This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json) Hash identifier: 9FI99ii0LkljsHCdcNh4vLVqdASa4EI87mA0n6ht+9w= Subject key identifier: AF:73:86:52:96:51:7E:0D:85:C5:0A:8E:A8:94:9C:DD:01:7E:7D:06 Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A Certificate issuer: /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a Certificate serial: 019B21761BEE06F7D11E0A5365773AF2B858 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft Manifest number: 0878 Signing time: Mon 15 Dec 2025 10:02:27 +0000 Manifest this update: Mon 15 Dec 2025 10:02:27 +0000 Manifest next update: Tue 16 Dec 2025 10:02:27 +0000 Files and hashes: 1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: Tv1RwjAtnebYNwTY4xZEvI4inQSrntJj1UHCVUspt0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:1b:ee:06:f7:d1:1e:0a:53:65:77:3a:f2:b8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a Validity Not Before: Dec 15 10:02:27 2025 GMT Not After : Dec 16 10:02:27 2025 GMT Subject: CN=af73865296517e0d85c50a8ea8949cdd017e7d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:38:f9:f6:4c:b7:73:cc:91:7a:c1:dd:81: ac:c4:db:02:bd:03:ec:26:34:a8:2d:81:28:9e:f1: 66:6d:55:ad:55:ad:9c:3b:42:52:d2:59:3e:8b:e2: 9d:e9:bc:51:69:4d:f5:fa:ee:17:6a:51:1e:cb:c3: ff:a8:24:a9:8b:c4:79:fb:69:88:ef:a2:04:2b:d5: 8d:f1:08:1d:a4:45:44:e9:d1:02:d7:ed:4c:1c:aa: 84:d6:37:72:d0:1d:7f:d1:5e:86:81:2a:1a:f4:2c: 56:fd:f1:c4:5f:1b:f9:45:d5:93:34:21:2f:6d:05: f4:cb:85:42:7a:7b:72:46:f8:d4:1a:c6:f2:4d:25: 43:00:87:a0:93:f4:a5:de:92:23:a8:40:ca:64:21: 18:69:12:0b:7b:e7:44:7f:4d:84:f4:72:d8:b1:03: 9f:33:ea:af:64:dd:a4:41:12:17:86:ab:15:dd:37: 6b:7a:52:a9:b4:04:8b:72:65:b2:27:a5:ab:4b:c1: 1e:e7:ab:1a:38:8f:e0:25:85:be:96:79:d2:14:91: f8:87:a5:31:f4:db:60:69:be:d1:b6:df:ff:ee:6d: 33:4c:39:47:3f:cb:ca:a6:0a:de:08:a6:ee:4a:b4: 8f:43:4a:b9:5e:63:89:e3:46:02:73:22:3f:a7:5f: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:73:86:52:96:51:7E:0D:85:C5:0A:8E:A8:94:9C:DD:01:7E:7D:06 X509v3 Authority Key Identifier: keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:86:ef:d8:14:48:29:58:c2:88:27:ba:8b:c4:09:0d:af:9c: 85:c9:c6:9a:e6:49:fb:82:55:a0:64:78:ac:5a:25:be:26:8b: 50:90:1a:8c:a8:e7:00:b1:07:11:08:8b:b1:9a:20:4c:be:8c: d7:e9:10:20:3e:23:1f:1d:29:19:fa:4d:72:96:88:6a:7f:f4: 02:e6:16:db:69:10:55:d7:41:e5:2c:ac:64:6e:51:69:8a:cd: 3e:63:f4:bc:15:d5:58:63:91:72:60:eb:0a:8e:83:b5:7f:83: 98:eb:7d:5f:99:83:12:d3:ff:a5:52:de:3c:19:ae:28:f8:7f: 71:33:9a:60:17:05:80:89:01:59:6c:d0:1d:b9:73:2c:3c:b7: 45:30:23:21:d8:dd:b0:40:af:60:f3:bf:e1:2b:9f:66:c2:c0: fe:51:2f:7e:12:46:41:c7:45:6c:f1:5e:5a:2a:c5:83:50:5c: c0:3f:20:b5:a8:d7:90:94:ec:52:52:9a:06:e5:8f:5a:85:d8: 37:93:67:51:a6:b6:29:72:7f:32:7f:b7:e1:bb:5a:27:06:5a: 5f:d9:55:2f:3e:72:95:a0:1a:c2:2b:1f:a1:87:0d:3f:49:ab: 68:96:11:81:ec:8e:14:98:94:33:16:d0:47:fc:e2:36:38:11: 2e:53:6c:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdhvuBvfRHgpTZXc68rhYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMDU1NGIzYTY5MDc3Y2IyNjI5ZGE0ODA3YzNlMDJhNTYx YWQ5NGEwHhcNMjUxMjE1MTAwMjI3WhcNMjUxMjE2MTAwMjI3WjAzMTEwLwYDVQQD EyhhZjczODY1Mjk2NTE3ZTBkODVjNTBhOGVhODk0OWNkZDAxN2U3ZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxQ4+fZMt3PMkXrB3YGsxNsCvQPs JjSoLYEonvFmbVWtVa2cO0JS0lk+i+Kd6bxRaU31+u4XalEey8P/qCSpi8R5+2mI 76IEK9WN8QgdpEVE6dEC1+1MHKqE1jdy0B1/0V6GgSoa9CxW/fHEXxv5RdWTNCEv bQX0y4VCentyRvjUGsbyTSVDAIegk/Sl3pIjqEDKZCEYaRILe+dEf02E9HLYsQOf M+qvZN2kQRIXhqsV3TdrelKptASLcmWyJ6WrS8Ee56saOI/gJYW+lnnSFJH4h6Ux 9Ntgab7Rtt//7m0zTDlHP8vKpgreCKbuSrSPQ0q5XmOJ40YCcyI/p183wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9zhlKWUX4NhcUKjqiUnN0Bfn0GMB8GA1UdIwQY MBaAFJwFVLOmkHfLJinaSAfD4CpWGtlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81ZjI4YjYtNjA4Mi00YTM1LWEzMjgt NDA4MjBjODQyNmI0LzEvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81ZjI4YjYtNjA4Mi00YTM1LWEzMjgtNDA4MjBjODQyNmI0 LzEvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIbv2BRI KVjCiCe6i8QJDa+chcnGmuZJ+4JVoGR4rFolviaLUJAajKjnALEHEQiLsZogTL6M 1+kQID4jHx0pGfpNcpaIan/0AuYW22kQVddB5SysZG5RaYrNPmP0vBXVWGORcmDr Co6DtX+DmOt9X5mDEtP/pVLePBmuKPh/cTOaYBcFgIkBWWzQHblzLDy3RTAjIdjd sECvYPO/4SufZsLA/lEvfhJGQcdFbPFeWirFg1BcwD8gtajXkJTsUlKaBuWPWoXY N5NnUaa2KXJ/Mn+34btaJwZaX9lVLz5ylaAawisfoYcNP0mraJYRgeyOFJiUMxbQ R/ziNjgRLlNsBA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:19:00 2025 by rpki-client