This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft File: NY82t7AwW9n_68U3oadWt04E1eQ.mft (raw, json) Hash identifier: L7Ex0dtFZ7MXde1Q1AsZspDgXUCQHsvIZDU7HtuFDUo= Subject key identifier: 22:3E:BE:CE:EA:30:8D:50:3E:D4:0E:CA:FF:47:1C:FE:5D:94:6F:03 Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4 Certificate issuer: /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4 Certificate serial: 019B0F377BCCF33A19B96AE18E62FC029B8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft Manifest number: 07AA Signing time: Thu 11 Dec 2025 21:00:52 +0000 Manifest this update: Thu 11 Dec 2025 21:00:52 +0000 Manifest next update: Fri 12 Dec 2025 21:00:52 +0000 Files and hashes: 1: 8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa (hash: mtFporZGWALvI1bFzQb9Xpsj858BjBk/glbS/pmBQi4=) 2: NY82t7AwW9n_68U3oadWt04E1eQ.crl (hash: xrWdKgzJebfRuXJwPu0emzWRg8lLwdo5bLcQ8Hcej2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:7b:cc:f3:3a:19:b9:6a:e1:8e:62:fc:02:9b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4 Validity Not Before: Dec 11 21:00:52 2025 GMT Not After : Dec 12 21:00:52 2025 GMT Subject: CN=223ebeceea308d503ed40ecaff471cfe5d946f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:2f:21:21:da:06:48:5d:f3:2c:8b:89:58: 9e:f6:18:98:52:f7:ec:4f:43:40:d7:e4:91:f3:16: ed:09:cd:11:54:9e:74:95:73:5f:c1:7c:44:2c:66: 73:ad:6f:f8:75:a6:cc:d6:dc:5d:2b:49:0e:29:07: fd:75:66:30:78:29:64:09:11:d3:13:df:c8:b7:2d: a9:a5:af:62:2a:a0:6c:cf:e0:34:5e:11:40:7a:6a: 8e:52:cf:84:9d:70:c1:47:dc:b1:d1:0f:40:b3:18: 36:bd:be:02:fe:97:04:88:9d:53:d6:2d:68:cd:5a: 6f:de:bd:d6:0e:17:28:9e:7e:bb:fa:3a:7e:92:26: 30:92:6b:5b:80:ca:10:64:a9:26:16:f4:63:3b:6d: 61:48:46:84:a7:fc:4f:92:fe:a2:85:f8:e0:7a:27: 67:67:5b:b3:e8:38:ab:bb:7d:30:15:e6:b4:8e:02: 96:c4:0c:58:48:5d:d1:fe:52:d3:7d:74:e8:95:8a: 11:69:89:f4:a5:67:03:fc:ca:4d:75:4a:77:bb:f8: 8c:66:eb:44:18:91:9a:fd:2a:50:75:ba:d4:b0:25: 3e:4a:ba:29:35:60:c3:24:52:13:d5:b1:3e:a9:e6: 1c:ef:7a:29:61:6e:22:05:25:00:88:68:85:7c:4b: d0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3E:BE:CE:EA:30:8D:50:3E:D4:0E:CA:FF:47:1C:FE:5D:94:6F:03 X509v3 Authority Key Identifier: keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b5:9a:45:fc:27:d1:01:b6:f9:c1:53:36:41:0c:e7:b0:e6: c1:04:5a:2f:37:29:2d:c9:a0:00:2d:df:ab:05:af:28:58:61: df:f4:38:15:93:12:80:f3:4c:96:43:27:62:a7:b4:16:b6:ad: d2:f1:57:2d:df:8c:e6:d9:41:43:4f:d8:9f:70:f1:2b:89:7c: f2:5e:b4:e7:96:e0:1c:e6:b5:16:a2:a3:28:31:5c:c1:a1:30: a3:9a:2a:de:27:9c:28:83:16:ce:87:b1:38:5e:6c:70:70:7d: 29:e6:cb:e8:a9:56:ac:ac:75:a9:a5:97:6c:b8:7b:ec:72:09: a9:b2:b8:67:79:85:33:10:b0:7a:2c:4f:96:f8:2d:77:7e:f7: b0:20:f1:29:64:19:d3:eb:24:99:be:4f:40:34:47:96:b4:c7: c2:e6:fb:5d:99:bf:eb:e9:59:b3:e0:c0:da:63:36:be:88:35: 2b:3d:5d:86:db:e9:f0:26:2b:40:96:31:a8:26:b9:ba:b8:c5: fb:d9:9d:27:b0:5a:84:63:34:98:65:53:ca:37:e4:a8:ec:e9: d0:e2:b5:4f:09:c4:f9:f3:3f:e4:ff:f2:13:53:eb:12:c3:5c: 83:6e:7e:b1:f4:cd:95:72:ed:80:46:6e:f0:7b:63:6f:a3:2d: 64:f5:a6:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN3vM8zoZuWrhjmL8ApuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OGYzNmI3YjAzMDViZDlmZmViYzUzN2ExYTc1NmI3NGUw NGQ1ZTQwHhcNMjUxMjExMjEwMDUyWhcNMjUxMjEyMjEwMDUyWjAzMTEwLwYDVQQD EygyMjNlYmVjZWVhMzA4ZDUwM2VkNDBlY2FmZjQ3MWNmZTVkOTQ2ZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXIvISHaBkhd8yyLiVie9hiYUvfs T0NA1+SR8xbtCc0RVJ50lXNfwXxELGZzrW/4dabM1txdK0kOKQf9dWYweClkCRHT E9/Ity2ppa9iKqBsz+A0XhFAemqOUs+EnXDBR9yx0Q9Asxg2vb4C/pcEiJ1T1i1o zVpv3r3WDhconn67+jp+kiYwkmtbgMoQZKkmFvRjO21hSEaEp/xPkv6ihfjgeidn Z1uz6Diru30wFea0jgKWxAxYSF3R/lLTfXTolYoRaYn0pWcD/MpNdUp3u/iMZutE GJGa/SpQdbrUsCU+SropNWDDJFIT1bE+qeYc73opYW4iBSUAiGiFfEvQGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCI+vs7qMI1QPtQOyv9HHP5dlG8DMB8GA1UdIwQY MBaAFDWPNrewMFvZ/+vFN6GnVrdOBNXkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlk4MnQ3QXdXOW5fNjhVM29hZFd0MDRFMWVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84YzkwNjctY2M2ZC00YzRhLWI2NjEt MzdkMTU3MTlhMmQwLzEvTlk4MnQ3QXdXOW5fNjhVM29hZFd0MDRFMWVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC84YzkwNjctY2M2ZC00YzRhLWI2NjEtMzdkMTU3MTlhMmQw LzEvTlk4MnQ3QXdXOW5fNjhVM29hZFd0MDRFMWVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbWaRfwn 0QG2+cFTNkEM57DmwQRaLzcpLcmgAC3fqwWvKFhh3/Q4FZMSgPNMlkMnYqe0Frat 0vFXLd+M5tlBQ0/Yn3DxK4l88l6055bgHOa1FqKjKDFcwaEwo5oq3iecKIMWzoex OF5scHB9KebL6KlWrKx1qaWXbLh77HIJqbK4Z3mFMxCweixPlvgtd373sCDxKWQZ 0+skmb5PQDRHlrTHwub7XZm/6+lZs+DA2mM2vog1Kz1dhtvp8CYrQJYxqCa5urjF +9mdJ7BahGM0mGVTyjfkqOzp0OK1TwnE+fM/5P/yE1PrEsNcg25+sfTNlXLtgEZu 8Htjb6MtZPWmOQ== -----END CERTIFICATE-----Generated at Fri Dec 12 05:24:27 2025 by rpki-client