This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft File: nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft (raw, json) Hash identifier: 1l1ImCgo/gP4k4nlNh079RWRuIwp3qQPFRuGJMpJyZs= Subject key identifier: 31:77:6D:16:5B:A7:33:67:18:6D:07:6D:9D:8E:B2:D7:F5:CE:B2:1C Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10 Certificate issuer: /CN=9f24064f95331cf1f315dc50de4db05ff95aa410 Certificate serial: 019AF208FB43B7937EC1B50D1D8BA188EBC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft Manifest number: 1087 Signing time: Sat 06 Dec 2025 05:01:05 +0000 Manifest this update: Sat 06 Dec 2025 05:01:05 +0000 Manifest next update: Sun 07 Dec 2025 05:01:05 +0000 Files and hashes: 1: nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl (hash: 6BvNzuKpM4+vuBwRDLXeaWL2uhco8bdjQL0qdzLxBUs=) 2: xk36of5GcRMNZGUJt-_5r_QctTo.roa (hash: BbMVXEvQwTUOBV0n4W+iUw7Na6Uh7I6Smkrm6hqGQWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fb:43:b7:93:7e:c1:b5:0d:1d:8b:a1:88:eb:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410 Validity Not Before: Dec 6 05:01:05 2025 GMT Not After : Dec 7 05:01:05 2025 GMT Subject: CN=31776d165ba73367186d076d9d8eb2d7f5ceb21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5f:3a:fd:72:13:6b:37:62:80:6e:bf:13:1b: 84:4a:ed:ba:69:e1:44:cf:9d:a4:b9:e3:5e:90:9a: 1f:e8:3f:5b:43:ea:e1:50:b6:79:0f:ea:93:dd:e3: 73:5d:8b:dc:d4:a3:c3:ca:19:ad:c6:a9:00:3f:97: 59:71:6b:96:ad:50:7d:24:2c:a9:2e:3a:dd:27:bf: cc:6d:80:3d:40:f0:01:2f:48:15:bc:78:3d:b1:69: 71:ba:97:c7:c3:5d:88:55:24:d3:56:b6:46:48:42: 93:ff:c3:46:d9:7c:d6:71:b1:bf:fb:9b:24:c7:c4: d8:b0:c8:40:3e:7a:0c:7a:57:25:d7:7b:6e:bf:c0: 08:32:91:ec:f2:9f:16:cc:8a:57:56:4b:65:60:65: 24:33:f2:e2:61:51:fe:03:c7:26:e9:a7:04:f2:f3: 4b:47:ea:f1:5f:71:ea:05:a7:53:2a:48:ff:20:8c: 12:12:4d:ec:9e:b0:ff:bc:0d:f4:2b:5b:3e:85:d0: 4e:fe:77:a2:15:c0:34:df:22:73:36:0e:e7:02:1c: 94:52:bf:ae:66:76:a6:12:54:af:bd:67:44:fa:af: 85:08:de:01:08:f6:60:c7:ec:4f:0a:05:77:07:97: 9d:a3:91:66:b6:d7:ee:61:44:df:a3:19:4d:63:d5: 09:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:77:6D:16:5B:A7:33:67:18:6D:07:6D:9D:8E:B2:D7:F5:CE:B2:1C X509v3 Authority Key Identifier: keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:31:92:07:02:40:97:22:c3:20:4b:89:67:17:13:77:dc:50: 9c:10:2b:1b:d0:03:9d:40:98:23:07:e8:1d:30:2f:fa:bb:d8: 11:7b:8b:f2:5f:4d:6f:b5:b9:4c:eb:b7:6a:c7:36:19:a9:ca: db:de:c3:99:d3:d0:65:d5:e1:0d:b6:af:9b:3b:d0:b5:c9:a8: 21:b7:17:bd:bc:3a:16:c3:94:a5:e8:af:ef:0b:8d:4b:bd:df: 8b:38:49:d3:d6:8a:c1:b7:a2:d7:f8:30:2c:40:f9:62:2f:c7: 64:4e:01:af:d8:f4:26:61:67:24:95:a0:8f:9b:90:c0:58:74: de:8d:5b:4f:df:51:82:20:72:58:79:f1:24:40:03:e1:af:dd: 27:20:0f:2c:07:66:aa:ea:8f:de:40:c3:72:06:b2:cb:d3:06: 96:06:7e:f1:77:94:11:df:b7:03:12:b6:99:04:7c:a6:58:c6: 38:81:c8:37:04:df:bb:da:73:99:46:0e:b0:e7:3d:52:3d:47: 9f:4e:4b:9a:43:97:d0:86:43:b7:be:19:e7:8c:45:f9:92:4a: d9:33:e7:5e:b4:4f:80:03:27:0f:dd:b8:6b:f3:54:e9:32:c8: 74:e5:2a:b3:86:d5:ff:d1:7b:9e:5c:25:83:e5:38:09:bb:9b: 23:87:66:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPtDt5N+wbUNHYuhiOvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjQwNjRmOTUzMzFjZjFmMzE1ZGM1MGRlNGRiMDVmZjk1 YWE0MTAwHhcNMjUxMjA2MDUwMTA1WhcNMjUxMjA3MDUwMTA1WjAzMTEwLwYDVQQD EygzMTc3NmQxNjViYTczMzY3MTg2ZDA3NmQ5ZDhlYjJkN2Y1Y2ViMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl86/XITazdigG6/ExuESu26aeFE z52kueNekJof6D9bQ+rhULZ5D+qT3eNzXYvc1KPDyhmtxqkAP5dZcWuWrVB9JCyp LjrdJ7/MbYA9QPABL0gVvHg9sWlxupfHw12IVSTTVrZGSEKT/8NG2XzWcbG/+5sk x8TYsMhAPnoMelcl13tuv8AIMpHs8p8WzIpXVktlYGUkM/LiYVH+A8cm6acE8vNL R+rxX3HqBadTKkj/IIwSEk3snrD/vA30K1s+hdBO/neiFcA03yJzNg7nAhyUUr+u ZnamElSvvWdE+q+FCN4BCPZgx+xPCgV3B5edo5FmttfuYUTfoxlNY9UJ2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF3bRZbpzNnGG0HbZ2Ostf1zrIcMB8GA1UdIwQY MBaAFJ8kBk+VMxzx8xXcUN5NsF/5WqQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnlRR1Q1VXpIUEh6RmR4UTNrMndYX2xhcEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MDA3OWItZmNhYS00NmQ5LTgxNjEt NjZhNmM4MGQyNmE1LzEvbnlRR1Q1VXpIUEh6RmR4UTNrMndYX2xhcEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80MDA3OWItZmNhYS00NmQ5LTgxNjEtNjZhNmM4MGQyNmE1 LzEvbnlRR1Q1VXpIUEh6RmR4UTNrMndYX2xhcEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTGSBwJA lyLDIEuJZxcTd9xQnBArG9ADnUCYIwfoHTAv+rvYEXuL8l9Nb7W5TOu3asc2GanK 297DmdPQZdXhDbavmzvQtcmoIbcXvbw6FsOUpeiv7wuNS73fizhJ09aKwbei1/gw LED5Yi/HZE4Br9j0JmFnJJWgj5uQwFh03o1bT99RgiByWHnxJEAD4a/dJyAPLAdm quqP3kDDcgayy9MGlgZ+8XeUEd+3AxK2mQR8pljGOIHINwTfu9pzmUYOsOc9Uj1H n05LmkOX0IZDt74Z54xF+ZJK2TPnXrRPgAMnD924a/NU6TLIdOUqs4bV/9F7nlwl g+U4CbubI4dm1g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:52:31 2025 by rpki-client