This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft File: Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json) Hash identifier: JjBRHcqFqzs6YX1R9hy7HjgEhaZJ+Qn6UkTf3YBSS0U= Subject key identifier: 2C:C8:A2:A7:75:FF:3F:19:91:87:4C:DB:08:F8:D8:F4:7B:F3:A9:5F Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8 Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8 Certificate serial: 019AF50A3153A4BA43344C44748D2790A70B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft Manifest number: 0932 Signing time: Sat 06 Dec 2025 19:01:17 +0000 Manifest this update: Sat 06 Dec 2025 19:01:17 +0000 Manifest next update: Sun 07 Dec 2025 19:01:17 +0000 Files and hashes: 1: GfCkDNWZJC7tTqAONgQkcSI9t8c.roa (hash: ioLhHD20h58KhY7GJ61ivoHQWsANqXCHQxdSr8iWjVQ=) 2: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: pJEs2zLoxN5A6ny3AlEPgQVVBzak7fHGCnCvcSs4k0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:31:53:a4:ba:43:34:4c:44:74:8d:27:90:a7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8 Validity Not Before: Dec 6 19:01:17 2025 GMT Not After : Dec 7 19:01:17 2025 GMT Subject: CN=2cc8a2a775ff3f1991874cdb08f8d8f47bf3a95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fe:7d:85:27:8f:58:af:33:79:81:4c:ad:7f: 60:8d:54:9b:02:3e:6e:ca:c3:f5:0a:d3:64:ec:94: 09:4a:20:29:1e:44:fb:ec:74:d2:1e:52:a7:29:d9: 06:2c:5f:0d:73:f2:06:40:e6:1c:8d:f7:48:1e:1f: 19:87:87:64:90:ba:6e:c8:4c:e1:17:7d:82:19:ca: 3c:f3:3e:da:6d:61:87:f9:b0:05:46:e5:fa:a0:69: 3b:d9:3e:ee:7c:96:63:b5:bb:90:f9:20:df:81:0b: 0b:7b:ae:4a:e1:5d:30:9f:aa:9c:79:c0:06:1a:29: 9c:a3:57:88:32:aa:72:17:60:32:32:34:6d:a0:e7: 9e:1c:8d:ae:32:60:b6:07:74:ab:55:c3:21:71:12: ec:22:33:fc:a2:c0:52:bb:53:33:6a:5c:d0:68:25: 01:97:ca:62:68:62:10:cd:9d:e2:7d:9f:49:10:b6: a4:cb:b8:00:ae:49:a5:fe:1a:0e:43:29:36:27:f7: 86:52:4d:23:70:c9:02:8b:25:c4:59:87:8e:df:82: 2a:e8:b3:5a:b6:70:af:11:39:3e:63:57:f9:22:03: e3:f5:e8:39:e0:2a:dc:44:36:4e:3a:ba:29:2f:21: b8:99:a5:19:a2:c0:2a:04:79:20:e9:32:6b:b2:50: fa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C8:A2:A7:75:FF:3F:19:91:87:4C:DB:08:F8:D8:F4:7B:F3:A9:5F X509v3 Authority Key Identifier: keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:bb:58:1e:49:54:99:3d:37:f6:f6:20:8a:c0:c5:bd:3f:c8: ff:d6:6e:58:ce:e2:0e:98:2d:a1:4e:ed:be:07:03:cf:fc:ad: 48:88:a6:bb:5b:3b:a2:bb:75:ba:92:1e:f7:04:94:f8:94:45: f7:6c:88:e0:b1:ad:5a:c9:eb:2a:d0:be:72:bc:88:2b:37:46: 10:b7:bf:11:da:83:bf:a5:9e:88:b0:e0:ea:81:00:72:3a:a8: bc:1b:5c:7a:d4:ac:8a:33:4c:1c:33:0b:ca:b6:98:4e:fb:ca: c4:29:5d:90:6b:65:24:12:d8:a6:d6:bf:92:5d:e2:d8:8f:7d: 83:d3:f8:f9:ca:d4:61:97:d9:2d:9b:76:e4:dd:74:c0:d8:e7: ed:18:54:76:a1:96:11:67:44:66:29:a3:2b:fd:cf:ea:58:77: b4:23:06:26:f2:b4:61:f1:22:30:c2:23:6d:85:7f:0b:5c:48: 96:75:5a:bc:67:75:d1:d1:ad:3a:71:10:9c:c7:0b:2a:98:10: fa:36:0d:5f:75:22:a8:97:3b:9f:9a:c7:63:78:bc:98:02:84: 21:17:6d:ac:2c:56:32:39:f0:d7:07:22:30:e7:50:5d:16:27: b5:5e:17:58:e7:76:2c:08:ec:17:d1:7f:33:ec:1f:60:7f:f8: f6:72:78:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjFTpLpDNExEdI0nkKcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Mjg1YWUyMmQ3MWVmMjQ0NzhmMGNhZWMwZjI5YzdkZDkx NGMzYzgwHhcNMjUxMjA2MTkwMTE3WhcNMjUxMjA3MTkwMTE3WjAzMTEwLwYDVQQD EygyY2M4YTJhNzc1ZmYzZjE5OTE4NzRjZGIwOGY4ZDhmNDdiZjNhOTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P59hSePWK8zeYFMrX9gjVSbAj5u ysP1CtNk7JQJSiApHkT77HTSHlKnKdkGLF8Nc/IGQOYcjfdIHh8Zh4dkkLpuyEzh F32CGco88z7abWGH+bAFRuX6oGk72T7ufJZjtbuQ+SDfgQsLe65K4V0wn6qcecAG Gimco1eIMqpyF2AyMjRtoOeeHI2uMmC2B3SrVcMhcRLsIjP8osBSu1MzalzQaCUB l8piaGIQzZ3ifZ9JELaky7gArkml/hoOQyk2J/eGUk0jcMkCiyXEWYeO34Iq6LNa tnCvETk+Y1f5IgPj9eg54CrcRDZOOropLyG4maUZosAqBHkg6TJrslD6cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzIoqd1/z8ZkYdM2wj42PR786lfMB8GA1UdIwQY MBaAFDcoWuItce8kR48MrsDynH3ZFMPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xNjQyOWMtOTMzNC00NzA1LTg4MjEt M2YyZWI1NmIyYmQzLzEvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xNjQyOWMtOTMzNC00NzA1LTg4MjEtM2YyZWI1NmIyYmQz LzEvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbtYHklU mT039vYgisDFvT/I/9ZuWM7iDpgtoU7tvgcDz/ytSIimu1s7ort1upIe9wSU+JRF 92yI4LGtWsnrKtC+cryIKzdGELe/EdqDv6WeiLDg6oEAcjqovBtcetSsijNMHDML yraYTvvKxCldkGtlJBLYpta/kl3i2I99g9P4+crUYZfZLZt25N10wNjn7RhUdqGW EWdEZimjK/3P6lh3tCMGJvK0YfEiMMIjbYV/C1xIlnVavGd10dGtOnEQnMcLKpgQ +jYNX3UiqJc7n5rHY3i8mAKEIRdtrCxWMjnw1wciMOdQXRYntV4XWOd2LAjsF9F/ M+wfYH/49nJ4Dg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:09 2025 by rpki-client