This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft File: nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft (raw, json) Hash identifier: LLL+HU1GvdFYaRi2neeVtMEKh5AlQ82jfJZua/uk8so= Subject key identifier: 96:38:0E:56:86:F4:41:82:E1:16:F8:13:EB:CC:0D:37:DA:21:84:3B Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10 Certificate issuer: /CN=9f24064f95331cf1f315dc50de4db05ff95aa410 Certificate serial: 019B67D63B4904039F86F37CA162405DC4C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft Manifest number: 10C4 Signing time: Mon 29 Dec 2025 02:00:51 +0000 Manifest this update: Mon 29 Dec 2025 02:00:51 +0000 Manifest next update: Tue 30 Dec 2025 02:00:51 +0000 Files and hashes: 1: nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl (hash: G5ryO4s1xMehlQu4ur8lg8Qcghr3YcfhrgARQo/FY34=) 2: xk36of5GcRMNZGUJt-_5r_QctTo.roa (hash: BbMVXEvQwTUOBV0n4W+iUw7Na6Uh7I6Smkrm6hqGQWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:d6:3b:49:04:03:9f:86:f3:7c:a1:62:40:5d:c4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410 Validity Not Before: Dec 29 02:00:51 2025 GMT Not After : Dec 30 02:00:51 2025 GMT Subject: CN=96380e5686f44182e116f813ebcc0d37da21843b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:ce:a0:db:f1:eb:19:e8:26:ca:be:ba:0d: 43:50:71:97:03:a2:f5:8d:91:e2:b0:78:e7:44:76: 3c:9f:02:8a:a9:5b:43:c0:63:b3:24:99:35:b0:43: 74:02:71:fe:b5:37:55:a0:45:2f:b9:f5:31:55:78: 3d:94:99:dd:d1:00:cd:c8:c7:4a:3d:00:f6:8a:1f: d5:a2:fd:e1:e8:4f:02:d2:ce:bf:87:ce:87:a5:a8: 10:be:ee:4d:f5:30:94:6b:3d:d9:bd:e0:ae:19:d3: db:88:ef:ea:65:71:92:b2:30:6e:fb:02:b5:72:52: 91:f9:17:6b:29:96:ec:1b:77:14:7d:58:89:22:d1: a8:24:ba:e8:26:49:a9:ce:8c:de:95:da:cd:30:97: dc:fa:73:51:7e:3e:e6:33:87:4d:5b:a2:94:29:4e: a0:9a:9a:20:3b:f0:8f:36:2f:4b:f7:9a:b3:0b:02: 80:61:72:34:69:16:27:8d:01:84:b4:eb:69:6c:b3: 24:79:8b:3c:25:01:90:19:95:ee:19:08:e6:5a:ad: 75:f2:1d:2c:3c:7f:17:76:91:78:e8:cc:8b:4d:cd: e3:25:1b:62:7c:0d:7e:8c:ee:05:d5:5f:fc:8f:83: d1:6c:82:e6:fa:bc:cb:d5:06:b0:b3:b3:92:ca:81: 3a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:38:0E:56:86:F4:41:82:E1:16:F8:13:EB:CC:0D:37:DA:21:84:3B X509v3 Authority Key Identifier: keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:cc:8c:9e:cc:1e:34:34:1e:08:23:6c:e0:8c:bd:ef:bf:37: ff:07:14:db:bc:1a:14:e6:86:c2:1c:28:a3:e0:43:38:cc:da: 81:a1:90:4b:27:e6:20:a2:83:fc:d4:65:7c:43:ae:35:5c:ad: 07:1b:48:32:66:5a:1e:08:08:ae:ae:2f:da:91:aa:b3:6d:75: 89:ef:42:bf:45:02:5c:71:92:c8:41:d1:6b:b5:84:b6:bd:0a: be:08:99:e1:8c:c4:0e:3b:fc:73:f7:7d:1f:99:c4:77:f2:eb: 73:c7:cb:0f:f1:c6:17:18:b3:66:3e:16:bd:a4:98:74:8c:e9: e3:52:90:f0:ad:c4:d7:61:96:83:87:63:14:cd:6e:79:c2:28: 73:82:d2:da:0d:d8:39:f4:6c:1b:19:b5:4e:42:9b:08:0f:94: c8:b3:28:d6:ec:95:c3:6c:b4:d1:15:41:fd:b6:b4:64:71:ce: 54:bd:cd:da:b5:e5:a1:9f:8b:74:eb:b2:a5:47:a7:40:c5:76: 1f:76:3e:cb:0d:eb:76:39:76:36:73:88:c9:40:57:31:29:8d: 2d:a3:af:2a:d4:e1:f1:8d:34:5b:da:f5:de:0e:28:02:1f:47: bd:39:b2:bb:7c:4b:d7:c7:f3:14:ac:5c:0b:03:b8:00:f9:85: a4:1f:3d:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtn1jtJBAOfhvN8oWJAXcTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjQwNjRmOTUzMzFjZjFmMzE1ZGM1MGRlNGRiMDVmZjk1 YWE0MTAwHhcNMjUxMjI5MDIwMDUxWhcNMjUxMjMwMDIwMDUxWjAzMTEwLwYDVQQD Eyg5NjM4MGU1Njg2ZjQ0MTgyZTExNmY4MTNlYmNjMGQzN2RhMjE4NDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLfOoNvx6xnoJsq+ug1DUHGXA6L1 jZHisHjnRHY8nwKKqVtDwGOzJJk1sEN0AnH+tTdVoEUvufUxVXg9lJnd0QDNyMdK PQD2ih/Vov3h6E8C0s6/h86HpagQvu5N9TCUaz3ZveCuGdPbiO/qZXGSsjBu+wK1 clKR+RdrKZbsG3cUfViJItGoJLroJkmpzozeldrNMJfc+nNRfj7mM4dNW6KUKU6g mpogO/CPNi9L95qzCwKAYXI0aRYnjQGEtOtpbLMkeYs8JQGQGZXuGQjmWq118h0s PH8XdpF46MyLTc3jJRtifA1+jO4F1V/8j4PRbILm+rzL1Qaws7OSyoE6EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJY4DlaG9EGC4Rb4E+vMDTfaIYQ7MB8GA1UdIwQY MBaAFJ8kBk+VMxzx8xXcUN5NsF/5WqQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnlRR1Q1VXpIUEh6RmR4UTNrMndYX2xhcEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MDA3OWItZmNhYS00NmQ5LTgxNjEt NjZhNmM4MGQyNmE1LzEvbnlRR1Q1VXpIUEh6RmR4UTNrMndYX2xhcEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80MDA3OWItZmNhYS00NmQ5LTgxNjEtNjZhNmM4MGQyNmE1 LzEvbnlRR1Q1VXpIUEh6RmR4UTNrMndYX2xhcEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMyMnswe NDQeCCNs4Iy97783/wcU27waFOaGwhwoo+BDOMzagaGQSyfmIKKD/NRlfEOuNVyt BxtIMmZaHggIrq4v2pGqs211ie9Cv0UCXHGSyEHRa7WEtr0KvgiZ4YzEDjv8c/d9 H5nEd/Lrc8fLD/HGFxizZj4WvaSYdIzp41KQ8K3E12GWg4djFM1uecIoc4LS2g3Y OfRsGxm1TkKbCA+UyLMo1uyVw2y00RVB/ba0ZHHOVL3N2rXloZ+LdOuypUenQMV2 H3Y+yw3rdjl2NnOIyUBXMSmNLaOvKtTh8Y00W9r13g4oAh9HvTmyu3xL18fzFKxc CwO4APmFpB89Aw== -----END CERTIFICATE-----Generated at Mon Dec 29 10:02:36 2025 by rpki-client