This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json) Hash identifier: s7nFJEbmA7NMIs6UNJL/9ApePWyXKwz1/wyuZL48+q8= Subject key identifier: 1C:F2:CF:2A:CF:D0:88:C5:37:21:14:F5:C4:24:3C:0E:10:AE:A1:57 Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef Certificate serial: 019AF208B81D855B57AA832B7056D193FB5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft Manifest number: 0A94 Signing time: Sat 06 Dec 2025 05:00:48 +0000 Manifest this update: Sat 06 Dec 2025 05:00:48 +0000 Manifest next update: Sun 07 Dec 2025 05:00:48 +0000 Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=) 2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: ScBh9nwv7xHqKN86E9kWxWrH63Bk4VmVJ/S9td9yjWQ=) 3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b8:1d:85:5b:57:aa:83:2b:70:56:d1:93:fb:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef Validity Not Before: Dec 6 05:00:48 2025 GMT Not After : Dec 7 05:00:48 2025 GMT Subject: CN=1cf2cf2acfd088c5372114f5c4243c0e10aea157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:a1:4f:1a:bf:5f:5f:18:02:da:88:a0:a7: d2:1f:5b:89:17:58:e7:77:c1:8b:8b:3c:30:30:14: f2:fd:42:02:66:40:39:a0:b6:01:4c:3e:14:42:92: cf:f3:d6:f3:75:78:d1:db:32:7b:87:bd:6a:49:9c: 4d:bd:58:85:e2:3d:22:77:9c:bc:68:0c:9a:a1:a3: cc:52:08:42:b5:64:28:c9:8c:64:fb:98:e1:8c:a2: 2c:f1:43:5a:32:f3:e4:9f:69:28:98:2b:a7:cb:27: 48:db:50:7c:ab:d0:13:08:5e:e6:05:59:5c:e3:46: 92:20:14:d7:fe:47:98:1a:a8:13:f9:13:73:85:3e: bb:6b:56:69:1a:27:3e:a5:ea:ef:64:08:ee:26:c6: a1:49:dc:ab:f3:1c:8a:b6:da:b0:c4:92:6c:9b:d5: a1:3c:84:4f:0f:c0:fc:45:78:43:dd:e3:98:12:57: 2e:31:67:e4:4e:cd:bc:07:e2:c9:03:ad:29:59:09: 3b:84:fe:ac:02:c7:4a:f3:e3:3b:d0:76:1d:2b:98: 03:68:a7:e4:07:8a:a6:e9:1a:09:4c:bd:67:4a:16: 4e:64:7e:c7:29:d7:24:ca:c7:3d:27:9b:1f:1f:0d: d4:78:cb:5f:80:d3:4b:fe:9b:59:ca:3d:fc:be:11: 39:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F2:CF:2A:CF:D0:88:C5:37:21:14:F5:C4:24:3C:0E:10:AE:A1:57 X509v3 Authority Key Identifier: keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:df:16:02:32:a4:88:0f:33:19:61:8f:86:d4:9c:f7:44:40: 69:7c:24:7d:02:16:8a:b3:2d:4d:7e:2e:02:3a:33:35:71:b7: 93:e8:0a:8f:a7:63:0e:b0:b1:d5:72:21:da:f6:8a:8b:85:33: d2:7e:44:56:8c:82:89:ec:50:bc:a6:dc:92:9e:22:1f:4b:da: 1c:23:a4:92:3e:7a:6a:b8:bf:9d:5d:d0:49:ae:eb:93:7e:0a: 79:d6:d9:91:f5:e8:b5:24:f5:9d:54:72:62:2c:79:a5:5c:08: dc:50:69:47:45:97:15:1e:5f:53:58:92:d4:6d:34:74:f6:19: 91:87:7f:af:43:22:2a:3e:4e:d2:01:8b:e3:8c:9c:90:08:41: e9:3a:fa:f8:cb:af:f9:c0:de:ba:a8:5f:70:7f:a8:a3:c1:54: 30:dd:57:fc:e0:91:68:48:ac:e5:6f:55:5d:df:06:88:ef:60: 03:6b:e0:0f:26:87:61:92:f1:16:e0:5a:b3:d2:9a:4c:49:20: 11:cf:44:d4:af:15:49:bc:0f:5e:d4:b6:cf:29:2f:58:e1:30: 49:83:8d:0e:f3:ea:79:8e:76:a1:7e:1b:62:46:63:aa:99:3e: a8:69:f3:08:af:a1:4d:2a:38:5e:c4:75:93:18:1a:d1:03:b3: ed:cd:c9:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLgdhVtXqoMrcFbRk/teMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMjFhNWU0Y2Y2ZTllMmU3MDMzOGFlZWJmYTBkMTU4OGQ3 M2I2ZWYwHhcNMjUxMjA2MDUwMDQ4WhcNMjUxMjA3MDUwMDQ4WjAzMTEwLwYDVQQD EygxY2YyY2YyYWNmZDA4OGM1MzcyMTE0ZjVjNDI0M2MwZTEwYWVhMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJChTxq/X18YAtqIoKfSH1uJF1jn d8GLizwwMBTy/UICZkA5oLYBTD4UQpLP89bzdXjR2zJ7h71qSZxNvViF4j0id5y8 aAyaoaPMUghCtWQoyYxk+5jhjKIs8UNaMvPkn2komCunyydI21B8q9ATCF7mBVlc 40aSIBTX/keYGqgT+RNzhT67a1ZpGic+pervZAjuJsahSdyr8xyKttqwxJJsm9Wh PIRPD8D8RXhD3eOYElcuMWfkTs28B+LJA60pWQk7hP6sAsdK8+M70HYdK5gDaKfk B4qm6RoJTL1nShZOZH7HKdckysc9J5sfHw3UeMtfgNNL/ptZyj38vhE5XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzyzyrP0IjFNyEU9cQkPA4QrqFXMB8GA1UdIwQY MBaAFJwhpeTPbp4ucDOK7r+g0ViNc7bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDIt NTI4ZWZmNTJmZWJkLzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDItNTI4ZWZmNTJmZWJk LzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASt8WAjKk iA8zGWGPhtSc90RAaXwkfQIWirMtTX4uAjozNXG3k+gKj6djDrCx1XIh2vaKi4Uz 0n5EVoyCiexQvKbckp4iH0vaHCOkkj56ari/nV3QSa7rk34KedbZkfXotST1nVRy Yix5pVwI3FBpR0WXFR5fU1iS1G00dPYZkYd/r0MiKj5O0gGL44yckAhB6Tr6+Muv +cDeuqhfcH+oo8FUMN1X/OCRaEis5W9VXd8GiO9gA2vgDyaHYZLxFuBas9KaTEkg Ec9E1K8VSbwPXtS2zykvWOEwSYONDvPqeY52oX4bYkZjqpk+qGnzCK+hTSo4XsR1 kxga0QOz7c3J2w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:24 2025 by rpki-client