This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json) Hash identifier: oarZqxnY47RpMngbI1qI8BwNe9Jfxx/H46N1/jDn1bQ= Subject key identifier: 91:07:F3:3C:D0:55:6A:41:B0:3A:39:AB:DA:E9:C2:2D:13:4F:06:8A Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17 Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417 Certificate serial: 019B397DB7EC6F481094D98B6D023A490E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft Manifest number: 0F23 Signing time: Sat 20 Dec 2025 02:01:38 +0000 Manifest this update: Sat 20 Dec 2025 02:01:38 +0000 Manifest next update: Sun 21 Dec 2025 02:01:38 +0000 Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: M4rLDaVW5EHeU9Ukl0InfW7aQiZRrfnGxbgwcVZPvPg=) 2: ttg5VkQmE-CT_UTENF07n7R2sRQ.roa (hash: lKSbwZMZC4wBO8BqdScrx370SDVIcLXaY1lpku8KmlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:b7:ec:6f:48:10:94:d9:8b:6d:02:3a:49:0e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417 Validity Not Before: Dec 20 02:01:38 2025 GMT Not After : Dec 21 02:01:38 2025 GMT Subject: CN=9107f33cd0556a41b03a39abdae9c22d134f068a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a0:d6:19:e3:1b:67:49:2f:09:7c:21:49:a9: 0b:4c:1a:70:bf:3d:12:32:ad:25:15:2b:74:27:e1: 8f:7e:ea:ca:5c:e3:ca:b5:c2:05:13:10:54:15:2d: 03:67:56:18:53:3a:ef:49:dc:9e:c9:c7:68:4f:fa: d4:ee:a9:5f:9d:75:f7:9a:ec:5b:8b:c3:4d:2a:b5: e6:ff:a6:45:5c:2c:45:48:74:3d:cc:41:d2:8d:b9: d6:cd:b0:57:0f:f9:f1:6c:d2:1b:cb:57:0d:b2:b9: d7:ea:e0:53:42:b9:35:ef:9c:a2:9e:53:f2:d1:85: d3:2f:d9:88:20:2f:91:a3:b8:f7:48:dc:ef:c5:de: ac:92:a1:2f:cb:c6:35:72:2d:7e:bb:6f:59:a9:de: a9:b9:a6:0f:97:b5:29:a4:ca:fc:8a:2c:2e:8a:12: 82:f9:66:fa:9f:0b:a4:98:8c:1d:2e:ee:ae:ba:ac: 98:44:7e:c1:ef:d7:16:f1:09:cc:e2:81:1d:30:66: f7:82:cc:d0:c8:35:da:6d:83:73:70:47:b3:4e:4d: 74:30:69:98:23:c3:d6:5c:50:80:91:ae:ac:0a:a8: ec:52:9e:77:d4:32:93:3e:27:f2:fa:e1:10:0c:f0: be:7a:ff:8f:c6:bc:f7:30:2f:2a:0d:6c:0d:3f:90: 95:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:07:F3:3C:D0:55:6A:41:B0:3A:39:AB:DA:E9:C2:2D:13:4F:06:8A X509v3 Authority Key Identifier: keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:42:a8:c1:44:79:02:ea:fd:00:0b:c3:73:59:d1:09:41:9b: 69:09:b1:88:48:1e:04:02:36:6d:55:76:e7:72:5e:fd:e7:95: 93:c7:2c:a8:a1:9d:e9:56:6a:b9:f2:4b:fa:d1:ea:b4:da:d9: 25:8b:eb:82:de:8e:0c:33:1f:30:f9:b6:7a:29:37:ba:d8:7c: 7e:30:92:f7:89:d6:53:4e:67:9f:b9:a9:57:cc:6e:ab:d0:99: 95:2a:a5:09:7b:5f:17:c0:38:87:72:80:bd:89:0f:81:22:81: 90:3e:04:f7:04:a4:03:f8:47:6e:08:a0:6c:1c:47:4b:ad:b9: 14:b4:0e:74:af:fb:90:53:d6:58:41:17:bc:82:ea:59:8b:45: a4:ad:20:56:91:f5:f6:ef:79:10:96:31:4d:a3:35:b4:03:11: 95:d9:56:61:cb:bb:20:7c:de:44:89:35:e7:e6:43:dc:2a:bc: 1a:4c:f4:82:44:80:6b:1b:99:42:65:6c:0d:85:3a:bb:e7:73: d8:6f:84:12:47:df:9f:c8:04:c3:62:c8:b1:1d:61:3e:ac:25: eb:f5:37:63:32:bf:39:88:b9:f2:d1:dd:b0:bb:20:9b:2e:a1: 7a:08:71:db:6c:58:ff:46:9b:3b:2b:bc:0c:a7:64:09:05:a3: ef:e9:95:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fbfsb0gQlNmLbQI6SQ4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MjVmNzU0MDA0ZWRiZTMwYWI4Y2FmZWVmOWY3MTMyY2Iw YzI0MTcwHhcNMjUxMjIwMDIwMTM4WhcNMjUxMjIxMDIwMTM4WjAzMTEwLwYDVQQD Eyg5MTA3ZjMzY2QwNTU2YTQxYjAzYTM5YWJkYWU5YzIyZDEzNGYwNjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqDWGeMbZ0kvCXwhSakLTBpwvz0S Mq0lFSt0J+GPfurKXOPKtcIFExBUFS0DZ1YYUzrvSdyeycdoT/rU7qlfnXX3muxb i8NNKrXm/6ZFXCxFSHQ9zEHSjbnWzbBXD/nxbNIby1cNsrnX6uBTQrk175yinlPy 0YXTL9mIIC+Ro7j3SNzvxd6skqEvy8Y1ci1+u29Zqd6puaYPl7UppMr8iiwuihKC +Wb6nwukmIwdLu6uuqyYRH7B79cW8QnM4oEdMGb3gszQyDXabYNzcEezTk10MGmY I8PWXFCAka6sCqjsUp531DKTPify+uEQDPC+ev+Pxrz3MC8qDWwNP5CVqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEH8zzQVWpBsDo5q9rpwi0TTwaKMB8GA1UdIwQY MBaAFDcl91QATtvjCrjK/u+fcTLLDCQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMt NzRhZmMzMDQzYjc4LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMtNzRhZmMzMDQzYjc4 LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0KowUR5 Aur9AAvDc1nRCUGbaQmxiEgeBAI2bVV253Je/eeVk8csqKGd6VZqufJL+tHqtNrZ JYvrgt6ODDMfMPm2eik3uth8fjCS94nWU05nn7mpV8xuq9CZlSqlCXtfF8A4h3KA vYkPgSKBkD4E9wSkA/hHbgigbBxHS625FLQOdK/7kFPWWEEXvILqWYtFpK0gVpH1 9u95EJYxTaM1tAMRldlWYcu7IHzeRIk15+ZD3Cq8Gkz0gkSAaxuZQmVsDYU6u+dz 2G+EEkffn8gEw2LIsR1hPqwl6/U3YzK/OYi58tHdsLsgmy6heghx22xY/0abOyu8 DKdkCQWj7+mV7A== -----END CERTIFICATE-----Generated at Sat Dec 20 04:37:51 2025 by rpki-client