This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft File: 9NavTeibuoEYlTzO6_s59FqO0bw.mft (raw, json) Hash identifier: KPxnZcmLYtMr55Gg1kn0FHZ0UQiFRIBXTjgEfZVgPN8= Subject key identifier: CC:BE:69:A4:B6:A7:8F:A8:B2:CB:5F:B3:33:EA:AB:16:92:9C:9A:BB Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC Certificate issuer: /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc Certificate serial: 019B32D7511E06A4F57F9DE0E62107A3439B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 19:02:10 +0000 Manifest this update: Thu 18 Dec 2025 19:02:10 +0000 Manifest next update: Fri 19 Dec 2025 19:02:10 +0000 Files and hashes: 1: 9NavTeibuoEYlTzO6_s59FqO0bw.crl (hash: QQadERmGQkQFc+erCwCja2OZAR9XkPkgs3/i172HFHI=) 2: RSBqMA8SK5hkaH899w74rpWOWzA.roa (hash: ZarbLd1gWH81UzY1+uoaATMpd5XCQStSn4LP/xfm248=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:51:1e:06:a4:f5:7f:9d:e0:e6:21:07:a3:43:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc Validity Not Before: Dec 18 19:02:10 2025 GMT Not After : Dec 19 19:02:10 2025 GMT Subject: CN=ccbe69a4b6a78fa8b2cb5fb333eaab16929c9abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:26:fd:2d:ae:9f:8d:42:9c:22:dd:80:98: ce:56:60:3b:43:6e:2c:63:40:20:7c:d4:fd:37:1a: ce:a1:ea:17:24:f6:8e:5d:97:2f:78:75:1a:78:74: 7d:df:96:5a:aa:ef:6b:e2:dd:9b:73:51:d5:0a:5c: f1:c5:e8:63:b0:90:bd:00:37:8d:0d:ec:78:cb:02: df:86:79:db:92:0b:30:0f:cd:05:38:9f:72:e1:e7: 54:2a:f9:c4:5f:86:d7:8d:2b:89:b7:53:41:8c:cb: 44:1c:44:00:7e:fd:f2:8f:21:a9:e0:98:6f:3b:09: 04:0e:7e:35:56:5f:9a:ba:ca:87:ea:e3:58:be:72: 6d:5b:23:a6:bc:07:f8:ff:ca:3d:20:dd:94:c1:d6: 56:ba:32:9e:6d:7b:dd:66:8b:e8:8d:cd:ff:93:1a: 4b:27:95:53:aa:9c:40:b1:9f:ef:55:44:07:65:69: b2:7d:50:ab:dd:06:62:68:02:b5:44:c4:d5:f5:28: df:b6:9f:8b:a4:cc:86:09:fc:89:da:76:7b:db:d5: 27:9c:fe:88:e1:84:bf:21:65:a7:2c:35:3d:0d:57: a7:70:62:56:d2:20:b2:78:f9:76:1b:03:4b:8a:ec: ca:6e:39:92:c4:13:e8:b5:f6:a3:23:3b:43:3f:7d: a3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BE:69:A4:B6:A7:8F:A8:B2:CB:5F:B3:33:EA:AB:16:92:9C:9A:BB X509v3 Authority Key Identifier: keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:44:cb:23:98:57:5d:2f:c1:2e:81:63:74:cb:18:65:84:bd: 36:dc:6a:29:90:a9:ab:66:bd:49:b0:27:5e:2c:f7:93:db:3f: c5:97:ea:71:f5:dd:7e:67:38:6f:6f:90:5b:d8:55:0c:92:6b: b1:6e:23:7a:6c:69:f5:3b:83:80:27:14:99:82:4b:12:d1:fd: 64:59:aa:fc:f9:92:0f:0b:ba:04:8d:15:5b:cf:30:c4:f8:09: 57:49:1f:c8:d9:80:aa:87:d9:28:9a:cc:69:87:64:ef:60:90: 01:29:df:c6:fb:18:32:e5:c4:63:e6:cb:e1:a4:8d:90:2e:e9: dd:a5:ad:ff:21:20:41:f3:bf:9f:9a:da:83:49:be:51:1a:83: d1:11:fc:2d:3e:c4:5b:ad:0b:19:1d:6d:ed:95:f0:c2:ac:45: 86:e0:e9:f2:c5:75:e5:46:3d:5c:ad:75:a4:92:62:1e:e5:b8: e5:db:6a:bb:67:df:52:f9:88:fe:69:be:b0:57:c1:9c:c4:96: d1:0d:7a:69:79:30:9e:9e:73:39:a5:1a:bf:4d:f5:05:ea:2a: 82:63:29:52:ac:87:82:ca:9c:46:2b:06:bb:0b:fb:a4:37:42: 29:55:43:73:9c:00:8b:8f:31:5e:89:43:be:b0:a2:36:ee:a3: 97:0b:b6:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy11EeBqT1f53g5iEHo0ObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDZhZjRkZTg5YmJhODExODk1M2NjZWViZmIzOWY0NWE4 ZWQxYmMwHhcNMjUxMjE4MTkwMjEwWhcNMjUxMjE5MTkwMjEwWjAzMTEwLwYDVQQD EyhjY2JlNjlhNGI2YTc4ZmE4YjJjYjVmYjMzM2VhYWIxNjkyOWM5YWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdIm/S2un41CnCLdgJjOVmA7Q24s Y0AgfNT9NxrOoeoXJPaOXZcveHUaeHR935Zaqu9r4t2bc1HVClzxxehjsJC9ADeN Dex4ywLfhnnbkgswD80FOJ9y4edUKvnEX4bXjSuJt1NBjMtEHEQAfv3yjyGp4Jhv OwkEDn41Vl+ausqH6uNYvnJtWyOmvAf4/8o9IN2UwdZWujKebXvdZovojc3/kxpL J5VTqpxAsZ/vVUQHZWmyfVCr3QZiaAK1RMTV9Sjftp+LpMyGCfyJ2nZ729UnnP6I 4YS/IWWnLDU9DVencGJW0iCyePl2GwNLiuzKbjmSxBPotfajIztDP32j1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMy+aaS2p4+osstfszPqqxaSnJq7MB8GA1UdIwQY MBaAFPTWr03om7qBGJU8zuv7OfRajtG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5hdlRlaWJ1b0VZbFR6TzZfczU5RnFPMGJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kZDM3Y2YtYTQ2Ni00MzU0LWExNzEt ZDhkZjhlNGM2NWZlLzEvOU5hdlRlaWJ1b0VZbFR6TzZfczU5RnFPMGJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kZDM3Y2YtYTQ2Ni00MzU0LWExNzEtZDhkZjhlNGM2NWZl LzEvOU5hdlRlaWJ1b0VZbFR6TzZfczU5RnFPMGJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0TLI5hX XS/BLoFjdMsYZYS9NtxqKZCpq2a9SbAnXiz3k9s/xZfqcfXdfmc4b2+QW9hVDJJr sW4jemxp9TuDgCcUmYJLEtH9ZFmq/PmSDwu6BI0VW88wxPgJV0kfyNmAqofZKJrM aYdk72CQASnfxvsYMuXEY+bL4aSNkC7p3aWt/yEgQfO/n5rag0m+URqD0RH8LT7E W60LGR1t7ZXwwqxFhuDp8sV15UY9XK11pJJiHuW45dtqu2ffUvmI/mm+sFfBnMSW 0Q16aXkwnp5zOaUav031BeoqgmMpUqyHgsqcRisGuwv7pDdCKVVDc5wAi48xXolD vrCiNu6jlwu2ZA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:01 2025 by rpki-client