This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json) Hash identifier: cK1OssUNPralZBVs/ZAoIy5/tKSnV0wbjnZwl55oYyk= Subject key identifier: 03:D1:D3:68:DB:17:00:16:55:72:C7:81:AB:5C:2A:BC:06:DF:AF:40 Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e Certificate serial: 019B56ABE9730537C5E1326F5D67B0EB37F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft Manifest number: 17AA Signing time: Thu 25 Dec 2025 18:01:05 +0000 Manifest this update: Thu 25 Dec 2025 18:01:05 +0000 Manifest next update: Fri 26 Dec 2025 18:01:05 +0000 Files and hashes: 1: EA-60X-R1DbjXj2jBAu25C_Uwg8.roa (hash: pB7hdFZLUbLSPr/8GBR/S5TxapEQ0VHd/Ue8AnhWCqA=) 2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: Pxh1pKK+N2ewksxO0MpU6JJSG5x38ZZP64ZZ/osoVFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 18:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:ab:e9:73:05:37:c5:e1:32:6f:5d:67:b0:eb:37:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e Validity Not Before: Dec 25 18:01:05 2025 GMT Not After : Dec 26 18:01:05 2025 GMT Subject: CN=03d1d368db1700165572c781ab5c2abc06dfaf40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:39:eb:39:b6:18:fe:3b:bd:6b:b0:e6:a2:e8: 2e:8e:54:9a:89:19:94:84:87:42:ba:a9:a6:66:f1: fb:d9:20:12:bb:47:7d:2a:8b:d7:88:cd:f0:ab:85: 9f:66:56:d9:96:a0:da:f5:1d:87:2d:2e:9a:27:4e: e7:36:3f:1a:da:a7:31:a7:a0:3c:57:0d:1c:77:d6: 38:8d:b7:86:e2:5f:68:8a:df:ab:a0:90:45:c5:57: 6d:24:f6:94:84:24:a0:7c:8f:f0:ca:52:f6:af:c1: b5:2c:6d:b1:51:b8:60:8d:cc:ec:32:5a:7e:ea:2d: 99:a4:06:a0:5c:3c:04:99:b9:78:3d:6a:3e:a6:17: 35:a6:ac:b4:76:66:5e:81:ea:f3:ce:c4:71:8d:77: 39:96:00:8d:3f:5a:d2:27:07:f9:31:ac:b0:c0:8e: 32:43:47:96:b0:cc:f9:c3:db:c6:86:21:cc:3c:23: 0c:ab:d2:d3:1a:ab:44:35:45:64:c4:82:8f:6a:e0: ee:24:1b:d2:c5:7b:31:d7:b3:da:d8:e8:bc:a0:9a: 2d:8e:91:71:cc:ca:35:c9:9c:5f:97:48:96:21:11: ee:3a:a4:dd:7a:50:32:a0:d6:f2:cf:36:a7:07:5e: a4:ca:00:6a:24:02:09:2b:78:16:95:4e:03:f2:e6: 10:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D1:D3:68:DB:17:00:16:55:72:C7:81:AB:5C:2A:BC:06:DF:AF:40 X509v3 Authority Key Identifier: keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:13:9f:14:ca:35:90:47:6e:f2:6a:3b:b7:ac:78:a7:21:c5: d2:bd:dc:e9:ec:20:c9:3e:ff:13:19:6a:7f:de:27:0f:ff:81: 89:5a:0c:04:10:eb:ae:24:c5:2c:ee:9c:a4:c7:4d:99:9a:02: 49:a3:f6:d1:22:cc:66:92:e3:3e:96:f3:13:27:8d:bf:14:c6: 6a:58:4d:b7:23:76:b5:26:bc:58:dd:d3:a5:c1:d0:e4:df:2b: 5b:42:49:ba:b7:8a:4e:a7:1f:e9:39:c6:6b:53:b2:f0:d5:ec: 03:33:22:1c:aa:5e:6d:7c:69:bf:35:a3:90:63:b2:e2:f3:bc: 1a:cf:d2:31:e1:4d:7f:89:6b:fb:52:d0:ec:a0:8e:17:59:45: 07:24:f0:28:17:41:c3:18:dd:d4:f7:5d:4b:c4:cb:e8:4b:2c: f2:39:4e:a1:0f:21:3c:ec:30:1d:65:0d:4e:f8:84:93:a7:a2: 01:0c:22:07:88:d7:4c:be:16:ba:7c:75:04:36:67:b3:c0:8d: 1f:9f:5d:c6:7e:14:bc:5c:7e:6d:17:7e:22:8f:0f:7c:39:ad: 53:ee:49:15:8a:e8:20:ad:e0:37:f7:01:f7:53:ac:ae:7c:ff: 9d:c8:0a:d9:3a:60:42:cc:a1:22:29:42:92:9e:3d:c3:2e:b0: c9:5c:06:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWq+lzBTfF4TJvXWew6zf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjZhYzllZWIzYTJjZmEyZjZjYTNmNDEzZWZiOWNkZmZl OTcyNGUwHhcNMjUxMjI1MTgwMTA1WhcNMjUxMjI2MTgwMTA1WjAzMTEwLwYDVQQD EygwM2QxZDM2OGRiMTcwMDE2NTU3MmM3ODFhYjVjMmFiYzA2ZGZhZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TnrObYY/ju9a7DmougujlSaiRmU hIdCuqmmZvH72SASu0d9KovXiM3wq4WfZlbZlqDa9R2HLS6aJ07nNj8a2qcxp6A8 Vw0cd9Y4jbeG4l9oit+roJBFxVdtJPaUhCSgfI/wylL2r8G1LG2xUbhgjczsMlp+ 6i2ZpAagXDwEmbl4PWo+phc1pqy0dmZegerzzsRxjXc5lgCNP1rSJwf5MaywwI4y Q0eWsMz5w9vGhiHMPCMMq9LTGqtENUVkxIKPauDuJBvSxXsx17Pa2Oi8oJotjpFx zMo1yZxfl0iWIRHuOqTdelAyoNbyzzanB16kygBqJAIJK3gWlU4D8uYQ5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPR02jbFwAWVXLHgatcKrwG369AMB8GA1UdIwQY MBaAFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWIt N2Q0MjY2Y2Y4MjJhLzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWItN2Q0MjY2Y2Y4MjJh LzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxOfFMo1 kEdu8mo7t6x4pyHF0r3c6ewgyT7/Exlqf94nD/+BiVoMBBDrriTFLO6cpMdNmZoC SaP20SLMZpLjPpbzEyeNvxTGalhNtyN2tSa8WN3TpcHQ5N8rW0JJureKTqcf6TnG a1Oy8NXsAzMiHKpebXxpvzWjkGOy4vO8Gs/SMeFNf4lr+1LQ7KCOF1lFByTwKBdB wxjd1PddS8TL6Ess8jlOoQ8hPOwwHWUNTviEk6eiAQwiB4jXTL4Wunx1BDZns8CN H59dxn4UvFx+bRd+Io8PfDmtU+5JFYroIK3gN/cB91Osrnz/ncgK2TpgQsyhIilC kp49wy6wyVwGJw== -----END CERTIFICATE-----Generated at Thu Dec 25 22:48:31 2025 by rpki-client