This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft File: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft (raw, json) Hash identifier: 8eCrDvEhr0lZRQOCtjif1/NNaReppm/0nBpkV0Uvsg8= Subject key identifier: 59:FD:B0:81:BC:71:D2:CF:25:28:F2:70:B2:4F:5B:D2:E4:7E:D9:60 Authority key identifier: 35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA Certificate issuer: /CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa Certificate serial: 019B4C95D2FABAFECD08F963C284351FD4DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft Manifest number: 13C8 Signing time: Tue 23 Dec 2025 19:00:45 +0000 Manifest this update: Tue 23 Dec 2025 19:00:45 +0000 Manifest next update: Wed 24 Dec 2025 19:00:45 +0000 Files and hashes: 1: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl (hash: d6H0o4qW2COyLcdH3eFpuL80Uubq0pi99m0fn8FtHng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:95:d2:fa:ba:fe:cd:08:f9:63:c2:84:35:1f:d4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa Validity Not Before: Dec 23 19:00:45 2025 GMT Not After : Dec 24 19:00:45 2025 GMT Subject: CN=59fdb081bc71d2cf2528f270b24f5bd2e47ed960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f2:66:5e:a9:5d:1f:70:82:8d:f7:38:ba:1d: 32:17:df:b8:37:75:99:e3:b8:4c:84:da:07:fa:1e: 17:1d:f9:9c:01:66:7b:26:36:64:6a:41:c7:e3:00: 0d:9d:e3:f7:ca:75:5d:9e:a7:36:ac:21:60:10:11: 19:69:11:1d:75:0b:63:ca:d4:54:3d:e6:82:12:31: d2:da:3a:3d:6b:e4:c9:1b:00:15:8d:26:9e:69:41: 74:8b:75:d9:94:27:42:64:4f:08:5d:f4:ad:08:d0: 9e:fc:d9:78:de:07:bb:63:1b:cb:e8:4a:03:20:2a: 06:d6:7a:ee:75:61:b9:8d:51:eb:5d:6c:e5:c9:06: e6:46:fa:7d:76:fd:5e:db:08:b9:3d:d5:cd:0d:40: 43:df:59:19:9c:c6:54:3a:dc:04:ec:b7:ab:7c:0f: 1c:d7:4f:85:a4:ac:dd:93:4e:3f:5e:9f:f0:b0:ab: b1:67:da:15:4f:56:4c:3b:81:8e:54:2e:a6:16:24: 40:13:51:98:99:fc:22:b5:5b:97:7d:fe:52:c9:ec: 7b:94:b9:7a:3d:fc:1a:33:54:13:93:c8:d4:f4:82: 78:17:d3:5d:96:17:8c:8a:be:20:73:12:fa:ec:10: 35:d7:a8:8b:df:4f:3d:37:19:77:05:f4:21:aa:d7: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FD:B0:81:BC:71:D2:CF:25:28:F2:70:B2:4F:5B:D2:E4:7E:D9:60 X509v3 Authority Key Identifier: keyid:35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:83:30:97:71:19:76:8b:76:07:68:43:70:09:0f:0d:78:99: 25:2a:90:c5:de:5f:6d:1c:f8:73:37:29:0a:2c:06:0c:19:f4: f0:25:f8:73:77:0d:9e:a9:0b:dc:05:49:34:9c:58:87:7a:39: b7:7d:d0:70:76:27:b3:3f:d2:f0:c4:c6:38:12:70:6e:9c:e7: 32:60:fb:47:35:4c:ff:8f:28:30:9d:7f:db:ac:1d:a8:f5:d1: a2:1b:07:a0:1d:f5:fb:d1:91:0b:06:ee:65:42:4b:5c:30:ea: cd:df:fd:70:47:79:af:20:a7:68:58:4a:e4:77:d2:d3:b0:de: 17:56:dd:8d:0d:bc:8b:7a:5b:8a:76:e1:43:cd:30:63:6a:7a: 74:c1:ad:9d:8f:b4:08:09:0c:a4:26:32:3b:3a:86:b9:26:19: 8d:5c:3d:d7:b8:91:a7:c8:36:12:ca:e9:81:c5:3d:0f:4a:6c: 80:e5:cc:c9:e1:3a:88:10:83:b0:63:c1:48:35:c2:8b:1e:a5: 1e:f0:ea:13:b7:d9:7e:e1:75:6b:e1:90:28:97:b0:2b:62:cc: 20:01:04:dd:45:28:85:bc:b2:65:40:21:b1:64:4e:61:df:9b: 74:f2:66:49:d5:94:09:73:7e:e8:07:24:c2:8f:fb:74:74:c8: 4d:e5:e5:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMldL6uv7NCPljwoQ1H9TfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OGFlNTgwYjJmN2I0NWMzZDJhZTlmMTlmM2MxYmU5N2U4 MzlhYWEwHhcNMjUxMjIzMTkwMDQ1WhcNMjUxMjI0MTkwMDQ1WjAzMTEwLwYDVQQD Eyg1OWZkYjA4MWJjNzFkMmNmMjUyOGYyNzBiMjRmNWJkMmU0N2VkOTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfJmXqldH3CCjfc4uh0yF9+4N3WZ 47hMhNoH+h4XHfmcAWZ7JjZkakHH4wANneP3ynVdnqc2rCFgEBEZaREddQtjytRU PeaCEjHS2jo9a+TJGwAVjSaeaUF0i3XZlCdCZE8IXfStCNCe/Nl43ge7YxvL6EoD ICoG1nrudWG5jVHrXWzlyQbmRvp9dv1e2wi5PdXNDUBD31kZnMZUOtwE7LerfA8c 10+FpKzdk04/Xp/wsKuxZ9oVT1ZMO4GOVC6mFiRAE1GYmfwitVuXff5Syex7lLl6 PfwaM1QTk8jU9IJ4F9NdlheMir4gcxL67BA116iL3089Nxl3BfQhqtdq3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFn9sIG8cdLPJSjycLJPW9LkftlgMB8GA1UdIwQY MBaAFDWK5YCy97RcPSrp8Z88G+l+g5qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NTIxZjYtMTg0ZS00MzBhLWI2Njct NTI0ZjNhMmY2OGIzLzEvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi85NTIxZjYtMTg0ZS00MzBhLWI2NjctNTI0ZjNhMmY2OGIz LzEvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoMwl3EZ dot2B2hDcAkPDXiZJSqQxd5fbRz4czcpCiwGDBn08CX4c3cNnqkL3AVJNJxYh3o5 t33QcHYnsz/S8MTGOBJwbpznMmD7RzVM/48oMJ1/26wdqPXRohsHoB31+9GRCwbu ZUJLXDDqzd/9cEd5ryCnaFhK5HfS07DeF1bdjQ28i3pbinbhQ80wY2p6dMGtnY+0 CAkMpCYyOzqGuSYZjVw917iRp8g2EsrpgcU9D0psgOXMyeE6iBCDsGPBSDXCix6l HvDqE7fZfuF1a+GQKJewK2LMIAEE3UUohbyyZUAhsWROYd+bdPJmSdWUCXN+6Ack wo/7dHTITeXlGA== -----END CERTIFICATE-----Generated at Wed Dec 24 04:00:14 2025 by rpki-client