This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json) Hash identifier: I47mW/vseecMaidP+PIpLxfEwQ/3QZNHucQIJnfqoog= Subject key identifier: DE:76:44:23:4F:80:73:C1:A9:33:17:62:CE:6F:C6:1B:9E:CC:7D:AF Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e Certificate serial: 019B5FAF529B3220C63E7354D3FE1523FCA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft Manifest number: 0AA0 Signing time: Sat 27 Dec 2025 12:01:23 +0000 Manifest this update: Sat 27 Dec 2025 12:01:23 +0000 Manifest next update: Sun 28 Dec 2025 12:01:23 +0000 Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: PwXbkP80NgzGT4LoXovGpano/MKB1XGyCe9Xy8KI1q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:af:52:9b:32:20:c6:3e:73:54:d3:fe:15:23:fc:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e Validity Not Before: Dec 27 12:01:23 2025 GMT Not After : Dec 28 12:01:23 2025 GMT Subject: CN=de7644234f8073c1a9331762ce6fc61b9ecc7daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:55:d4:97:58:c4:40:d8:f9:15:43:7a:c8: d1:71:49:90:cf:73:2c:36:30:b1:bf:9c:ac:95:27: 88:e3:7e:3f:c3:26:37:08:3e:95:78:18:b9:55:51: 9f:07:bc:2c:31:6f:b4:42:44:47:69:f8:84:f6:a6: b5:f1:cb:d1:5b:39:4a:7a:ad:25:6b:9b:e0:37:e7: 18:70:11:e6:00:02:7d:38:8b:67:b6:3a:c3:20:85: 66:f6:b4:95:d3:e0:17:0e:43:5c:1b:d2:3b:03:54: b2:0e:ea:58:c3:11:90:92:55:5a:b6:e9:02:89:4d: b7:ae:50:46:77:74:1d:16:6a:6b:2b:29:bc:5f:ce: 07:9d:ff:a8:88:09:ca:48:8b:a4:f4:84:03:8d:15: 61:ec:a0:7e:a9:46:52:94:00:65:1b:61:d1:83:4e: 76:47:dd:39:80:ff:38:3f:4d:21:e0:5a:a4:a3:4a: f6:1e:2f:3b:8c:86:fd:53:f5:db:4b:54:8b:9e:f2: 05:b8:80:50:b1:93:48:98:09:af:10:a5:fe:f0:e2: 6e:89:1a:cf:47:52:04:5b:ed:ed:7d:96:3e:4b:d5: e8:fb:0a:34:5a:29:e7:93:34:86:c6:39:bc:91:50: 97:f8:6e:2c:c6:50:6e:29:e2:30:b4:31:79:86:57: 9f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:76:44:23:4F:80:73:C1:A9:33:17:62:CE:6F:C6:1B:9E:CC:7D:AF X509v3 Authority Key Identifier: keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:61:bd:eb:59:21:65:5a:77:bc:ec:f8:83:27:23:e3:14:5f: 44:de:d4:7e:b9:2b:b2:0e:da:ab:e0:82:7c:b7:24:dc:56:9b: 54:cb:2b:50:fa:42:d7:11:8f:42:bf:5f:82:ed:0b:9d:e4:c2: 58:88:7d:71:8a:25:01:90:fb:34:f6:40:d0:c8:52:a1:f9:c8: 72:52:b7:a8:ec:b7:8a:35:01:c3:e7:e7:92:e4:d7:f1:22:71: ad:bb:51:53:bd:74:a6:42:43:80:f8:dc:90:28:00:7d:8a:7d: 60:4f:5b:bf:68:d6:fa:19:f8:16:94:a1:47:7d:8b:38:63:5f: dd:e6:76:3d:c6:55:16:45:00:f4:a4:f4:bd:d2:38:69:3d:fe: c0:6e:ef:9e:64:ab:13:fc:ed:c8:fb:f7:89:f1:e1:93:34:ac: 8e:40:50:87:dd:c2:6e:d2:36:fd:3f:33:56:24:c0:c1:03:a1: 38:fb:05:31:a6:4a:43:44:d6:80:ff:b6:77:e4:2b:86:ea:a2: 06:48:7b:68:21:0d:bf:87:2c:18:75:69:88:8c:8f:23:69:5a: 67:f1:42:b2:42:a3:96:02:51:1b:d4:f3:6c:50:df:c9:a9:2a: d3:6d:4c:1d:80:67:05:4e:1a:b2:a0:00:9c:cc:8b:e0:db:f2: 22:59:7f:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfr1KbMiDGPnNU0/4VI/yjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MmFmNjU3YzA5ZTE2MmJlNmU2NGFiZTA0ZDIxYzVlNzdh ZGUyMGUwHhcNMjUxMjI3MTIwMTIzWhcNMjUxMjI4MTIwMTIzWjAzMTEwLwYDVQQD EyhkZTc2NDQyMzRmODA3M2MxYTkzMzE3NjJjZTZmYzYxYjllY2M3ZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DZV1JdYxEDY+RVDesjRcUmQz3Ms NjCxv5yslSeI434/wyY3CD6VeBi5VVGfB7wsMW+0QkRHafiE9qa18cvRWzlKeq0l a5vgN+cYcBHmAAJ9OItntjrDIIVm9rSV0+AXDkNcG9I7A1SyDupYwxGQklVatukC iU23rlBGd3QdFmprKym8X84Hnf+oiAnKSIuk9IQDjRVh7KB+qUZSlABlG2HRg052 R905gP84P00h4Fqko0r2Hi87jIb9U/XbS1SLnvIFuIBQsZNImAmvEKX+8OJuiRrP R1IEW+3tfZY+S9Xo+wo0WinnkzSGxjm8kVCX+G4sxlBuKeIwtDF5hlef+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN52RCNPgHPBqTMXYs5vxhuezH2vMB8GA1UdIwQY MBaAFDcq9lfAnhYr5uZKvgTSHF53reIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlyMlY4Q2VGaXZtNWtxLUJOSWNYbmV0NGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yMDA0ODktMTUyZi00NDI0LWI4NjMt MWM2Zjc3N2Q0MzQ5LzEvTnlyMlY4Q2VGaXZtNWtxLUJOSWNYbmV0NGc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yMDA0ODktMTUyZi00NDI0LWI4NjMtMWM2Zjc3N2Q0MzQ5 LzEvTnlyMlY4Q2VGaXZtNWtxLUJOSWNYbmV0NGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzmG961kh ZVp3vOz4gycj4xRfRN7Ufrkrsg7aq+CCfLck3FabVMsrUPpC1xGPQr9fgu0LneTC WIh9cYolAZD7NPZA0MhSofnIclK3qOy3ijUBw+fnkuTX8SJxrbtRU710pkJDgPjc kCgAfYp9YE9bv2jW+hn4FpShR32LOGNf3eZ2PcZVFkUA9KT0vdI4aT3+wG7vnmSr E/ztyPv3ifHhkzSsjkBQh93CbtI2/T8zViTAwQOhOPsFMaZKQ0TWgP+2d+Qrhuqi Bkh7aCENv4csGHVpiIyPI2laZ/FCskKjlgJRG9TzbFDfyakq021MHYBnBU4asqAA nMyL4NvyIll/DQ== -----END CERTIFICATE-----Generated at Sat Dec 27 17:50:07 2025 by rpki-client