This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft File: nCy3-coO_XK-JYpKCTWIBjdLRmI.mft (raw, json) Hash identifier: CaOlveMhlfXLakjXmoPgXgG4SXevjbqjoVYx1q022hQ= Subject key identifier: 8D:8B:5A:90:4D:CC:69:32:27:A2:12:00:5A:E9:EF:39:C4:3C:17:4D Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62 Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662 Certificate serial: 019AF2ADCB1F6BBA9ED0A82856F3FD646594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft Manifest number: 0DB5 Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: Dotq45i-CIL8miP4blqY3J6J13s.roa (hash: AeEyJtBFVLSGPDiSeedlZidCthzwYAlppOftvZd9mwo=) 2: nCy3-coO_XK-JYpKCTWIBjdLRmI.crl (hash: dj7uIEtAZZq6VdhPM0auKGhcJkrr4yJ5mq4faQ3VhoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cb:1f:6b:ba:9e:d0:a8:28:56:f3:fd:64:65:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662 Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=8d8b5a904dcc693227a212005ae9ef39c43c174d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:db:4a:bd:4c:84:ad:7d:95:22:39:f5:dd: c9:2c:7f:2d:c5:cf:7b:3c:a5:09:44:9f:b2:18:3b: 50:99:d7:d5:41:cc:f8:c8:c2:42:87:a7:42:af:96: d0:69:28:fa:72:73:0d:63:b5:c5:c9:96:28:0e:e7: 81:d9:43:f6:99:3c:d3:e0:80:d7:ca:8d:ff:e0:64: ed:86:01:ba:7e:6a:da:d8:eb:d6:77:92:5c:c4:06: 2a:79:46:56:61:74:61:dc:57:f8:69:da:ba:ab:33: 0d:ab:f5:83:94:14:3f:92:b9:47:eb:73:65:9e:2e: e3:96:d7:32:27:10:5b:40:1f:4c:12:ab:f0:74:50: 2a:4f:e4:1b:98:31:f5:af:7c:80:29:39:41:f1:9e: 24:6f:db:3a:f3:7f:e0:47:17:20:2a:b9:3c:2a:8b: ed:f4:c3:45:90:6f:6c:c0:eb:56:a8:b4:82:1a:90: 50:b7:5e:ce:e7:1e:c4:80:53:50:85:a1:7b:70:38: d9:70:30:8f:8f:e3:3d:e5:71:7e:1c:4f:9c:3d:21: 7e:da:30:6c:4b:c6:53:4c:35:38:c3:ce:db:b0:b6: 4e:49:b7:9e:c5:92:3d:f0:78:1c:8b:f8:31:67:8a: 3a:b0:a8:52:ee:ea:dd:d9:68:53:f4:d7:16:49:ec: b6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8B:5A:90:4D:CC:69:32:27:A2:12:00:5A:E9:EF:39:C4:3C:17:4D X509v3 Authority Key Identifier: keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:f1:89:bb:c1:47:03:9f:22:7d:c1:82:68:c5:aa:34:b1:be: bb:87:c3:5e:4f:c8:5b:4d:5d:d5:78:17:1f:d4:4d:89:ec:70: 51:f8:5a:7c:3e:f9:af:88:6d:66:c0:76:82:05:21:b0:a7:82: 39:4f:83:d5:60:72:b3:e6:c9:9b:a3:09:f6:cb:1e:fd:ab:29: fe:2c:eb:c9:dc:0e:85:a1:04:24:39:1c:58:a5:4b:6e:1d:08: 0b:cb:02:77:f2:c7:ab:3a:d8:5b:85:9a:ca:ab:59:cd:37:ef: fc:d0:3a:07:7d:e0:e5:7f:22:33:c3:f1:c0:a6:f2:80:62:4f: fb:ba:30:44:4e:f3:bf:c2:7c:18:53:d8:92:6a:14:7d:01:95: ed:17:b5:f6:6d:ec:d1:b4:b7:b0:c7:a4:ba:f6:08:5f:9e:cb: 4c:54:cd:c9:80:02:e3:18:2b:8c:a0:10:7c:f4:27:8a:1e:c1: 34:77:5f:42:be:13:0b:9e:62:b9:18:a7:2b:c0:f3:e8:00:cf: 94:52:2c:f3:25:e9:b3:d1:28:82:19:30:a2:ea:37:e7:02:9e: 3d:46:34:fd:f7:36:f7:02:42:0d:0e:7d:03:96:0c:f2:53:f6: 1a:3e:88:89:11:c1:fe:8b:3c:ff:f0:24:ac:b1:b9:d9:77:91: 17:18:e2:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcsfa7qe0KgoVvP9ZGWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMmNiN2Y5Y2EwZWZkNzJiZTI1OGE0YTA5MzU4ODA2Mzc0 YjQ2NjIwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD Eyg4ZDhiNWE5MDRkY2M2OTMyMjdhMjEyMDA1YWU5ZWYzOWM0M2MxNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl/bSr1MhK19lSI59d3JLH8txc97 PKUJRJ+yGDtQmdfVQcz4yMJCh6dCr5bQaSj6cnMNY7XFyZYoDueB2UP2mTzT4IDX yo3/4GTthgG6fmra2OvWd5JcxAYqeUZWYXRh3Ff4adq6qzMNq/WDlBQ/krlH63Nl ni7jltcyJxBbQB9MEqvwdFAqT+QbmDH1r3yAKTlB8Z4kb9s683/gRxcgKrk8Kovt 9MNFkG9swOtWqLSCGpBQt17O5x7EgFNQhaF7cDjZcDCPj+M95XF+HE+cPSF+2jBs S8ZTTDU4w87bsLZOSbeexZI98Hgci/gxZ4o6sKhS7urd2WhT9NcWSey2RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2LWpBNzGkyJ6ISAFrp7znEPBdNMB8GA1UdIwQY MBaAFJwst/nKDv1yviWKSgk1iAY3S0ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84NmE0MjYtNTZlZS00NmRkLTk0MjUt N2Y5MmMzNGViMDdjLzEvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84NmE0MjYtNTZlZS00NmRkLTk0MjUtN2Y5MmMzNGViMDdj LzEvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvGJu8FH A58ifcGCaMWqNLG+u4fDXk/IW01d1XgXH9RNiexwUfhafD75r4htZsB2ggUhsKeC OU+D1WBys+bJm6MJ9sse/asp/izrydwOhaEEJDkcWKVLbh0IC8sCd/LHqzrYW4Wa yqtZzTfv/NA6B33g5X8iM8PxwKbygGJP+7owRE7zv8J8GFPYkmoUfQGV7Re19m3s 0bS3sMekuvYIX57LTFTNyYAC4xgrjKAQfPQnih7BNHdfQr4TC55iuRinK8Dz6ADP lFIs8yXps9Eoghkwouo35wKePUY0/fc29wJCDQ59A5YM8lP2Gj6IiRHB/os8//Ak rLG52XeRFxjiPg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:28 2025 by rpki-client