This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft File: nyjbpUvBou6fd-Br-AglbdyTh-g.mft (raw, json) Hash identifier: 9QD9n9re/2diCBkTG10iWtxwM7eGvGBh0M0Eo2CCyng= Subject key identifier: F6:F5:39:3E:8D:79:6A:14:6A:9B:6C:E6:7D:00:F0:0E:90:02:E5:30 Authority key identifier: 9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8 Certificate issuer: /CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8 Certificate serial: 019AF31BFCCB10C4AA9761C5998074E22057 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft Manifest number: 0779 Signing time: Sat 06 Dec 2025 10:01:28 +0000 Manifest this update: Sat 06 Dec 2025 10:01:28 +0000 Manifest next update: Sun 07 Dec 2025 10:01:28 +0000 Files and hashes: 1: nyjbpUvBou6fd-Br-AglbdyTh-g.crl (hash: /vyw5HFMTuZZEuh6ulpi8byzWQdjEijBfMdCidPW6xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:fc:cb:10:c4:aa:97:61:c5:99:80:74:e2:20:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8 Validity Not Before: Dec 6 10:01:28 2025 GMT Not After : Dec 7 10:01:28 2025 GMT Subject: CN=f6f5393e8d796a146a9b6ce67d00f00e9002e530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0a:10:ce:7c:bf:c4:9f:cd:8e:dc:54:b8:e9: 62:84:3c:fb:d2:ca:59:4d:96:e2:69:59:7e:e4:ea: b9:f8:63:18:2a:47:f9:5a:89:47:1a:98:85:24:3b: 94:6b:66:58:b9:33:ef:4a:b2:76:84:7f:3f:f2:2a: 20:38:e4:fc:60:b2:0e:2e:47:1b:b9:47:d7:db:f4: dd:3d:07:a8:20:70:1d:d6:92:13:d5:34:41:06:31: a6:c9:63:1a:4e:49:c2:d4:27:49:47:ef:97:27:2e: 78:5f:a4:cf:47:f7:0f:ed:88:f3:80:6b:a8:44:94: 83:08:fd:71:49:74:07:cc:78:e3:75:6d:0d:26:4a: 05:94:a4:05:84:02:c4:5b:da:88:4e:2e:c6:80:7a: 89:3c:00:d6:fd:99:7c:60:b5:1e:f8:ad:70:4b:7a: b3:0e:4c:6b:a4:2c:73:da:75:16:f0:49:52:65:1c: cd:db:28:4d:79:49:0a:ef:6d:e9:1e:7f:f0:fe:f7: 92:d1:74:a0:27:61:ed:db:93:d3:cc:48:33:cc:cb: 98:b6:e0:ad:fe:bc:92:9a:0b:68:db:fd:e9:1a:4b: af:94:07:36:d2:6b:54:0c:43:2d:63:65:97:6a:00: 56:be:d7:90:6b:e8:27:79:3a:03:b2:37:8b:30:e7: 8f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F5:39:3E:8D:79:6A:14:6A:9B:6C:E6:7D:00:F0:0E:90:02:E5:30 X509v3 Authority Key Identifier: keyid:9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:29:5a:f3:70:55:f5:04:d7:5a:0f:95:36:de:5e:d4:dd:85: a1:b4:1c:8a:ec:6f:e6:3d:4c:88:be:c6:f7:2b:ab:f6:9d:fc: 3a:38:5d:40:e1:d7:41:e4:40:05:1b:ff:95:12:c7:4a:18:ac: 8f:5b:66:fc:10:79:d3:b3:eb:e2:71:ef:8f:22:1b:72:28:fe: a2:78:8a:cb:77:6a:fc:b2:c8:32:3c:42:15:19:5f:34:6c:b5: c6:e9:ad:9c:f3:c0:c6:66:78:7f:ac:21:df:f8:e6:6c:25:51: 07:93:15:80:54:26:b1:5b:42:2d:16:cc:7e:02:76:25:91:88: 50:92:d8:b0:28:65:fb:a5:59:b5:7c:ac:c1:fa:e3:6f:93:f5: d7:75:35:33:e8:28:5a:fa:ad:40:1a:ef:f4:cc:e8:71:11:f1: 33:ac:15:15:19:b4:e7:d8:73:3e:a8:b8:e9:c9:1f:c9:a5:20: 25:ec:2f:c3:17:48:db:78:ac:8c:cc:dd:3e:62:6e:fb:1f:5d: 9c:25:a2:59:70:9b:60:73:a9:46:5a:79:94:49:ce:62:46:29: 5c:29:69:32:b4:6b:06:43:07:81:bf:ba:ca:dd:65:ee:e9:7f: 0b:8c:87:ee:25:1b:0a:84:07:b6:57:7a:45:4d:7d:e2:41:c6: 04:16:1a:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/zLEMSql2HFmYB04iBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjhkYmE1NGJjMWEyZWU5Zjc3ZTA2YmY4MDgyNTZkZGM5 Mzg3ZTgwHhcNMjUxMjA2MTAwMTI4WhcNMjUxMjA3MTAwMTI4WjAzMTEwLwYDVQQD EyhmNmY1MzkzZThkNzk2YTE0NmE5YjZjZTY3ZDAwZjAwZTkwMDJlNTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwoQzny/xJ/NjtxUuOlihDz70spZ TZbiaVl+5Oq5+GMYKkf5WolHGpiFJDuUa2ZYuTPvSrJ2hH8/8iogOOT8YLIOLkcb uUfX2/TdPQeoIHAd1pIT1TRBBjGmyWMaTknC1CdJR++XJy54X6TPR/cP7YjzgGuo RJSDCP1xSXQHzHjjdW0NJkoFlKQFhALEW9qITi7GgHqJPADW/Zl8YLUe+K1wS3qz DkxrpCxz2nUW8ElSZRzN2yhNeUkK723pHn/w/veS0XSgJ2Ht25PTzEgzzMuYtuCt /rySmgto2/3pGkuvlAc20mtUDEMtY2WXagBWvteQa+gneToDsjeLMOeP2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPb1OT6NeWoUapts5n0A8A6QAuUwMB8GA1UdIwQY MBaAFJ8o26VLwaLun3fga/gIJW3ck4foMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnlqYnBVdkJvdTZmZC1Cci1BZ2xiZHlUaC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83YThmYjYtZTZhOS00YmM4LWFiMDIt ZGYzZTU4MzU0YjgxLzEvbnlqYnBVdkJvdTZmZC1Cci1BZ2xiZHlUaC1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi83YThmYjYtZTZhOS00YmM4LWFiMDItZGYzZTU4MzU0Yjgx LzEvbnlqYnBVdkJvdTZmZC1Cci1BZ2xiZHlUaC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCla83BV 9QTXWg+VNt5e1N2FobQciuxv5j1MiL7G9yur9p38OjhdQOHXQeRABRv/lRLHShis j1tm/BB507Pr4nHvjyIbcij+oniKy3dq/LLIMjxCFRlfNGy1xumtnPPAxmZ4f6wh 3/jmbCVRB5MVgFQmsVtCLRbMfgJ2JZGIUJLYsChl+6VZtXyswfrjb5P113U1M+go WvqtQBrv9MzocRHxM6wVFRm059hzPqi46ckfyaUgJewvwxdI23isjMzdPmJu+x9d nCWiWXCbYHOpRlp5lEnOYkYpXClpMrRrBkMHgb+6yt1l7ul/C4yH7iUbCoQHtld6 RU194kHGBBYaJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:37:48 2025 by rpki-client