This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json) Hash identifier: yWjQFNWGSqsGSA6p/mp3CHfwKjOH6oVSsVm0cDHJzac= Subject key identifier: 5D:42:2B:3E:A0:24:00:E1:64:4F:33:21:3E:F4:72:E4:09:41:F2:4A Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9 Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9 Certificate serial: 019AF4658561AA0BC5C38B63E5CD1B828BAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 16:01:25 +0000 Manifest this update: Sat 06 Dec 2025 16:01:25 +0000 Manifest next update: Sun 07 Dec 2025 16:01:25 +0000 Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=) 2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: p5dABenU6J+iEIXlyf7FWwf87xz/upJyyrUyMec12Fo=) 3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:85:61:aa:0b:c5:c3:8b:63:e5:cd:1b:82:8b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9 Validity Not Before: Dec 6 16:01:25 2025 GMT Not After : Dec 7 16:01:25 2025 GMT Subject: CN=5d422b3ea02400e1644f33213ef472e40941f24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:d1:6d:cf:1b:81:0f:b9:57:ba:ab:18:be: 40:45:17:64:e4:bd:88:ed:12:e2:1c:5a:c7:00:b0: e6:30:c3:54:8e:63:ce:51:49:17:e9:31:af:c4:d5: 8b:89:ee:99:1a:0e:46:59:19:2c:dc:90:3f:a0:b4: 34:39:9a:2f:6a:96:2c:47:dd:1f:d6:f0:75:d3:b2: 78:8c:82:63:93:43:89:58:e5:fa:6d:39:a4:e8:65: aa:62:45:83:09:ae:44:e8:68:84:d9:36:de:5f:00: 5e:b9:71:a3:1b:0b:9c:91:2e:0c:1d:a3:c0:61:4a: 59:66:24:75:c1:88:d5:88:03:51:ee:43:60:f1:4d: a7:c6:47:0e:a9:ae:9e:7f:29:35:37:23:5d:c2:83: 99:e5:90:ab:93:51:78:1e:3a:b5:f2:b7:8d:b0:0b: da:02:30:2a:ef:5a:58:fe:b9:6f:e1:d7:5f:c5:db: 7e:7c:f1:6f:19:29:9e:42:68:b3:f6:c5:d9:5f:f7: ca:72:ad:31:f2:8f:28:6f:e2:51:c8:e9:b5:e7:e1: c1:f2:32:6b:13:f1:22:02:3c:b3:0b:11:9d:fe:6f: 8e:41:0b:c6:5b:aa:59:72:19:44:7b:01:93:80:36: 52:39:b9:c5:a4:56:b3:23:01:08:c1:53:94:70:a6: da:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:42:2B:3E:A0:24:00:E1:64:4F:33:21:3E:F4:72:E4:09:41:F2:4A X509v3 Authority Key Identifier: keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:77:59:90:2a:77:6d:48:3b:8b:36:0b:99:b4:90:91:ff:3c: 41:61:6a:0e:fb:0e:00:a9:77:6e:60:24:2e:28:91:4f:01:4a: 23:fa:d1:59:85:2e:c1:ba:be:19:33:59:9b:b0:03:44:d4:f8: 17:3f:b5:60:fa:05:35:2c:8e:b7:22:1a:66:df:95:70:fa:62: 0e:f2:d3:28:d0:07:fb:77:44:29:3c:e7:54:1b:1f:cd:43:4a: d5:b0:b5:0a:6d:7c:7d:1a:ac:bd:b0:59:36:f4:58:31:b7:59: 3c:10:07:05:e0:82:2f:23:03:22:68:aa:7b:54:84:4d:52:53: 0e:ca:a1:b2:21:49:2e:16:42:11:7a:ac:b5:20:44:ed:55:03: 53:06:5c:33:de:a5:99:19:77:72:29:90:f7:11:01:1c:5c:9e: 50:03:a7:d1:54:ea:6a:99:94:f3:d1:21:f1:3e:64:0a:a5:d5: 1e:32:a8:32:dc:a5:34:a6:bf:33:3f:93:71:4b:5e:84:81:ec: 15:51:82:18:43:f6:d5:56:c2:81:6b:9f:59:8e:3a:74:33:37: 95:67:8e:ac:72:12:a9:88:ca:04:0d:84:1f:a7:45:87:29:73: 4d:ba:16:00:89:db:c6:ea:cd:a4:94:c8:6c:94:18:a8:0a:5c: 26:44:5e:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYVhqgvFw4tj5c0bgoutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYmNiZmViOGZhODk3Mzc0NzE4YTkxMDJhNGE3MDY3MWUy YWFiZjkwHhcNMjUxMjA2MTYwMTI1WhcNMjUxMjA3MTYwMTI1WjAzMTEwLwYDVQQD Eyg1ZDQyMmIzZWEwMjQwMGUxNjQ0ZjMzMjEzZWY0NzJlNDA5NDFmMjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiLRbc8bgQ+5V7qrGL5ARRdk5L2I 7RLiHFrHALDmMMNUjmPOUUkX6TGvxNWLie6ZGg5GWRks3JA/oLQ0OZovapYsR90f 1vB107J4jIJjk0OJWOX6bTmk6GWqYkWDCa5E6GiE2TbeXwBeuXGjGwuckS4MHaPA YUpZZiR1wYjViANR7kNg8U2nxkcOqa6efyk1NyNdwoOZ5ZCrk1F4Hjq18reNsAva AjAq71pY/rlv4ddfxdt+fPFvGSmeQmiz9sXZX/fKcq0x8o8ob+JRyOm15+HB8jJr E/EiAjyzCxGd/m+OQQvGW6pZchlEewGTgDZSObnFpFazIwEIwVOUcKbaqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1CKz6gJADhZE8zIT70cuQJQfJKMB8GA1UdIwQY MBaAFJ68v+uPqJc3RxipECpKcGceKqv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzkt OWNkMGNhZTA2MjkyLzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzktOWNkMGNhZTA2Mjky LzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvXdZkCp3 bUg7izYLmbSQkf88QWFqDvsOAKl3bmAkLiiRTwFKI/rRWYUuwbq+GTNZm7ADRNT4 Fz+1YPoFNSyOtyIaZt+VcPpiDvLTKNAH+3dEKTznVBsfzUNK1bC1Cm18fRqsvbBZ NvRYMbdZPBAHBeCCLyMDImiqe1SETVJTDsqhsiFJLhZCEXqstSBE7VUDUwZcM96l mRl3cimQ9xEBHFyeUAOn0VTqapmU89Eh8T5kCqXVHjKoMtylNKa/Mz+TcUtehIHs FVGCGEP21VbCgWufWY46dDM3lWeOrHISqYjKBA2EH6dFhylzTboWAInbxurNpJTI bJQYqApcJkReGQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:29:08 2025 by rpki-client