This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json) Hash identifier: TQ/o20V6b3QDtWqUHXEMm4biOqdcSN8hDLNaF/4YSfs= Subject key identifier: 3D:F5:7D:9E:3E:9C:F6:9C:7D:7B:CB:C3:D6:E5:9F:A9:85:19:95:D5 Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9 Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9 Certificate serial: 019B3BD9AB5C16426434FBB4D27A2E54C0FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 13:01:19 +0000 Manifest this update: Sat 20 Dec 2025 13:01:19 +0000 Manifest next update: Sun 21 Dec 2025 13:01:19 +0000 Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=) 2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: NVYzyKytNYZSz/8aT+PtmHd1Hw/m+C9O45awu4HLPPM=) 3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:ab:5c:16:42:64:34:fb:b4:d2:7a:2e:54:c0:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9 Validity Not Before: Dec 20 13:01:19 2025 GMT Not After : Dec 21 13:01:19 2025 GMT Subject: CN=3df57d9e3e9cf69c7d7bcbc3d6e59fa9851995d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:06:e1:0e:14:18:7c:fc:99:d4:b9:34:d5: ea:28:c6:81:b0:8a:7d:d2:79:e3:57:5c:8b:3c:56: ce:02:00:02:04:be:a4:f6:db:2e:cd:07:7c:1b:01: e7:e0:e2:a1:ab:19:5a:9a:06:ee:cb:1e:03:cd:fe: f2:ce:d8:b7:d3:0c:75:8d:db:87:0f:5d:ed:16:22: 65:50:13:07:f3:07:13:f2:c4:56:5a:c5:40:43:8e: 2f:69:05:13:73:50:8e:77:ad:2c:f1:5e:cd:97:77: 9c:41:66:a9:0a:00:ee:b6:63:3c:5f:7e:6f:93:c4: 79:23:cf:b5:5d:80:fe:87:5a:64:11:ee:90:58:9f: 18:1a:e2:a1:a3:97:0f:88:12:7b:24:3e:9d:c9:9f: a7:e4:96:c3:ab:7a:2d:f1:e3:a6:ea:fa:1f:ef:1b: 48:9a:a7:21:a5:94:ce:e8:69:ff:20:e6:6d:31:a4: 67:3f:15:9a:5a:49:81:43:8f:6d:28:a8:ef:e8:ec: 17:c4:49:5e:b6:98:54:ae:87:d9:eb:f7:2a:88:81: 01:c4:9b:4b:b3:7f:59:52:12:4a:60:18:58:de:85: d6:e8:85:fc:82:51:02:62:9d:42:61:27:4b:ea:eb: 02:5d:85:32:f3:9b:ed:50:82:f1:f4:f6:f3:00:ce: eb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F5:7D:9E:3E:9C:F6:9C:7D:7B:CB:C3:D6:E5:9F:A9:85:19:95:D5 X509v3 Authority Key Identifier: keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:66:b0:27:ff:46:67:e5:d5:5c:64:c2:9e:c6:5a:6e:4a:1b: 05:b0:63:e0:de:e2:c4:f9:ae:8a:44:b9:ba:25:ff:3a:62:fa: 75:52:ed:74:c4:41:e6:23:9c:8e:01:ee:4f:35:78:b4:8f:f1: 34:a4:af:db:1a:25:33:2b:ff:e6:ff:76:af:1f:2f:b1:e3:8f: 59:a4:a8:32:81:9c:e4:1f:65:10:dd:cf:49:e3:57:79:b6:96: 8e:e9:8b:fc:77:58:26:c1:02:a9:66:44:ee:bc:71:d0:c7:04: e2:ef:b5:e3:34:37:0b:06:df:0b:e0:56:7b:83:40:e5:60:a5: 38:15:b0:5a:04:38:09:1b:70:9f:71:f7:34:db:02:7c:ae:aa: 1a:ab:70:78:03:b7:fa:71:79:73:aa:a1:5c:f6:7b:bd:3a:96: 74:43:a2:e2:e0:1b:27:8c:54:19:ea:56:30:48:92:d1:3f:a3: 55:26:fc:f4:43:98:07:ac:b3:e5:91:70:49:e4:dc:b0:fc:2d: 7f:78:cc:a7:79:66:da:7f:47:ab:8e:01:a6:3c:78:6f:5f:63: bb:7c:69:9f:a7:e3:92:93:e3:3e:f5:71:e6:fc:e3:80:9d:d6: 6c:dc:b6:1c:39:36:ec:01:e5:5a:72:cc:3e:9b:a7:3c:6d:9a: 8e:6e:17:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72atcFkJkNPu00nouVMD7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYmNiZmViOGZhODk3Mzc0NzE4YTkxMDJhNGE3MDY3MWUy YWFiZjkwHhcNMjUxMjIwMTMwMTE5WhcNMjUxMjIxMTMwMTE5WjAzMTEwLwYDVQQD EygzZGY1N2Q5ZTNlOWNmNjljN2Q3YmNiYzNkNmU1OWZhOTg1MTk5NWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp54G4Q4UGHz8mdS5NNXqKMaBsIp9 0nnjV1yLPFbOAgACBL6k9tsuzQd8GwHn4OKhqxlamgbuyx4Dzf7yzti30wx1jduH D13tFiJlUBMH8wcT8sRWWsVAQ44vaQUTc1COd60s8V7Nl3ecQWapCgDutmM8X35v k8R5I8+1XYD+h1pkEe6QWJ8YGuKho5cPiBJ7JD6dyZ+n5JbDq3ot8eOm6vof7xtI mqchpZTO6Gn/IOZtMaRnPxWaWkmBQ49tKKjv6OwXxEletphUrofZ6/cqiIEBxJtL s39ZUhJKYBhY3oXW6IX8glECYp1CYSdL6usCXYUy85vtUILx9PbzAM7rBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD31fZ4+nPacfXvLw9bln6mFGZXVMB8GA1UdIwQY MBaAFJ68v+uPqJc3RxipECpKcGceKqv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzkt OWNkMGNhZTA2MjkyLzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzktOWNkMGNhZTA2Mjky LzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2awJ/9G Z+XVXGTCnsZabkobBbBj4N7ixPmuikS5uiX/OmL6dVLtdMRB5iOcjgHuTzV4tI/x NKSv2xolMyv/5v92rx8vseOPWaSoMoGc5B9lEN3PSeNXebaWjumL/HdYJsECqWZE 7rxx0McE4u+14zQ3CwbfC+BWe4NA5WClOBWwWgQ4CRtwn3H3NNsCfK6qGqtweAO3 +nF5c6qhXPZ7vTqWdEOi4uAbJ4xUGepWMEiS0T+jVSb89EOYB6yz5ZFwSeTcsPwt f3jMp3lm2n9Hq44Bpjx4b19ju3xpn6fjkpPjPvVx5vzjgJ3WbNy2HDk27AHlWnLM PpunPG2ajm4XHw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:06:35 2025 by rpki-client