TyORQ8ZSy9QlfXcj6nqtSQmhy3DPY9fr3+H9DmxptZyKjv6blpHYYfjcuRbCQQb/ XZHNx9EcSVl+QOJHPg4Qn8yRmqRRQXs1VELyBUPqORqw7xo7bZx1k/UI+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSmSfkR41TnvNAE/i6Oca+NEIHTMB8GA1UdIwQY MBaAFDQlKaYJAFg03BC1uAD+UxDFjMR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jM2U2ZGYtMDgxNS00ZDMzLWIwOGMt Y2FlYjFjMjgwOWE4LzEvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9jM2U2ZGYtMDgxNS00ZDMzLWIwOGMtY2FlYjFjMjgwOWE4 LzEvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFv+szTUo QOjCRTBzlPAbKFS5xoLCZj8LKE90vRXNSzuIMff2qUyE3ikGoXodqZofO6H/aGay VyzjjNWzvQ8yeo9B4bOwz+cGyXTWobLXM3n0JfCXeO8P4FVJTu4+45YQOhvKctqq 4HIw5jCaebqY9kfkIXTclBKOZd9ZEdUDULqcxKpdQM/bJ4qSIXIVYbdCeon8Cp3m SIo5nFih1R4Fzx8RnOxsOBNUjvWP+fGSExq1HNczIJPRzYmwCjKESrPchfMZklVT ouxomi/+awqSfg/df1iyevqw332kM3VCq+d7n9XutN5EcnGC+X/QoCpkYGlA3r2S 8b2l9bsSPrO0Uw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:20 2025 by rpki-client