This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json) Hash identifier: yBVdfyLcu7ykjiDI9iqttgQm/rxd7C37tnMurGbFTP0= Subject key identifier: AC:C9:90:11:AD:FE:12:DE:DF:66:4E:9C:A0:A2:C6:B3:CE:AF:C2:B0 Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18 Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718 Certificate serial: 019B2EF9ECB8E4008263C2CFDBFF4848FDB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft Manifest number: 0220 Signing time: Thu 18 Dec 2025 01:01:29 +0000 Manifest this update: Thu 18 Dec 2025 01:01:29 +0000 Manifest next update: Fri 19 Dec 2025 01:01:29 +0000 Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: aiE7mulqaxFL8j/kCkrRhaw2fsHhQKPqo46+BEjUuzM=) 2: tT9egEPZfOW0iJxsepbGA_UgQjg.roa (hash: nJcChZ33Fi+iAdXvZOyTBjHIrvr+XcKOSiVdHqUG+CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:ec:b8:e4:00:82:63:c2:cf:db:ff:48:48:fd:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718 Validity Not Before: Dec 18 01:01:29 2025 GMT Not After : Dec 19 01:01:29 2025 GMT Subject: CN=acc99011adfe12dedf664e9ca0a2c6b3ceafc2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d9:8e:b9:01:25:ce:e8:2d:43:7a:73:6c:b5: a3:1e:c4:c1:80:cd:dd:6d:4b:4f:8d:e0:56:10:b3: 0d:00:6f:5c:96:53:b4:e2:ce:5d:b5:18:93:a4:2c: 94:d9:06:fe:36:b0:e8:6b:32:b6:b4:3f:a1:51:cc: 43:f9:18:79:f5:50:24:b0:61:fc:f7:92:ef:30:3b: 3c:c4:0b:4c:c4:86:58:9f:fd:9d:28:d2:93:35:c0: a7:0d:d7:0a:f9:66:f9:a1:b7:d4:25:0b:96:13:e8: 79:4e:71:01:d2:70:49:73:8f:c7:af:29:01:e4:77: ee:ac:e9:73:56:fc:3f:52:36:e7:b8:5b:ca:ce:f8: 2a:cc:bd:84:be:5f:36:e3:6b:df:f1:90:9e:8f:35: 5c:43:9c:b9:89:d8:ec:61:b2:11:ed:c4:67:1a:1e: 90:51:47:a8:75:2b:b0:a9:1d:53:76:cf:41:04:3b: 14:e6:27:3c:a2:de:89:7d:a1:e0:5d:8e:7c:7a:5c: 10:d6:a8:dd:25:fe:0c:24:64:df:0d:8d:22:f2:75: 00:4a:61:d1:6a:d9:4c:ad:0a:5e:22:02:5c:08:11: ac:62:c0:a0:12:6b:c0:d5:63:5c:7f:c2:cd:70:e1: 70:9c:18:04:94:52:8f:05:46:8a:4f:8d:a4:54:77: 5a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C9:90:11:AD:FE:12:DE:DF:66:4E:9C:A0:A2:C6:B3:CE:AF:C2:B0 X509v3 Authority Key Identifier: keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e2:62:31:5d:5b:c9:62:24:2e:46:8e:ac:76:19:9f:bf:bf: 34:c0:10:fb:50:10:65:02:17:b4:cb:78:b7:a4:91:ec:4e:56: b8:dc:8a:f3:70:e3:d2:d0:89:85:33:06:a7:cc:6f:9d:7d:af: 61:44:55:4b:be:a0:c4:b8:13:8b:db:93:9b:9b:ab:a8:88:aa: 2b:2b:90:6b:c2:71:58:42:cd:bd:e8:c0:79:e9:95:3b:49:b3: d3:19:d9:cc:bd:4b:4d:b8:73:55:84:3a:88:c0:e0:b3:0d:15: 29:59:e2:05:29:0b:5e:a0:37:5c:a6:43:9b:04:d7:3d:a8:5c: 62:90:41:aa:24:7e:72:b6:db:e9:5b:b3:5b:3e:f9:2f:87:76: 3a:fd:7e:24:23:6c:da:54:33:0a:f3:8e:96:cb:24:40:35:ea: 9c:cd:02:cf:4d:03:78:19:75:7a:91:eb:6b:de:78:1c:e1:78: 7e:90:d1:5f:36:a7:af:fa:0f:37:2c:72:9c:56:c4:44:cb:be: 4a:bf:6a:37:a9:28:39:67:d4:9e:50:48:6d:39:9a:02:5a:00: 35:05:79:16:90:93:ce:e5:a8:39:af:9d:f0:42:b0:f3:9e:95: c9:0b:e3:a2:69:01:2f:32:6a:3f:26:2c:8c:c6:e3:10:c3:a9: a6:0a:30:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+ey45ACCY8LP2/9ISP21MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MjQxOGYwMDRkNTg0ZjJmZTI2Yzg0MjM1ZTY2YmI2YjI5 NDI3MTgwHhcNMjUxMjE4MDEwMTI5WhcNMjUxMjE5MDEwMTI5WjAzMTEwLwYDVQQD EyhhY2M5OTAxMWFkZmUxMmRlZGY2NjRlOWNhMGEyYzZiM2NlYWZjMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NmOuQElzugtQ3pzbLWjHsTBgM3d bUtPjeBWELMNAG9cllO04s5dtRiTpCyU2Qb+NrDoazK2tD+hUcxD+Rh59VAksGH8 95LvMDs8xAtMxIZYn/2dKNKTNcCnDdcK+Wb5obfUJQuWE+h5TnEB0nBJc4/HrykB 5HfurOlzVvw/UjbnuFvKzvgqzL2Evl8242vf8ZCejzVcQ5y5idjsYbIR7cRnGh6Q UUeodSuwqR1Tds9BBDsU5ic8ot6JfaHgXY58elwQ1qjdJf4MJGTfDY0i8nUASmHR atlMrQpeIgJcCBGsYsCgEmvA1WNcf8LNcOFwnBgElFKPBUaKT42kVHdaeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzJkBGt/hLe32ZOnKCixrPOr8KwMB8GA1UdIwQY MBaAFDckGPAE1YTy/ibIQjXma7aylCcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85M2M4NTEtYmFhNi00MTIxLWJjZGQt YTEzNmEzMjg5NWMwLzEvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy85M2M4NTEtYmFhNi00MTIxLWJjZGQtYTEzNmEzMjg5NWMw LzEvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOJiMV1b yWIkLkaOrHYZn7+/NMAQ+1AQZQIXtMt4t6SR7E5WuNyK83Dj0tCJhTMGp8xvnX2v YURVS76gxLgTi9uTm5urqIiqKyuQa8JxWELNvejAeemVO0mz0xnZzL1LTbhzVYQ6 iMDgsw0VKVniBSkLXqA3XKZDmwTXPahcYpBBqiR+crbb6VuzWz75L4d2Ov1+JCNs 2lQzCvOOlsskQDXqnM0Cz00DeBl1epHra954HOF4fpDRXzanr/oPNyxynFbERMu+ Sr9qN6koOWfUnlBIbTmaAloANQV5FpCTzuWoOa+d8EKw856VyQvjomkBLzJqPyYs jMbjEMOppgowoQ== -----END CERTIFICATE-----Generated at Thu Dec 18 03:26:43 2025 by rpki-client