This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json) Hash identifier: 9+iV0bAz9UFXLRqGzOuZGAThv9Y6b/q5GAKZhlZtt/o= Subject key identifier: 8D:C6:7C:0D:36:B4:BA:B3:03:E2:81:E0:5C:92:1C:AC:6A:5A:55:8C Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08 Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808 Certificate serial: 019B5BD2A4A43E13DB42720DBF48F04FAB30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft Manifest number: 1019 Signing time: Fri 26 Dec 2025 18:01:29 +0000 Manifest this update: Fri 26 Dec 2025 18:01:29 +0000 Manifest next update: Sat 27 Dec 2025 18:01:29 +0000 Files and hashes: 1: Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa (hash: WbvR7lgO/S3QOwy/R14Yl51OkTUajPVQcMXibufV2RY=) 2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: fDYjQ4m0Qwg6hz2FqEoe9QP57BX1YQBU++YDrpCZ/nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:a4:a4:3e:13:db:42:72:0d:bf:48:f0:4f:ab:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808 Validity Not Before: Dec 26 18:01:29 2025 GMT Not After : Dec 27 18:01:29 2025 GMT Subject: CN=8dc67c0d36b4bab303e281e05c921cac6a5a558c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:e8:6a:c0:db:8d:ab:61:a0:6e:8c:4d:bf: 22:1a:9d:69:67:b9:35:cd:86:0c:41:ff:ef:09:1c: d0:29:69:c6:81:dd:32:8b:a6:d2:73:89:a5:e7:9d: c6:ca:3c:56:42:67:44:a5:59:a6:25:93:8c:12:aa: eb:a7:fb:8e:50:22:75:91:36:e3:b7:dd:2a:de:8c: ab:7f:fa:fc:26:67:58:ad:9b:63:1b:42:46:83:67: 73:ce:f8:6c:f5:6b:23:bb:a0:f2:db:71:7d:f8:56: 90:94:05:d5:30:44:c7:b2:a7:ad:76:72:d0:68:cf: 98:d9:a5:7a:6e:59:c8:5d:d6:9f:38:1a:bd:30:7f: a6:ab:d3:ef:5e:93:75:30:c2:fc:d6:2d:2c:ec:05: e7:e1:1c:85:52:89:d2:c6:a8:b8:37:46:dd:77:fd: 5d:d9:6b:c1:bc:12:67:df:82:5d:32:e7:2c:25:f6: 65:a3:02:a1:51:60:b4:23:77:49:eb:8b:44:62:b0: be:cd:7b:02:4f:d1:2b:6c:34:aa:a7:c7:5c:5d:97: 87:d8:22:16:b0:6d:69:cc:a7:75:f2:cd:f8:ef:a1: 80:6c:c3:8f:19:0d:8d:26:a5:0d:dd:82:7d:51:d4: fc:28:a7:50:03:62:0a:74:b1:ac:2a:49:65:4a:e5: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C6:7C:0D:36:B4:BA:B3:03:E2:81:E0:5C:92:1C:AC:6A:5A:55:8C X509v3 Authority Key Identifier: keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d3:a8:36:8d:4a:3a:c2:b0:b4:82:35:fe:95:fb:4e:a4:22: 8b:ea:83:9e:90:f7:67:d5:91:cd:e0:24:2e:de:12:34:98:98: e9:ca:e7:54:f7:27:3c:16:46:7a:c5:28:93:d5:c6:e3:d9:a0: 10:28:74:0b:67:ba:ef:e6:f5:e8:3f:07:4f:2f:9b:84:4e:c1: 2a:cb:c2:8e:4d:c9:94:13:63:4a:18:16:3a:86:11:7d:c9:2d: ba:14:7c:0c:9a:2c:71:ae:be:34:c3:4d:55:df:20:33:ca:49: 7c:ae:88:49:03:14:91:51:61:12:13:88:ae:14:53:8a:f4:32: 69:be:fc:ac:00:4d:95:50:b8:c8:76:ef:cd:0e:cc:73:60:64: 3b:b6:57:25:43:5a:8f:1a:25:8b:9b:21:c4:9d:bc:54:53:e1: 8f:86:30:67:e3:9f:05:d7:b4:6e:09:3a:0a:44:e9:4f:87:25: ff:2f:13:1a:d4:e3:a8:cd:f5:60:ec:07:f6:c5:78:24:52:a7: b9:8e:1c:b7:5c:e2:3b:68:7c:59:3f:c0:f3:36:83:ad:89:1a: 87:29:61:ad:71:6c:4b:7c:0f:79:7a:4f:d4:a2:59:cd:84:51: 81:57:e4:0c:9c:9d:85:8d:83:79:f3:b4:ba:b1:25:08:84:d8: 3f:80:32:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0qSkPhPbQnINv0jwT6swMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNWNmMmY4Yjc5ZGY2NjI0MTdlYzk2NTZlZDExNjZlOTFh YWI4MDgwHhcNMjUxMjI2MTgwMTI5WhcNMjUxMjI3MTgwMTI5WjAzMTEwLwYDVQQD Eyg4ZGM2N2MwZDM2YjRiYWIzMDNlMjgxZTA1YzkyMWNhYzZhNWE1NThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz/oasDbjathoG6MTb8iGp1pZ7k1 zYYMQf/vCRzQKWnGgd0yi6bSc4ml553GyjxWQmdEpVmmJZOMEqrrp/uOUCJ1kTbj t90q3oyrf/r8JmdYrZtjG0JGg2dzzvhs9Wsju6Dy23F9+FaQlAXVMETHsqetdnLQ aM+Y2aV6blnIXdafOBq9MH+mq9PvXpN1MML81i0s7AXn4RyFUonSxqi4N0bdd/1d 2WvBvBJn34JdMucsJfZlowKhUWC0I3dJ64tEYrC+zXsCT9ErbDSqp8dcXZeH2CIW sG1pzKd18s3476GAbMOPGQ2NJqUN3YJ9UdT8KKdQA2IKdLGsKkllSuXIQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3GfA02tLqzA+KB4FySHKxqWlWMMB8GA1UdIwQY MBaAFJ5c8vi3nfZiQX7JZW7RFm6RqrgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmx6eS1MZWQ5bUpCZnNsbGJ0RVdicEdxdUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZjE0ZWEtZWJiYi00YzhlLWJlMzEt OWMxZTEzZTBlNTc4LzEvbmx6eS1MZWQ5bUpCZnNsbGJ0RVdicEdxdUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZjE0ZWEtZWJiYi00YzhlLWJlMzEtOWMxZTEzZTBlNTc4 LzEvbmx6eS1MZWQ5bUpCZnNsbGJ0RVdicEdxdUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdOoNo1K OsKwtII1/pX7TqQii+qDnpD3Z9WRzeAkLt4SNJiY6crnVPcnPBZGesUok9XG49mg ECh0C2e67+b16D8HTy+bhE7BKsvCjk3JlBNjShgWOoYRfcktuhR8DJosca6+NMNN Vd8gM8pJfK6ISQMUkVFhEhOIrhRTivQyab78rABNlVC4yHbvzQ7Mc2BkO7ZXJUNa jxoli5shxJ28VFPhj4YwZ+OfBde0bgk6CkTpT4cl/y8TGtTjqM31YOwH9sV4JFKn uY4ct1ziO2h8WT/A8zaDrYkahylhrXFsS3wPeXpP1KJZzYRRgVfkDJydhY2DefO0 urElCITYP4AyWg== -----END CERTIFICATE-----Generated at Sat Dec 27 04:05:23 2025 by rpki-client