This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft File: NyU16sFYwCZyeiXh6-Rtilyc-78.mft (raw, json) Hash identifier: y6szWFA3FAfYY8txU6Y4BOiEXs4MDlPmj0KkYOUCguM= Subject key identifier: 17:EB:C4:00:5A:57:92:E2:F3:60:AA:B0:70:04:56:FF:4D:2D:BB:AE Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF Certificate issuer: /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf Certificate serial: 019B51BC6A06709516B5C0AC426F44307A3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 19:01:00 +0000 Manifest this update: Wed 24 Dec 2025 19:01:00 +0000 Manifest next update: Thu 25 Dec 2025 19:01:00 +0000 Files and hashes: 1: Ex_2ickmNwSl468A43nBNWlR1U4.roa (hash: 2F6N+mLC+ZFSEAJYbcx9IRB+VD26lz+G1r697PEXjx4=) 2: NyU16sFYwCZyeiXh6-Rtilyc-78.crl (hash: bQwfHA95NWI9u34sgP0wk1UwTA41cu5HYMCV6M42je8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:6a:06:70:95:16:b5:c0:ac:42:6f:44:30:7a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf Validity Not Before: Dec 24 19:01:00 2025 GMT Not After : Dec 25 19:01:00 2025 GMT Subject: CN=17ebc4005a5792e2f360aab0700456ff4d2dbbae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:71:25:f5:58:42:77:da:0e:4e:c1:fa:4f: 01:db:58:d6:37:0d:d8:0f:12:82:d6:cf:1b:31:79: 04:d3:85:1a:aa:4a:f3:45:62:1c:65:30:d4:46:d7: 12:b6:2b:49:dc:7e:37:af:55:8e:ab:07:f2:d9:48: aa:8e:1b:38:bb:a4:e8:e9:6f:b5:f2:95:b9:8a:c9: 6c:d2:09:e6:ec:32:98:5e:fd:b4:ca:56:4a:48:30: 61:ad:2d:2f:f2:3c:f2:b5:92:8a:ec:49:f5:4b:11: 3d:5d:c9:6d:31:2c:77:ce:57:ee:a8:49:41:75:e4: f8:55:fb:4d:d5:be:6b:5d:85:4c:0b:5a:c1:0c:17: e6:6f:60:ce:29:96:db:f2:26:af:eb:da:e6:81:fc: ee:ca:a7:a4:5b:8d:14:c7:bb:75:29:db:5d:ab:a9: 96:f3:2d:f4:fe:a2:e3:4e:42:29:b7:22:70:f9:cf: 42:34:6d:81:3b:95:69:9e:f7:e0:6f:94:b6:4b:ae: e8:9b:ef:d4:24:bb:38:09:54:cf:23:92:1e:88:0d: 14:43:de:c6:3b:95:6f:c2:c3:41:b0:62:83:cd:64: 39:9c:d0:bf:76:02:94:be:8d:4c:8d:0a:cf:c1:b1: cc:c9:c6:a4:81:d7:83:18:1f:cc:60:59:cb:94:d0: 50:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EB:C4:00:5A:57:92:E2:F3:60:AA:B0:70:04:56:FF:4D:2D:BB:AE X509v3 Authority Key Identifier: keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ce:93:38:2d:ef:bb:1f:3a:42:49:c0:45:cf:8e:d7:87:4f: 25:5b:80:45:c0:0c:d4:b1:92:f1:91:cd:b4:f0:b3:63:41:17: 03:ba:76:23:d0:d6:95:d8:92:a4:df:34:50:3c:9d:23:b5:4b: 29:06:26:4e:3f:fa:16:90:bb:6f:43:6b:3b:da:dc:f4:0d:00: 3b:29:1b:20:0c:da:10:7a:58:20:27:66:0b:5e:d5:8d:82:a7: ba:6b:67:8d:16:7c:45:f5:a9:f2:8d:7b:35:fd:b7:af:13:d3: df:12:8b:0d:41:c1:fd:3e:f7:05:6b:c9:25:82:fb:5d:b0:d4: 2b:5b:69:3f:84:69:62:1b:a0:2d:f9:f0:a3:0a:09:b5:98:e8: fe:2d:e7:e1:d7:53:07:f2:63:81:f9:63:11:13:f6:14:7a:98: 94:b8:02:f9:cd:8d:c4:a7:04:f4:92:68:5c:07:ef:89:a2:a0: 5e:8e:20:1f:01:1d:fa:3a:fe:18:00:98:92:f4:da:c6:a7:cc: 32:80:22:63:28:3c:d5:e8:0c:22:fd:97:61:60:5d:e4:67:f0: 5d:43:e4:06:39:7d:8e:47:80:65:92:9a:89:6c:f5:ca:87:c6: 98:70:ce:f3:0b:df:4c:03:bb:0f:92:01:87:6e:4b:93:0c:b9: 93:e6:f8:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvGoGcJUWtcCsQm9EMHo6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MjUzNWVhYzE1OGMwMjY3MjdhMjVlMWViZTQ2ZDhhNWM5 Y2ZiYmYwHhcNMjUxMjI0MTkwMTAwWhcNMjUxMjI1MTkwMTAwWjAzMTEwLwYDVQQD EygxN2ViYzQwMDVhNTc5MmUyZjM2MGFhYjA3MDA0NTZmZjRkMmRiYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdtxJfVYQnfaDk7B+k8B21jWNw3Y DxKC1s8bMXkE04UaqkrzRWIcZTDURtcStitJ3H43r1WOqwfy2Uiqjhs4u6To6W+1 8pW5isls0gnm7DKYXv20ylZKSDBhrS0v8jzytZKK7En1SxE9XcltMSx3zlfuqElB deT4VftN1b5rXYVMC1rBDBfmb2DOKZbb8iav69rmgfzuyqekW40Ux7t1Kdtdq6mW 8y30/qLjTkIptyJw+c9CNG2BO5Vpnvfgb5S2S67om+/UJLs4CVTPI5IeiA0UQ97G O5VvwsNBsGKDzWQ5nNC/dgKUvo1MjQrPwbHMycakgdeDGB/MYFnLlNBQYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfrxABaV5Li82CqsHAEVv9NLbuuMB8GA1UdIwQY MBaAFDclNerBWMAmcnol4evkbYpcnPu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlVMTZzRll3Q1p5ZWlYaDYtUnRpbHljLTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81YTI5MTktNmQ1Zi00NzViLWFiMGEt ZGM2MzE1ZTdlZDhiLzEvTnlVMTZzRll3Q1p5ZWlYaDYtUnRpbHljLTc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81YTI5MTktNmQ1Zi00NzViLWFiMGEtZGM2MzE1ZTdlZDhi LzEvTnlVMTZzRll3Q1p5ZWlYaDYtUnRpbHljLTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj86TOC3v ux86QknARc+O14dPJVuARcAM1LGS8ZHNtPCzY0EXA7p2I9DWldiSpN80UDydI7VL KQYmTj/6FpC7b0NrO9rc9A0AOykbIAzaEHpYICdmC17VjYKnumtnjRZ8RfWp8o17 Nf23rxPT3xKLDUHB/T73BWvJJYL7XbDUK1tpP4RpYhugLfnwowoJtZjo/i3n4ddT B/JjgfljERP2FHqYlLgC+c2NxKcE9JJoXAfviaKgXo4gHwEd+jr+GACYkvTaxqfM MoAiYyg81egMIv2XYWBd5GfwXUPkBjl9jkeAZZKaiWz1yofGmHDO8wvfTAO7D5IB h25Lkwy5k+b40g== -----END CERTIFICATE-----Generated at Thu Dec 25 03:23:46 2025 by rpki-client