This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json) Hash identifier: 9bgfzNuVVHJaWDoBmrTdeXQfbSTF3HJEG+1QL+7KJuw= Subject key identifier: C5:BC:E1:62:24:D1:79:6F:A4:F7:A9:C6:9A:8B:A1:A7:E2:66:86:EA Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e Certificate serial: 019B33E8FD0C97EFB11C026C850B9DC0ABD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft Manifest number: 1798 Signing time: Fri 19 Dec 2025 00:01:05 +0000 Manifest this update: Fri 19 Dec 2025 00:01:05 +0000 Manifest next update: Sat 20 Dec 2025 00:01:05 +0000 Files and hashes: 1: EA-60X-R1DbjXj2jBAu25C_Uwg8.roa (hash: pB7hdFZLUbLSPr/8GBR/S5TxapEQ0VHd/Ue8AnhWCqA=) 2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: zyUyIgBGnh0ITvlpU/g5QE+i4PYxRvWXFfI2jg5HIZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:fd:0c:97:ef:b1:1c:02:6c:85:0b:9d:c0:ab:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e Validity Not Before: Dec 19 00:01:05 2025 GMT Not After : Dec 20 00:01:05 2025 GMT Subject: CN=c5bce16224d1796fa4f7a9c69a8ba1a7e26686ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:64:f5:4c:a7:cd:d7:04:da:3a:06:0c:e1: d6:e0:ce:83:31:2d:5f:f4:14:5f:ad:80:92:f6:d8: 78:3f:33:ec:94:52:97:a2:7f:01:d0:ec:f2:47:e8: c4:58:b9:ab:93:54:e0:23:d0:e2:67:14:7e:45:75: bc:d7:9e:4a:1b:79:94:4b:2a:77:70:b4:36:1a:1d: 83:34:ad:3a:4d:58:d3:00:f6:87:80:4b:2d:12:2d: 39:68:8c:cd:7e:b5:e6:44:a4:17:3c:f4:0c:d6:bb: a9:c6:0b:be:4d:ed:5b:68:ca:70:f3:f1:63:6a:f2: 66:b4:a4:c4:b8:d0:e6:06:3b:c7:a2:5d:08:a9:94: 21:22:8c:34:54:1b:51:b7:16:37:55:a4:e1:3d:33: f1:35:a6:44:56:fa:b1:c8:25:4a:3e:5d:23:b3:e9: 6b:aa:97:9b:ca:be:26:86:7e:7a:c9:a3:0b:20:53: 45:a3:72:dd:6c:88:06:2a:21:d2:b2:11:2e:77:40: 68:6e:52:fb:d3:b1:7a:b5:51:e0:d0:e6:6b:89:c0: 86:30:7e:4f:4e:a9:10:71:9f:c6:f7:5a:53:5a:d7: 5c:87:ec:4c:13:81:06:9c:f5:1b:38:c4:7d:d4:d7: bf:9b:ee:03:d8:6b:be:ee:0f:ff:7d:8a:ca:70:df: 4d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BC:E1:62:24:D1:79:6F:A4:F7:A9:C6:9A:8B:A1:A7:E2:66:86:EA X509v3 Authority Key Identifier: keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:7b:ac:86:53:cc:5d:3d:2b:93:42:c4:5f:70:00:00:dc:2c: 84:0e:0d:5b:04:e3:48:08:f1:29:87:1c:48:d8:bf:23:38:50: 24:9d:f2:33:1c:b9:44:de:9d:32:7e:0c:72:99:4b:90:3e:2b: 97:11:f2:9d:f0:a8:b7:82:b2:b6:21:f8:31:72:d2:56:b8:a9: f7:5e:26:0b:ad:4f:4c:6b:93:6c:c8:8e:32:71:be:f0:5d:66: e7:f8:95:84:e1:47:50:fa:08:cf:ab:a0:b6:c6:14:ed:46:ae: ab:f4:63:7e:e6:06:f9:83:cc:8c:a9:95:a4:0a:b3:2a:bb:94: 03:f9:26:ad:13:e6:c9:d5:a6:3a:34:f6:f8:7e:a8:84:04:a9: bd:c6:df:67:89:86:54:9b:67:32:60:68:1c:af:76:30:cf:8e: 6e:d8:36:ac:57:d9:99:6c:87:3e:65:71:f4:4d:2f:06:d2:c2: 97:b4:56:db:5a:95:44:9c:91:35:0a:ab:4a:51:6a:29:f7:c1: cb:0b:4e:5b:34:34:b1:2b:e5:95:e1:35:23:60:03:e2:09:e7: f7:ad:57:12:47:c3:86:e4:75:9e:6b:2e:fa:7f:92:e4:21:f5: ea:b1:de:c0:a7:45:f1:63:da:60:08:d5:17:2b:be:ee:87:ae: bd:a5:7b:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6P0Ml++xHAJshQudwKvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjZhYzllZWIzYTJjZmEyZjZjYTNmNDEzZWZiOWNkZmZl OTcyNGUwHhcNMjUxMjE5MDAwMTA1WhcNMjUxMjIwMDAwMTA1WjAzMTEwLwYDVQQD EyhjNWJjZTE2MjI0ZDE3OTZmYTRmN2E5YzY5YThiYTFhN2UyNjY4NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXVk9UynzdcE2joGDOHW4M6DMS1f 9BRfrYCS9th4PzPslFKXon8B0OzyR+jEWLmrk1TgI9DiZxR+RXW8155KG3mUSyp3 cLQ2Gh2DNK06TVjTAPaHgEstEi05aIzNfrXmRKQXPPQM1rupxgu+Te1baMpw8/Fj avJmtKTEuNDmBjvHol0IqZQhIow0VBtRtxY3VaThPTPxNaZEVvqxyCVKPl0js+lr qpebyr4mhn56yaMLIFNFo3LdbIgGKiHSshEud0BoblL707F6tVHg0OZricCGMH5P TqkQcZ/G91pTWtdch+xME4EGnPUbOMR91Ne/m+4D2Gu+7g//fYrKcN9NJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMW84WIk0XlvpPepxpqLoafiZobqMB8GA1UdIwQY MBaAFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWIt N2Q0MjY2Y2Y4MjJhLzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWItN2Q0MjY2Y2Y4MjJh LzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXushlPM XT0rk0LEX3AAANwshA4NWwTjSAjxKYccSNi/IzhQJJ3yMxy5RN6dMn4McplLkD4r lxHynfCot4KytiH4MXLSVrip914mC61PTGuTbMiOMnG+8F1m5/iVhOFHUPoIz6ug tsYU7Uauq/RjfuYG+YPMjKmVpAqzKruUA/kmrRPmydWmOjT2+H6ohASpvcbfZ4mG VJtnMmBoHK92MM+Obtg2rFfZmWyHPmVx9E0vBtLCl7RW21qVRJyRNQqrSlFqKffB ywtOWzQ0sSvlleE1I2AD4gnn961XEkfDhuR1nmsu+n+S5CH16rHewKdF8WPaYAjV Fyu+7oeuvaV7Rg== -----END CERTIFICATE-----Generated at Fri Dec 19 07:58:48 2025 by rpki-client