This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json) Hash identifier: zxT/TToAO3c0XOVKQ+uRaJXD37mqWq+d6b3QfTt7wMs= Subject key identifier: 3A:91:37:64:BB:0D:49:0B:6E:99:6B:BF:BB:D2:06:75:DD:D7:B2:98 Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e Certificate serial: 019AF23FEC27F474717F6541FFE846F99A0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft Manifest number: 1776 Signing time: Sat 06 Dec 2025 06:01:06 +0000 Manifest this update: Sat 06 Dec 2025 06:01:06 +0000 Manifest next update: Sun 07 Dec 2025 06:01:06 +0000 Files and hashes: 1: EA-60X-R1DbjXj2jBAu25C_Uwg8.roa (hash: pB7hdFZLUbLSPr/8GBR/S5TxapEQ0VHd/Ue8AnhWCqA=) 2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: XXCqtrDizLNhahCs/E0jze5ZArssSVFo+LuDMJ718a4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ec:27:f4:74:71:7f:65:41:ff:e8:46:f9:9a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e Validity Not Before: Dec 6 06:01:06 2025 GMT Not After : Dec 7 06:01:06 2025 GMT Subject: CN=3a913764bb0d490b6e996bbfbbd20675ddd7b298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:7c:c0:32:47:46:7e:13:35:d9:33:6c:41: a8:8c:22:f3:bf:3a:b2:7b:71:0f:78:e5:21:02:65: 7d:1f:1f:81:23:9b:ab:97:7e:f4:79:20:dd:bd:f8: 08:e3:23:14:a1:bb:11:27:fa:2f:16:55:e1:c7:23: 29:54:80:f2:5d:d9:4b:1e:7b:fd:70:1f:63:c8:23: 20:42:a1:ff:e1:e2:fc:1d:4c:64:a5:96:1d:63:ce: 52:f4:84:c4:38:0b:cc:14:1b:3b:b8:0d:70:d0:83: 5d:d4:ad:9f:f5:9e:87:d7:4b:0e:12:77:b1:ef:e5: 75:c7:3b:f6:22:c2:2b:ae:6c:ea:83:59:37:53:7c: 55:1c:ce:1a:3f:62:1b:7c:fa:2f:79:0b:61:e8:3d: 4f:0a:34:f8:1d:fd:02:5a:98:f6:35:cb:66:81:7a: a9:53:f1:27:8e:5b:1a:e7:23:f0:d6:81:0b:c8:d1: 40:05:33:87:ec:48:a4:59:05:45:47:c8:57:b1:e8: f3:90:c8:d9:8f:60:1e:6a:51:f3:d0:c5:20:89:c9: 42:70:aa:a1:81:e5:9c:91:f6:03:69:e9:1a:2c:70: 41:33:33:54:5b:8c:b8:00:c1:5d:53:29:7c:59:6b: b0:06:17:46:1d:0a:bf:94:f7:af:8d:c8:93:5d:8f: 51:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:91:37:64:BB:0D:49:0B:6E:99:6B:BF:BB:D2:06:75:DD:D7:B2:98 X509v3 Authority Key Identifier: keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:60:97:67:33:0c:39:6a:4d:ab:58:5d:da:74:36:ed:cc:bf: 5b:f2:3a:6f:93:05:a6:89:97:11:15:fd:ae:09:13:8f:68:7e: 6d:d2:4e:fe:73:40:30:e6:40:59:a5:4f:5d:cf:98:64:e7:8b: 91:d3:1e:d3:ed:f1:8b:35:06:8a:d4:e2:57:08:b8:1e:82:61: d4:27:4f:23:ba:6b:67:13:9a:1a:61:7e:8e:2a:80:50:55:e1: fd:bb:6d:b1:ea:01:80:eb:bb:15:0f:f3:e1:ec:40:84:46:87: 51:d7:27:f6:8c:76:1f:8a:8c:56:5d:70:27:8c:0d:91:68:9e: 46:1a:c5:2b:40:14:fa:c3:77:47:66:11:3c:75:ed:d9:24:e9: 1c:ed:da:55:c4:47:21:62:d5:cf:ea:02:40:c3:df:ef:4c:ef: 7c:cf:7c:a6:2f:48:94:44:cc:12:00:64:17:b4:f6:25:1e:c5: e8:02:e8:09:ea:d8:70:57:83:27:b0:bf:6c:f4:fa:25:d4:17: 94:dc:ab:49:cb:16:8d:d7:72:31:8d:2b:30:99:f2:0a:81:e6: ba:31:f0:20:51:f9:45:a1:07:78:b4:09:c4:54:5f:dd:46:87: 60:fd:ed:c6:08:7e:0c:b7:a2:76:8f:dd:48:7c:d9:89:9a:4a: ed:7a:25:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+wn9HRxf2VB/+hG+ZoOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjZhYzllZWIzYTJjZmEyZjZjYTNmNDEzZWZiOWNkZmZl OTcyNGUwHhcNMjUxMjA2MDYwMTA2WhcNMjUxMjA3MDYwMTA2WjAzMTEwLwYDVQQD EygzYTkxMzc2NGJiMGQ0OTBiNmU5OTZiYmZiYmQyMDY3NWRkZDdiMjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBl8wDJHRn4TNdkzbEGojCLzvzqy e3EPeOUhAmV9Hx+BI5url370eSDdvfgI4yMUobsRJ/ovFlXhxyMpVIDyXdlLHnv9 cB9jyCMgQqH/4eL8HUxkpZYdY85S9ITEOAvMFBs7uA1w0INd1K2f9Z6H10sOEnex 7+V1xzv2IsIrrmzqg1k3U3xVHM4aP2IbfPoveQth6D1PCjT4Hf0CWpj2NctmgXqp U/Enjlsa5yPw1oELyNFABTOH7EikWQVFR8hXsejzkMjZj2AealHz0MUgiclCcKqh geWckfYDaekaLHBBMzNUW4y4AMFdUyl8WWuwBhdGHQq/lPevjciTXY9R9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqRN2S7DUkLbplrv7vSBnXd17KYMB8GA1UdIwQY MBaAFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWIt N2Q0MjY2Y2Y4MjJhLzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWItN2Q0MjY2Y2Y4MjJh LzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvGCXZzMM OWpNq1hd2nQ27cy/W/I6b5MFpomXERX9rgkTj2h+bdJO/nNAMOZAWaVPXc+YZOeL kdMe0+3xizUGitTiVwi4HoJh1CdPI7prZxOaGmF+jiqAUFXh/bttseoBgOu7FQ/z 4exAhEaHUdcn9ox2H4qMVl1wJ4wNkWieRhrFK0AU+sN3R2YRPHXt2STpHO3aVcRH IWLVz+oCQMPf70zvfM98pi9IlETMEgBkF7T2JR7F6ALoCerYcFeDJ7C/bPT6JdQX lNyrScsWjddyMY0rMJnyCoHmujHwIFH5RaEHeLQJxFRf3UaHYP3txgh+DLeido/d SHzZiZpK7XollQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:52:38 2025 by rpki-client