This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft File: nYy-lCn5RJlbPJNL2vZglrURSNQ.mft (raw, json) Hash identifier: u7zyZJlFxkCT/WkCVEBp2TpYIRhLBEsCiuKxEIEIPG0= Subject key identifier: AF:A1:F0:84:3A:2B:DD:91:55:0B:26:17:46:58:19:9E:86:22:32:6F Authority key identifier: 9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4 Certificate issuer: /CN=9d8cbe9429f944995b3c934bdaf66096b51148d4 Certificate serial: 019AF19B432648874A15634914642A04B53C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft Manifest number: 06AE Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: nYy-lCn5RJlbPJNL2vZglrURSNQ.crl (hash: BDxRQxnBQm296G2s5Aek0fY5FQ72C1lcPGbyByf9BgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:43:26:48:87:4a:15:63:49:14:64:2a:04:b5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d8cbe9429f944995b3c934bdaf66096b51148d4 Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=afa1f0843a2bdd91550b26174658199e8622326f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bc:31:6e:c2:0f:78:af:6c:b9:32:9e:e2:34: ac:6d:c0:20:7a:10:3c:ab:8b:32:d9:be:a6:a7:e7: 63:36:25:c7:75:cd:d0:5f:12:a0:65:36:75:9b:83: 61:ac:00:a5:74:3a:c5:2a:56:5a:69:98:61:bd:89: 29:66:7c:06:6d:8a:c3:ea:3a:3d:bf:82:7b:fb:94: 73:bd:4b:af:91:85:84:fc:db:d7:1b:0d:c7:fe:4d: f4:19:73:96:6a:f7:f4:39:cb:01:32:60:23:8d:71: 6f:a1:69:9c:f4:0a:2c:52:9c:40:d6:f4:eb:76:92: e3:38:8d:f0:a5:8f:15:4e:ea:9e:50:c1:9b:92:6b: 86:a4:14:d7:84:4a:79:d5:c4:3e:93:8f:df:3e:68: 62:52:cd:04:29:3d:86:6e:b8:7f:50:ac:ae:8e:2d: ab:02:a9:18:a2:07:ae:a2:0e:ae:57:a6:6d:02:f2: 82:c6:85:46:58:5a:a1:ed:f0:b7:fb:76:63:d5:8d: d7:91:e5:c6:93:5c:4f:11:c0:8c:29:04:0d:11:b8: 56:e7:31:47:bb:d6:bd:ab:df:54:b3:10:aa:21:08: eb:8c:7d:e7:a1:45:15:c5:ca:8a:61:ad:ed:ac:ba: 3c:ad:42:e4:da:69:fc:fa:36:3f:5b:87:c4:a9:4a: 39:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A1:F0:84:3A:2B:DD:91:55:0B:26:17:46:58:19:9E:86:22:32:6F X509v3 Authority Key Identifier: keyid:9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:47:78:0f:bc:68:13:67:57:63:3e:58:3d:19:f3:a4:0a:00: 64:e4:8b:ad:98:6e:0a:e4:8d:24:1a:c2:d3:2f:cf:42:71:4f: 13:f6:cc:91:77:87:44:1f:2d:60:6a:7b:3f:3f:41:f4:e1:56: 31:00:56:96:66:a0:25:ab:bb:a1:6f:8c:1b:11:bf:ca:79:9b: 94:91:3e:82:6d:72:aa:af:5f:dc:26:85:90:f7:88:e2:43:75: a5:e2:6a:ff:45:9f:44:93:67:a3:ab:48:de:80:52:bd:74:3c: f5:15:00:f8:e3:5c:92:34:ff:a0:cd:88:8d:4f:55:d4:e9:b1: 58:70:9f:1a:72:3e:fe:7e:ae:bc:b6:ac:fb:7e:59:78:7d:89: fa:ea:6c:4b:1c:92:43:44:e9:ab:97:db:09:27:36:ac:8f:b8: ac:8c:e0:4f:58:98:de:16:52:08:3e:96:aa:71:2f:7b:ea:20: 97:93:3d:ee:3d:e7:b7:13:93:b6:6d:b3:f3:27:bd:83:3f:09: 76:e3:92:5a:cc:38:45:7e:bb:0f:54:c2:c9:2b:29:df:e1:71: cb:28:01:0b:80:dc:7f:7b:58:1f:a1:3b:31:41:ab:2d:c5:44: e1:68:f9:9a:0a:52:34:e6:27:55:6d:4a:50:2a:a6:b1:22:f5: 78:08:de:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0MmSIdKFWNJFGQqBLU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOGNiZTk0MjlmOTQ0OTk1YjNjOTM0YmRhZjY2MDk2YjUx MTQ4ZDQwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD EyhhZmExZjA4NDNhMmJkZDkxNTUwYjI2MTc0NjU4MTk5ZTg2MjIzMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrwxbsIPeK9suTKe4jSsbcAgehA8 q4sy2b6mp+djNiXHdc3QXxKgZTZ1m4NhrACldDrFKlZaaZhhvYkpZnwGbYrD6jo9 v4J7+5RzvUuvkYWE/NvXGw3H/k30GXOWavf0OcsBMmAjjXFvoWmc9AosUpxA1vTr dpLjOI3wpY8VTuqeUMGbkmuGpBTXhEp51cQ+k4/fPmhiUs0EKT2Gbrh/UKyuji2r AqkYogeuog6uV6ZtAvKCxoVGWFqh7fC3+3Zj1Y3XkeXGk1xPEcCMKQQNEbhW5zFH u9a9q99UsxCqIQjrjH3noUUVxcqKYa3trLo8rULk2mn8+jY/W4fEqUo5DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+h8IQ6K92RVQsmF0ZYGZ6GIjJvMB8GA1UdIwQY MBaAFJ2MvpQp+USZWzyTS9r2YJa1EUjUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbll5LWxDbjVSSmxiUEpOTDJ2WmdsclVSU05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yM2Q2NGYtNTE5Mi00ZGQ2LWIwMjYt ZWU5MTE2ZDdlMWQ2LzEvbll5LWxDbjVSSmxiUEpOTDJ2WmdsclVSU05RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8yM2Q2NGYtNTE5Mi00ZGQ2LWIwMjYtZWU5MTE2ZDdlMWQ2 LzEvbll5LWxDbjVSSmxiUEpOTDJ2WmdsclVSU05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0d4D7xo E2dXYz5YPRnzpAoAZOSLrZhuCuSNJBrC0y/PQnFPE/bMkXeHRB8tYGp7Pz9B9OFW MQBWlmagJau7oW+MGxG/ynmblJE+gm1yqq9f3CaFkPeI4kN1peJq/0WfRJNno6tI 3oBSvXQ89RUA+ONckjT/oM2IjU9V1OmxWHCfGnI+/n6uvLas+35ZeH2J+upsSxyS Q0Tpq5fbCSc2rI+4rIzgT1iY3hZSCD6WqnEve+ogl5M97j3ntxOTtm2z8ye9gz8J duOSWsw4RX67D1TCySsp3+FxyygBC4Dcf3tYH6E7MUGrLcVE4Wj5mgpSNOYnVW1K UCqmsSL1eAjevw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:52 2025 by rpki-client