This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft File: nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json) Hash identifier: gieXKdA65tfZtLxnt3gtTgo236REkNCnbTxu9INQ3qQ= Subject key identifier: 4E:BB:69:15:05:6D:0B:BE:B8:21:2C:5A:33:E8:7B:8E:45:7B:75:D8 Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65 Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565 Certificate serial: 019AF1D2079F5284CE29C454DB1D1D8328CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft Manifest number: 1440 Signing time: Sat 06 Dec 2025 04:01:04 +0000 Manifest this update: Sat 06 Dec 2025 04:01:04 +0000 Manifest next update: Sun 07 Dec 2025 04:01:04 +0000 Files and hashes: 1: T7vd5c8yN7dKoGTcsEPGaB0GoJI.roa (hash: RdeAevZDp8XmGqqAvK8gJZd85NjETWsjIIExe3sxUXY=) 2: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: tAOLqNXxgELpiYgnA3bjguj/SBg0Lo1I1ib1nCsvgVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:07:9f:52:84:ce:29:c4:54:db:1d:1d:83:28:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565 Validity Not Before: Dec 6 04:01:04 2025 GMT Not After : Dec 7 04:01:04 2025 GMT Subject: CN=4ebb6915056d0bbeb8212c5a33e87b8e457b75d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:d5:19:d2:54:c1:d6:11:47:af:7d:e6:bf: 2a:e3:fe:67:f1:ae:00:8f:ed:75:73:79:24:9d:fc: 0e:1f:bf:12:99:1a:e4:f8:ba:7c:48:21:9d:15:4d: a6:9f:87:1f:7a:86:20:62:d5:62:64:35:07:26:64: 8d:1d:a7:fd:60:31:e4:61:7f:27:0f:d6:da:19:a2: 6e:23:39:b8:a6:3f:f3:15:9e:ff:61:1f:d0:20:c8: b2:b1:a1:7d:f0:5a:16:9e:d0:f4:b9:72:f7:d3:e5: fd:df:b9:7b:44:67:6d:bf:71:25:cf:97:ac:90:67: 00:0c:b7:e0:eb:5d:5c:9a:2a:76:d8:ca:19:75:c5: 44:c1:58:14:3e:fc:de:36:2f:6c:2b:35:68:bc:2e: e4:60:09:1b:ad:ba:b4:62:30:6a:3d:c3:53:96:f6: bf:b9:89:71:ba:da:42:d1:f6:68:46:e9:5a:91:66: ab:c4:0e:dd:7b:1f:4d:cd:22:1f:80:76:fb:8a:89: 2e:c9:af:7e:fd:e6:b4:64:13:c9:10:4d:3b:0c:40: ef:6e:ef:cf:bb:4d:3f:81:79:8e:ed:21:54:cc:e6: 81:04:d3:a7:13:b7:e8:bb:cc:85:a8:48:0e:ca:b4: d6:b7:af:cf:4d:f6:5b:85:8c:80:cd:88:0e:19:5f: a0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BB:69:15:05:6D:0B:BE:B8:21:2C:5A:33:E8:7B:8E:45:7B:75:D8 X509v3 Authority Key Identifier: keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:1b:7b:82:42:7d:03:f3:a3:4a:78:86:dd:61:6b:cd:59:e4: f8:ad:9e:69:9f:ec:a4:18:be:b1:c1:d9:c2:3c:47:39:94:86: 08:70:d9:75:4a:80:e8:d4:fd:6b:0a:4a:b8:47:21:f4:72:75: cc:55:b8:ed:66:34:43:ec:79:4a:34:ca:c6:f2:34:ab:40:78: cc:f6:52:c6:4a:fd:60:7f:6a:4b:ac:f6:59:fb:28:83:37:68: 2b:8a:b2:ab:13:af:e3:d5:23:e1:2a:82:57:6a:83:c4:92:7a: 12:80:b7:28:42:4f:6a:43:7a:14:43:44:6f:ca:1c:2e:29:b6: bb:2e:a3:0e:5b:15:22:bd:31:be:c0:36:08:2c:06:d7:da:4f: fb:f0:01:b8:3b:48:87:ff:6f:d9:46:bb:56:66:a6:1c:b3:a0: c8:76:3c:99:99:55:61:24:5b:6d:83:87:90:05:d1:6c:96:a2: 84:fb:0e:3d:ef:c0:4d:9c:94:27:78:f7:f3:53:0e:bd:3a:36: e7:85:a4:73:5b:b0:63:ce:a4:66:c9:31:7c:76:06:cd:68:8c: 86:10:9d:29:58:4f:18:72:8d:27:63:23:3a:25:f9:87:05:ae: 84:b2:60:9d:a1:bb:82:0f:ed:7c:fd:5f:03:1c:08:42:f8:d5: 49:56:fa:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gefUoTOKcRU2x0dgyjKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjg0MTExNzAwNDkyYWIwYmUxMTBlODIxYTFiY2U3M2Y4 MGE1NjUwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD Eyg0ZWJiNjkxNTA1NmQwYmJlYjgyMTJjNWEzM2U4N2I4ZTQ1N2I3NWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhLVGdJUwdYRR6995r8q4/5n8a4A j+11c3kknfwOH78SmRrk+Lp8SCGdFU2mn4cfeoYgYtViZDUHJmSNHaf9YDHkYX8n D9baGaJuIzm4pj/zFZ7/YR/QIMiysaF98FoWntD0uXL30+X937l7RGdtv3Elz5es kGcADLfg611cmip22MoZdcVEwVgUPvzeNi9sKzVovC7kYAkbrbq0YjBqPcNTlva/ uYlxutpC0fZoRulakWarxA7dex9NzSIfgHb7iokuya9+/ea0ZBPJEE07DEDvbu/P u00/gXmO7SFUzOaBBNOnE7fou8yFqEgOyrTWt6/PTfZbhYyAzYgOGV+gOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE67aRUFbQu+uCEsWjPoe45Fe3XYMB8GA1UdIwQY MBaAFJ8oQRFwBJKrC+EQ6CGhvOc/gKVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnloQkVYQUVrcXNMNFJEb0lhRzg1ei1BcFdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yZDBlOGYtY2Q4YS00ZDM4LWFjNTEt NmY1MjNmOTYwMDczLzEvbnloQkVYQUVrcXNMNFJEb0lhRzg1ei1BcFdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yZDBlOGYtY2Q4YS00ZDM4LWFjNTEtNmY1MjNmOTYwMDcz LzEvbnloQkVYQUVrcXNMNFJEb0lhRzg1ei1BcFdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBt7gkJ9 A/OjSniG3WFrzVnk+K2eaZ/spBi+scHZwjxHOZSGCHDZdUqA6NT9awpKuEch9HJ1 zFW47WY0Q+x5SjTKxvI0q0B4zPZSxkr9YH9qS6z2WfsogzdoK4qyqxOv49Uj4SqC V2qDxJJ6EoC3KEJPakN6FENEb8ocLim2uy6jDlsVIr0xvsA2CCwG19pP+/ABuDtI h/9v2Ua7VmamHLOgyHY8mZlVYSRbbYOHkAXRbJaihPsOPe/ATZyUJ3j381MOvTo2 54Wkc1uwY86kZskxfHYGzWiMhhCdKVhPGHKNJ2MjOiX5hwWuhLJgnaG7gg/tfP1f AxwIQvjVSVb6jQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:18 2025 by rpki-client