This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json) Hash identifier: Rwvkd4PvGiY0UAYhobUWLJbql5eElnVeS2qAyhMMq5w= Subject key identifier: 10:1B:73:3B:51:25:1D:1C:51:04:DA:21:79:25:AD:34:12:84:78:EF Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9 Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9 Certificate serial: 019B3042D69C34B743AB46553290B7439668 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 07:00:45 +0000 Manifest this update: Thu 18 Dec 2025 07:00:45 +0000 Manifest next update: Fri 19 Dec 2025 07:00:45 +0000 Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=) 2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: LTuFtY5bkBQcMdyHnwtlAF2+DoqnR035TrMgiWoPqUg=) 3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:d6:9c:34:b7:43:ab:46:55:32:90:b7:43:96:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9 Validity Not Before: Dec 18 07:00:45 2025 GMT Not After : Dec 19 07:00:45 2025 GMT Subject: CN=101b733b51251d1c5104da217925ad34128478ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d0:e9:da:64:c1:4f:68:11:dd:28:34:6c:8b: 0b:a4:cc:2a:22:6b:db:5a:da:f6:a3:ff:30:bf:92: 36:af:ae:dc:7b:eb:c3:f6:80:e6:a7:39:43:ea:9f: fe:9c:41:77:c2:73:ef:39:f4:f7:cf:cb:c0:d5:83: b9:4b:ea:3a:d0:83:9c:62:83:a1:f7:28:71:0c:40: ba:d8:64:1b:2f:2a:9f:78:fe:66:da:30:4e:16:11: 2a:d7:5b:4b:97:e5:69:e5:09:33:cc:7e:53:ad:89: a4:57:f2:31:b0:c1:63:d6:d2:c0:2e:50:fe:97:63: 0b:b2:58:f2:a0:f3:d0:3b:57:d5:f1:af:3e:6e:3a: 2a:34:dd:72:9f:85:05:d7:24:89:17:4a:c8:a3:1b: 8a:de:36:77:02:48:7d:7a:d1:c9:c8:20:86:17:12: 96:ff:c2:d8:33:3b:5c:fd:20:3f:0a:74:1c:3f:2e: b1:f2:be:9d:bb:a2:f6:5d:eb:b6:e7:f4:8b:88:11: 7e:89:e5:27:55:32:e5:30:e2:21:b1:34:c4:42:67: 41:ef:d9:67:71:88:01:5a:db:a0:34:2a:5b:e1:52: bc:1d:37:cc:f9:05:92:d9:4c:d6:78:67:58:ba:2a: 58:53:3d:71:d4:46:e9:01:52:61:ad:65:86:f5:55: 18:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1B:73:3B:51:25:1D:1C:51:04:DA:21:79:25:AD:34:12:84:78:EF X509v3 Authority Key Identifier: keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f3:e3:c7:84:15:3e:ce:8d:ec:f1:08:a4:da:99:dd:3b:34: f4:da:28:fb:af:70:73:6e:e1:04:d5:26:03:b5:73:aa:19:41: f3:30:97:1d:41:fb:a1:10:9d:7f:8a:97:06:35:83:ff:90:09: eb:8a:21:d7:ab:c2:13:e8:f3:8d:7d:a8:b2:ac:78:37:15:1f: 6e:24:a8:24:99:1c:4a:f3:0e:28:6c:ae:09:89:bf:47:1b:0c: 82:52:c6:80:d8:07:0f:e5:54:8c:83:40:0c:3a:de:33:24:95: fd:9b:ac:37:59:34:0c:6d:55:9b:d4:d8:b7:a7:df:22:10:49: 76:37:21:3e:47:6d:f9:ca:7c:39:1a:6a:c6:bb:be:54:cc:82: f4:b8:87:3d:0b:c9:40:2c:38:ca:1f:28:13:87:80:5a:26:40: 25:e1:0f:1c:3d:4e:57:db:62:b9:f0:e6:84:bf:e2:18:a5:98: fc:63:b6:3c:f2:03:e4:0b:32:f8:dd:4b:be:55:85:a5:d9:3a: bc:3c:90:85:4f:fc:28:ba:e1:06:12:ae:89:22:c4:86:21:c1: f4:d8:c1:98:d4:bc:fa:d0:ac:fd:62:f1:1c:c2:75:b1:aa:88: 1f:a8:b4:7a:99:0d:8f:07:55:47:32:d6:6e:3c:ec:bc:d5:80: 8b:f0:46:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQtacNLdDq0ZVMpC3Q5ZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYmNiZmViOGZhODk3Mzc0NzE4YTkxMDJhNGE3MDY3MWUy YWFiZjkwHhcNMjUxMjE4MDcwMDQ1WhcNMjUxMjE5MDcwMDQ1WjAzMTEwLwYDVQQD EygxMDFiNzMzYjUxMjUxZDFjNTEwNGRhMjE3OTI1YWQzNDEyODQ3OGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNDp2mTBT2gR3Sg0bIsLpMwqImvb Wtr2o/8wv5I2r67ce+vD9oDmpzlD6p/+nEF3wnPvOfT3z8vA1YO5S+o60IOcYoOh 9yhxDEC62GQbLyqfeP5m2jBOFhEq11tLl+Vp5QkzzH5TrYmkV/IxsMFj1tLALlD+ l2MLsljyoPPQO1fV8a8+bjoqNN1yn4UF1ySJF0rIoxuK3jZ3Akh9etHJyCCGFxKW /8LYMztc/SA/CnQcPy6x8r6du6L2Xeu25/SLiBF+ieUnVTLlMOIhsTTEQmdB79ln cYgBWtugNCpb4VK8HTfM+QWS2UzWeGdYuipYUz1x1EbpAVJhrWWG9VUY5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAbcztRJR0cUQTaIXklrTQShHjvMB8GA1UdIwQY MBaAFJ68v+uPqJc3RxipECpKcGceKqv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzkt OWNkMGNhZTA2MjkyLzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzktOWNkMGNhZTA2Mjky LzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvPjx4QV Ps6N7PEIpNqZ3Ts09Noo+69wc27hBNUmA7VzqhlB8zCXHUH7oRCdf4qXBjWD/5AJ 64oh16vCE+jzjX2osqx4NxUfbiSoJJkcSvMOKGyuCYm/RxsMglLGgNgHD+VUjINA DDreMySV/ZusN1k0DG1Vm9TYt6ffIhBJdjchPkdt+cp8ORpqxru+VMyC9LiHPQvJ QCw4yh8oE4eAWiZAJeEPHD1OV9tiufDmhL/iGKWY/GO2PPID5Asy+N1LvlWFpdk6 vDyQhU/8KLrhBhKuiSLEhiHB9NjBmNS8+tCs/WLxHMJ1saqIH6i0epkNjwdVRzLW bjzsvNWAi/BGxw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:27:02 2025 by rpki-client