This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft File: ny83TJpzj63o-FDKq11507kARYQ.mft (raw, json) Hash identifier: Wp1hMEKaGFNgxskBneQkTQGC11o3S2yDcXqSXiCsBLs= Subject key identifier: 6A:1F:5A:E3:57:2D:6B:7C:C3:F2:34:12:8D:1B:2B:CE:B3:4E:49:01 Authority key identifier: 9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84 Certificate issuer: /CN=9f2f374c9a738fade8f850caab5d79d3b9004584 Certificate serial: 019B32D7932897247A01D5FC003BFAAAAF63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 19:02:27 +0000 Manifest this update: Thu 18 Dec 2025 19:02:27 +0000 Manifest next update: Fri 19 Dec 2025 19:02:27 +0000 Files and hashes: 1: ny83TJpzj63o-FDKq11507kARYQ.crl (hash: 5wBuC+ZIEmFSgInCmWu+guiB3AWgVX/xyEx+eIL4nGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:93:28:97:24:7a:01:d5:fc:00:3b:fa:aa:af:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f2f374c9a738fade8f850caab5d79d3b9004584 Validity Not Before: Dec 18 19:02:27 2025 GMT Not After : Dec 19 19:02:27 2025 GMT Subject: CN=6a1f5ae3572d6b7cc3f234128d1b2bceb34e4901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:68:8b:c8:9d:45:81:08:3f:48:41:ce:7a: bd:8b:dd:31:b5:b0:3f:ac:4a:78:88:0b:95:4e:97: b1:f9:3a:91:77:4d:50:39:40:d5:a2:36:39:53:b7: 7e:20:1f:01:e9:3f:4a:69:0a:2c:7d:54:a3:df:c0: 8d:da:32:e3:34:80:c2:93:cd:a0:c7:65:cf:50:c1: 77:12:2c:10:c1:4d:1d:9f:51:c6:24:e9:f7:98:ac: 50:37:4e:13:b0:33:7c:7a:ba:27:1e:fa:d2:c3:3d: ac:85:59:41:2c:6b:06:33:78:b8:54:25:db:a4:be: 1a:12:c1:68:32:1a:13:ec:32:fe:bc:0d:c9:c7:bd: a5:76:9f:8b:d8:84:e6:79:14:b9:0f:50:81:63:d8: 5b:69:44:51:7c:5a:f9:5e:23:3c:3c:6e:b6:9b:d8: 97:7f:e8:26:fd:9a:49:55:21:07:44:fb:92:c7:21: 5b:51:3e:c1:25:89:ac:cd:b6:57:fc:e7:36:e9:a3: d0:61:4a:e5:d3:11:42:e9:8e:e0:6b:58:4e:15:b6: cc:6b:07:e6:ab:95:d6:f0:92:fc:a1:f7:0b:ad:db: 1e:85:fa:eb:c6:8a:6c:24:31:54:18:82:7c:a3:ed: 1d:f0:fa:31:ac:b3:f6:21:72:71:97:34:f5:4f:5a: 4c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1F:5A:E3:57:2D:6B:7C:C3:F2:34:12:8D:1B:2B:CE:B3:4E:49:01 X509v3 Authority Key Identifier: keyid:9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c6:9a:27:8c:23:30:9f:54:f5:b2:05:3e:c0:f0:5e:fb:2e: 5d:ad:bd:0d:d8:6b:f9:a0:29:f9:4c:00:5d:08:cc:42:0c:2d: ed:4c:d7:8c:ff:9a:8f:cd:3b:80:18:96:44:ae:92:80:e6:a4: bd:24:4c:54:26:d3:cb:d0:9b:b2:06:be:df:21:7f:9c:7b:39: 90:11:dc:f3:dd:79:72:f6:1d:0b:17:a3:0c:88:90:74:59:32: 88:c8:5c:d9:c5:56:c4:d1:fe:30:62:b6:10:2e:88:6a:45:15: 19:89:bc:8f:eb:63:ef:c0:12:85:16:7f:fd:3c:bc:f1:2a:61: 9f:99:e6:bf:9b:f5:ab:6b:b4:3e:d8:49:b4:3f:8f:06:12:0b: 6f:8b:58:f3:ed:14:37:d2:f2:1f:a1:c4:21:b6:c2:34:ce:84: ea:4b:a1:99:d5:12:28:61:cb:73:56:09:ac:a7:ae:89:8a:94: 00:d2:e4:fb:2b:bf:6b:60:53:5b:39:d4:cb:94:2d:88:48:05: b7:e9:d6:0d:41:a9:24:73:b5:9c:9a:f3:c5:99:99:0e:b6:0b: 8e:3a:40:c4:07:40:01:b1:07:ee:51:d5:a2:de:66:a9:0f:4e: 6e:e5:7e:f7:9a:9c:77:f7:f1:c4:c8:1b:dc:99:50:e5:28:11: 6f:f9:82:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy15MolyR6AdX8ADv6qq9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMmYzNzRjOWE3MzhmYWRlOGY4NTBjYWFiNWQ3OWQzYjkw MDQ1ODQwHhcNMjUxMjE4MTkwMjI3WhcNMjUxMjE5MTkwMjI3WjAzMTEwLwYDVQQD Eyg2YTFmNWFlMzU3MmQ2YjdjYzNmMjM0MTI4ZDFiMmJjZWIzNGU0OTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr5oi8idRYEIP0hBznq9i90xtbA/ rEp4iAuVTpex+TqRd01QOUDVojY5U7d+IB8B6T9KaQosfVSj38CN2jLjNIDCk82g x2XPUMF3EiwQwU0dn1HGJOn3mKxQN04TsDN8eronHvrSwz2shVlBLGsGM3i4VCXb pL4aEsFoMhoT7DL+vA3Jx72ldp+L2ITmeRS5D1CBY9hbaURRfFr5XiM8PG62m9iX f+gm/ZpJVSEHRPuSxyFbUT7BJYmszbZX/Oc26aPQYUrl0xFC6Y7ga1hOFbbMawfm q5XW8JL8ofcLrdsehfrrxopsJDFUGIJ8o+0d8PoxrLP2IXJxlzT1T1pMTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGofWuNXLWt8w/I0Eo0bK86zTkkBMB8GA1UdIwQY MBaAFJ8vN0yac4+t6PhQyqtdedO5AEWEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnk4M1RKcHpqNjNvLUZES3ExMTUwN2tBUllRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MzRlNzYtNWM1Zi00NGM0LWI4YTQt NTI0ZTkzMGU1ZmQxLzEvbnk4M1RKcHpqNjNvLUZES3ExMTUwN2tBUllRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82MzRlNzYtNWM1Zi00NGM0LWI4YTQtNTI0ZTkzMGU1ZmQx LzEvbnk4M1RKcHpqNjNvLUZES3ExMTUwN2tBUllRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMaaJ4wj MJ9U9bIFPsDwXvsuXa29Ddhr+aAp+UwAXQjMQgwt7UzXjP+aj807gBiWRK6SgOak vSRMVCbTy9Cbsga+3yF/nHs5kBHc8915cvYdCxejDIiQdFkyiMhc2cVWxNH+MGK2 EC6IakUVGYm8j+tj78AShRZ//Ty88Sphn5nmv5v1q2u0PthJtD+PBhILb4tY8+0U N9LyH6HEIbbCNM6E6kuhmdUSKGHLc1YJrKeuiYqUANLk+yu/a2BTWznUy5QtiEgF t+nWDUGpJHO1nJrzxZmZDrYLjjpAxAdAAbEH7lHVot5mqQ9ObuV+95qcd/fxxMgb 3JlQ5SgRb/mC+A== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:48 2025 by rpki-client