This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json) Hash identifier: fMy8LeBIypNY16MMA/fsvSymictsaLALbuttHDKVG34= Subject key identifier: C1:00:DF:DD:2E:A9:E7:5C:59:B7:13:D5:4C:31:6A:50:45:2E:04:F1 Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f Certificate serial: 019B59762236342586C251CE1F167195CD69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft Manifest number: 0DD8 Signing time: Fri 26 Dec 2025 07:01:12 +0000 Manifest this update: Fri 26 Dec 2025 07:01:12 +0000 Manifest next update: Sat 27 Dec 2025 07:01:12 +0000 Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: y6WJTAXtaxSWqEDtfJwTDQ0o15FEfzSZW7jXFmXEVUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:22:36:34:25:86:c2:51:ce:1f:16:71:95:cd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f Validity Not Before: Dec 26 07:01:12 2025 GMT Not After : Dec 27 07:01:12 2025 GMT Subject: CN=c100dfdd2ea9e75c59b713d54c316a50452e04f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:2e:9d:d3:b9:69:ac:9d:0a:1d:47:52:ae: 4d:ac:43:97:df:fc:12:e1:48:4a:bc:60:75:44:6b: 0b:51:2b:2e:66:ec:20:b5:b2:e5:ba:74:6e:ae:85: 42:f0:e5:55:12:d2:ee:97:f0:87:d5:3c:c8:85:1f: 5c:79:7d:36:0f:33:e6:c8:d0:1f:3b:fd:57:15:1b: bd:6a:85:a3:68:92:22:f8:e2:37:92:5c:89:dd:c7: db:0d:cf:03:ea:41:af:fd:d5:7f:f1:2a:36:bf:e7: 64:f7:c9:1b:4d:3d:a8:cf:71:ce:f1:96:f0:57:42: 62:9c:ef:8a:44:bc:c1:6f:61:58:77:b9:2a:44:5e: b9:0a:a9:92:82:a1:05:46:78:4d:f3:f3:e6:43:c8: 58:d7:fb:12:73:ae:49:ff:98:9b:4a:71:df:8a:81: 2e:a8:03:53:bb:a8:97:13:a7:8b:18:b8:eb:94:ab: d9:73:d3:c5:4d:5c:8b:5a:f9:3c:5c:c6:3b:3b:52: 0d:b9:22:5b:70:24:4e:36:9a:b1:b6:fc:98:88:98: 65:c7:3a:df:fc:3f:7b:b3:dd:36:18:37:5d:e5:61: b4:a7:9b:59:72:fb:21:ff:75:4d:15:06:18:5e:11: 82:81:07:a5:72:17:54:c6:ac:e0:d3:2a:14:81:ba: 09:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:00:DF:DD:2E:A9:E7:5C:59:B7:13:D5:4C:31:6A:50:45:2E:04:F1 X509v3 Authority Key Identifier: keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:db:c1:e1:cb:78:ab:92:14:7b:bb:33:a9:92:7d:32:ca:3f: c2:e5:3e:a7:b4:62:76:05:77:64:51:0f:12:bd:02:c8:22:54: 47:f5:f2:5c:ce:7d:22:98:d9:78:cb:dc:4e:47:b9:de:6d:c0: 58:bd:da:9d:b8:60:3e:38:8c:5d:75:61:bb:97:db:f6:99:58: 0b:4c:cb:24:ab:a3:c1:f5:45:aa:3e:55:32:bf:61:34:27:eb: 3b:c9:55:46:f2:38:76:f5:83:74:d0:38:23:10:e1:63:d4:b1: 1f:5d:1c:64:59:0a:d6:d9:8e:49:15:5e:f4:ec:95:1b:48:f6: 8b:cd:fd:6b:f8:91:62:da:5a:a4:6b:7a:1a:17:43:9d:aa:e5: 54:be:d0:89:0c:50:31:4a:7d:39:d3:90:71:f2:de:8c:9c:39: cb:c2:e1:91:59:55:0d:ff:b0:e7:83:06:1f:4d:07:96:ea:7e: f8:8a:2a:af:2a:4a:b0:ff:5f:57:46:cc:3e:05:92:71:08:7f: 52:a5:91:b7:6d:8f:c8:78:0c:ff:c5:b0:c6:2a:3b:f3:8e:48: 1a:e2:47:57:44:69:bc:7d:27:b4:a3:ee:b3:26:59:da:f7:42: 91:a5:07:9c:b8:4b:93:95:4f:97:91:9d:ed:1b:1c:f9:9a:09: 46:cb:76:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdiI2NCWGwlHOHxZxlc1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Y2M4MDJiZTZiNGM0MDEwYzc2Y2U4ZTQ4NGU0ZGU3ZjU1 NDdiMmYwHhcNMjUxMjI2MDcwMTEyWhcNMjUxMjI3MDcwMTEyWjAzMTEwLwYDVQQD EyhjMTAwZGZkZDJlYTllNzVjNTliNzEzZDU0YzMxNmE1MDQ1MmUwNGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwsundO5aaydCh1HUq5NrEOX3/wS 4UhKvGB1RGsLUSsuZuwgtbLlunRuroVC8OVVEtLul/CH1TzIhR9ceX02DzPmyNAf O/1XFRu9aoWjaJIi+OI3klyJ3cfbDc8D6kGv/dV/8So2v+dk98kbTT2oz3HO8Zbw V0JinO+KRLzBb2FYd7kqRF65CqmSgqEFRnhN8/PmQ8hY1/sSc65J/5ibSnHfioEu qANTu6iXE6eLGLjrlKvZc9PFTVyLWvk8XMY7O1INuSJbcCRONpqxtvyYiJhlxzrf /D97s902GDdd5WG0p5tZcvsh/3VNFQYYXhGCgQelchdUxqzg0yoUgboJCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEA390uqedcWbcT1UwxalBFLgTxMB8GA1UdIwQY MBaAFDbMgCvmtMQBDHbOjkhOTef1VHsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MWNhMzUtZTNhMS00NTc0LWJmNGMt OGFiYTg1Y2JkODE4LzEvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81MWNhMzUtZTNhMS00NTc0LWJmNGMtOGFiYTg1Y2JkODE4 LzEvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9vB4ct4 q5IUe7szqZJ9Mso/wuU+p7RidgV3ZFEPEr0CyCJUR/XyXM59IpjZeMvcTke53m3A WL3anbhgPjiMXXVhu5fb9plYC0zLJKujwfVFqj5VMr9hNCfrO8lVRvI4dvWDdNA4 IxDhY9SxH10cZFkK1tmOSRVe9OyVG0j2i839a/iRYtpapGt6GhdDnarlVL7QiQxQ MUp9OdOQcfLejJw5y8LhkVlVDf+w54MGH00Hlup++IoqrypKsP9fV0bMPgWScQh/ UqWRt22PyHgM/8Wwxio7845IGuJHV0RpvH0ntKPusyZZ2vdCkaUHnLhLk5VPl5Gd 7Rsc+ZoJRst2EQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:32 2025 by rpki-client