This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json) Hash identifier: /Y/VajhVfIXG6RBFJtDC1+AVQ/B/MZAnDwZNZ0TKptY= Subject key identifier: BF:88:F7:C4:BF:51:9E:84:84:ED:A8:F5:BC:A4:6D:76:BB:67:3C:4F Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e Certificate serial: 019B1C4E82AD931DE9ED78D21CF2DEFFB8FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 10:01:05 +0000 Manifest this update: Sun 14 Dec 2025 10:01:05 +0000 Manifest next update: Mon 15 Dec 2025 10:01:05 +0000 Files and hashes: 1: 92pgx6QNH23m1sb49k-ykMttkN0.roa (hash: 6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=) 2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: OXchcv3Ro7LJim0saFasgIVetrGfmF0PfeI3VFZ6Ruc=) 3: lZsMnzEe-znnn1V93iNCRM_YAak.roa (hash: z+dECtyUmhjS80QJzbvWDw1cRN0vxIcWCWIADf50+Fg=) 4: oYs8paRk9JPLOaUCIoa9pxPnmCs.roa (hash: kBYq1h4wg3W+NuRYMWAaTbphy585KIiOSln9Rszwvtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:82:ad:93:1d:e9:ed:78:d2:1c:f2:de:ff:b8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e Validity Not Before: Dec 14 10:01:05 2025 GMT Not After : Dec 15 10:01:05 2025 GMT Subject: CN=bf88f7c4bf519e8484eda8f5bca46d76bb673c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c3:34:9b:8f:b6:e7:2c:38:4f:00:7b:1c:e6: 5d:e0:03:5c:83:a3:b4:df:2b:e7:40:68:7b:04:c1: ed:5d:44:68:96:cb:f7:38:e3:82:3f:5a:cb:ba:5e: 90:52:74:a3:8c:0d:f6:c8:95:ae:68:4d:82:04:23: 81:31:a3:c0:00:40:a0:d7:b8:1f:94:a3:70:e1:b5: 6e:19:7e:93:12:b6:4f:4d:fb:7d:2b:c4:d8:ea:a9: 0b:e8:bc:67:e9:37:02:39:06:14:9b:51:ad:56:42: f9:6d:1c:28:7a:62:55:85:16:fb:e7:55:d0:8f:46: 20:49:db:65:f2:19:d1:3c:64:e3:7b:76:c5:fb:3e: a6:50:12:84:10:14:df:2e:fa:48:7e:e9:1e:e7:30: 47:41:4f:ae:e6:7f:14:fc:fa:da:7b:37:ae:a3:1e: 9f:f6:4d:66:e6:34:42:3c:42:35:e6:a9:1e:64:00: 56:32:dc:eb:98:a1:84:a4:d7:b3:0f:eb:5b:d6:d5: dd:d3:4a:2a:eb:ac:14:92:b0:03:20:23:a8:74:77: 52:53:21:92:ac:93:0a:de:63:0d:ec:19:0b:a2:f4: 26:f3:12:1c:70:87:b8:3a:59:cb:13:49:57:cf:aa: 12:74:41:d1:6d:84:94:ef:6e:5d:4e:8c:2e:b3:0f: 71:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:88:F7:C4:BF:51:9E:84:84:ED:A8:F5:BC:A4:6D:76:BB:67:3C:4F X509v3 Authority Key Identifier: keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:99:d8:33:bf:ff:10:99:d1:1a:4c:bc:33:22:ae:36:91:d4: 18:10:94:84:d2:f7:95:1a:2a:fb:d6:d6:a5:54:09:05:88:43: ff:df:6a:39:ee:f3:c8:2f:0f:0e:ee:a1:b9:f8:f0:5f:43:5d: 93:e6:30:62:e4:b4:48:74:26:c9:d1:49:81:0f:17:39:f1:c9: 7d:a3:7d:a0:c9:27:7f:a2:d3:a2:1c:60:06:c2:c4:1d:28:d5: 64:b4:2e:35:db:1e:77:e9:c9:e9:49:f9:07:f7:42:64:c6:8b: 6f:f9:fb:4a:e8:94:4c:f9:95:d1:b3:eb:90:17:30:4b:1f:ac: cf:71:a6:1e:5f:da:d1:9d:62:41:5d:57:81:1c:8e:69:2e:16: 66:79:5b:7d:83:67:a3:c2:dd:8e:7c:a7:81:3b:d7:b3:67:b2: 58:4a:b7:94:43:96:14:61:f0:d4:70:ef:06:29:69:cf:10:68: 98:6f:6b:56:8f:5d:84:3d:a7:ee:43:14:e7:25:33:78:3b:2a: 0e:ea:26:5b:db:b3:18:9d:e8:e4:4f:12:f8:e6:85:31:08:11: 1f:07:4d:4f:32:0b:11:0b:fb:eb:ec:4e:49:99:9f:b0:5f:88: e8:30:4b:e8:ad:46:6b:bd:4d:4a:94:d7:77:b8:7d:32:3c:59: 33:76:96:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscToKtkx3p7XjSHPLe/7j+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MGJlYTNmY2MzY2JjZWRjODI5MTljZjU3Yzc0MTA4YmFl YTM2OWUwHhcNMjUxMjE0MTAwMTA1WhcNMjUxMjE1MTAwMTA1WjAzMTEwLwYDVQQD EyhiZjg4ZjdjNGJmNTE5ZTg0ODRlZGE4ZjViY2E0NmQ3NmJiNjczYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMM0m4+25yw4TwB7HOZd4ANcg6O0 3yvnQGh7BMHtXURolsv3OOOCP1rLul6QUnSjjA32yJWuaE2CBCOBMaPAAECg17gf lKNw4bVuGX6TErZPTft9K8TY6qkL6Lxn6TcCOQYUm1GtVkL5bRwoemJVhRb751XQ j0YgSdtl8hnRPGTje3bF+z6mUBKEEBTfLvpIfuke5zBHQU+u5n8U/Praezeuox6f 9k1m5jRCPEI15qkeZABWMtzrmKGEpNezD+tb1tXd00oq66wUkrADICOodHdSUyGS rJMK3mMN7BkLovQm8xIccIe4OlnLE0lXz6oSdEHRbYSU725dTowusw9xswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+I98S/UZ6EhO2o9bykbXa7ZzxPMB8GA1UdIwQY MBaAFDQL6j/MPLztyCkZz1fHQQi66jaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYt MTExMDU2MzY5YTIzLzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYtMTExMDU2MzY5YTIz LzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpnYM7// EJnRGky8MyKuNpHUGBCUhNL3lRoq+9bWpVQJBYhD/99qOe7zyC8PDu6hufjwX0Nd k+YwYuS0SHQmydFJgQ8XOfHJfaN9oMknf6LTohxgBsLEHSjVZLQuNdsed+nJ6Un5 B/dCZMaLb/n7SuiUTPmV0bPrkBcwSx+sz3GmHl/a0Z1iQV1XgRyOaS4WZnlbfYNn o8LdjnyngTvXs2eyWEq3lEOWFGHw1HDvBilpzxBomG9rVo9dhD2n7kMU5yUzeDsq DuomW9uzGJ3o5E8S+OaFMQgRHwdNTzILEQv76+xOSZmfsF+I6DBL6K1Ga71NSpTX d7h9MjxZM3aWMA== -----END CERTIFICATE-----Generated at Sun Dec 14 13:55:51 2025 by rpki-client