This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json) Hash identifier: uTfzOSm8UimsVJ4+ov+fPCh9aejsZswICPLBfSFZeJE= Subject key identifier: C2:52:92:34:01:2F:F2:BA:BD:43:91:74:17:0F:91:38:BA:D5:1D:45 Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f Certificate serial: 019AF12D5C2323E18E95EA76CBBBCE1ADB36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft Manifest number: 0DA2 Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: 7JDNicJh0gV2BklSZjh86370qcoK9lhfYZr1mAPT6Og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5c:23:23:e1:8e:95:ea:76:cb:bb:ce:1a:db:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=c2529234012ff2babd439174170f9138bad51d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4c:3a:f6:7d:ed:ec:2a:95:e2:49:4c:23:31: 39:d8:74:2b:e4:02:e1:7d:fc:71:18:79:00:eb:4e: 27:06:ea:a6:cd:2b:d1:41:cb:96:d9:f5:9a:e5:e2: 8e:c9:4e:de:57:bb:54:a0:97:a4:f5:d6:d4:0a:b2: 58:17:3d:03:45:b0:95:8f:89:03:ec:c0:0c:5e:34: ce:7b:51:db:ce:3c:d8:5c:b4:c7:35:5c:f0:7b:a6: f5:69:55:16:4e:00:48:0a:9f:6c:fb:ae:c8:db:2e: 15:27:b4:59:05:d6:50:e6:a6:64:dc:fb:43:ae:b6: b8:aa:1c:b0:4f:a1:79:a8:7d:ae:95:24:7d:a5:64: c7:58:50:45:c9:7c:1b:42:1a:14:d8:73:c7:7e:69: c2:6a:6e:fb:28:1d:86:7b:72:a5:8b:e0:b2:99:12: 20:21:6c:db:ed:71:ea:09:a0:f9:84:8f:2b:4c:49: 38:ab:9b:e2:d4:51:52:1b:78:e4:90:62:f1:1b:7e: 7a:d6:7f:9f:99:5e:32:4f:ed:06:3f:9e:ec:ad:ec: 74:2f:15:27:7e:9b:a9:4d:f3:a9:78:39:1a:13:50: e8:65:1f:6e:04:4a:71:6f:11:d7:a7:9a:75:cf:94: 18:3b:3a:96:27:92:da:d8:b5:3b:4c:2a:5f:ba:2f: 23:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:52:92:34:01:2F:F2:BA:BD:43:91:74:17:0F:91:38:BA:D5:1D:45 X509v3 Authority Key Identifier: keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f8:f5:e1:f8:77:c8:29:0a:4c:05:c3:32:63:c8:b5:a0:50: 31:46:94:75:d5:9b:5b:5b:d9:3e:18:4b:87:ab:27:8e:39:98: cb:96:f7:ba:a1:c0:62:78:65:20:ff:46:a8:4f:6a:a6:96:9e: 93:ab:3d:a6:3c:f6:65:08:08:7d:5f:98:46:85:8e:f1:c1:25: 3f:03:44:44:4c:ec:ed:07:50:18:7d:94:ab:34:29:35:39:8d: 10:99:0e:98:31:23:45:e2:28:c2:f5:66:fd:b7:95:04:8b:14: 6f:7e:8c:eb:a0:bb:68:7b:9d:39:71:f9:ba:cf:02:b5:1a:5b: ee:31:03:1e:81:8d:31:93:c7:11:4f:63:17:8c:f2:89:9e:06: 54:17:9f:46:09:ac:91:6d:5a:b5:bd:3b:93:8e:80:f6:2f:d5: a0:bd:b5:39:48:26:be:26:f6:30:52:aa:df:ff:a3:89:21:75: f4:a1:eb:ea:ee:33:bf:7c:43:1c:71:fa:6d:1d:94:ba:63:b9: d1:ee:d9:3f:3b:60:0b:86:ec:bf:1e:ad:ec:6f:c6:ee:f9:62: 21:9c:87:5a:de:9c:05:4b:6b:97:00:95:e7:3e:f7:0e:ba:09: 91:cd:15:ee:38:34:ec:00:91:0d:0f:1d:ca:c6:aa:0e:41:81: 3b:1d:c4:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVwjI+GOlep2y7vOGts2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Y2M4MDJiZTZiNGM0MDEwYzc2Y2U4ZTQ4NGU0ZGU3ZjU1 NDdiMmYwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD EyhjMjUyOTIzNDAxMmZmMmJhYmQ0MzkxNzQxNzBmOTEzOGJhZDUxZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUw69n3t7CqV4klMIzE52HQr5ALh ffxxGHkA604nBuqmzSvRQcuW2fWa5eKOyU7eV7tUoJek9dbUCrJYFz0DRbCVj4kD 7MAMXjTOe1HbzjzYXLTHNVzwe6b1aVUWTgBICp9s+67I2y4VJ7RZBdZQ5qZk3PtD rra4qhywT6F5qH2ulSR9pWTHWFBFyXwbQhoU2HPHfmnCam77KB2Ge3Kli+CymRIg IWzb7XHqCaD5hI8rTEk4q5vi1FFSG3jkkGLxG3561n+fmV4yT+0GP57srex0LxUn fpupTfOpeDkaE1DoZR9uBEpxbxHXp5p1z5QYOzqWJ5La2LU7TCpfui8jLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJSkjQBL/K6vUORdBcPkTi61R1FMB8GA1UdIwQY MBaAFDbMgCvmtMQBDHbOjkhOTef1VHsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MWNhMzUtZTNhMS00NTc0LWJmNGMt OGFiYTg1Y2JkODE4LzEvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81MWNhMzUtZTNhMS00NTc0LWJmNGMtOGFiYTg1Y2JkODE4 LzEvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfj14fh3 yCkKTAXDMmPItaBQMUaUddWbW1vZPhhLh6snjjmYy5b3uqHAYnhlIP9GqE9qppae k6s9pjz2ZQgIfV+YRoWO8cElPwNEREzs7QdQGH2UqzQpNTmNEJkOmDEjReIowvVm /beVBIsUb36M66C7aHudOXH5us8CtRpb7jEDHoGNMZPHEU9jF4zyiZ4GVBefRgms kW1atb07k46A9i/VoL21OUgmvib2MFKq3/+jiSF19KHr6u4zv3xDHHH6bR2UumO5 0e7ZPztgC4bsvx6t7G/G7vliIZyHWt6cBUtrlwCV5z73DroJkc0V7jg07ACRDQ8d ysaqDkGBOx3ErQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:20 2025 by rpki-client