This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json) Hash identifier: 6vn2HpYUHvcB+IpgLet4GtgjlyydyGDq60yGqZL8gds= Subject key identifier: E2:39:BF:1C:A0:B9:7F:58:CE:C5:04:10:AB:DC:A0:96:08:0C:B7:59 Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b Certificate serial: 019AF12D578B2CF3A45EAC389A295E2FD3A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft Manifest number: 0ED8 Signing time: Sat 06 Dec 2025 01:01:11 +0000 Manifest this update: Sat 06 Dec 2025 01:01:11 +0000 Manifest next update: Sun 07 Dec 2025 01:01:11 +0000 Files and hashes: 1: DwD4MRqZCp-c4uFsMsWnYL0-SzA.roa (hash: 2tkEE6WjjJq4tK+YMGxG4bkpbYxQV0qlFZ5Ps3gC3Vo=) 2: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: VzoduzL9SIexJORB5+Y4mR+1ZHmnXwWIlgMmfrd6Kew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:57:8b:2c:f3:a4:5e:ac:38:9a:29:5e:2f:d3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b Validity Not Before: Dec 6 01:01:11 2025 GMT Not After : Dec 7 01:01:11 2025 GMT Subject: CN=e239bf1ca0b97f58cec50410abdca096080cb759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:a3:1e:d8:9f:67:7f:99:c1:8e:43:84:e1: f8:97:29:e7:82:e0:7a:e4:c2:35:70:74:dc:ed:5f: 48:8e:ec:75:69:b6:6f:69:0a:b7:76:0d:5b:2e:89: 95:96:14:db:71:9d:d9:22:2d:2f:c4:71:92:b0:79: c6:d0:20:6e:af:13:ea:69:d6:46:bf:2c:39:9e:15: 40:18:8b:44:4b:bc:6a:80:0a:6a:35:a9:73:a2:3a: be:16:d6:f4:3a:df:4b:10:9d:7a:f2:62:dc:ae:07: 62:0b:10:df:70:fb:cd:9a:4a:9f:c4:8d:7f:bd:c9: 7b:5c:d2:ac:db:4f:68:96:80:33:6f:50:88:4c:cc: 06:4c:d6:94:48:13:3d:8b:23:c2:68:3e:6c:76:3e: 29:30:df:90:9e:d7:62:95:f8:85:67:5f:45:5b:3c: c9:3e:c9:94:40:e8:61:f3:5f:9a:dd:26:4f:f1:fc: cd:df:a1:03:e8:77:23:73:26:80:1b:5a:21:cb:b2: 10:4f:3a:ce:d9:0b:0f:3c:c7:0a:25:e9:a9:ad:48: b2:df:6a:ec:f8:74:0b:d1:4d:28:28:74:be:17:89: ea:c2:94:bf:86:46:2f:a0:29:ad:76:a7:a6:d9:33: 1a:2d:5a:e4:6c:75:95:61:e3:61:29:d7:3c:77:e3: 91:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:39:BF:1C:A0:B9:7F:58:CE:C5:04:10:AB:DC:A0:96:08:0C:B7:59 X509v3 Authority Key Identifier: keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:35:d5:c5:97:c3:7c:2a:b2:40:a3:01:7a:0b:49:ee:ac:b9: 5e:50:c0:88:4c:86:12:7f:3e:2f:e2:ce:c3:b6:29:fc:6a:c6: 48:7a:5f:c6:fe:13:e6:a1:b3:a9:ac:ba:bb:7e:20:12:7d:fc: 35:55:ce:de:91:6c:13:f8:2d:35:57:f6:55:c0:a3:fa:8e:85: fb:14:d1:cc:89:da:9a:56:32:01:43:91:f5:b5:1d:bf:b4:09: e5:1e:d2:6a:10:a5:56:67:2c:f6:59:43:1d:e9:ab:d4:df:d7: cf:a1:a0:31:f7:32:7e:77:30:01:00:5b:7a:c2:04:67:d6:35: f5:7a:04:36:44:43:d0:20:9b:b4:72:6a:af:40:a4:08:d7:10: d4:de:82:a5:16:3d:1c:f2:23:39:cb:ca:06:2d:69:cc:e0:2c: 21:19:89:1d:b8:69:ec:11:93:96:27:11:8c:ba:4d:e1:a0:18: 03:d4:d7:4f:b7:15:aa:70:72:48:c4:4f:cd:96:0b:e9:a0:e7: 45:9a:17:fd:53:13:19:d5:6b:0b:03:e0:76:b8:6a:98:1b:fd: f2:f1:5f:43:54:a5:f6:ba:9d:50:2a:3d:ec:88:5b:62:e5:6d: ae:f9:0f:b9:e5:9f:fe:66:ae:93:a2:b8:d8:41:ec:bd:03:ae: 69:0a:23:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVeLLPOkXqw4mileL9OjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMjA5MTU3YmY3ODllNmJiYTM0ZTBkYmQzZWZlY2Q5YjIw ZGQwNmIwHhcNMjUxMjA2MDEwMTExWhcNMjUxMjA3MDEwMTExWjAzMTEwLwYDVQQD EyhlMjM5YmYxY2EwYjk3ZjU4Y2VjNTA0MTBhYmRjYTA5NjA4MGNiNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeijHtifZ3+ZwY5DhOH4lynnguB6 5MI1cHTc7V9Ijux1abZvaQq3dg1bLomVlhTbcZ3ZIi0vxHGSsHnG0CBurxPqadZG vyw5nhVAGItES7xqgApqNalzojq+Ftb0Ot9LEJ168mLcrgdiCxDfcPvNmkqfxI1/ vcl7XNKs209oloAzb1CITMwGTNaUSBM9iyPCaD5sdj4pMN+QntdilfiFZ19FWzzJ PsmUQOhh81+a3SZP8fzN36ED6HcjcyaAG1ohy7IQTzrO2QsPPMcKJemprUiy32rs +HQL0U0oKHS+F4nqwpS/hkYvoCmtdqem2TMaLVrkbHWVYeNhKdc8d+ORVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI5vxyguX9YzsUEEKvcoJYIDLdZMB8GA1UdIwQY MBaAFJwgkVe/eJ5rujTg29Pv7NmyDdBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81NDg5ZTYtM2UzMy00ZGYyLTkwYjgt MTE2OTA5ZTQzODI0LzEvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi81NDg5ZTYtM2UzMy00ZGYyLTkwYjgtMTE2OTA5ZTQzODI0 LzEvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzXVxZfD fCqyQKMBegtJ7qy5XlDAiEyGEn8+L+LOw7Yp/GrGSHpfxv4T5qGzqay6u34gEn38 NVXO3pFsE/gtNVf2VcCj+o6F+xTRzInamlYyAUOR9bUdv7QJ5R7SahClVmcs9llD Hemr1N/Xz6GgMfcyfncwAQBbesIEZ9Y19XoENkRD0CCbtHJqr0CkCNcQ1N6CpRY9 HPIjOcvKBi1pzOAsIRmJHbhp7BGTlicRjLpN4aAYA9TXT7cVqnBySMRPzZYL6aDn RZoX/VMTGdVrCwPgdrhqmBv98vFfQ1Sl9rqdUCo97IhbYuVtrvkPueWf/mauk6K4 2EHsvQOuaQojxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:27:54 2025 by rpki-client