This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json) Hash identifier: PlHD8q7tZBYwNb8nTSbStxxDX16KdkbsWDWfIFMRHZU= Subject key identifier: B2:9A:4E:37:9A:21:8E:B7:71:F9:A1:C5:E1:73:BB:18:3A:DB:FD:D8 Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18 Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718 Certificate serial: 019B3E6E10861026A03097523BCCA29A3858 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft Manifest number: 0228 Signing time: Sun 21 Dec 2025 01:02:39 +0000 Manifest this update: Sun 21 Dec 2025 01:02:39 +0000 Manifest next update: Mon 22 Dec 2025 01:02:39 +0000 Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: HUcu1Jwn76/RPtNwHjMLN3m379Sp6ZFdCOGqPQh+coM=) 2: tT9egEPZfOW0iJxsepbGA_UgQjg.roa (hash: nJcChZ33Fi+iAdXvZOyTBjHIrvr+XcKOSiVdHqUG+CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:10:86:10:26:a0:30:97:52:3b:cc:a2:9a:38:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718 Validity Not Before: Dec 21 01:02:39 2025 GMT Not After : Dec 22 01:02:39 2025 GMT Subject: CN=b29a4e379a218eb771f9a1c5e173bb183adbfdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:d0:ea:fe:88:37:6f:20:79:26:9d:94:0b: 40:49:d8:54:92:ab:66:07:26:1e:15:23:f8:5e:b7: 5f:8a:ae:b8:72:bc:52:bb:b8:29:14:1e:43:30:0c: 16:65:a8:5f:d4:c3:fe:d5:a9:4e:78:6a:44:1f:94: e0:c9:6c:d3:20:da:66:16:c5:bd:78:74:e8:ff:41: be:f9:e7:9e:ca:43:a8:4f:f1:60:10:25:3a:e0:10: 37:dd:44:22:d6:22:a5:68:87:eb:59:19:1c:c6:02: 04:8b:a6:b9:b5:9b:5e:5d:d0:c0:a2:5d:3f:7b:4e: c3:d9:5c:ed:bc:32:91:2c:81:e9:2d:c5:22:e0:26: 2e:96:5c:c9:04:bc:e7:4d:0d:40:11:e9:00:da:aa: f2:51:81:99:3c:f9:93:da:90:ec:8f:91:93:c1:d4: 52:07:88:98:d2:fb:d8:ac:99:9e:7d:42:9a:86:b3: 8e:f1:17:73:91:f8:0b:fa:35:ee:65:51:38:20:2d: d8:28:ce:1d:15:e7:11:bc:b6:be:b0:6a:1b:cd:ff: b7:9d:91:f6:4b:4a:c2:34:1f:6a:46:ef:72:af:fc: 4a:9e:46:54:e3:5d:61:fb:d4:0b:37:d3:e3:0e:be: 91:e0:0d:0e:e3:c0:f2:73:c9:ce:94:98:38:79:ab: 61:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9A:4E:37:9A:21:8E:B7:71:F9:A1:C5:E1:73:BB:18:3A:DB:FD:D8 X509v3 Authority Key Identifier: keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8f:5e:61:b4:f2:fb:b1:53:f8:6f:ed:3e:e5:41:dc:de:75: b6:60:88:b6:10:b6:96:5f:4a:6b:57:43:ae:6c:b8:ff:e5:e0: 44:14:cb:dc:f4:7f:a4:01:48:62:0f:ee:8e:e5:d5:ac:62:7c: 30:61:04:84:4f:92:82:fe:38:68:e2:fe:42:8c:75:b6:15:a3: 41:f4:67:b6:f7:ec:68:24:51:90:0b:10:88:b2:5e:6b:60:6b: 49:39:6e:49:a5:e7:ec:4e:89:13:9e:59:62:aa:fe:c3:0b:4b: 46:a2:bb:14:12:79:b1:d5:b6:bf:c9:10:a9:fb:b7:3d:a1:6d: 2b:8a:4e:9f:0e:d2:93:1d:d9:65:ea:0f:90:c6:8c:80:47:df: 3d:de:e8:57:d3:87:f0:a2:b9:83:81:41:46:90:01:74:fc:1c: ee:42:24:d6:80:c7:f6:98:5f:22:2f:98:33:ab:9d:31:b8:77: 7c:f4:92:4e:2c:fe:3b:bc:1e:5b:84:ba:ce:52:52:79:dd:30: ad:11:49:15:c7:3b:b2:40:1b:74:98:6a:dc:62:94:ec:40:e0: be:01:71:c9:6d:61:0b:a6:ed:8a:68:0f:90:b8:02:48:53:e1: 73:8e:22:42:7f:b9:23:a6:d1:e1:ed:a4:65:2c:3f:29:11:73: e0:6b:9e:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bhCGECagMJdSO8yimjhYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MjQxOGYwMDRkNTg0ZjJmZTI2Yzg0MjM1ZTY2YmI2YjI5 NDI3MTgwHhcNMjUxMjIxMDEwMjM5WhcNMjUxMjIyMDEwMjM5WjAzMTEwLwYDVQQD EyhiMjlhNGUzNzlhMjE4ZWI3NzFmOWExYzVlMTczYmIxODNhZGJmZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgDQ6v6IN28geSadlAtASdhUkqtm ByYeFSP4Xrdfiq64crxSu7gpFB5DMAwWZahf1MP+1alOeGpEH5TgyWzTINpmFsW9 eHTo/0G++eeeykOoT/FgECU64BA33UQi1iKlaIfrWRkcxgIEi6a5tZteXdDAol0/ e07D2VztvDKRLIHpLcUi4CYullzJBLznTQ1AEekA2qryUYGZPPmT2pDsj5GTwdRS B4iY0vvYrJmefUKahrOO8RdzkfgL+jXuZVE4IC3YKM4dFecRvLa+sGobzf+3nZH2 S0rCNB9qRu9yr/xKnkZU411h+9QLN9PjDr6R4A0O48Dyc8nOlJg4eathGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKaTjeaIY63cfmhxeFzuxg62/3YMB8GA1UdIwQY MBaAFDckGPAE1YTy/ibIQjXma7aylCcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85M2M4NTEtYmFhNi00MTIxLWJjZGQt YTEzNmEzMjg5NWMwLzEvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy85M2M4NTEtYmFhNi00MTIxLWJjZGQtYTEzNmEzMjg5NWMw LzEvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb49eYbTy +7FT+G/tPuVB3N51tmCIthC2ll9Ka1dDrmy4/+XgRBTL3PR/pAFIYg/ujuXVrGJ8 MGEEhE+Sgv44aOL+Qox1thWjQfRntvfsaCRRkAsQiLJea2BrSTluSaXn7E6JE55Z Yqr+wwtLRqK7FBJ5sdW2v8kQqfu3PaFtK4pOnw7Skx3ZZeoPkMaMgEffPd7oV9OH 8KK5g4FBRpABdPwc7kIk1oDH9phfIi+YM6udMbh3fPSSTiz+O7weW4S6zlJSed0w rRFJFcc7skAbdJhq3GKU7EDgvgFxyW1hC6btimgPkLgCSFPhc44iQn+5I6bR4e2k ZSw/KRFz4GueJQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:26:31 2025 by rpki-client