This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft File: NYzSZ8VKP8IovKHe43LZbGA3PCc.mft (raw, json) Hash identifier: K2bz2UeFQiqkeHs5ALuvAohqT9lHhrxccIbdeP0Yn9g= Subject key identifier: B1:2E:C9:D2:0B:4E:83:8D:3E:E3:F8:91:50:40:DC:CC:1E:8C:C8:57 Authority key identifier: 35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27 Certificate issuer: /CN=358cd267c54a3fc228bca1dee372d96c60373c27 Certificate serial: 019B3D22C19E1A15A525F15F3E827454C8CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft Manifest number: 68 Signing time: Sat 20 Dec 2025 19:00:46 +0000 Manifest this update: Sat 20 Dec 2025 19:00:46 +0000 Manifest next update: Sun 21 Dec 2025 19:00:46 +0000 Files and hashes: 1: DdDaxfuDMZLmyhuw8yZ5MS08ias.roa (hash: xJixleOcp32TuE8FVysJEHDhjJvV5vi+KN5Idb3e7K4=) 2: NYzSZ8VKP8IovKHe43LZbGA3PCc.crl (hash: Ut+5oC75DSfTIRyPFQ/1zQ6cpIvo8nyphL5XY1u6o0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:c1:9e:1a:15:a5:25:f1:5f:3e:82:74:54:c8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358cd267c54a3fc228bca1dee372d96c60373c27 Validity Not Before: Dec 20 19:00:46 2025 GMT Not After : Dec 21 19:00:46 2025 GMT Subject: CN=b12ec9d20b4e838d3ee3f8915040dccc1e8cc857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:6f:d2:88:c7:4c:1f:cd:79:7e:89:73:19: a9:fb:10:fe:32:a0:ab:67:f2:7a:0d:20:6e:62:fb: c6:f8:32:e4:20:bb:c3:88:87:fd:ef:f0:6c:28:1a: 1f:3a:52:05:89:fb:37:b2:af:d2:33:22:91:a3:3a: aa:80:27:11:a4:a9:05:21:60:62:cb:6d:b7:48:3b: e5:b3:25:50:0c:78:5d:9d:d0:24:26:5a:23:15:1f: 8a:93:0c:56:08:8a:25:cc:52:de:e1:e4:70:db:87: 56:8d:94:7c:f6:ff:77:b8:3e:74:70:e2:58:de:bd: 0d:85:7e:13:4f:a8:6f:08:6c:42:b6:b8:61:ac:74: fb:a6:56:34:1d:75:77:da:a7:f9:1a:e7:69:d4:6e: 18:1a:1b:02:4f:28:ae:da:95:8f:39:b4:75:62:2e: 8c:77:33:0c:cd:61:15:93:d3:7b:48:79:a6:71:8f: 1e:39:33:e3:fd:71:c7:df:91:5a:59:f2:8f:b4:56: 58:79:c3:a7:82:26:bd:cc:32:49:a5:c3:6a:26:0e: 19:4e:47:57:27:c7:bf:53:10:09:54:67:83:d2:65: e0:74:30:15:8e:04:bc:0b:ca:5f:f7:8b:4c:d7:ee: 55:fb:ca:4e:49:90:91:a4:14:d0:08:44:a9:06:7b: 76:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2E:C9:D2:0B:4E:83:8D:3E:E3:F8:91:50:40:DC:CC:1E:8C:C8:57 X509v3 Authority Key Identifier: keyid:35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:6e:6a:0a:2f:ac:61:b6:61:88:35:97:dc:41:e4:46:96:b4: a4:3c:f9:d7:26:5e:db:b6:5e:76:d4:43:88:76:a6:54:4a:eb: 21:d6:ed:83:36:ec:06:37:e5:44:76:c6:f0:44:41:73:65:07: aa:8d:dc:88:a2:95:8f:56:f3:34:14:96:ad:9a:e3:98:c8:da: f8:e4:bd:46:6f:25:19:7a:35:9d:26:97:04:be:cc:de:24:fe: c0:c3:6a:fc:96:07:b8:1b:42:ac:b3:74:87:36:ee:e4:2c:a0: 55:48:aa:a5:1f:33:aa:15:33:7c:2b:82:a6:1a:08:22:11:85: 36:cf:08:f5:fc:28:91:9c:db:f4:f8:30:9f:46:56:e5:f8:a6: 85:13:4b:52:8f:9a:ca:83:d8:70:e6:19:2b:4b:27:e6:a8:92: 92:e0:ce:7e:77:77:70:53:3d:7f:1c:99:f8:6f:0a:f4:97:1a: 73:8c:30:75:d4:19:aa:84:1b:6c:b9:49:6f:38:c0:12:ec:4c: b1:3a:55:8d:76:35:66:d6:9f:f9:61:64:92:83:34:e5:72:37: 34:68:1f:c1:2f:9f:e4:bc:76:9a:3d:72:b5:49:4e:c3:e1:f9: ac:cc:63:d9:6d:aa:79:b1:9c:4e:ee:d4:d5:ae:69:69:85:01: 39:24:56:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IsGeGhWlJfFfPoJ0VMjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OGNkMjY3YzU0YTNmYzIyOGJjYTFkZWUzNzJkOTZjNjAz NzNjMjcwHhcNMjUxMjIwMTkwMDQ2WhcNMjUxMjIxMTkwMDQ2WjAzMTEwLwYDVQQD EyhiMTJlYzlkMjBiNGU4MzhkM2VlM2Y4OTE1MDQwZGNjYzFlOGNjODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooZv0ojHTB/NeX6Jcxmp+xD+MqCr Z/J6DSBuYvvG+DLkILvDiIf97/BsKBofOlIFifs3sq/SMyKRozqqgCcRpKkFIWBi y223SDvlsyVQDHhdndAkJlojFR+KkwxWCIolzFLe4eRw24dWjZR89v93uD50cOJY 3r0NhX4TT6hvCGxCtrhhrHT7plY0HXV32qf5Gudp1G4YGhsCTyiu2pWPObR1Yi6M dzMMzWEVk9N7SHmmcY8eOTPj/XHH35FaWfKPtFZYecOngia9zDJJpcNqJg4ZTkdX J8e/UxAJVGeD0mXgdDAVjgS8C8pf94tM1+5V+8pOSZCRpBTQCESpBnt2qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEuydILToONPuP4kVBA3MwejMhXMB8GA1UdIwQY MBaAFDWM0mfFSj/CKLyh3uNy2WxgNzwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTll6U1o4VktQOElvdktIZTQzTFpiR0EzUENjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84NGExYjUtMWFhZC00ZWRmLWFiOWIt OGEyZTlhNDY4MTliLzEvTll6U1o4VktQOElvdktIZTQzTFpiR0EzUENjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi84NGExYjUtMWFhZC00ZWRmLWFiOWItOGEyZTlhNDY4MTli LzEvTll6U1o4VktQOElvdktIZTQzTFpiR0EzUENjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYm5qCi+s YbZhiDWX3EHkRpa0pDz51yZe27ZedtRDiHamVErrIdbtgzbsBjflRHbG8ERBc2UH qo3ciKKVj1bzNBSWrZrjmMja+OS9Rm8lGXo1nSaXBL7M3iT+wMNq/JYHuBtCrLN0 hzbu5CygVUiqpR8zqhUzfCuCphoIIhGFNs8I9fwokZzb9Pgwn0ZW5fimhRNLUo+a yoPYcOYZK0sn5qiSkuDOfnd3cFM9fxyZ+G8K9Jcac4wwddQZqoQbbLlJbzjAEuxM sTpVjXY1Ztaf+WFkkoM05XI3NGgfwS+f5Lx2mj1ytUlOw+H5rMxj2W2qebGcTu7U 1a5paYUBOSRWyw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:20:42 2025 by rpki-client