This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json) Hash identifier: hCrIMnQv557Auks2aoYltBlYOB7U/r8cnUDlzk2trvQ= Subject key identifier: 3E:FD:26:02:A5:D5:CA:9F:77:FF:30:B6:B3:DC:50:3E:2F:C3:10:9A Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17 Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417 Certificate serial: 019AF2090ECFF3F18D852BA948E570BF5E99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft Manifest number: 0EFE Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: ox7XETkZ73zKn2xUCRNZLtbgigSIbi/rxkivySlN2FE=) 2: ttg5VkQmE-CT_UTENF07n7R2sRQ.roa (hash: lKSbwZMZC4wBO8BqdScrx370SDVIcLXaY1lpku8KmlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0e:cf:f3:f1:8d:85:2b:a9:48:e5:70:bf:5e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417 Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=3efd2602a5d5ca9f77ff30b6b3dc503e2fc3109a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8f:1d:b5:34:d1:d7:d7:5f:c9:86:bc:0a:2d: 2f:d7:67:f9:9e:f1:ea:02:c3:50:70:ad:de:a2:f2: 72:c5:88:89:9f:9c:70:3c:9a:12:1a:89:a7:ed:48: 2f:04:9e:f7:9e:b6:88:9d:04:c2:8a:6a:a3:01:35: 18:d4:9e:d0:2e:aa:b2:82:9a:c4:a8:16:b1:c4:0d: 46:e2:ca:2e:20:de:1f:b4:da:3c:08:fe:82:83:9a: 22:ee:02:1b:72:ae:ef:ed:57:12:2c:ed:a8:a0:29: 85:7e:7d:3f:40:35:96:9e:20:77:be:c4:a0:1e:c7: 86:e2:a3:1f:f1:9d:ab:45:4d:61:a0:40:85:47:af: b2:eb:0c:59:d1:94:a8:4a:04:a9:be:42:93:d7:d4: 44:8d:1e:ee:62:cc:f6:3e:b7:3f:26:41:37:81:3c: 38:59:42:d4:0d:ef:b3:36:b6:11:e5:2e:cb:44:e0: 53:f8:2d:ed:ee:9e:dd:1f:ce:6d:18:87:48:fc:da: 43:ed:8d:48:96:1c:78:c2:37:f2:7f:20:c2:80:82: d7:e2:03:23:89:09:1e:8b:c3:25:bb:43:b2:f3:5e: df:ff:0f:f0:38:90:0d:60:ce:a5:90:29:3e:38:10: c1:12:f1:27:c0:1d:a2:bc:f7:64:c6:ae:e3:34:c7: d8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FD:26:02:A5:D5:CA:9F:77:FF:30:B6:B3:DC:50:3E:2F:C3:10:9A X509v3 Authority Key Identifier: keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:9c:b6:40:25:54:7a:41:ea:bb:de:57:b2:ce:e5:3f:9d:6d: 96:58:8c:50:a9:43:0e:db:c7:28:52:43:44:6c:f1:40:12:c8: f8:ab:5e:8b:53:8f:43:2c:76:5c:77:10:45:30:a2:40:ef:92: 96:1c:e8:14:bd:62:4f:03:aa:1d:57:c6:51:0c:32:d6:83:2d: 0e:d9:62:24:ba:ba:ec:1c:9a:62:3e:ae:d6:2e:d2:3a:59:9c: 1a:b9:87:8d:b5:80:f4:61:f6:3e:6a:8b:85:6b:a6:4d:0b:8c: c2:52:fb:f4:c0:0b:a1:e5:91:57:f2:0b:a0:25:64:5a:56:2d: d4:6c:59:3d:de:d5:32:29:d8:6f:36:0c:9a:da:5a:8e:14:d7: 0b:93:87:7e:da:7d:83:b0:09:3c:8e:53:f7:17:bc:ad:df:71: 4e:2c:8a:64:95:7c:e2:91:5e:b3:63:66:47:b0:e0:c5:9e:1a: 76:e9:3c:30:fd:d5:94:e0:2c:49:b8:85:a7:bb:70:52:18:02: 04:46:67:d3:8d:c7:80:a1:69:2a:07:11:04:a8:2d:34:c6:b7: 8e:dd:02:aa:6b:29:ad:55:2b:b5:d2:d3:5a:e7:f9:29:da:ad: eb:ad:a3:2b:c5:20:be:cf:31:f4:e6:ef:f3:c0:ba:b2:f2:1c: 60:02:08:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQ7P8/GNhSupSOVwv16ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MjVmNzU0MDA0ZWRiZTMwYWI4Y2FmZWVmOWY3MTMyY2Iw YzI0MTcwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD EygzZWZkMjYwMmE1ZDVjYTlmNzdmZjMwYjZiM2RjNTAzZTJmYzMxMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA648dtTTR19dfyYa8Ci0v12f5nvHq AsNQcK3eovJyxYiJn5xwPJoSGomn7UgvBJ73nraInQTCimqjATUY1J7QLqqygprE qBaxxA1G4souIN4ftNo8CP6Cg5oi7gIbcq7v7VcSLO2ooCmFfn0/QDWWniB3vsSg HseG4qMf8Z2rRU1hoECFR6+y6wxZ0ZSoSgSpvkKT19REjR7uYsz2Prc/JkE3gTw4 WULUDe+zNrYR5S7LROBT+C3t7p7dH85tGIdI/NpD7Y1Ilhx4wjfyfyDCgILX4gMj iQkei8Mlu0Oy817f/w/wOJANYM6lkCk+OBDBEvEnwB2ivPdkxq7jNMfY9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD79JgKl1cqfd/8wtrPcUD4vwxCaMB8GA1UdIwQY MBaAFDcl91QATtvjCrjK/u+fcTLLDCQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMt NzRhZmMzMDQzYjc4LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMtNzRhZmMzMDQzYjc4 LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJy2QCVU ekHqu95Xss7lP51tlliMUKlDDtvHKFJDRGzxQBLI+Ktei1OPQyx2XHcQRTCiQO+S lhzoFL1iTwOqHVfGUQwy1oMtDtliJLq67ByaYj6u1i7SOlmcGrmHjbWA9GH2PmqL hWumTQuMwlL79MALoeWRV/ILoCVkWlYt1GxZPd7VMinYbzYMmtpajhTXC5OHftp9 g7AJPI5T9xe8rd9xTiyKZJV84pFes2NmR7DgxZ4aduk8MP3VlOAsSbiFp7twUhgC BEZn043HgKFpKgcRBKgtNMa3jt0CqmsprVUrtdLTWuf5Kdqt662jK8Ugvs8x9Obv 88C6svIcYAIIrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:47 2025 by rpki-client