This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json) Hash identifier: H/rZKTjiOY/hoa9QqkgRQlRfhKjB5cnctaZ4kc1Wui0= Subject key identifier: E9:B0:0D:DD:11:86:8F:D3:9D:92:E0:31:3C:FF:D8:0C:82:28:93:02 Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f Certificate serial: 019B4DDFD2603C617876E1878E673A6ED7FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft Manifest number: 0DD2 Signing time: Wed 24 Dec 2025 01:01:12 +0000 Manifest this update: Wed 24 Dec 2025 01:01:12 +0000 Manifest next update: Thu 25 Dec 2025 01:01:12 +0000 Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: pgJ3goanNxerPLtsN9XL7TwonXcwO+joUZ9BPJVL7ME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:d2:60:3c:61:78:76:e1:87:8e:67:3a:6e:d7:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f Validity Not Before: Dec 24 01:01:12 2025 GMT Not After : Dec 25 01:01:12 2025 GMT Subject: CN=e9b00ddd11868fd39d92e0313cffd80c82289302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:e7:eb:38:bf:43:fa:07:92:3f:59:70:5d: dd:f3:f7:1a:e9:58:44:61:97:78:5b:37:0b:1f:5b: 0c:d2:a8:53:6c:c3:3b:36:3a:41:6d:95:1e:3d:25: 13:4f:41:57:f7:02:1b:8b:77:71:79:6a:08:36:93: 06:bf:ab:0b:d3:0b:c9:ed:48:8e:40:cb:90:13:1c: 54:e2:a2:a6:9d:cc:2b:d9:03:6b:16:d4:76:ca:83: f4:bd:3b:4a:6b:47:94:d8:c5:14:05:71:31:c3:7b: 4a:40:11:1c:e8:48:5f:b7:14:e6:64:ce:1b:2b:dd: 77:2d:3d:e6:75:a7:60:ca:48:9a:99:6b:c7:f3:42: ba:05:b6:b9:43:02:d1:84:42:41:b2:9c:a2:9b:eb: 18:09:a7:20:a8:e1:14:0f:f4:85:09:58:21:e9:3d: e8:b7:b5:57:d4:15:13:23:4c:60:43:b5:67:0e:43: 66:12:72:98:52:d4:8e:f6:28:4d:e9:63:b5:93:88: f1:02:71:60:2e:5c:c3:87:81:99:c6:3c:3b:f1:f6: 6a:37:51:7f:68:70:d4:16:58:18:a5:ca:90:15:3a: 54:78:2c:30:89:50:25:31:7f:d1:78:bc:a9:4a:f8: 78:e0:92:e6:a2:63:52:7c:14:21:3e:93:60:8c:4b: f7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B0:0D:DD:11:86:8F:D3:9D:92:E0:31:3C:FF:D8:0C:82:28:93:02 X509v3 Authority Key Identifier: keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a5:c4:a4:1b:3a:0c:61:56:43:83:6a:fc:5c:4b:74:9a:6c: 1a:6c:a0:3f:bc:5a:cc:3c:07:57:58:c9:6d:7d:ce:9d:5a:0d: ab:64:9e:00:bf:24:86:33:5e:f0:d1:31:78:e3:62:79:22:68: de:e2:1e:0d:c5:78:90:2a:64:32:8e:4c:f6:20:25:40:d0:d7: 3a:21:e8:58:cb:a2:7b:f7:56:24:8f:5c:0d:2c:93:24:d5:06: 8b:d8:13:17:45:04:0e:ad:42:75:f9:c2:6d:e6:ec:ad:66:eb: 55:07:29:27:17:df:0e:9e:b6:5c:32:39:4c:95:4f:8c:c9:7e: 02:25:9c:27:ab:8e:b5:5f:16:24:a5:6e:f7:6b:a3:a1:b7:fc: 20:1a:99:27:b7:5c:d2:c3:23:d8:fe:a4:bf:25:dc:2c:05:7f: 37:22:2f:4c:6b:be:f6:6a:59:d1:d8:a4:84:1c:bb:b3:66:36: 64:71:dd:23:26:a9:88:93:9e:ae:d4:89:31:cb:ec:53:e2:af: 8e:23:9a:bf:ee:21:67:35:d4:4d:fc:a0:3f:7b:aa:9b:0b:0e: 48:b9:18:59:cb:8f:85:54:bd:5e:14:11:84:50:49:c0:fd:96: 14:d6:34:93:78:26:bc:da:7c:39:cd:45:5a:e4:01:b9:20:e7: ec:37:17:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN39JgPGF4duGHjmc6btf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Y2M4MDJiZTZiNGM0MDEwYzc2Y2U4ZTQ4NGU0ZGU3ZjU1 NDdiMmYwHhcNMjUxMjI0MDEwMTEyWhcNMjUxMjI1MDEwMTEyWjAzMTEwLwYDVQQD EyhlOWIwMGRkZDExODY4ZmQzOWQ5MmUwMzEzY2ZmZDgwYzgyMjg5MzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTLn6zi/Q/oHkj9ZcF3d8/ca6VhE YZd4WzcLH1sM0qhTbMM7NjpBbZUePSUTT0FX9wIbi3dxeWoINpMGv6sL0wvJ7UiO QMuQExxU4qKmncwr2QNrFtR2yoP0vTtKa0eU2MUUBXExw3tKQBEc6EhftxTmZM4b K913LT3mdadgykiamWvH80K6Bba5QwLRhEJBspyim+sYCacgqOEUD/SFCVgh6T3o t7VX1BUTI0xgQ7VnDkNmEnKYUtSO9ihN6WO1k4jxAnFgLlzDh4GZxjw78fZqN1F/ aHDUFlgYpcqQFTpUeCwwiVAlMX/ReLypSvh44JLmomNSfBQhPpNgjEv3MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmwDd0Rho/TnZLgMTz/2AyCKJMCMB8GA1UdIwQY MBaAFDbMgCvmtMQBDHbOjkhOTef1VHsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MWNhMzUtZTNhMS00NTc0LWJmNGMt OGFiYTg1Y2JkODE4LzEvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81MWNhMzUtZTNhMS00NTc0LWJmNGMtOGFiYTg1Y2JkODE4 LzEvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6XEpBs6 DGFWQ4Nq/FxLdJpsGmygP7xazDwHV1jJbX3OnVoNq2SeAL8khjNe8NExeONieSJo 3uIeDcV4kCpkMo5M9iAlQNDXOiHoWMuie/dWJI9cDSyTJNUGi9gTF0UEDq1CdfnC bebsrWbrVQcpJxffDp62XDI5TJVPjMl+AiWcJ6uOtV8WJKVu92ujobf8IBqZJ7dc 0sMj2P6kvyXcLAV/NyIvTGu+9mpZ0dikhBy7s2Y2ZHHdIyapiJOertSJMcvsU+Kv jiOav+4hZzXUTfygP3uqmwsOSLkYWcuPhVS9XhQRhFBJwP2WFNY0k3gmvNp8Oc1F WuQBuSDn7DcXJw== -----END CERTIFICATE-----Generated at Wed Dec 24 11:40:50 2025 by rpki-client