This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json) Hash identifier: QdN0OexsEnYDfVE6IDdJtaNbd1/65adsM1y7YGUBYVQ= Subject key identifier: 73:1E:2A:98:F1:A5:68:2C:52:BF:D9:46:CC:41:77:7C:46:EF:AD:25 Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61 Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661 Certificate serial: 019AF12CC02DC6636F1AA430A3FA5D4768F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft Manifest number: 04A6 Signing time: Sat 06 Dec 2025 01:00:33 +0000 Manifest this update: Sat 06 Dec 2025 01:00:33 +0000 Manifest next update: Sun 07 Dec 2025 01:00:33 +0000 Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: tUS2D2jtiAipnWw0Iemh0J/MM4vra1UsW6LcB6sxMxc=) 2: PYq1HAQzPx7M7fdPhklvX0GStbk.roa (hash: HQ1rnmgYkh6S7nDcm+R94ykQLYw/alLJJRY1NxJAQWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c0:2d:c6:63:6f:1a:a4:30:a3:fa:5d:47:68:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661 Validity Not Before: Dec 6 01:00:33 2025 GMT Not After : Dec 7 01:00:33 2025 GMT Subject: CN=731e2a98f1a5682c52bfd946cc41777c46efad25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:7d:fc:e8:fb:fe:e5:58:0d:93:d4:44:74: 0a:df:f7:65:11:72:a9:6e:52:40:86:08:38:09:ed: 47:e1:3b:0f:53:3a:f5:4e:42:bb:1f:1a:07:f4:05: 8c:12:99:37:03:a6:f5:a5:6b:bb:0a:1d:04:0c:0a: 85:ad:2c:4d:0c:6f:09:dc:0a:01:43:a1:cc:06:b8: f3:87:33:6d:35:62:f3:22:68:44:cb:5c:b6:12:81: 7d:e3:79:83:6d:48:38:79:48:ed:a4:f6:02:03:67: 0b:b0:9c:c6:a1:39:11:cf:cf:bb:6f:16:d2:ca:91: 25:26:41:16:80:e7:bc:ec:ed:9b:27:5f:93:ce:9f: 50:48:6b:a7:94:7c:cf:63:f0:2d:02:30:06:19:27: 7d:eb:dd:e9:50:df:49:ba:2d:de:39:20:d5:3b:73: 12:bd:1e:f6:38:e8:5d:7f:bf:40:56:40:d6:18:3d: 74:7b:5d:9f:ee:63:b7:5b:53:e1:74:86:a7:e7:31: 67:54:a1:80:40:18:32:ff:b3:05:e0:b4:ba:05:e4: 91:2c:7d:fc:59:a1:b8:93:ce:03:a9:13:9f:b5:69: 78:28:d9:00:60:43:c8:ca:38:bb:e4:b1:cb:dc:b2: fd:28:f4:6e:2f:0f:68:09:b3:9c:2a:fb:ca:2a:d3: d6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1E:2A:98:F1:A5:68:2C:52:BF:D9:46:CC:41:77:7C:46:EF:AD:25 X509v3 Authority Key Identifier: keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:10:15:62:3f:d9:76:82:31:62:4f:9d:79:74:01:10:c8:b4: 0d:36:cf:dc:05:f9:39:9c:14:64:b7:0e:9c:5f:47:2e:a9:b9: 7c:b7:2e:e5:19:6b:89:fb:18:31:c6:b5:b1:74:e0:2d:e0:b0: 55:b7:c1:a1:b9:a9:a9:0c:8f:85:ed:a8:e2:c5:62:75:a4:13: cf:0d:5b:f9:74:1f:70:e3:1b:c3:40:c2:cf:88:38:c9:40:41: 07:f5:fe:44:9c:a7:b7:ef:87:ed:14:94:3b:51:92:34:7a:b4: 86:a3:0c:da:7f:b0:9b:b2:76:62:e7:d9:ee:94:0f:da:d5:c7: 1c:41:d9:30:76:a5:a7:a5:61:32:27:31:83:a1:e6:78:02:a7: b7:60:10:62:44:13:d9:40:e6:16:47:53:14:70:8a:4a:45:45: 04:51:62:ef:a3:f8:89:57:54:a6:49:c9:8e:78:66:24:a5:41: fb:42:b7:12:49:e6:e1:15:2a:fb:1d:6f:e9:45:de:a4:55:4c: 11:24:e8:7e:03:14:54:d9:a1:37:ce:17:8e:41:b6:85:04:c7: a6:77:bf:4e:ac:a4:39:32:0a:5e:12:07:6e:9c:82:6c:a0:12: e5:b5:bd:64:1f:bb:c5:c8:95:57:16:06:93:0f:6f:3c:81:ea: a2:84:54:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMAtxmNvGqQwo/pdR2jwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MjhmMjljZDM3ZDc3NWNkNjRiMjI1MjA1YzM4MzNjM2U0 NGQ2NjEwHhcNMjUxMjA2MDEwMDMzWhcNMjUxMjA3MDEwMDMzWjAzMTEwLwYDVQQD Eyg3MzFlMmE5OGYxYTU2ODJjNTJiZmQ5NDZjYzQxNzc3YzQ2ZWZhZDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVV9/Oj7/uVYDZPURHQK3/dlEXKp blJAhgg4Ce1H4TsPUzr1TkK7HxoH9AWMEpk3A6b1pWu7Ch0EDAqFrSxNDG8J3AoB Q6HMBrjzhzNtNWLzImhEy1y2EoF943mDbUg4eUjtpPYCA2cLsJzGoTkRz8+7bxbS ypElJkEWgOe87O2bJ1+Tzp9QSGunlHzPY/AtAjAGGSd9693pUN9Jui3eOSDVO3MS vR72OOhdf79AVkDWGD10e12f7mO3W1PhdIan5zFnVKGAQBgy/7MF4LS6BeSRLH38 WaG4k84DqROftWl4KNkAYEPIyji75LHL3LL9KPRuLw9oCbOcKvvKKtPWnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMeKpjxpWgsUr/ZRsxBd3xG760lMB8GA1UdIwQY MBaAFDco8pzTfXdc1ksiUgXDgzw+RNZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMmRmZGQtYjA2Yi00OTM3LWI4ZTgt MTM4MTdmZGJlYzA0LzEvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xMmRmZGQtYjA2Yi00OTM3LWI4ZTgtMTM4MTdmZGJlYzA0 LzEvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThAVYj/Z doIxYk+deXQBEMi0DTbP3AX5OZwUZLcOnF9HLqm5fLcu5RlrifsYMca1sXTgLeCw VbfBobmpqQyPhe2o4sVidaQTzw1b+XQfcOMbw0DCz4g4yUBBB/X+RJynt++H7RSU O1GSNHq0hqMM2n+wm7J2YufZ7pQP2tXHHEHZMHalp6VhMicxg6HmeAKnt2AQYkQT 2UDmFkdTFHCKSkVFBFFi76P4iVdUpknJjnhmJKVB+0K3Eknm4RUq+x1v6UXepFVM ESTofgMUVNmhN84XjkG2hQTHpne/TqykOTIKXhIHbpyCbKAS5bW9ZB+7xciVVxYG kw9vPIHqooRUOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:16 2025 by rpki-client