This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft File: nry_64-olzdHGKkQKkpwZx4qq_k.mft (raw, json) Hash identifier: R2RpgsmsFT/VzdEF/o52va7FTWZBOGFn5HsQypSKxMg= Subject key identifier: B7:D8:D2:AA:0C:D9:92:18:3B:9A:F1:8E:F9:2D:00:A5:68:E5:19:F2 Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9 Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9 Certificate serial: 019B115D53CDBF1133F49B5C2264B901CB10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 07:01:27 +0000 Manifest this update: Fri 12 Dec 2025 07:01:27 +0000 Manifest next update: Sat 13 Dec 2025 07:01:27 +0000 Files and hashes: 1: U9UP5wFjOdBMTiO2f-e1URpL3-o.roa (hash: atX2GDXf3c9NT+sdD6FjIaSHX9tWS49OwLXK/Z0d0pM=) 2: nry_64-olzdHGKkQKkpwZx4qq_k.crl (hash: lDVk9H7SRak63gNFRUOImVq0DwvNsOiUmHHv0ZMgcnc=) 3: qIc_hDr-mCrw-0sQAQQ174u5zKY.roa (hash: 5blNS4fBDRihm0C0Hw/njWEQeoDxWPm8nJm/rVSqqdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:53:cd:bf:11:33:f4:9b:5c:22:64:b9:01:cb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9 Validity Not Before: Dec 12 07:01:27 2025 GMT Not After : Dec 13 07:01:27 2025 GMT Subject: CN=b7d8d2aa0cd992183b9af18ef92d00a568e519f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:65:a9:13:35:1f:d1:9e:f0:51:11:ac:14: e0:b7:3d:b0:0b:59:5d:bc:ee:58:c7:ba:4c:2f:e9: fb:47:99:87:59:a5:20:ad:0c:7a:59:f3:0f:f3:93: f4:05:32:b4:c5:cb:eb:27:19:1d:66:8e:3e:8f:55: d8:1a:3a:72:d3:5f:9f:39:f9:38:37:64:95:15:49: b1:37:03:f7:ab:91:ca:1e:5e:1f:92:59:4f:00:91: e3:0d:e0:69:fb:fa:39:c9:84:44:86:e8:25:4d:c5: ee:56:3f:f0:61:bd:ff:3e:39:22:31:6f:48:04:3e: 5a:44:41:2b:4b:39:28:dd:ab:69:56:aa:03:20:e7: d2:19:7f:7e:88:d2:99:b9:80:b7:b3:62:84:47:a4: 59:37:8e:37:21:02:f6:30:0f:0f:64:bf:8c:29:a1: 89:50:f8:3e:3d:3e:85:dd:97:27:52:4e:5b:ec:0e: d6:ee:b6:5c:eb:7b:ad:d4:67:3c:77:75:f7:ee:6f: d7:98:4f:7b:c3:8f:62:af:ed:0a:f8:b0:1a:46:49: 51:1a:4a:09:9d:9f:fc:e6:be:16:6a:c6:79:c6:6f: 22:6b:3b:27:7d:43:a7:1b:70:19:7f:18:20:b9:67: b7:73:b2:d5:b1:58:e5:ba:0d:de:32:54:60:2f:b2: 14:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D8:D2:AA:0C:D9:92:18:3B:9A:F1:8E:F9:2D:00:A5:68:E5:19:F2 X509v3 Authority Key Identifier: keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:b5:01:1a:4f:82:49:8a:45:a5:a1:7c:43:cb:7d:a5:9b:6f: 6a:a2:a5:b8:82:e7:fc:e4:00:8e:9a:f0:63:3c:9c:e3:c0:db: 6d:d7:f4:17:92:50:a7:79:45:b6:d6:0f:b5:a4:d1:54:98:f6: bc:67:d3:f2:e3:3c:8b:59:14:a0:7b:d2:84:3f:46:7c:e9:43: ae:23:2b:9d:56:8f:8c:62:85:29:96:86:fd:d1:c6:8a:1b:2c: 1c:a5:0e:cd:f7:c1:14:14:a1:4f:6e:4c:7b:5b:2c:df:6e:b6: db:15:9b:42:a4:3d:f7:1c:24:55:a6:1e:89:27:1f:37:db:53: 4f:af:b6:19:11:68:91:fb:1f:f6:33:c5:de:3b:df:61:56:94: d7:81:a9:82:2a:ac:59:cb:75:d9:29:90:4e:bc:36:a5:15:33: 1d:d1:89:7a:04:c7:ad:05:b3:15:ee:bd:ac:09:65:3a:af:ce: 18:a2:62:a9:19:98:16:ca:1a:90:27:45:ee:73:0e:e2:69:5d: 92:e7:bf:f9:42:94:8f:aa:8d:78:f6:ba:7b:d5:ad:b3:6d:ed: d5:71:45:22:11:b0:9d:cc:48:2f:4f:39:ba:30:55:a7:82:46: c3:72:5b:bd:5f:70:4a:6f:63:7c:0a:6b:90:8d:ee:cf:21:6e: 4d:f9:af:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXVPNvxEz9JtcImS5AcsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYmNiZmViOGZhODk3Mzc0NzE4YTkxMDJhNGE3MDY3MWUy YWFiZjkwHhcNMjUxMjEyMDcwMTI3WhcNMjUxMjEzMDcwMTI3WjAzMTEwLwYDVQQD EyhiN2Q4ZDJhYTBjZDk5MjE4M2I5YWYxOGVmOTJkMDBhNTY4ZTUxOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyplqRM1H9Ge8FERrBTgtz2wC1ld vO5Yx7pML+n7R5mHWaUgrQx6WfMP85P0BTK0xcvrJxkdZo4+j1XYGjpy01+fOfk4 N2SVFUmxNwP3q5HKHl4fkllPAJHjDeBp+/o5yYREhuglTcXuVj/wYb3/PjkiMW9I BD5aREErSzko3atpVqoDIOfSGX9+iNKZuYC3s2KER6RZN443IQL2MA8PZL+MKaGJ UPg+PT6F3ZcnUk5b7A7W7rZc63ut1Gc8d3X37m/XmE97w49ir+0K+LAaRklRGkoJ nZ/85r4WasZ5xm8iazsnfUOnG3AZfxgguWe3c7LVsVjlug3eMlRgL7IUGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfY0qoM2ZIYO5rxjvktAKVo5RnyMB8GA1UdIwQY MBaAFJ68v+uPqJc3RxipECpKcGceKqv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzkt OWNkMGNhZTA2MjkyLzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xMzhjZTMtZjM4Zi00M2U5LThkYzktOWNkMGNhZTA2Mjky LzEvbnJ5XzY0LW9semRIR0trUUtrcHdaeDRxcV9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabUBGk+C SYpFpaF8Q8t9pZtvaqKluILn/OQAjprwYzyc48Dbbdf0F5JQp3lFttYPtaTRVJj2 vGfT8uM8i1kUoHvShD9GfOlDriMrnVaPjGKFKZaG/dHGihssHKUOzffBFBShT25M e1ss32622xWbQqQ99xwkVaYeiScfN9tTT6+2GRFokfsf9jPF3jvfYVaU14Gpgiqs Wct12SmQTrw2pRUzHdGJegTHrQWzFe69rAllOq/OGKJiqRmYFsoakCdF7nMO4mld kue/+UKUj6qNePa6e9Wts23t1XFFIhGwncxIL085ujBVp4JGw3JbvV9wSm9jfApr kI3uzyFuTfmvqA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:20:05 2025 by rpki-client