This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json) Hash identifier: xnoWvLvlUab6KyIBbP03kSbxhbUa14xzsL7G+x5SDr8= Subject key identifier: 53:0B:30:14:60:0B:1F:2D:7E:A6:D9:ED:A1:A7:44:1A:BD:21:4E:2B Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de Certificate serial: 019B0F6E44A229DF3060BA146D376D985F16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft Manifest number: 1549 Signing time: Thu 11 Dec 2025 22:00:43 +0000 Manifest this update: Thu 11 Dec 2025 22:00:43 +0000 Manifest next update: Fri 12 Dec 2025 22:00:43 +0000 Files and hashes: 1: 1-3EfbNDzCPBhm-MGXRhX1BvajzU.roa (hash: N4yj10cZc+R+7TueMdhublW6w9ad85suNg3KfBlUGDU=) 2: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: 1omziPbn5cJ9jPBDKsSOz7dE5Obtj9V/4IWd8r/dUVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:44:a2:29:df:30:60:ba:14:6d:37:6d:98:5f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de Validity Not Before: Dec 11 22:00:43 2025 GMT Not After : Dec 12 22:00:43 2025 GMT Subject: CN=530b3014600b1f2d7ea6d9eda1a7441abd214e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:a4:25:66:6d:c4:3c:94:ca:b5:a4:4c:ca: ba:3e:77:f3:d8:71:70:29:88:61:f5:27:d6:48:97: 40:f7:bb:bb:df:f4:f2:54:9a:1d:d9:2c:18:e1:1e: fe:a7:f3:32:3b:2e:de:cd:6d:a4:b4:6a:39:8a:f4: 97:f6:fa:51:cf:4e:f0:0a:43:6c:b3:3e:37:cb:e6: 09:8f:8e:8f:20:2b:a5:85:c1:f8:6b:93:cb:d6:9f: 8e:e3:db:66:02:bf:9c:65:6a:6d:de:82:e3:56:7a: 1c:db:e9:e5:4c:52:eb:c9:c8:3c:7a:d3:34:22:eb: 71:4b:f6:40:32:9f:5e:02:5a:4f:4d:96:75:6a:3c: 5c:06:82:d7:79:29:13:3f:f3:f9:1e:48:2b:e5:18: 1b:06:03:9c:45:f3:11:89:bf:8b:f5:53:4f:b4:e4: d4:3c:de:e6:7f:fd:4c:57:fe:b9:f2:9a:c0:85:d3: c4:3d:b1:79:8e:c8:cf:47:03:30:ac:25:68:bf:3d: 88:b3:83:48:f9:82:41:bc:91:44:7b:7f:9e:8a:94: 81:2c:3a:ed:9e:b3:7e:c6:1d:c7:52:a8:32:f3:8e: ae:b0:fc:5f:dd:b4:dc:73:72:2d:0e:86:d9:5b:da: 6e:0f:a3:cc:fd:91:0b:19:c2:06:94:44:82:80:71: 14:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0B:30:14:60:0B:1F:2D:7E:A6:D9:ED:A1:A7:44:1A:BD:21:4E:2B X509v3 Authority Key Identifier: keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:7d:a3:59:6e:86:d4:36:3e:20:15:5a:55:d6:c3:f6:1d:3f: 3d:c8:6a:5e:f2:35:ad:fc:e2:b3:f3:a8:eb:00:6c:06:f7:73: 84:45:42:84:d6:97:04:f3:a0:69:96:ed:66:8c:e1:85:a6:b3: 36:64:73:22:e4:14:01:c4:82:22:98:85:95:7c:22:46:b9:13: 84:3b:18:47:00:b5:ab:de:a6:59:dc:55:7e:fa:a1:8c:56:84: fa:34:67:61:be:c6:43:a9:22:ae:38:3c:6a:70:1f:63:75:6b: 9c:73:d3:48:c6:34:f9:03:68:3e:86:76:d5:f0:23:6d:32:46: 82:a4:13:a1:ab:3a:a7:fe:cb:06:fe:75:1a:e4:13:73:fd:85: c8:d4:5f:71:5c:27:71:f4:7d:de:9c:bf:82:5a:b4:9f:d2:38: 8d:ba:07:4e:55:76:2f:62:de:a5:f6:9d:47:76:0c:85:9f:5a: 61:88:01:d3:3f:a1:3e:d3:39:5a:fb:59:d5:23:77:c3:78:71: 7c:0f:53:b5:98:ad:aa:97:49:4a:5a:ee:90:58:d0:2e:3d:d0: e5:80:f9:69:4e:b7:b7:81:2f:73:fd:2d:df:e2:bc:c7:f7:07: c5:0a:2b:09:44:77:63:60:8c:fe:31:55:b2:c6:30:ab:3d:35: 7e:92:c3:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbkSiKd8wYLoUbTdtmF8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYWJjNjI2YWMyNjQwNjZiMWM1YzcwOWE0ODQ3N2YzNzg4 MzYxZGUwHhcNMjUxMjExMjIwMDQzWhcNMjUxMjEyMjIwMDQzWjAzMTEwLwYDVQQD Eyg1MzBiMzAxNDYwMGIxZjJkN2VhNmQ5ZWRhMWE3NDQxYWJkMjE0ZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopKkJWZtxDyUyrWkTMq6Pnfz2HFw KYhh9SfWSJdA97u73/TyVJod2SwY4R7+p/MyOy7ezW2ktGo5ivSX9vpRz07wCkNs sz43y+YJj46PICulhcH4a5PL1p+O49tmAr+cZWpt3oLjVnoc2+nlTFLrycg8etM0 IutxS/ZAMp9eAlpPTZZ1ajxcBoLXeSkTP/P5Hkgr5RgbBgOcRfMRib+L9VNPtOTU PN7mf/1MV/658prAhdPEPbF5jsjPRwMwrCVovz2Is4NI+YJBvJFEe3+eipSBLDrt nrN+xh3HUqgy846usPxf3bTcc3ItDobZW9puD6PM/ZELGcIGlESCgHEUsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMLMBRgCx8tfqbZ7aGnRBq9IU4rMB8GA1UdIwQY MBaAFJ2rxiasJkBmscXHCaSEd/N4g2HeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAt MGI3ZTM4YTEyMmZlLzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAtMGI3ZTM4YTEyMmZl LzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA32jWW6G 1DY+IBVaVdbD9h0/PchqXvI1rfzis/Oo6wBsBvdzhEVChNaXBPOgaZbtZozhhaaz NmRzIuQUAcSCIpiFlXwiRrkThDsYRwC1q96mWdxVfvqhjFaE+jRnYb7GQ6kirjg8 anAfY3VrnHPTSMY0+QNoPoZ21fAjbTJGgqQToas6p/7LBv51GuQTc/2FyNRfcVwn cfR93py/glq0n9I4jboHTlV2L2LepfadR3YMhZ9aYYgB0z+hPtM5WvtZ1SN3w3hx fA9TtZitqpdJSlrukFjQLj3Q5YD5aU63t4Evc/0t3+K8x/cHxQorCUR3Y2CM/jFV ssYwqz01fpLD7w== -----END CERTIFICATE-----Generated at Fri Dec 12 00:23:25 2025 by rpki-client