This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json) Hash identifier: huz9vVHfVR+A+On91Y6oC7Z2kzVB7Cvai4BNJW0nee0= Subject key identifier: AE:A3:1F:1C:81:58:50:CB:8B:96:11:94:4C:CA:7A:7F:54:E9:1E:44 Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17 Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417 Certificate serial: 019B35A0844699C0C9FB2F21DC4AA12CBC0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft Manifest number: 0F21 Signing time: Fri 19 Dec 2025 08:01:10 +0000 Manifest this update: Fri 19 Dec 2025 08:01:10 +0000 Manifest next update: Sat 20 Dec 2025 08:01:10 +0000 Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: jlRv+pnz6AnGSVoxMmVqJoahKyzSkSzFMCxfkIq1uC4=) 2: ttg5VkQmE-CT_UTENF07n7R2sRQ.roa (hash: lKSbwZMZC4wBO8BqdScrx370SDVIcLXaY1lpku8KmlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:84:46:99:c0:c9:fb:2f:21:dc:4a:a1:2c:bc:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417 Validity Not Before: Dec 19 08:01:10 2025 GMT Not After : Dec 20 08:01:10 2025 GMT Subject: CN=aea31f1c815850cb8b9611944cca7a7f54e91e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:90:3f:da:81:f4:fd:5f:64:50:ae:f0:bc: f3:f9:9d:53:55:f0:2c:9d:91:42:6c:45:5c:6d:01: ee:38:c9:55:15:f7:82:bf:87:a6:87:e1:da:bd:32: 8e:6a:68:20:9f:e8:aa:9f:08:25:ea:8c:85:74:d7: 38:d3:20:70:e7:61:6f:81:17:ab:64:c3:46:8a:14: 67:2c:ea:85:97:7b:12:16:0a:51:6f:73:9d:14:00: 49:ee:aa:22:8c:25:58:39:be:c5:4a:f6:13:34:8b: 1c:f5:fd:d1:f5:31:5f:5c:c2:96:17:da:cc:f6:18: 9e:a4:10:7d:c7:cc:27:63:f7:0f:3f:8f:c6:0a:96: 22:97:4b:d6:c0:85:f7:40:02:37:7e:33:44:26:ba: ad:df:02:0d:7a:ee:6a:c8:d6:fe:9d:95:8c:0a:64: 29:34:1a:77:f9:ff:cf:26:8c:bf:cf:1b:7f:bd:ae: c7:7e:0a:7b:3b:63:ce:3e:9d:7e:f9:dd:e4:c8:39: 61:94:71:05:e9:08:dc:40:d9:9d:08:ea:85:52:73: 5b:99:53:30:27:5d:b6:6c:44:29:d6:84:20:2b:69: e6:99:57:a6:08:10:85:95:25:77:7e:ad:95:08:a2: 77:94:12:d5:9d:09:bd:19:a9:2f:0d:04:4e:58:7b: 6a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A3:1F:1C:81:58:50:CB:8B:96:11:94:4C:CA:7A:7F:54:E9:1E:44 X509v3 Authority Key Identifier: keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:05:73:fc:7a:22:9b:e2:20:9f:70:ee:a7:16:7e:c6:03:a4: 09:21:00:8b:84:57:80:4b:89:7d:79:4e:44:33:7e:69:b3:0e: e6:e3:44:84:52:38:fd:c9:69:0e:38:24:5f:39:f5:7a:a9:c3: a1:be:bc:ca:bd:7b:28:1c:a3:27:17:ba:df:11:be:45:dc:c4: 41:fe:e5:b2:d0:69:0b:b0:da:0f:6a:47:76:4d:96:71:64:4d: 67:38:31:5a:2f:9a:da:59:b8:e9:ab:a2:eb:1e:59:d8:8a:98: b0:e5:5c:48:01:28:05:cc:f0:44:ba:91:45:75:a8:bc:d3:d0: e4:69:00:c2:0e:ff:c9:4b:c3:e8:54:0e:2f:86:d2:0e:b2:e9: 30:34:8a:59:53:9e:f5:a6:f6:82:a0:6c:bf:2b:0e:d2:6c:71: e9:d8:d0:aa:88:88:2f:33:64:8b:88:4a:2a:70:59:6a:60:96: c8:eb:39:8f:0f:60:e5:d4:dd:19:4f:00:37:5f:f3:79:c9:c1: 51:dd:ad:c3:1b:92:5b:65:83:c4:96:0d:a4:e7:54:48:7f:26: cf:61:9b:e0:44:8f:c8:55:b6:ac:15:a7:47:e7:4c:ce:23:a6: cf:91:77:c1:65:2e:0f:b5:22:f3:9c:66:51:83:c5:a4:f1:6a: 80:66:ae:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oIRGmcDJ+y8h3EqhLLwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MjVmNzU0MDA0ZWRiZTMwYWI4Y2FmZWVmOWY3MTMyY2Iw YzI0MTcwHhcNMjUxMjE5MDgwMTEwWhcNMjUxMjIwMDgwMTEwWjAzMTEwLwYDVQQD EyhhZWEzMWYxYzgxNTg1MGNiOGI5NjExOTQ0Y2NhN2E3ZjU0ZTkxZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru+QP9qB9P1fZFCu8Lzz+Z1TVfAs nZFCbEVcbQHuOMlVFfeCv4emh+HavTKOamggn+iqnwgl6oyFdNc40yBw52FvgRer ZMNGihRnLOqFl3sSFgpRb3OdFABJ7qoijCVYOb7FSvYTNIsc9f3R9TFfXMKWF9rM 9hiepBB9x8wnY/cPP4/GCpYil0vWwIX3QAI3fjNEJrqt3wINeu5qyNb+nZWMCmQp NBp3+f/PJoy/zxt/va7Hfgp7O2POPp1++d3kyDlhlHEF6QjcQNmdCOqFUnNbmVMw J122bEQp1oQgK2nmmVemCBCFlSV3fq2VCKJ3lBLVnQm9GakvDQROWHtqzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6jHxyBWFDLi5YRlEzKen9U6R5EMB8GA1UdIwQY MBaAFDcl91QATtvjCrjK/u+fcTLLDCQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMt NzRhZmMzMDQzYjc4LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMtNzRhZmMzMDQzYjc4 LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgVz/Hoi m+Ign3DupxZ+xgOkCSEAi4RXgEuJfXlORDN+abMO5uNEhFI4/clpDjgkXzn1eqnD ob68yr17KByjJxe63xG+RdzEQf7lstBpC7DaD2pHdk2WcWRNZzgxWi+a2lm46aui 6x5Z2IqYsOVcSAEoBczwRLqRRXWovNPQ5GkAwg7/yUvD6FQOL4bSDrLpMDSKWVOe 9ab2gqBsvysO0mxx6djQqoiILzNki4hKKnBZamCWyOs5jw9g5dTdGU8AN1/zecnB Ud2twxuSW2WDxJYNpOdUSH8mz2Gb4ESPyFW2rBWnR+dMziOmz5F3wWUuD7Ui85xm UYPFpPFqgGauSQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:33:30 2025 by rpki-client