This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json) Hash identifier: XYzmpedgNORFjo5X0pFLDgFJN7BFw/ZxikHmo5FMV9c= Subject key identifier: EA:4D:AF:B3:9B:24:D8:52:D1:B9:C2:C4:8D:2F:F3:21:FD:45:33:47 Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e Certificate serial: 019BF386ADC81A0A762B875A4C0D9390BFC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft Manifest number: 03CF Signing time: Sun 25 Jan 2026 05:00:48 +0000 Manifest this update: Sun 25 Jan 2026 05:00:48 +0000 Manifest next update: Mon 26 Jan 2026 05:00:48 +0000 Files and hashes: 1: 6MfKKf2IUxjzK9rGH3KF2G1QL9M.roa (hash: AZP6WDTbAtRSZjdJJBnQi95805CtU4wIt7uYQkYZy2M=) 2: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: vHDasZDfssG2ks2O38sdwSNx6MlU2qaBBFw8axSdiAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:ad:c8:1a:0a:76:2b:87:5a:4c:0d:93:90:bf:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e Validity Not Before: Jan 25 05:00:48 2026 GMT Not After : Jan 26 05:00:48 2026 GMT Subject: CN=ea4dafb39b24d852d1b9c2c48d2ff321fd453347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:91:6a:07:9e:be:e8:59:46:d3:7d:76:9f: e9:9f:0b:4e:15:08:22:15:56:2e:02:ae:68:95:e2: 4a:6d:36:57:84:5b:fd:99:4a:36:f4:02:6b:7b:5e: 89:51:21:83:a0:65:4e:f3:fb:d3:0b:c0:34:2c:49: 68:a1:bd:09:08:d2:5d:6c:de:6c:d7:cd:25:ab:0a: 2c:57:0e:04:b5:64:f0:d5:47:cd:a3:d7:a7:12:e8: 6d:9c:16:f2:7f:e1:3c:ab:f6:0a:3a:f0:89:61:2a: d5:f4:b3:d6:dc:98:83:1e:cc:52:ec:da:d6:b1:7f: 84:d0:25:b7:b0:6b:6a:86:5e:bd:7d:4f:82:61:57: a5:1a:a7:ef:d4:bb:9a:c8:ab:b0:ec:6b:0a:6e:d6: da:d0:9a:14:de:82:b6:d1:8c:3f:1b:14:77:5a:88: 09:2e:2e:f4:99:ea:83:03:64:fb:ae:f4:e9:cb:70: a3:9f:2a:78:da:52:f5:9d:23:ab:01:c7:09:cc:19: 65:68:66:63:87:88:79:f1:b7:e5:30:8e:65:68:b3: a9:6e:40:0f:a3:5e:af:b5:9b:eb:8f:96:a1:3c:d7: 83:4a:e4:fc:f1:f1:3c:3c:d2:c8:0b:a5:ac:2e:8e: 3b:a1:4b:9d:d1:d2:d4:83:6b:15:b7:3d:71:c8:ff: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4D:AF:B3:9B:24:D8:52:D1:B9:C2:C4:8D:2F:F3:21:FD:45:33:47 X509v3 Authority Key Identifier: keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:9d:bb:c3:ab:02:6c:90:3f:54:99:10:06:39:f8:95:77:07: d1:d3:62:f1:87:fa:ba:d5:30:a2:ee:dd:45:3a:7e:3b:17:62: d1:b1:b7:03:fe:7f:dd:fe:0f:00:94:e4:de:a6:b1:f1:21:71: bd:c9:32:16:79:85:95:e8:f8:c2:41:89:7a:34:ce:59:bb:ce: de:ae:ce:b5:53:e3:05:bc:d1:ab:20:aa:e0:bb:5c:2c:96:10: a4:c6:48:38:11:cf:62:b8:a8:bb:17:e7:11:be:c4:3f:48:b5: b0:9a:32:1e:a6:0e:a7:ff:06:99:76:0d:e6:f7:22:2f:4a:62: 44:21:e8:74:00:3b:1a:99:f4:17:74:5a:5f:bb:af:c0:c5:28: 00:8a:3d:67:60:01:e4:9c:75:33:b5:99:bc:7d:4f:ce:a4:95: 91:a3:06:b8:b5:5a:57:09:5b:69:9b:f9:3a:f7:54:d7:d6:17: 3d:e9:c3:67:d8:93:28:18:f1:c1:bd:ff:2e:16:c6:e8:61:d8: 6f:4f:01:95:52:ce:25:51:00:c0:c9:5b:2d:2b:18:d9:5b:56: 21:fd:dd:5c:31:dc:f0:22:b8:a3:bf:b3:d5:d5:37:74:e7:95: 0b:f3:f2:58:53:fa:90:99:7c:08:56:72:0d:af:6e:a3:67:e6: 0b:77:d9:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhq3IGgp2K4daTA2TkL/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MjUyOWE2MDkwMDU4MzRkYzEwYjViODAwZmU1MzEwYzU4 Y2M0N2UwHhcNMjYwMTI1MDUwMDQ4WhcNMjYwMTI2MDUwMDQ4WjAzMTEwLwYDVQQD EyhlYTRkYWZiMzliMjRkODUyZDFiOWMyYzQ4ZDJmZjMyMWZkNDUzMzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA6RageevuhZRtN9dp/pnwtOFQgi FVYuAq5oleJKbTZXhFv9mUo29AJre16JUSGDoGVO8/vTC8A0LEloob0JCNJdbN5s 180lqwosVw4EtWTw1UfNo9enEuhtnBbyf+E8q/YKOvCJYSrV9LPW3JiDHsxS7NrW sX+E0CW3sGtqhl69fU+CYVelGqfv1LuayKuw7GsKbtba0JoU3oK20Yw/GxR3WogJ Li70meqDA2T7rvTpy3Cjnyp42lL1nSOrAccJzBllaGZjh4h58bflMI5laLOpbkAP o16vtZvrj5ahPNeDSuT88fE8PNLIC6WsLo47oUud0dLUg2sVtz1xyP+SYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpNr7ObJNhS0bnCxI0v8yH9RTNHMB8GA1UdIwQY MBaAFDQlKaYJAFg03BC1uAD+UxDFjMR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jM2U2ZGYtMDgxNS00ZDMzLWIwOGMt Y2FlYjFjMjgwOWE4LzEvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9jM2U2ZGYtMDgxNS00ZDMzLWIwOGMtY2FlYjFjMjgwOWE4 LzEvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg527w6sC bJA/VJkQBjn4lXcH0dNi8Yf6utUwou7dRTp+Oxdi0bG3A/5/3f4PAJTk3qax8SFx vckyFnmFlej4wkGJejTOWbvO3q7OtVPjBbzRqyCq4LtcLJYQpMZIOBHPYriouxfn Eb7EP0i1sJoyHqYOp/8GmXYN5vciL0piRCHodAA7Gpn0F3RaX7uvwMUoAIo9Z2AB 5Jx1M7WZvH1PzqSVkaMGuLVaVwlbaZv5OvdU19YXPenDZ9iTKBjxwb3/LhbG6GHY b08BlVLOJVEAwMlbLSsY2VtWIf3dXDHc8CK4o7+z1dU3dOeVC/PyWFP6kJl8CFZy Da9uo2fmC3fZnw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:38 2026 by rpki-client