This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft File: na669vl-yTdN9sFJL1nV8Tqd0Ag.mft (raw, json) Hash identifier: 8HKv9sup5/USJqyLN0LML+SjQUVrjx+lRUmyPPUmTpI= Subject key identifier: 19:73:DB:98:9C:A0:31:D7:7D:79:55:56:10:3C:50:BC:C4:F6:EC:70 Authority key identifier: 9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08 Certificate issuer: /CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008 Certificate serial: 019B3B3504461CB9E5A54A08B4861D90F8A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft Manifest number: 0741 Signing time: Sat 20 Dec 2025 10:01:28 +0000 Manifest this update: Sat 20 Dec 2025 10:01:28 +0000 Manifest next update: Sun 21 Dec 2025 10:01:28 +0000 Files and hashes: 1: na669vl-yTdN9sFJL1nV8Tqd0Ag.crl (hash: wsXqYRV43curDnf9HboeizzKQ7qKIW2RA7LiyzxvXs4=) 2: olL7czVWLNgm7W1_IvIVMdMAMJQ.roa (hash: E2ePc2MjZUE+sDvLqhAeZtvQFjQHcecfsCWi8c1v1uE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:04:46:1c:b9:e5:a5:4a:08:b4:86:1d:90:f8:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008 Validity Not Before: Dec 20 10:01:28 2025 GMT Not After : Dec 21 10:01:28 2025 GMT Subject: CN=1973db989ca031d77d795556103c50bcc4f6ec70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f9:8d:40:b7:9c:15:af:91:99:9a:15:7c:4c: 7a:d7:b8:fb:9d:35:00:c9:73:d1:9b:63:c4:af:b2: 84:16:d9:67:b1:90:21:37:07:0b:b2:7d:06:9a:e8: f3:2a:33:07:3f:4d:ec:77:45:d6:28:a8:85:fb:32: 86:41:ff:80:99:35:da:ee:05:fd:64:9d:b9:03:c6: 30:f4:77:7d:3e:22:6d:fb:8c:9e:8d:e3:4c:77:d3: e6:e1:48:99:cb:6f:85:56:b4:8c:5e:01:f0:69:fb: 0d:e2:7d:f9:e8:3b:32:ae:a9:c8:7d:4e:33:6b:65: d0:da:88:7d:8d:e1:f1:c8:39:44:bb:4c:d8:3d:c1: 67:92:cc:ae:e5:86:78:76:f6:ec:5d:bf:61:40:4f: 62:fd:61:6d:ad:fa:be:02:6b:2a:7b:1e:3d:bc:67: 23:4c:19:c3:4e:4e:f7:2e:7b:52:c9:a2:53:ae:3f: e3:b5:83:58:eb:48:b9:63:5f:72:85:5e:b1:16:27: 63:ba:f4:4d:02:24:e3:28:ad:65:52:60:6c:cb:42: 24:0f:0f:a0:7f:db:24:4f:c6:d1:18:84:66:69:54: ad:62:09:72:b9:66:54:7a:9c:01:ac:b7:2e:a2:e6: 6b:02:47:bf:0e:c4:29:dc:ec:55:fc:63:e2:00:89: 9a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:73:DB:98:9C:A0:31:D7:7D:79:55:56:10:3C:50:BC:C4:F6:EC:70 X509v3 Authority Key Identifier: keyid:9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f8:cd:a9:be:18:53:a8:94:c7:92:40:63:09:e5:d9:5d:64: ca:b2:45:c1:ba:ac:5a:70:aa:3b:d1:1f:ab:e2:36:a2:a2:11: 87:74:e0:01:1b:cc:b3:91:71:7e:70:d0:fc:f1:72:5f:65:a0: 00:c6:92:31:4b:b2:c4:d8:e6:ae:3a:ef:0d:3e:72:cf:2f:8f: 29:96:2e:3e:f0:95:6e:e7:c3:8c:56:f4:02:33:44:ee:35:29: d8:d0:6c:ab:a3:ed:4c:57:be:b1:ec:ca:4c:09:3a:94:a1:a7: 17:21:ef:11:7f:23:51:89:5e:bc:8e:c7:1c:09:6f:83:47:3c: 0d:69:0f:0f:f5:fa:e1:b5:a1:27:e2:62:4d:47:05:c8:72:4e: 97:2d:bc:2f:67:ef:d4:67:a2:ff:1a:d8:05:e4:f7:0b:7b:e2: ef:2c:fb:c9:a1:7b:4e:3d:56:e6:1e:ae:3b:19:e6:5f:77:83: 00:63:9a:f3:67:43:51:fe:b2:a9:28:bf:c4:9a:a9:4d:27:71: 4f:a8:81:83:46:42:c1:37:d3:17:0a:94:b8:01:4b:87:a1:4d: 87:77:d8:9b:72:6b:98:50:8e:53:60:85:58:56:4e:0f:4c:6e: 45:39:c3:4f:7b:c2:04:25:88:5c:60:65:24:4f:2d:2e:25:86: 70:27:75:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NQRGHLnlpUoItIYdkPimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYWViYWY2Zjk3ZWM5Mzc0ZGY2YzE0OTJmNTlkNWYxM2E5 ZGQwMDgwHhcNMjUxMjIwMTAwMTI4WhcNMjUxMjIxMTAwMTI4WjAzMTEwLwYDVQQD EygxOTczZGI5ODljYTAzMWQ3N2Q3OTU1NTYxMDNjNTBiY2M0ZjZlYzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfmNQLecFa+RmZoVfEx617j7nTUA yXPRm2PEr7KEFtlnsZAhNwcLsn0GmujzKjMHP03sd0XWKKiF+zKGQf+AmTXa7gX9 ZJ25A8Yw9Hd9PiJt+4yejeNMd9Pm4UiZy2+FVrSMXgHwafsN4n356DsyrqnIfU4z a2XQ2oh9jeHxyDlEu0zYPcFnksyu5YZ4dvbsXb9hQE9i/WFtrfq+Amsqex49vGcj TBnDTk73LntSyaJTrj/jtYNY60i5Y19yhV6xFidjuvRNAiTjKK1lUmBsy0IkDw+g f9skT8bRGIRmaVStYglyuWZUepwBrLcuouZrAke/DsQp3OxV/GPiAImatQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlz25icoDHXfXlVVhA8ULzE9uxwMB8GA1UdIwQY MBaAFJ2uuvb5fsk3TfbBSS9Z1fE6ndAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmE2Njl2bC15VGROOXNGSkwxblY4VHFkMEFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iYmI3ODItMzlmNS00ZDI0LTkxZDIt M2U1ZWU0YThmMzg4LzEvbmE2Njl2bC15VGROOXNGSkwxblY4VHFkMEFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9iYmI3ODItMzlmNS00ZDI0LTkxZDItM2U1ZWU0YThmMzg4 LzEvbmE2Njl2bC15VGROOXNGSkwxblY4VHFkMEFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/jNqb4Y U6iUx5JAYwnl2V1kyrJFwbqsWnCqO9Efq+I2oqIRh3TgARvMs5FxfnDQ/PFyX2Wg AMaSMUuyxNjmrjrvDT5yzy+PKZYuPvCVbufDjFb0AjNE7jUp2NBsq6PtTFe+sezK TAk6lKGnFyHvEX8jUYlevI7HHAlvg0c8DWkPD/X64bWhJ+JiTUcFyHJOly28L2fv 1Gei/xrYBeT3C3vi7yz7yaF7Tj1W5h6uOxnmX3eDAGOa82dDUf6yqSi/xJqpTSdx T6iBg0ZCwTfTFwqUuAFLh6FNh3fYm3JrmFCOU2CFWFZOD0xuRTnDT3vCBCWIXGBl JE8tLiWGcCd1OA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:04:16 2025 by rpki-client