This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft File: ny8WbQXql29prtWORqQfflBSRHU.mft (raw, json) Hash identifier: /fNJG0p/cyO9G3wtMChOPEy1GL8hkXM15mCKRZBcpAo= Subject key identifier: 7D:90:BC:7D:5D:FC:7E:0E:45:1E:CE:A0:AD:90:9D:92:3C:3A:34:27 Authority key identifier: 9F:2F:16:6D:05:EA:97:6F:69:AE:D5:8E:46:A4:1F:7E:50:52:44:75 Certificate issuer: /CN=9f2f166d05ea976f69aed58e46a41f7e50524475 Certificate serial: 019B33B230BADDE9C867F5759E9FFA5417E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft Manifest number: 14FA Signing time: Thu 18 Dec 2025 23:01:14 +0000 Manifest this update: Thu 18 Dec 2025 23:01:14 +0000 Manifest next update: Fri 19 Dec 2025 23:01:14 +0000 Files and hashes: 1: ny8WbQXql29prtWORqQfflBSRHU.crl (hash: p+mqqFRFbUj5gbY4EBucaYKKYzldwI+0zRcOjoL/Qu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft rsync://rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:30:ba:dd:e9:c8:67:f5:75:9e:9f:fa:54:17:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f2f166d05ea976f69aed58e46a41f7e50524475 Validity Not Before: Dec 18 23:01:14 2025 GMT Not After : Dec 19 23:01:14 2025 GMT Subject: CN=7d90bc7d5dfc7e0e451ecea0ad909d923c3a3427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:38:a4:ca:03:ef:5c:b2:7c:bd:56:6e:16:4b: d9:87:2a:c9:ea:66:fe:6f:99:f4:89:cc:3d:ab:c0: 29:87:c3:82:f8:9e:9d:9d:0f:0f:85:db:8c:ae:19: c7:08:46:3d:1a:e7:f0:7d:82:22:a8:c5:26:32:a3: cf:62:5b:f0:25:c6:39:0b:16:a6:4a:a8:84:4e:40: a6:d5:e6:c1:78:18:fc:4c:60:06:92:3b:ad:9d:d1: 76:04:aa:9b:1d:b7:ab:59:4b:8a:52:5e:24:6b:0b: e1:c9:69:4b:ab:66:45:a7:fe:52:a1:c8:09:48:0d: 39:cf:5e:69:e5:39:16:ce:a3:8b:da:64:a9:c1:e0: c0:35:90:48:6c:a1:c3:54:28:c3:3b:fb:a1:f6:77: ca:02:32:f6:fa:1a:dd:83:2b:72:b1:02:22:b1:6e: b7:38:ca:a6:c9:13:90:e0:d5:c0:40:06:51:cc:df: 7e:f3:23:73:c3:b5:50:92:2b:e0:bc:72:58:24:bd: 42:42:df:db:6f:b9:d0:6f:55:a3:5d:94:b9:31:0a: b3:e8:9f:36:4c:b5:ea:cc:35:fa:2e:e6:66:70:d1: 47:82:45:00:8c:b8:4b:2a:e6:21:fc:59:a6:ea:1d: bf:fa:24:ad:2b:13:36:a4:eb:7e:29:cc:e4:b7:99: 19:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:90:BC:7D:5D:FC:7E:0E:45:1E:CE:A0:AD:90:9D:92:3C:3A:34:27 X509v3 Authority Key Identifier: keyid:9F:2F:16:6D:05:EA:97:6F:69:AE:D5:8E:46:A4:1F:7E:50:52:44:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:8c:b7:86:96:f1:fc:4a:12:24:40:40:60:6a:db:07:3c:8b: 74:df:a7:31:45:c1:07:24:22:62:b1:cb:a8:c4:e1:6e:44:27: 4c:0c:e2:9c:81:a5:22:82:fd:58:4a:fd:af:ac:ed:4f:d2:c5: 4d:df:c6:1a:d8:52:29:9d:38:40:c5:9c:88:01:0f:b3:35:78: b6:ef:99:33:c2:a8:70:e8:cb:17:61:a9:b9:bd:cb:47:55:70: ef:82:15:1a:da:4c:68:1e:3f:5f:1d:a8:35:33:7e:74:44:fd: fc:70:41:58:7f:ad:17:78:20:8c:2a:7f:bb:33:20:53:55:98: 9c:51:a8:75:e1:60:50:84:c5:67:91:25:8c:ea:dc:c9:62:4d: 97:0b:ce:b8:d1:35:75:45:5b:6a:e4:89:2e:50:46:55:5c:9d: 37:1b:43:f9:f9:ef:32:69:e8:83:30:4a:c8:8d:27:87:55:72: 77:09:7d:7b:56:3f:f7:d0:08:c7:e3:0c:ee:27:70:00:7b:26: 01:b2:ae:8b:fd:fd:32:76:bb:5c:fa:c3:45:71:9d:58:7f:62: 2b:1c:79:5c:ee:68:bc:9a:8e:62:80:0c:75:65:d1:ae:c4:fb: b3:d8:3a:75:08:27:2e:13:84:58:95:4f:30:c1:23:6d:11:d0: 54:05:81:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsjC63enIZ/V1np/6VBfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMmYxNjZkMDVlYTk3NmY2OWFlZDU4ZTQ2YTQxZjdlNTA1 MjQ0NzUwHhcNMjUxMjE4MjMwMTE0WhcNMjUxMjE5MjMwMTE0WjAzMTEwLwYDVQQD Eyg3ZDkwYmM3ZDVkZmM3ZTBlNDUxZWNlYTBhZDkwOWQ5MjNjM2EzNDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TikygPvXLJ8vVZuFkvZhyrJ6mb+ b5n0icw9q8Aph8OC+J6dnQ8PhduMrhnHCEY9GufwfYIiqMUmMqPPYlvwJcY5Cxam SqiETkCm1ebBeBj8TGAGkjutndF2BKqbHberWUuKUl4kawvhyWlLq2ZFp/5SocgJ SA05z15p5TkWzqOL2mSpweDANZBIbKHDVCjDO/uh9nfKAjL2+hrdgytysQIisW63 OMqmyROQ4NXAQAZRzN9+8yNzw7VQkivgvHJYJL1CQt/bb7nQb1WjXZS5MQqz6J82 TLXqzDX6LuZmcNFHgkUAjLhLKuYh/Fmm6h2/+iStKxM2pOt+Kczkt5kZAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2QvH1d/H4ORR7OoK2QnZI8OjQnMB8GA1UdIwQY MBaAFJ8vFm0F6pdvaa7VjkakH35QUkR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnk4V2JRWHFsMjlwcnRXT1JxUWZmbEJTUkhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMmVmYmItMzY1OS00YTNkLWJlYTQt OTYyZDRmMGMyOWIwLzEvbnk4V2JRWHFsMjlwcnRXT1JxUWZmbEJTUkhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yMmVmYmItMzY1OS00YTNkLWJlYTQtOTYyZDRmMGMyOWIw LzEvbnk4V2JRWHFsMjlwcnRXT1JxUWZmbEJTUkhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoy3hpbx /EoSJEBAYGrbBzyLdN+nMUXBByQiYrHLqMThbkQnTAzinIGlIoL9WEr9r6ztT9LF Td/GGthSKZ04QMWciAEPszV4tu+ZM8KocOjLF2Gpub3LR1Vw74IVGtpMaB4/Xx2o NTN+dET9/HBBWH+tF3ggjCp/uzMgU1WYnFGodeFgUITFZ5EljOrcyWJNlwvOuNE1 dUVbauSJLlBGVVydNxtD+fnvMmnogzBKyI0nh1Vydwl9e1Y/99AIx+MM7idwAHsm AbKui/39Mna7XPrDRXGdWH9iKxx5XO5ovJqOYoAMdWXRrsT7s9g6dQgnLhOEWJVP MMEjbRHQVAWBUw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:25:31 2025 by rpki-client