This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft File: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft (raw, json) Hash identifier: EZ+6QBB04g5PIuA8nFktxJFD3bk8adpufJMwvQT+Gmw= Subject key identifier: C6:BF:A8:9A:96:14:8B:BD:EE:33:8F:F6:23:23:26:A6:B0:04:A8:17 Authority key identifier: 37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24 Certificate issuer: /CN=3722b2f090a967e0bcacd19f39ad2a887263b524 Certificate serial: 019AF1D1A6552441C8EE9A47AE5FC1DCECB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft Manifest number: 0445 Signing time: Sat 06 Dec 2025 04:00:39 +0000 Manifest this update: Sat 06 Dec 2025 04:00:39 +0000 Manifest next update: Sun 07 Dec 2025 04:00:39 +0000 Files and hashes: 1: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl (hash: FdItPwX5/98IPxqQSdK20F7awpawr4UVESTnMHsy350=) 2: dbO_KM950SVoV4qdoDfieNWIw0s.roa (hash: DCE7AE8Wo5HEULV6TjwRejnJ6LMRCD866TcEBq5yg4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a6:55:24:41:c8:ee:9a:47:ae:5f:c1:dc:ec:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722b2f090a967e0bcacd19f39ad2a887263b524 Validity Not Before: Dec 6 04:00:39 2025 GMT Not After : Dec 7 04:00:39 2025 GMT Subject: CN=c6bfa89a96148bbdee338ff6232326a6b004a817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:25:9e:c8:1c:b8:9c:3e:b8:dd:64:96:79: 5b:4e:5f:ef:75:a8:fd:ba:e3:13:9f:55:e6:d4:89: 72:d0:84:ab:a3:98:9c:cf:87:99:66:e9:d2:83:30: 4f:e9:c9:54:5d:69:ec:fb:7f:5e:65:ba:3e:07:76: 82:d7:01:1c:8d:a0:c4:74:c4:c8:ea:a6:c3:f0:8a: ce:02:4f:00:4d:09:9f:1e:58:8a:41:46:7d:b3:cb: 89:24:5c:12:e5:2c:50:f3:94:74:46:da:76:1c:66: 47:24:0e:5f:ae:dd:09:c3:0d:1c:37:61:5e:4b:c9: 7e:54:18:d3:f6:6f:31:84:82:62:73:07:62:74:52: 9e:4d:de:33:e9:98:c5:fa:f8:0e:40:e6:3e:10:84: 6f:b1:c9:09:04:30:30:72:6f:ee:58:c9:b6:28:bb: 86:01:77:ad:6e:88:38:67:86:bf:0c:1c:52:42:af: 66:9f:aa:7b:a7:6d:a0:de:ca:8a:18:65:a0:18:2b: 49:d0:29:6c:1d:07:3a:f1:8f:b9:a4:49:84:1c:2d: 55:aa:4d:ac:7f:39:9e:d9:91:c6:16:45:14:90:93: 1b:e5:b6:20:52:7a:4a:91:9d:93:bc:46:50:a7:9b: 8b:33:11:43:a8:e3:e9:bc:28:aa:76:5c:96:ed:9f: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BF:A8:9A:96:14:8B:BD:EE:33:8F:F6:23:23:26:A6:B0:04:A8:17 X509v3 Authority Key Identifier: keyid:37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f7:0b:99:db:d4:7d:c3:57:2e:fe:11:24:38:23:1a:88:15: 3b:eb:50:75:7c:08:1a:9a:73:df:ca:c9:94:7b:59:c4:21:a7: 22:18:32:27:ae:77:4d:b8:14:65:60:82:28:96:bd:84:8a:12: e7:e3:98:7d:20:b0:f9:74:a0:65:53:b2:eb:75:6a:fc:e6:11: 68:c5:1f:1c:f3:5a:8c:e2:29:13:74:0b:f3:ae:db:21:68:87: 76:3e:80:00:89:01:2a:4e:2d:1e:a9:b7:49:15:fe:db:0a:65: be:f4:c8:b8:1e:7c:f0:fc:e4:c2:69:6f:5e:74:23:83:12:24: ee:2b:3f:44:e8:29:82:bd:78:8a:6b:bb:42:2d:da:11:f0:15: 08:1c:88:b4:ee:00:8c:85:cf:91:85:a1:82:05:92:d9:2a:bb: 2e:c3:2e:b8:15:c8:bd:bc:2c:a4:af:9d:45:0d:65:9d:1d:ed: 96:b2:31:7b:f8:48:2a:6a:e4:f5:42:cf:44:ef:33:81:d0:2e: 23:e8:74:db:4b:34:98:60:27:4f:9e:45:bf:94:51:1d:76:18: 0c:4a:97:bb:7a:e3:a1:f3:bb:2b:32:89:9f:01:88:96:bf:c6: 84:3d:6a:a9:2e:08:1a:be:3d:f8:2d:3f:e8:89:bb:c1:26:87: 35:c9:f7:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aZVJEHI7ppHrl/B3OywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MjJiMmYwOTBhOTY3ZTBiY2FjZDE5ZjM5YWQyYTg4NzI2 M2I1MjQwHhcNMjUxMjA2MDQwMDM5WhcNMjUxMjA3MDQwMDM5WjAzMTEwLwYDVQQD EyhjNmJmYTg5YTk2MTQ4YmJkZWUzMzhmZjYyMzIzMjZhNmIwMDRhODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz80lnsgcuJw+uN1klnlbTl/vdaj9 uuMTn1Xm1Ily0ISro5icz4eZZunSgzBP6clUXWns+39eZbo+B3aC1wEcjaDEdMTI 6qbD8IrOAk8ATQmfHliKQUZ9s8uJJFwS5SxQ85R0Rtp2HGZHJA5frt0Jww0cN2Fe S8l+VBjT9m8xhIJicwdidFKeTd4z6ZjF+vgOQOY+EIRvsckJBDAwcm/uWMm2KLuG AXetbog4Z4a/DBxSQq9mn6p7p22g3sqKGGWgGCtJ0ClsHQc68Y+5pEmEHC1Vqk2s fzme2ZHGFkUUkJMb5bYgUnpKkZ2TvEZQp5uLMxFDqOPpvCiqdlyW7Z/W0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMa/qJqWFIu97jOP9iMjJqawBKgXMB8GA1UdIwQY MBaAFDcisvCQqWfgvKzRnzmtKohyY7UkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlLeThKQ3BaLUM4ck5HZk9hMHFpSEpqdFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82MGRlNDYtNTk3NC00YzQ1LWJlMzYt OGRjZGI5OThmZDVhLzEvTnlLeThKQ3BaLUM4ck5HZk9hMHFpSEpqdFNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82MGRlNDYtNTk3NC00YzQ1LWJlMzYtOGRjZGI5OThmZDVh LzEvTnlLeThKQ3BaLUM4ck5HZk9hMHFpSEpqdFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfcLmdvU fcNXLv4RJDgjGogVO+tQdXwIGppz38rJlHtZxCGnIhgyJ653TbgUZWCCKJa9hIoS 5+OYfSCw+XSgZVOy63Vq/OYRaMUfHPNajOIpE3QL867bIWiHdj6AAIkBKk4tHqm3 SRX+2wplvvTIuB588PzkwmlvXnQjgxIk7is/ROgpgr14imu7Qi3aEfAVCByItO4A jIXPkYWhggWS2Sq7LsMuuBXIvbwspK+dRQ1lnR3tlrIxe/hIKmrk9ULPRO8zgdAu I+h020s0mGAnT55Fv5RRHXYYDEqXu3rjofO7KzKJnwGIlr/GhD1qqS4IGr49+C0/ 6Im7wSaHNcn3Xg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:04 2025 by rpki-client