This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json) Hash identifier: /3va+Vk/RdHFtyLOye6uiezlBYevsyjKlJC/sW0LMU0= Subject key identifier: 3A:80:81:3F:1A:82:06:CF:0B:3A:51:B9:AF:5F:F9:BF:D5:D5:23:D5 Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08 Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808 Certificate serial: 019B4C5F4C39E38DB35539C4AD49176092F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft Manifest number: 1011 Signing time: Tue 23 Dec 2025 18:01:12 +0000 Manifest this update: Tue 23 Dec 2025 18:01:12 +0000 Manifest next update: Wed 24 Dec 2025 18:01:12 +0000 Files and hashes: 1: Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa (hash: WbvR7lgO/S3QOwy/R14Yl51OkTUajPVQcMXibufV2RY=) 2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: sTsUXT2QTP6G4tvOCvISYBvAOK/pUXt0i9qWsNbnKfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:4c:39:e3:8d:b3:55:39:c4:ad:49:17:60:92:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808 Validity Not Before: Dec 23 18:01:12 2025 GMT Not After : Dec 24 18:01:12 2025 GMT Subject: CN=3a80813f1a8206cf0b3a51b9af5ff9bfd5d523d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:2d:1f:7b:1a:be:0b:a2:f3:88:28:c7:4a: 97:f2:a4:1c:a3:c0:c2:54:23:4d:4e:41:d8:bd:8f: 38:97:9a:85:bd:11:0b:ff:c4:ec:64:19:bd:c4:a0: 14:69:d4:df:52:61:86:61:a9:33:2b:7f:3f:6f:e9: 11:a3:a5:90:fe:b9:49:e1:42:e6:0b:49:c6:c1:ff: e3:34:de:20:a9:d5:54:f3:63:e0:7d:bf:45:87:fa: 30:7f:19:62:53:93:f8:bd:45:c4:47:29:fc:2b:bc: 21:7d:7d:92:96:bc:fb:a6:c8:43:6f:f4:25:60:1f: 29:51:9e:87:6f:8c:a0:9d:fb:4f:2d:4c:8c:e6:c6: b6:d9:0d:cc:49:d8:df:1a:c7:9d:df:48:3e:64:be: 79:10:10:f1:bb:de:a1:5b:ae:df:fd:56:24:5c:bf: 90:79:8b:1d:60:b3:36:b2:a2:2e:9f:6f:06:e8:5f: 0c:12:ad:52:33:8e:38:ce:92:85:c8:2c:83:86:9e: b3:f4:44:62:7f:2c:5c:b5:40:e6:b8:b0:ca:54:08: aa:ac:a1:02:3a:d9:fa:8f:a7:68:82:b1:e0:7c:c8: 2b:be:93:ea:bc:e8:6e:b6:18:e9:58:b5:c5:23:9c: 8c:19:16:91:b5:cc:7d:f7:e3:7a:2f:ce:6c:07:48: 50:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:80:81:3F:1A:82:06:CF:0B:3A:51:B9:AF:5F:F9:BF:D5:D5:23:D5 X509v3 Authority Key Identifier: keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1d:b4:02:df:b3:75:a5:de:6b:56:98:c9:ab:6a:d7:0f:66: 69:3e:2c:85:2d:42:bd:3d:e6:ec:11:0d:be:7c:79:5e:39:f5: ad:f6:f6:52:c3:5e:52:f3:6c:b5:0e:1a:40:7f:4b:19:60:44: 82:a9:9d:69:f3:91:46:c8:d0:fd:5c:ae:f6:73:2b:0c:a1:d8: 0c:9a:63:1d:67:7d:97:38:64:be:18:61:a2:5f:1f:72:29:29: 5d:98:ae:3b:f4:2d:c0:6c:87:b3:05:c4:09:66:88:4e:2b:b3: 2d:58:b1:11:ed:13:e1:30:39:39:05:c5:27:89:01:55:2f:1e: e5:eb:2a:da:36:81:56:d9:07:bc:5d:ff:38:34:9f:f2:82:ed: b4:bf:95:ce:8b:04:b6:c3:86:16:43:b5:19:a7:2d:f8:c6:96: f4:ce:e0:76:46:a5:6c:24:53:0d:60:8c:bd:02:ee:45:50:31: 5e:66:7c:c3:c6:cb:78:04:e3:72:f2:09:b7:c3:ba:a8:6b:b3: f4:c2:2f:3f:9c:2e:63:93:ca:a4:85:01:41:c5:cf:61:ae:72: 6d:62:5d:e5:b0:d4:d4:f2:ff:85:c5:a3:4d:f7:2f:f8:2b:d2: 55:df:d2:79:43:fc:67:4f:06:fd:56:1d:1b:69:fc:c2:d3:e9: 32:dc:7b:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX0w5442zVTnErUkXYJLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNWNmMmY4Yjc5ZGY2NjI0MTdlYzk2NTZlZDExNjZlOTFh YWI4MDgwHhcNMjUxMjIzMTgwMTEyWhcNMjUxMjI0MTgwMTEyWjAzMTEwLwYDVQQD EygzYTgwODEzZjFhODIwNmNmMGIzYTUxYjlhZjVmZjliZmQ1ZDUyM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8EtH3savgui84gox0qX8qQco8DC VCNNTkHYvY84l5qFvREL/8TsZBm9xKAUadTfUmGGYakzK38/b+kRo6WQ/rlJ4ULm C0nGwf/jNN4gqdVU82Pgfb9Fh/owfxliU5P4vUXERyn8K7whfX2Slrz7pshDb/Ql YB8pUZ6Hb4ygnftPLUyM5sa22Q3MSdjfGsed30g+ZL55EBDxu96hW67f/VYkXL+Q eYsdYLM2sqIun28G6F8MEq1SM444zpKFyCyDhp6z9ERifyxctUDmuLDKVAiqrKEC Otn6j6dogrHgfMgrvpPqvOhuthjpWLXFI5yMGRaRtcx99+N6L85sB0hQNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqAgT8aggbPCzpRua9f+b/V1SPVMB8GA1UdIwQY MBaAFJ5c8vi3nfZiQX7JZW7RFm6RqrgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmx6eS1MZWQ5bUpCZnNsbGJ0RVdicEdxdUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZjE0ZWEtZWJiYi00YzhlLWJlMzEt OWMxZTEzZTBlNTc4LzEvbmx6eS1MZWQ5bUpCZnNsbGJ0RVdicEdxdUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZjE0ZWEtZWJiYi00YzhlLWJlMzEtOWMxZTEzZTBlNTc4 LzEvbmx6eS1MZWQ5bUpCZnNsbGJ0RVdicEdxdUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaB20At+z daXea1aYyatq1w9maT4shS1CvT3m7BENvnx5Xjn1rfb2UsNeUvNstQ4aQH9LGWBE gqmdafORRsjQ/Vyu9nMrDKHYDJpjHWd9lzhkvhhhol8fcikpXZiuO/QtwGyHswXE CWaITiuzLVixEe0T4TA5OQXFJ4kBVS8e5esq2jaBVtkHvF3/ODSf8oLttL+VzosE tsOGFkO1Gact+MaW9M7gdkalbCRTDWCMvQLuRVAxXmZ8w8bLeATjcvIJt8O6qGuz 9MIvP5wuY5PKpIUBQcXPYa5ybWJd5bDU1PL/hcWjTfcv+CvSVd/SeUP8Z08G/VYd G2n8wtPpMtx7UA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:38 2025 by rpki-client