This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft File: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft (raw, json) Hash identifier: jchInp8r7jNPwl19JkcTrasmMfEEM9bPbhAeGzVT9H8= Subject key identifier: 79:43:9E:09:9D:9B:3F:01:1B:8B:4B:F1:02:C2:DD:B0:0E:56:81:59 Authority key identifier: 35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA Certificate issuer: /CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa Certificate serial: 019B48B9165C5FF264906D25B8F44EF94310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft Manifest number: 13C6 Signing time: Tue 23 Dec 2025 01:00:47 +0000 Manifest this update: Tue 23 Dec 2025 01:00:47 +0000 Manifest next update: Wed 24 Dec 2025 01:00:47 +0000 Files and hashes: 1: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl (hash: /z4GYg4MAn1IOSxaf2hsvPyu9rGIDx5MJyEw5Wd8gCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:16:5c:5f:f2:64:90:6d:25:b8:f4:4e:f9:43:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa Validity Not Before: Dec 23 01:00:47 2025 GMT Not After : Dec 24 01:00:47 2025 GMT Subject: CN=79439e099d9b3f011b8b4bf102c2ddb00e568159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:51:a1:07:cb:74:7a:d1:24:b5:fb:fe:2e: d2:5c:55:66:5d:0e:b9:42:5a:38:8d:e3:e1:ad:5f: 57:a6:94:07:51:0e:9a:65:8a:20:c0:c0:70:4c:4f: 4e:a0:fd:09:1e:26:c9:46:c1:7c:7c:00:6c:63:83: 2a:15:a4:24:52:d8:d3:5b:24:4b:a2:74:99:7e:e6: ba:82:c2:c7:9d:01:65:07:33:ca:f3:d2:06:7d:7b: ca:ac:01:e1:8c:c6:6a:db:62:f0:47:d3:20:8f:70: 1c:97:49:55:66:87:28:36:88:f3:63:a4:6e:0a:e5: a3:4a:4f:75:3c:e1:39:c0:19:f3:cf:4a:1a:a6:71: b5:4b:37:0e:bc:76:0a:d4:7c:18:c4:46:f7:89:3f: db:b2:de:6c:96:a1:7d:fa:66:d3:1e:18:07:0e:98: b6:25:35:74:77:49:b1:0b:dd:02:40:8f:9a:7b:9e: 27:43:13:15:4c:7d:a7:d1:9f:bb:1f:c9:92:46:a4: 62:49:c7:78:e5:d9:93:46:c0:bb:c1:bb:fb:b1:c4: 39:18:f3:f7:61:72:73:77:1d:3b:ae:d8:f2:06:13: 59:cb:84:df:7c:71:ef:13:d7:30:e2:2a:26:13:91: de:43:35:f7:db:be:85:2e:bd:b6:a8:c4:a4:23:9c: f4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:43:9E:09:9D:9B:3F:01:1B:8B:4B:F1:02:C2:DD:B0:0E:56:81:59 X509v3 Authority Key Identifier: keyid:35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:96:74:a9:fd:f2:f7:c8:f2:d1:32:80:a6:a5:e4:8e:df:43: fd:3d:eb:21:30:6d:d0:84:04:7f:75:0f:64:de:d9:82:35:7f: af:95:d7:5c:51:15:e1:ec:a4:e6:ca:4c:3c:77:83:67:6e:de: c6:c6:4e:0e:f3:2d:45:c5:03:16:49:fa:4e:c9:dd:7a:fc:1a: 39:a3:0c:98:ad:e8:7e:0b:74:91:74:4d:6b:9e:f8:b6:68:2b: 8a:85:8d:b6:61:c5:ed:7f:cc:b2:a6:67:40:2e:5c:d1:1e:71: 57:37:9a:dd:f5:2d:be:13:94:81:13:32:e0:8d:96:30:57:d0: 80:3e:b4:e1:b5:74:b5:7e:b6:ad:0d:03:1d:20:77:6e:54:ba: eb:ed:74:0b:96:c4:80:41:0e:9b:65:97:69:d7:d6:33:02:0b: b2:1a:61:41:78:ec:e6:40:2c:35:69:cc:58:ef:25:bc:89:92: 18:42:28:6d:f7:ea:ca:cf:ea:e2:2b:4a:2a:1e:92:ef:a5:de: 06:9e:5a:8d:d6:93:d3:b2:17:64:ee:b4:a8:e7:3c:e0:cf:0f: 4c:ae:05:aa:7e:7b:86:ac:36:12:b1:35:1e:20:3d:9d:d4:60: e1:96:60:aa:02:a0:c8:65:17:24:73:1c:9d:e4:ba:62:e1:bd: e7:51:66:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuRZcX/JkkG0luPRO+UMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OGFlNTgwYjJmN2I0NWMzZDJhZTlmMTlmM2MxYmU5N2U4 MzlhYWEwHhcNMjUxMjIzMDEwMDQ3WhcNMjUxMjI0MDEwMDQ3WjAzMTEwLwYDVQQD Eyg3OTQzOWUwOTlkOWIzZjAxMWI4YjRiZjEwMmMyZGRiMDBlNTY4MTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD1RoQfLdHrRJLX7/i7SXFVmXQ65 Qlo4jePhrV9XppQHUQ6aZYogwMBwTE9OoP0JHibJRsF8fABsY4MqFaQkUtjTWyRL onSZfua6gsLHnQFlBzPK89IGfXvKrAHhjMZq22LwR9Mgj3Acl0lVZocoNojzY6Ru CuWjSk91POE5wBnzz0oapnG1SzcOvHYK1HwYxEb3iT/bst5slqF9+mbTHhgHDpi2 JTV0d0mxC90CQI+ae54nQxMVTH2n0Z+7H8mSRqRiScd45dmTRsC7wbv7scQ5GPP3 YXJzdx07rtjyBhNZy4TffHHvE9cw4iomE5HeQzX3276FLr22qMSkI5z0AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlDngmdmz8BG4tL8QLC3bAOVoFZMB8GA1UdIwQY MBaAFDWK5YCy97RcPSrp8Z88G+l+g5qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NTIxZjYtMTg0ZS00MzBhLWI2Njct NTI0ZjNhMmY2OGIzLzEvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi85NTIxZjYtMTg0ZS00MzBhLWI2NjctNTI0ZjNhMmY2OGIz LzEvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZZ0qf3y 98jy0TKApqXkjt9D/T3rITBt0IQEf3UPZN7ZgjV/r5XXXFEV4eyk5spMPHeDZ27e xsZODvMtRcUDFkn6TsndevwaOaMMmK3ofgt0kXRNa574tmgrioWNtmHF7X/MsqZn QC5c0R5xVzea3fUtvhOUgRMy4I2WMFfQgD604bV0tX62rQ0DHSB3blS66+10C5bE gEEOm2WXadfWMwILshphQXjs5kAsNWnMWO8lvImSGEIobffqys/q4itKKh6S76Xe Bp5ajdaT07IXZO60qOc84M8PTK4Fqn57hqw2ErE1HiA9ndRg4ZZgqgKgyGUXJHMc neS6YuG951Fm2w== -----END CERTIFICATE-----Generated at Tue Dec 23 07:56:27 2025 by rpki-client