This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft File: nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json) Hash identifier: lErMP9ZlPmcU5imtjg7Qj1VJB9/cwq5+zYOoJH+RmCc= Subject key identifier: 02:F6:30:10:51:65:9C:55:65:20:9B:11:A9:B0:54:20:8F:BF:65:B1 Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65 Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565 Certificate serial: 019B2BC1C13B2429FFA1E17EB37F6579F1E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft Manifest number: 145E Signing time: Wed 17 Dec 2025 10:01:16 +0000 Manifest this update: Wed 17 Dec 2025 10:01:16 +0000 Manifest next update: Thu 18 Dec 2025 10:01:16 +0000 Files and hashes: 1: T7vd5c8yN7dKoGTcsEPGaB0GoJI.roa (hash: RdeAevZDp8XmGqqAvK8gJZd85NjETWsjIIExe3sxUXY=) 2: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: 3SPjB0+RUGMxlheWRGQ46/dSXVjpjRPjVBGs34nzKUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:c1:3b:24:29:ff:a1:e1:7e:b3:7f:65:79:f1:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565 Validity Not Before: Dec 17 10:01:16 2025 GMT Not After : Dec 18 10:01:16 2025 GMT Subject: CN=02f6301051659c5565209b11a9b054208fbf65b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:cf:45:54:96:ee:eb:e1:b5:40:f6:1c:69: 3c:92:10:b4:72:9f:b9:e1:78:5e:43:e7:d0:b4:4c: 70:73:34:0f:6c:2e:dc:90:0d:88:b0:03:18:95:7d: 83:12:02:99:29:51:f2:5f:5b:9b:e5:5c:c9:aa:b1: 79:fa:32:fb:d3:fa:21:c7:45:b6:f4:d4:db:d0:c5: 57:ca:0a:3d:77:86:01:21:07:c2:e4:d8:2f:88:b7: de:63:40:15:7c:63:e6:08:84:82:2f:30:e7:21:ca: b7:82:ab:bf:13:4d:57:74:5c:e5:34:0d:5a:27:80: 6a:35:6c:66:a2:aa:75:2e:b6:47:94:2a:c7:4f:c7: ea:18:c6:2b:d7:0b:c4:5e:79:dd:a2:24:80:bf:6a: 22:12:82:1d:6e:86:e1:e5:67:a6:24:e4:9e:85:1a: 19:a9:3f:2a:65:b8:22:e4:5f:20:41:6c:c4:45:5d: 73:11:36:9d:c4:f9:af:0c:ee:d4:44:3e:23:5b:23: ad:36:77:50:66:9c:7f:01:d4:56:2a:3d:25:83:a1: ca:ac:3d:5a:d6:68:5d:0d:c6:71:0f:fd:5d:e1:11: d0:61:d0:ba:a1:2b:a8:3a:36:a0:b5:c1:53:9d:96: 52:1f:a8:6f:af:9a:0b:4e:00:63:2d:05:bd:52:b1: c6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F6:30:10:51:65:9C:55:65:20:9B:11:A9:B0:54:20:8F:BF:65:B1 X509v3 Authority Key Identifier: keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:74:eb:52:f2:62:e8:0b:a5:81:9c:c1:aa:ac:a9:2f:31:c5: cf:7c:59:d1:11:f6:3a:2b:f7:7c:bf:2e:13:45:4c:62:5b:ef: b8:e1:6c:49:55:8c:e7:6a:d4:3f:fc:d8:c5:fa:39:40:ec:70: 70:c2:17:7b:84:41:8b:1b:9f:0d:67:2d:ba:ae:28:c5:e4:a8: be:7a:b4:26:c7:9e:5d:23:af:6e:d9:47:47:9d:e9:f8:0f:a4: ab:f4:c3:7a:98:06:8d:5c:b8:0a:b1:e2:6d:bc:29:43:83:77: 6a:7b:35:b9:b3:5a:55:32:57:dd:2a:e4:43:d6:ae:e7:62:e1: 19:4b:e5:be:fc:82:fc:92:f0:45:25:28:97:96:ef:b6:19:97: 2f:14:3c:89:59:1a:ad:b5:9f:02:53:9e:c3:57:11:a0:44:72: 21:9f:13:6d:fd:3a:24:5b:6c:4e:b8:dc:7b:56:7d:cf:61:5a: 2a:76:c8:66:c7:d8:0d:ca:c4:ab:d3:5d:a3:38:fa:e5:c8:5f: cc:3e:9a:48:41:32:ac:07:67:26:65:42:a7:f8:5f:79:01:b9: f3:7d:08:f0:c8:46:be:e3:5a:c0:06:af:be:f9:cc:0e:29:e8: 4d:0c:91:f2:32:ea:71:94:a4:ad:36:ed:dd:2c:1b:ca:54:f6: 34:86:c7:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwcE7JCn/oeF+s39lefHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjg0MTExNzAwNDkyYWIwYmUxMTBlODIxYTFiY2U3M2Y4 MGE1NjUwHhcNMjUxMjE3MTAwMTE2WhcNMjUxMjE4MTAwMTE2WjAzMTEwLwYDVQQD EygwMmY2MzAxMDUxNjU5YzU1NjUyMDliMTFhOWIwNTQyMDhmYmY2NWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlfPRVSW7uvhtUD2HGk8khC0cp+5 4XheQ+fQtExwczQPbC7ckA2IsAMYlX2DEgKZKVHyX1ub5VzJqrF5+jL70/ohx0W2 9NTb0MVXygo9d4YBIQfC5NgviLfeY0AVfGPmCISCLzDnIcq3gqu/E01XdFzlNA1a J4BqNWxmoqp1LrZHlCrHT8fqGMYr1wvEXnndoiSAv2oiEoIdbobh5WemJOSehRoZ qT8qZbgi5F8gQWzERV1zETadxPmvDO7URD4jWyOtNndQZpx/AdRWKj0lg6HKrD1a 1mhdDcZxD/1d4RHQYdC6oSuoOjagtcFTnZZSH6hvr5oLTgBjLQW9UrHGTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAL2MBBRZZxVZSCbEamwVCCPv2WxMB8GA1UdIwQY MBaAFJ8oQRFwBJKrC+EQ6CGhvOc/gKVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnloQkVYQUVrcXNMNFJEb0lhRzg1ei1BcFdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yZDBlOGYtY2Q4YS00ZDM4LWFjNTEt NmY1MjNmOTYwMDczLzEvbnloQkVYQUVrcXNMNFJEb0lhRzg1ei1BcFdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yZDBlOGYtY2Q4YS00ZDM4LWFjNTEtNmY1MjNmOTYwMDcz LzEvbnloQkVYQUVrcXNMNFJEb0lhRzg1ei1BcFdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHTrUvJi 6AulgZzBqqypLzHFz3xZ0RH2Oiv3fL8uE0VMYlvvuOFsSVWM52rUP/zYxfo5QOxw cMIXe4RBixufDWctuq4oxeSovnq0JseeXSOvbtlHR53p+A+kq/TDepgGjVy4CrHi bbwpQ4N3ans1ubNaVTJX3SrkQ9au52LhGUvlvvyC/JLwRSUol5bvthmXLxQ8iVka rbWfAlOew1cRoERyIZ8Tbf06JFtsTrjce1Z9z2FaKnbIZsfYDcrEq9Ndozj65chf zD6aSEEyrAdnJmVCp/hfeQG5830I8MhGvuNawAavvvnMDinoTQyR8jLqcZSkrTbt 3SwbylT2NIbHjg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:40:10 2025 by rpki-client