This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft File: nYy-lCn5RJlbPJNL2vZglrURSNQ.mft (raw, json) Hash identifier: Ttx7b9ve85J+wQS+2kxHZSYL7Aq/GzicD/ThylSzDCc= Subject key identifier: 7A:3E:B3:67:3F:7B:92:4A:6B:C6:80:40:73:29:22:F2:2C:68:1D:50 Authority key identifier: 9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4 Certificate issuer: /CN=9d8cbe9429f944995b3c934bdaf66096b51148d4 Certificate serial: 019B3CEBD7099ACDECA9CE691EA32C5E66F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft Manifest number: 06D5 Signing time: Sat 20 Dec 2025 18:00:47 +0000 Manifest this update: Sat 20 Dec 2025 18:00:47 +0000 Manifest next update: Sun 21 Dec 2025 18:00:47 +0000 Files and hashes: 1: nYy-lCn5RJlbPJNL2vZglrURSNQ.crl (hash: PXL4zj0tvP13n3u8wDPD0D2Nhcptl98VFrIUKuJ0yhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:d7:09:9a:cd:ec:a9:ce:69:1e:a3:2c:5e:66:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d8cbe9429f944995b3c934bdaf66096b51148d4 Validity Not Before: Dec 20 18:00:47 2025 GMT Not After : Dec 21 18:00:47 2025 GMT Subject: CN=7a3eb3673f7b924a6bc68040732922f22c681d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:7b:8a:70:bb:fc:49:27:1f:1d:e4:85:fb: de:7c:e8:d8:e4:c9:3c:dc:70:2b:20:29:ab:26:2f: 2f:a4:b9:17:73:98:0f:35:0b:ef:6c:80:a0:15:24: 54:77:82:21:4c:7b:8e:c4:3f:0d:c5:dc:bd:4a:76: c8:ae:09:56:6e:a5:2a:9e:b2:35:9f:2a:e5:49:b4: 35:43:09:21:61:e4:c9:b8:91:6a:71:43:5a:a3:84: aa:a2:a5:59:08:d6:0a:c6:78:b8:5b:dd:7b:26:3b: 36:2f:a6:bc:c5:42:ee:b9:aa:d0:d8:d5:56:48:12: 28:c2:5c:5d:7e:f7:65:30:d2:ab:3b:a5:eb:42:b5: a5:59:5a:91:b3:c6:07:65:7d:35:b0:b5:e1:6a:aa: 99:69:1f:cd:94:eb:a8:45:6f:27:c0:fd:40:f9:d0: 4e:7f:ac:5c:26:b4:af:df:7d:a9:79:0a:94:91:1c: e1:2a:04:d3:7a:a0:6e:3b:fb:ef:7e:7d:e9:49:90: 90:fe:1a:49:58:a6:66:bf:97:6e:02:19:78:00:eb: 29:3a:3a:ab:9c:19:23:6a:ae:db:37:53:ac:ac:21: de:96:1b:96:a1:10:f9:6c:e5:98:a6:bc:78:91:a8: 16:e2:2b:ae:7d:08:14:d9:91:55:25:f2:b4:c9:1b: d1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3E:B3:67:3F:7B:92:4A:6B:C6:80:40:73:29:22:F2:2C:68:1D:50 X509v3 Authority Key Identifier: keyid:9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:7e:98:2b:6c:18:a5:37:67:b8:3c:a4:b9:15:4d:ac:43:ad: 4c:bc:6b:89:60:67:fc:78:39:d4:2a:5a:2f:a6:32:ec:a2:d8: 70:79:95:dc:e2:9c:0b:38:a8:e9:db:6a:66:6c:ff:a7:90:c1: be:8f:d3:3d:67:64:fc:52:d6:be:10:ca:dc:7f:59:bb:f7:5c: ba:a2:58:ea:f8:f0:34:07:b0:12:6c:13:39:41:12:30:83:1a: 7d:52:5b:07:de:b1:69:43:c2:bf:90:14:dc:e9:b3:72:ff:83: e6:a9:81:97:5e:21:e1:d1:0e:42:a9:23:60:b7:37:6c:36:43: c7:77:37:54:ac:1f:79:c3:ee:e7:f7:2f:2b:90:98:fe:25:cc: 22:65:a0:4f:f0:22:93:22:a3:c0:87:9a:46:e4:1c:33:24:16: da:0f:2a:85:bd:96:15:a9:4a:8a:b5:e8:b0:6f:a9:ce:54:9d: 38:a0:be:c6:c5:bf:e3:60:61:86:18:34:f1:9e:2d:b7:5d:c4: aa:0d:25:92:8f:5d:d5:63:bb:98:d2:53:d3:8c:c1:7d:03:e8: 51:66:77:b6:9a:14:9f:b5:aa:ad:b2:ff:84:d8:dc:5f:7e:c8: 63:c3:94:4b:7c:68:7c:c6:be:b3:87:06:94:1a:16:06:f3:bd: 87:a0:6b:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869cJms3sqc5pHqMsXmbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOGNiZTk0MjlmOTQ0OTk1YjNjOTM0YmRhZjY2MDk2YjUx MTQ4ZDQwHhcNMjUxMjIwMTgwMDQ3WhcNMjUxMjIxMTgwMDQ3WjAzMTEwLwYDVQQD Eyg3YTNlYjM2NzNmN2I5MjRhNmJjNjgwNDA3MzI5MjJmMjJjNjgxZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOl7inC7/EknHx3khfvefOjY5Mk8 3HArICmrJi8vpLkXc5gPNQvvbICgFSRUd4IhTHuOxD8Nxdy9SnbIrglWbqUqnrI1 nyrlSbQ1QwkhYeTJuJFqcUNao4SqoqVZCNYKxni4W917Jjs2L6a8xULuuarQ2NVW SBIowlxdfvdlMNKrO6XrQrWlWVqRs8YHZX01sLXhaqqZaR/NlOuoRW8nwP1A+dBO f6xcJrSv332peQqUkRzhKgTTeqBuO/vvfn3pSZCQ/hpJWKZmv5duAhl4AOspOjqr nBkjaq7bN1OsrCHelhuWoRD5bOWYprx4kagW4iuufQgU2ZFVJfK0yRvRGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHo+s2c/e5JKa8aAQHMpIvIsaB1QMB8GA1UdIwQY MBaAFJ2MvpQp+USZWzyTS9r2YJa1EUjUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbll5LWxDbjVSSmxiUEpOTDJ2WmdsclVSU05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yM2Q2NGYtNTE5Mi00ZGQ2LWIwMjYt ZWU5MTE2ZDdlMWQ2LzEvbll5LWxDbjVSSmxiUEpOTDJ2WmdsclVSU05RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8yM2Q2NGYtNTE5Mi00ZGQ2LWIwMjYtZWU5MTE2ZDdlMWQ2 LzEvbll5LWxDbjVSSmxiUEpOTDJ2WmdsclVSU05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI36YK2wY pTdnuDykuRVNrEOtTLxriWBn/Hg51CpaL6Yy7KLYcHmV3OKcCzio6dtqZmz/p5DB vo/TPWdk/FLWvhDK3H9Zu/dcuqJY6vjwNAewEmwTOUESMIMafVJbB96xaUPCv5AU 3Omzcv+D5qmBl14h4dEOQqkjYLc3bDZDx3c3VKwfecPu5/cvK5CY/iXMImWgT/Ai kyKjwIeaRuQcMyQW2g8qhb2WFalKirXosG+pzlSdOKC+xsW/42Bhhhg08Z4tt13E qg0lko9d1WO7mNJT04zBfQPoUWZ3tpoUn7WqrbL/hNjcX37IY8OUS3xofMa+s4cG lBoWBvO9h6BrjA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:47:49 2025 by rpki-client