This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: Jfe0nImuLKd7dUlQYqP0HvDgzrs4zYwCI2WdeITFF90= Subject key identifier: 3D:7B:82:3E:49:FE:35:A5:87:20:11:7B:F7:2D:8A:20:2E:17:7C:6A Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019AF19AA17FD1083229750B8610A00C639D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 108B Signing time: Sat 06 Dec 2025 03:00:34 +0000 Manifest this update: Sat 06 Dec 2025 03:00:34 +0000 Manifest next update: Sun 07 Dec 2025 03:00:34 +0000 Files and hashes: 1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=) 2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=) 3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=) 4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=) 5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=) 6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=) 7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=) 8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=) 9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: duOusAQ1xuK69H29SnmS4D8FsCaXmVvY32q9gQkko9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a1:7f:d1:08:32:29:75:0b:86:10:a0:0c:63:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Dec 6 03:00:34 2025 GMT Not After : Dec 7 03:00:34 2025 GMT Subject: CN=3d7b823e49fe35a58720117bf72d8a202e177c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a6:f5:82:64:03:d2:1b:06:5b:df:2d:8f:4c: 6d:d2:ee:48:59:f6:43:0e:d3:57:9a:9d:45:be:3f: 60:5b:08:db:de:69:f4:81:b4:31:b4:cd:b2:99:fe: 40:ed:e9:a1:d9:58:d6:a7:80:f1:b4:2f:01:bb:e7: 11:df:36:4b:78:31:ef:1f:4b:18:3d:78:e1:e9:91: 22:77:17:96:45:47:e7:3b:9c:11:52:35:45:50:ad: 97:f9:3e:2a:50:12:b5:11:2b:bc:a4:1e:52:29:29: 5b:8e:da:18:b0:71:e5:8f:05:26:f9:51:43:5a:d4: b0:7f:36:10:ed:e0:9d:cc:b1:27:b6:bb:3e:d7:4e: 4b:44:52:d3:e4:ff:8c:c6:2e:0e:6d:82:33:b9:8c: 54:7f:34:40:02:eb:e0:f8:70:f5:d4:f5:19:77:ab: 28:69:29:73:6d:5d:4c:f5:88:68:2d:8e:62:b5:a3: 50:c0:e4:15:63:c4:75:85:5d:75:32:5e:44:a1:e1: e1:22:b5:fe:90:46:92:98:39:6f:76:d5:6e:e2:b1: f9:ac:ef:97:08:a5:1b:5f:28:40:c9:28:f3:cf:d4: a1:d9:41:32:84:50:7c:ea:9d:79:78:4a:ed:72:3f: 0c:af:4f:e4:43:80:19:df:09:4f:a3:14:a0:91:84: 0c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7B:82:3E:49:FE:35:A5:87:20:11:7B:F7:2D:8A:20:2E:17:7C:6A X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:2e:0d:c2:4d:87:58:c1:c9:4a:d2:ee:2b:33:8c:d9:90:6d: 47:24:63:f7:4c:0b:f2:f9:35:e2:1b:e0:ed:8e:11:82:0e:1e: 92:1f:73:b6:f2:49:85:bf:4d:0c:c4:ca:b8:26:74:ed:17:3a: b4:f2:5c:cb:23:6e:36:41:ca:28:23:7b:20:db:6a:77:5e:43: 88:76:3c:b3:00:c2:f4:fb:57:16:b6:d2:42:05:cf:6d:60:38: 4e:2a:be:21:6d:75:c8:d5:0f:0c:aa:df:a4:12:cb:05:6a:62: 67:91:9d:36:01:1f:33:58:fe:d5:ca:b0:f0:3d:45:a9:35:ce: ce:a6:e0:e4:8b:53:83:9b:53:bc:14:85:0c:fe:f8:c3:cd:23: 83:b2:f6:ae:9c:af:ab:9b:60:5b:de:dd:5a:1b:3b:5d:01:4e: 3c:f1:63:7c:5a:46:76:1b:57:cf:c4:2f:c7:4e:2f:bc:63:04: 79:e8:73:ac:ed:8e:06:3e:37:19:82:e9:47:60:34:73:00:93: 52:63:e6:20:55:1b:45:48:fa:e6:92:ab:11:bd:7e:7d:c1:84: 03:91:12:05:08:70:35:58:ec:e3:a2:70:7a:dc:c6:fe:c1:37: eb:05:89:48:d4:ed:18:5b:32:0d:a1:95:6b:fa:b8:b1:38:32: 38:7c:58:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqF/0QgyKXULhhCgDGOdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjUxMjA2MDMwMDM0WhcNMjUxMjA3MDMwMDM0WjAzMTEwLwYDVQQD EygzZDdiODIzZTQ5ZmUzNWE1ODcyMDExN2JmNzJkOGEyMDJlMTc3YzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qb1gmQD0hsGW98tj0xt0u5IWfZD DtNXmp1Fvj9gWwjb3mn0gbQxtM2ymf5A7emh2VjWp4DxtC8Bu+cR3zZLeDHvH0sY PXjh6ZEidxeWRUfnO5wRUjVFUK2X+T4qUBK1ESu8pB5SKSlbjtoYsHHljwUm+VFD WtSwfzYQ7eCdzLEntrs+105LRFLT5P+Mxi4ObYIzuYxUfzRAAuvg+HD11PUZd6so aSlzbV1M9YhoLY5itaNQwOQVY8R1hV11Ml5EoeHhIrX+kEaSmDlvdtVu4rH5rO+X CKUbXyhAySjzz9Sh2UEyhFB86p15eErtcj8Mr0/kQ4AZ3wlPoxSgkYQMvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD17gj5J/jWlhyARe/ctiiAuF3xqMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGC4Nwk2H WMHJStLuKzOM2ZBtRyRj90wL8vk14hvg7Y4Rgg4ekh9ztvJJhb9NDMTKuCZ07Rc6 tPJcyyNuNkHKKCN7INtqd15DiHY8swDC9PtXFrbSQgXPbWA4Tiq+IW11yNUPDKrf pBLLBWpiZ5GdNgEfM1j+1cqw8D1FqTXOzqbg5ItTg5tTvBSFDP74w80jg7L2rpyv q5tgW97dWhs7XQFOPPFjfFpGdhtXz8Qvx04vvGMEeehzrO2OBj43GYLpR2A0cwCT UmPmIFUbRUj65pKrEb1+fcGEA5ESBQhwNVjs46JwetzG/sE36wWJSNTtGFsyDaGV a/q4sTgyOHxY6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:04:32 2025 by rpki-client