This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json) Hash identifier: rjoMBmcPV+g7WxTpUXCkuXJ4ecGkgQfMkUFf/gQwkb0= Subject key identifier: 5C:F9:61:2F:FE:AC:0C:40:FD:E3:51:61:30:EA:2A:56:C3:7E:A7:D0 Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e Certificate serial: 019AF38961B3C3B44867FC42A112C8A985D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft Manifest number: 0A68 Signing time: Sat 06 Dec 2025 12:00:58 +0000 Manifest this update: Sat 06 Dec 2025 12:00:58 +0000 Manifest next update: Sun 07 Dec 2025 12:00:58 +0000 Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: XJLP6yDKvu+os+PHWfPvNvbZ1TP9Lh3FJagE7AMwgTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:61:b3:c3:b4:48:67:fc:42:a1:12:c8:a9:85:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e Validity Not Before: Dec 6 12:00:58 2025 GMT Not After : Dec 7 12:00:58 2025 GMT Subject: CN=5cf9612ffeac0c40fde3516130ea2a56c37ea7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:81:30:63:9a:84:98:49:99:8d:37:5b:33:c8: 03:13:74:03:83:36:8c:02:d0:01:cb:93:e0:89:43: 5b:54:7f:cd:7a:d6:51:26:ac:77:95:e1:29:0f:19: 1b:dd:60:8c:c7:7c:14:21:20:24:34:4c:2c:84:8b: 30:11:9e:11:3f:d1:46:a1:4f:65:89:84:5b:e9:f8: cc:2e:24:49:50:9e:39:5c:a1:4d:34:e5:92:91:48: 07:a5:c4:5c:25:e3:08:91:89:be:47:8a:36:bd:76: aa:e5:f6:a6:42:63:07:2d:65:ab:1a:32:f3:71:e3: f0:43:85:4e:c1:f1:d3:d4:f9:f9:04:f1:b0:56:70: 77:95:f4:86:fa:eb:af:f4:0c:2d:15:4f:f0:04:62: 01:6d:90:9a:6b:a6:6d:a2:88:99:d5:d3:3e:34:08: d9:95:c3:dc:14:b9:e7:8e:dc:7f:13:59:58:91:ec: a8:63:ca:ba:15:99:e7:47:eb:3f:b8:8f:22:6f:63: a4:36:fc:f3:2b:b1:37:f3:62:0d:ad:5a:b6:93:5c: ef:0b:2f:07:13:9f:11:3f:4e:c4:a4:99:db:4d:07: 97:10:91:0c:b7:5a:66:5a:8f:8b:00:dc:93:01:e8: ae:f3:27:a3:80:a6:34:ec:c0:5c:3e:69:53:32:0b: 70:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F9:61:2F:FE:AC:0C:40:FD:E3:51:61:30:EA:2A:56:C3:7E:A7:D0 X509v3 Authority Key Identifier: keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:d3:b0:e5:1b:95:d4:18:c0:22:56:4b:7c:fd:8b:b1:e3:3b: ea:14:ea:df:aa:a6:f1:60:6c:2c:c1:60:71:21:f9:2e:df:05: ab:92:3e:53:0d:ba:5b:9b:84:9c:ba:7b:28:9e:86:f2:f8:8e: e3:89:f5:8b:b4:7c:86:e0:07:b7:0a:4a:93:d5:78:89:47:6c: 74:b7:d8:1a:6a:41:11:e9:9b:e2:bc:92:78:d4:95:6c:92:42: 94:72:40:9b:44:c0:3c:b3:3d:48:4f:ff:9c:1d:b9:9c:b0:f4: db:96:71:65:e2:36:53:4b:18:62:96:ba:26:b5:bd:47:52:4c: 21:80:91:06:45:78:8a:14:5d:27:0a:d2:60:bc:ce:d4:be:c0: 06:98:2a:bd:f6:01:e9:68:89:3c:32:d4:70:c1:5b:51:b5:d9: 70:86:51:48:8b:60:59:dc:fa:a2:5b:c5:85:80:d3:9b:f2:5b: d2:ea:0c:c2:66:07:91:13:ce:af:67:c5:b6:0b:06:7f:6b:a8: c0:81:88:4b:66:ac:b9:0c:1c:30:c2:0d:d2:f6:20:53:33:94: 7f:1a:db:1d:1b:12:e4:5c:89:0f:e2:c5:fb:e6:13:17:63:22: fc:61:f0:6b:69:36:d6:c7:6e:d5:9c:99:84:74:b0:92:5a:2a: 16:1a:a8:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWGzw7RIZ/xCoRLIqYXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MmFmNjU3YzA5ZTE2MmJlNmU2NGFiZTA0ZDIxYzVlNzdh ZGUyMGUwHhcNMjUxMjA2MTIwMDU4WhcNMjUxMjA3MTIwMDU4WjAzMTEwLwYDVQQD Eyg1Y2Y5NjEyZmZlYWMwYzQwZmRlMzUxNjEzMGVhMmE1NmMzN2VhN2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4EwY5qEmEmZjTdbM8gDE3QDgzaM AtABy5PgiUNbVH/NetZRJqx3leEpDxkb3WCMx3wUISAkNEwshIswEZ4RP9FGoU9l iYRb6fjMLiRJUJ45XKFNNOWSkUgHpcRcJeMIkYm+R4o2vXaq5famQmMHLWWrGjLz cePwQ4VOwfHT1Pn5BPGwVnB3lfSG+uuv9AwtFU/wBGIBbZCaa6ZtooiZ1dM+NAjZ lcPcFLnnjtx/E1lYkeyoY8q6FZnnR+s/uI8ib2OkNvzzK7E382INrVq2k1zvCy8H E58RP07EpJnbTQeXEJEMt1pmWo+LANyTAeiu8yejgKY07MBcPmlTMgtwmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFz5YS/+rAxA/eNRYTDqKlbDfqfQMB8GA1UdIwQY MBaAFDcq9lfAnhYr5uZKvgTSHF53reIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlyMlY4Q2VGaXZtNWtxLUJOSWNYbmV0NGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yMDA0ODktMTUyZi00NDI0LWI4NjMt MWM2Zjc3N2Q0MzQ5LzEvTnlyMlY4Q2VGaXZtNWtxLUJOSWNYbmV0NGc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yMDA0ODktMTUyZi00NDI0LWI4NjMtMWM2Zjc3N2Q0MzQ5 LzEvTnlyMlY4Q2VGaXZtNWtxLUJOSWNYbmV0NGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzNOw5RuV 1BjAIlZLfP2LseM76hTq36qm8WBsLMFgcSH5Lt8Fq5I+Uw26W5uEnLp7KJ6G8viO 44n1i7R8huAHtwpKk9V4iUdsdLfYGmpBEemb4rySeNSVbJJClHJAm0TAPLM9SE// nB25nLD025ZxZeI2U0sYYpa6JrW9R1JMIYCRBkV4ihRdJwrSYLzO1L7ABpgqvfYB 6WiJPDLUcMFbUbXZcIZRSItgWdz6olvFhYDTm/Jb0uoMwmYHkRPOr2fFtgsGf2uo wIGIS2asuQwcMMIN0vYgUzOUfxrbHRsS5FyJD+LF++YTF2Mi/GHwa2k21sdu1ZyZ hHSwkloqFhqopw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:03 2025 by rpki-client