This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json) Hash identifier: QMfPadGKePygPayDjeuSajRx8RTu14TsWWsqy6gp0MY= Subject key identifier: BE:29:72:79:83:B8:B7:E2:69:7D:3D:01:EC:8D:3E:95:4F:3F:9D:09 Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08 Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808 Certificate serial: 019AF19B0BF2FA49C8C88E2BE947BC8FEF17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft Manifest number: 0FE2 Signing time: Sat 06 Dec 2025 03:01:01 +0000 Manifest this update: Sat 06 Dec 2025 03:01:01 +0000 Manifest next update: Sun 07 Dec 2025 03:01:01 +0000 Files and hashes: 1: Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa (hash: WbvR7lgO/S3QOwy/R14Yl51OkTUajPVQcMXibufV2RY=) 2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: hGLLLMEa1ncNaRnGfCrsLGdxtDZwb28kiK9u/s91o5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0b:f2:fa:49:c8:c8:8e:2b:e9:47:bc:8f:ef:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808 Validity Not Before: Dec 6 03:01:01 2025 GMT Not After : Dec 7 03:01:01 2025 GMT Subject: CN=be29727983b8b7e2697d3d01ec8d3e954f3f9d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:af:f1:f0:5d:39:ce:30:b0:f9:bb:ff:26:34: 5e:eb:ae:af:c1:dc:22:35:2a:b3:6d:83:60:f3:4f: 16:33:16:36:b6:b6:b6:88:f0:61:72:de:21:86:56: 7c:c6:eb:f3:f0:b9:11:96:f7:02:4b:ac:3c:d8:c4: a7:86:35:29:2e:3d:ce:13:c3:cc:15:8b:09:91:aa: c0:c5:b2:88:a1:f5:35:21:ad:fb:db:26:44:0a:04: c5:e6:96:0e:d4:84:5d:b8:5b:d8:9d:4f:db:2c:8a: e6:6f:b5:e2:cb:39:3a:dd:4c:7c:11:cd:37:e5:af: d1:b7:7d:c9:eb:d0:13:5e:e6:5e:99:6a:18:78:80: 51:d6:1a:83:c7:07:9f:09:ee:2e:7d:25:52:3f:bb: d7:76:59:a4:66:1d:91:9b:f9:58:b7:68:d2:2b:c5: 9d:d5:9d:e4:c3:6e:f9:87:00:ea:db:71:77:6a:42: db:9f:b8:c6:1a:69:e3:01:cf:20:9e:69:6c:e7:94: 76:d2:5d:1c:c5:db:51:4f:96:e7:84:c0:f8:8a:57: 05:03:15:82:76:91:27:c9:bb:7b:f6:dd:4b:98:c5: a8:19:b9:9d:d3:29:78:db:d3:03:ae:62:e8:04:fe: 6b:dd:2f:33:25:eb:e3:97:d3:94:28:7e:e6:f0:da: 82:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:29:72:79:83:B8:B7:E2:69:7D:3D:01:EC:8D:3E:95:4F:3F:9D:09 X509v3 Authority Key Identifier: keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d1:27:a2:15:26:b4:1e:83:fc:54:ad:92:05:ca:04:a4:99: ad:85:4a:e3:5a:25:fa:3b:f4:5e:3d:52:c2:c5:90:7b:69:40: 28:a6:ef:3b:7e:ab:8d:c6:ff:6a:50:37:97:d0:f9:9d:19:91: 80:a1:5b:8f:5f:9e:f9:ad:bc:f4:32:5e:38:8b:61:49:f1:30: 37:4f:cd:ae:e1:56:12:8c:48:25:cc:7f:ea:3e:11:75:70:42: 61:41:c1:2a:4e:4b:5b:0a:3c:57:f4:1a:a6:45:07:6e:9d:d6: 0b:a8:d0:3f:de:38:db:ab:63:80:a3:4f:b3:b9:2f:b9:65:24: 8f:a9:0e:2b:a6:e2:5a:08:2a:24:7a:a1:2b:9d:10:f8:8f:b0: de:b2:72:f4:62:d3:db:6c:38:e1:41:73:be:0d:94:96:80:14: 5e:90:f4:e4:69:77:d0:63:1b:e9:3e:b7:a1:7a:a2:6c:d7:2c: b9:5a:08:f9:9e:8f:c6:45:56:01:9b:cc:aa:7d:0b:12:52:77: 42:72:90:a5:64:59:d3:3b:7e:a1:1c:b8:88:08:29:c0:b3:73: 20:fa:26:ab:91:46:12:c3:4f:0c:1b:ea:90:69:63:8b:b2:0d: e4:39:d9:d2:f5:b4:34:4f:2a:ff:56:8b:af:85:7b:53:d8:ce: a4:f3:f0:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwvy+knIyI4r6Ue8j+8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNWNmMmY4Yjc5ZGY2NjI0MTdlYzk2NTZlZDExNjZlOTFh YWI4MDgwHhcNMjUxMjA2MDMwMTAxWhcNMjUxMjA3MDMwMTAxWjAzMTEwLwYDVQQD EyhiZTI5NzI3OTgzYjhiN2UyNjk3ZDNkMDFlYzhkM2U5NTRmM2Y5ZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6/x8F05zjCw+bv/JjRe666vwdwi NSqzbYNg808WMxY2tra2iPBhct4hhlZ8xuvz8LkRlvcCS6w82MSnhjUpLj3OE8PM FYsJkarAxbKIofU1Ia372yZECgTF5pYO1IRduFvYnU/bLIrmb7Xiyzk63Ux8Ec03 5a/Rt33J69ATXuZemWoYeIBR1hqDxwefCe4ufSVSP7vXdlmkZh2Rm/lYt2jSK8Wd 1Z3kw275hwDq23F3akLbn7jGGmnjAc8gnmls55R20l0cxdtRT5bnhMD4ilcFAxWC dpEnybt79t1LmMWoGbmd0yl429MDrmLoBP5r3S8zJevjl9OUKH7m8NqClQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4pcnmDuLfiaX09AeyNPpVPP50JMB8GA1UdIwQY MBaAFJ5c8vi3nfZiQX7JZW7RFm6RqrgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmx6eS1MZWQ5bUpCZnNsbGJ0RVdicEdxdUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZjE0ZWEtZWJiYi00YzhlLWJlMzEt OWMxZTEzZTBlNTc4LzEvbmx6eS1MZWQ5bUpCZnNsbGJ0RVdicEdxdUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZjE0ZWEtZWJiYi00YzhlLWJlMzEtOWMxZTEzZTBlNTc4 LzEvbmx6eS1MZWQ5bUpCZnNsbGJ0RVdicEdxdUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtEnohUm tB6D/FStkgXKBKSZrYVK41ol+jv0Xj1SwsWQe2lAKKbvO36rjcb/alA3l9D5nRmR gKFbj1+e+a289DJeOIthSfEwN0/NruFWEoxIJcx/6j4RdXBCYUHBKk5LWwo8V/Qa pkUHbp3WC6jQP94426tjgKNPs7kvuWUkj6kOK6biWggqJHqhK50Q+I+w3rJy9GLT 22w44UFzvg2UloAUXpD05Gl30GMb6T63oXqibNcsuVoI+Z6PxkVWAZvMqn0LElJ3 QnKQpWRZ0zt+oRy4iAgpwLNzIPomq5FGEsNPDBvqkGlji7IN5DnZ0vW0NE8q/1aL r4V7U9jOpPPwDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:57 2025 by rpki-client